WLA: Canned ADMIN.Security_Report Fails with Access Denied to /temp/r

Products

• ESP dSeries Workload Automation

Issue/Introduction

You encounter a Canned ADMIN.Security_Report failure on your Workload Automation DE (WLA DE) server. The tracelog.txt file shows an AccessDeniedException when the system attempts to create a temporary directory within <path_where_DE_is_installed>/temp/r/. The error message indicates that the report execution cannot proceed due to insufficient permissions.

 

Environment

Product: CA Workload Automation DE v12.x

Operating System: Unix/Linux

 

Cause

The java.nio.file.AccessDeniedException occurs because the <path_where_DE_is_installed>/temp/r/ directory has incorrect ownership or permissions. Specifically, the directory is owned by root instead of the user account running the CA Workload Automation DE service, preventing the service from writing necessary temporary files.

 

Resolution

To resolve the AccessDeniedException for the Canned ADMIN.Security_Report, you must correct the ownership of the <path_where_DE_is_installed>/temp/r/ directory.

1. Verify current ownership of the directory.
   • Navigate to the parent directory:
     bash cd <path_where_DE_is_installed>/temp/
   • List the contents to check ownership:
     bash ls -ld r
   • You will likely see root as the owner.
2. Change the ownership of the r directory.
   • Use the chown command to change the owner and group to the user account that runs your CA Workload Automation DE service:
     bash sudo chown -R <owner>:<owners_group> r
   • Note: Replace with the actual user account that runs your Workload Automation DE service. If you are unsure, consult your system administrator or check the process owner for the running DE service.
3. Rerun the Canned ADMIN.Security_Report. The report should now complete successfully.