The customer's logon attempt to CEM encounters: CEMR202E - Unable to communicate with Compliance Event Manager Web Services

Products

• Compliance Event Manager

Issue/Introduction

The customer's attempt to log into CEM failed with the error: CEMR202E - Unable to communicate with Compliance Event Manager Web Services 

Environment

Release : 6.0

Component : CA COMPLIANCE EVENT MANAGER

Cause

The  CEMETOM stc output showed an access violation to the CEM.POLICY.CONFIGURATION resource.:

LDAP Exception: Server Message: LDP7005E User xxxxx denied access to class CACEM, entity CEM.POLICY.CONFIGURATION, access level READ, SAF=8/8/0  

This exception is preceded by a call in the LDAP AuthenticationProvider class and the exception that is thrown is on a line just after the security check it made.

The exception is occurring because the customer's UserID did not have read access to the CEM.POLICY.CONFIGURATION resource.  

 

Resolution

The customer's UserID needed security access to the CEM.POLICY.CONFIGURATION resource.  For the logon process, read access would be sufficient.  However, read and write access would be necessary in order to update anything within the configuration section of the GUI.