OnAccessInadequatePrivilege Authorization Event Not Listed When Configuring a Rule in the AdminUI
Article ID: 452434
Updated On:
Products
Issue/Introduction
When using the AdminUI to configure a Rule's Authorization Events, the OnAccessInadequatePrivilege event does not appear in the list of available options (1)(2). Only OnAccessAccept, OnAccessReject, and OnAccessValidateIdentity are listed.
This issue occurs when creating a new Policy Store and importing the corporate data from another environment.
Environment
- Policy Server 12.9 on Red Hat 8
- OpenJDK 17.0.18+8
- AdminUI 12.9 on Red Hat 8
Cause
The problem is that the "Web Agent" Agent Type is an out-of-the-box data configuration. It has been manually modified in the past from the other Policy Store data.
When building the new Policy Store, this "OnAccessInadequatePrivilege" AgentType.Action is set to the "Web Agent" Agent Type. When importing the Policy Store data from another environment, this "OnAccessInadequatePrivilege" AgentType.Action gets removed from the "Web Agent" Agent Type, as the import overwrites the existing same object.
As per best practice, if an out-of-the-box Policy Store objects need to be modified, make a copy of the out-of-the-box object, and modify the copy, so to keep the out-of-the-box object configuration as it is.
In addition, this Agent Type action can be manually added to the Web Agent agent type in the AdminUI — it is not present like in this use case.
Resolution
- In the AdminUI, go to Infrastructure > Agent > Agent Types.
- Find the object with Name "Web Agent" and Description "SiteMinder Web Agent," and click Edit.
- In the Actions section, click Create.
- Replace "New Action" with OnAccessInadequatePrivilege.
- Click Submit at the bottom of the page.
Once the action is added to the Web Agent agent type, OnAccessInadequatePrivilege becomes available for selection in a Rule's Authorization Events.
Additional Information
Feedback
