When attempting to submit a change-status-job request to the AutoSys Web Server, it returns "403 - Forbidden". The user submitting the request is confirmed to be a member of the WorkloadAutomationAEWebService application group in EEM.
Release : 11.3.6
Component : CA Workload Automation AE (AutoSys)
Look at the waae_webservices.log when the request is submitted for a message that gives the reason for denial. It would look something like this...
2019-11-01 16:19:38,373 [https-jsse-nio-9443-exec-8] WARN com.ca.waae.ws.EventResource - CAUAJM_W_71013 Machine Execute Access Denied!
com.ca.waae.wsquery.WsQueryNotAuthorizedException: CAUAJM_W_71013 Machine Execute Access Denied!
The following is a list of permission checks you can run in EEM to verify that the user submitting the request is authorized to change the status of the job...
In all of these, replace <INS> with your instance name.
Resource Class: as-sendevent
Resource Class: as-job
Resource Class: as-owner
Resource Class: as-machine
If the job has a group attribute...
Resource Class: as-group
If the job has an application attribute...
Resource Class: as-appl
A DENY on any one of these would block the request.