Hierarchy error "API-1007" on metric create

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

If you do not have 'Hierarchy - Manage Metrics' rights, you are incorrectly able to see the 'New Metric' link and the 'X' on existing metrics, leading you to believe you have permission to create and delete metrics. You will see an error 'API-1007 : You are not authorized to process request. Contact your system administrator for necessary security rights' trying to create a metric. 

Steps to Reproduce:

1. Log in as an administrator user
2. Create a hierarchy with at least one metric and one calculation
3. Grant permissions to User1 to Hierarchies, but DO NOT grant the 'Hierarchy - Manage Metrics' right
4. Log in as User1
5. Open the Hierarchy in Step #2
6. Go to View Options, Manage Metrics
7. In the Aggregation Tab:
   • Hover over the existing metric then click the 'X' to try and delete it
   • Click into the name of the metric to 'edit', then make a change and try to save it 
   • Click 'New Metric' link and try to create a new metric
8. In the Calculation Tab:
   • Hover over the existing calculation, then click the 'X' to try and delete it
   • Click into the name of the calculation to 'edit', then make a change and try to save it 
   • Click the 'New Metric' link and try to create a new calculation  

Expected Results: The user should NOT see the 'New Metric' or the 'X' as the user does not have permission to create, edit and delete metrics or calculations. 

Actual Results: In trying to create, edit or delete a metric or calculation, the user will get the toast message 'API-1007 : You are not authorized to process request. Contact your system administrator for necessary security rights.'  

Environment

Release : Clarity 15.9.3 and higher

Component : Hierarchies

Cause

This issue was reviewed by Sustaining Engineering as DE63108 and determined to be working as expected.

Resolution

In order to be able to create / delete metrics, ensure the following access is granted: 'Hierarchy - Manage Metrics'.

To request a change in this functionality, submit an enhancement request using our enhancement process at Enhancement Requests for Clarity

Additional Information

See also: API errors - known causes for Clarity