about INFO com.l7tech.gateway.common.security.rbac.FolderPredicate:...........has no folder

book

Article ID: 104005

calendar_today

Updated On:

Products

CA API Gateway (Layer 7) SA94 to API SECURITY STARTER PACK-7 CA Rapid App Security MOBILE API GATEWAY CA Mobile - API Gateway CA API Gateway

Issue/Introduction



Such as the following messages are output frequently in logs.

INFO com.l7tech.gateway.common.security.rbac.FolderPredicate:...........has no folder

for example:
Jun 29 13:53:53 stodhd-435 info-aps SSG[11,725]: INFO com.l7tech.gateway.common.security.rbac.FolderPredicate: IdentityProviderConfig #0000000000000000fffffffffffffffe has no folder
Please see API-GW1_STOdhd-432_Gateway.log_20180629 (Around 2138h line).

Jun 29 14:18:07 stodhd-435 info-aps SSG[7,208]: INFO com.l7tech.gateway.common.security.rbac.FolderPredicate: EncapsulatedAssertionConfig #e001cfd0c1c1ffaa18e187b5e72fd297 has no folder
Please see API-GW1_STOdhd-432_Gateway.log_20180629 (Around 2383h line).

Jun 29 14:25:00 stodhd-435 info-aps SSG[16,569]: INFO com.l7tech.gateway.common.security.rbac.FolderPredicate: ClusterNodeInfo #389a96b941b54ca8bb7d89b09c719feb has no folder
Please see API-GW1_STOdhd-432_Gateway.log_20180629 (Around 2497h line).

Jun 29 14:25:01 stodhd-435 info-aps SSG[16,569]: INFO com.l7tech.gateway.common.security.rbac.FolderPredicate: ServiceUsage #389a96b941b54ca8bb7d89b09c719feb:37d3570f076cf71dc1d3807352028c30 has no folder
Please see API-GW1_STOdhd-432_Gateway.log_20180629 (Around 2506h line).


What is the meaning of these messages?

Environment

CA API Gateway - 8.x
CA API Gateway - 9.0
CA API Gateway - 9.1
CA API Gateway - 9.2
CA API Gateway - 9.3

Resolution

All these messages are because of user's activity from policy manager.
Please check if they are any custom roles defined and their permission properties. 
Precisely, folder predicate is defined for one of the role but the matching entity (identity provider config, encapsulated assertion, service usage, clusternodeinfo) cannot be in folder.