Unable to access and edit a custom investment if Custom Investment – Navigate is not granted

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

On a setup where the menu link for the specific investment is outside as a separate page and Custom Investment – Navigate is not granted, the user will have errors API-1007 thrown, also see incomplete Views displays and blank page on Staff when there is records on the custom investment

STEPS TO REPRODUCE:

1. Create a custom investment extension Test in Clarity, grant your user permissions for it
2. Add one custom investment TestInstance1
3. Create a new user in Clarity and add all global permissions on the custom investment Test
4. Also add all global permissions on Resource
5. Add this user to the TestInstance1 as Team member and set them as Manager
6. Now go to MUX – Administration – System Settings – Navigation Menu – Add Page
7. Add new Page for custom Object Test, select an icon, click Show
8. Now log out and log back in like the new user in MUX
9. Click on Test icon to access the custom investments
10. Note you are able to see the custom investments in the list – open the TestInstance1
11. Go to Staff – try to see /edit anything in Staff / Tasks/Assignments

Expected Results: The Staff Tab to be displayed and editable

Actual Results: Staff records are not displayed. Views drop down is not displayed. If trying to Add a Staff record, you are able to click Add and error API-1007 You are not authorized to process request. Contact your system administrator for necessary security rights is thrown.

Error in logs:

ERROR 2024-11-21 09:01:35,090 [http-nio-1623-exec-627] ppm.rest (clarity:admin:5558152__9017DDF6-96A3-4262-A785-579C1B02634D:PPM_REST_API) (7f571ec8-1754-476d-8aea-5341847846c8)

com.ca.ppm.rest.exception.AuthException: API-1007 : You are not authorized to process request. Contact your system administrator for necessary security rights.

Environment

Clarity 16.2.2, 16.2.3, 16.3.0

Cause

DE156480

Resolution

• Fixed in 16.3.2

Workaround: Grant the permission Custom Investment – Navigate to the user. They will be only able to see the custom investments they have permissions for. The only difference is that they will also see the Custom Investments menu link

Additional Information

Note: It is also possible to grant Team - Navigate as a workaround, however this would also give the user access to Teams module with no data for them to see. It is preferable to use Custom Investment – Navigate permission as this module will have actual data available to the user