AWI Access Denied XRequest Folderlist error

Products

CA Automic Workload Automation - Automation Engine

Issue/Introduction

Logging into the AWI with some users shows an error like:

Error during XRequest com.uc4.communication.requests.FolderList '####': Access denied

where #### is the client number, like 0100 for client 100.

Clicking on "Show Error Details" has an expanded stacktrace like:

com.uc4.ecc.backends.exceptions.AutomationEngineAPIException: Error during XRequest com.uc4.communication.requests.FolderList
at com.uc4.ecc.backends.util.APICallHelper.sendRequestAndWait(APICallHelper.java:57)
at com.uc4.ecc.backends.impl.dataservice.request.RequestService.lambda$sendAndWait$58(RequestService.java:65)
at com.uc4.ecc.framework.core.async.VaadinSessionLockUtil.reportLock(VaadinSessionLockUtil.java:89)
at com.uc4.ecc.backends.impl.dataservice.request.RequestService.sendAndWait(RequestService.java:65)
at com.uc4.ecc.backends.impl.dataservice.request.RequestService.sendAndWait(RequestService.java:85)
at com.uc4.ecc.backends.dataservice.request.IRequestService$pbryglu.sendAndWait(Unknown Source)
at com.uc4.ecc.backends.impl.dataservice.folder.FolderReadDelegateService.getFolderList(FolderReadDelegateService.java:280)
at com.uc4.ecc.backends.impl.dataservice.folder.FolderService.getFolderListItems(FolderService.java:247)
at com.uc4.ecc.backends.dataservice.folder.IFolderService$pbryglu.getFolderListItems(Unknown Source)
at com.uc4.ecc.plugins.ae.perspectives.processassembly.content.home.FolderListPresenter.load(FolderListPresenter.java:196)
at com.uc4.ecc.plugins.ae.perspectives.processassembly.content.home.FolderListPresenter$1.load(FolderListPresenter.java:150)
at com.uc4.ecc.plugins.ae.perspectives.processassembly.content.home.FolderListPresenter$1.load(FolderListPresenter.java:146)
at com.uc4.ecc.framework.core.async.NoArgsLoaderWrapper.load(NoArgsLoaderWrapper.java:16)
at com.uc4.ecc.framework.core.async.NoArgsLoaderWrapper.load(NoArgsLoaderWrapper.java:7)
at com.uc4.ecc.framework.core.async.BaseRequestCoordinator$1$1.call(BaseRequestCoordinator.java:223)
at com.uc4.ecc.framework.core.pool.ContextAwareExecutorService$CallableImplementation.call(ContextAwareExecutorService.java:72)
at java.util.concurrent.FutureTask.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: com.uc4.webui.util.MessageBoxException: Message box received: 9 of type E with inserts 0100 shown, message ''0100': Access denied'.
at com.uc4.webui.util.MessageBoxException.provoke(MessageBoxException.java:33)
at com.uc4.ecc.backends.util.APICallHelper.sendRequestAndWait(APICallHelper.java:52)
... 19 more

Environment

Release : 12.2

Component : AUTOMATION ENGINE

Cause

This is as designed based on the "FOLD" permissions of the user.

Resolution

The behavior currently seen is as designed. The user does not have access to the main client folder and will receive the error: Error during XRequest.com.uc4.communication.requests.FolderList '0100': Access denied.

If the user has at least Read Authorizations or is a part of a usergroup with Authorizations to a folder like:

\FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_ZERO*
\FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_FIRST*
\FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_TWO*

They will have access to the folders:
FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_ZERO
FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_FIRST
FOLDER\SUB_FOLDER\SUB_SUB_FOLDER_TWO

They will be able to click on the arrow to the left of the "FOLDER" folder and then the arrow to the left of the "SUB_FOLDER" folder and then will be able to click into the three folders listed above.

If the user needs to have access to the root client folder, this can be done by giving the Read authorization for object of type FOLD and Name \*

This is the same behavior as is in the Java UI in version 11.2 which will show a U00000009 error when trying to click into the main client folder, but will allow clicking into the other folders..