Restricted User receives API-1007 Unauthorized for Status Module
search cancel

Restricted User receives API-1007 Unauthorized for Status Module

book

Article ID: 453519

calendar_today

Updated On:

Products

Clarity PPM SaaS Clarity PPM On Premise

Issue/Introduction

When a restricted user tries to view the status Module in Modern UX, they observe an Unauthorized message:

API-1007: You are not authorized to process request. Contact your system administrator for necessary security rights.

STEPS TO REPRODUCE:

  1. Login to Clarity.
  2. Create a Test user with the following rights.
    • Project - View Management - All
    • Project Management - Tiles Navigate
    • Project Management - Navigate
    • Projects - Navigate
    • Staffing - Navigate
    • Status Report - Create
    • Status Report - Delete All
    • Status Report - Edit All
    • Status Reports - Navigate
    • Tasks - Navigate
  3. Login as the test user and navigate to a project's -> Status Module in MUX

Expected Results: The DRAFT status report is visible.
Actual Results: The Draft fails with API-1007 Unauthorized error message

app-ca.log file shows the following:

WARN  2026-09-04 09:41:03,343 [https-jsse-nio2-8443-exec-157] security.BlueprintContextSecurityUtil (clarity:myuser:mysession:PPM_REST_API) (MUX-1e5cad20-3e73-487a-9f05-c5716c339a96) Rejected non-blueprint context object in canvas module navigate fallback: cop_prj_statusrpt
WARN  2026-09-04 09:41:03,344 [https-jsse-nio2-8443-exec-157] ppm.rest ((clarity:myuser:mysession:PPM_REST_API (MUX-1e5cad20-3e73-487a-9f05-c5716c339a96) User myuser tried to GET resource [resource name: canvasModules, resource id: null] but does not have permission.
ERROR 2026-09-04 09:41:03,344 [https-jsse-nio2-8443-exec-157] ppm.rest (clarity:myuser:mysession:PPM_REST_API (MUX-1e5cad20-3e73-487a-9f05-c5716c339a96)
com.ca.ppm.rest.exception.AuthException: API-1007 : You are not authorized to process request. Contact your system administrator for necessary security rights.

Environment

Clarity 16.4.3

Cause

This is caused by DE211075

Resolution

This is fixed in

  • Clarity 16.4.3.1 (16.4.3 Patch 1)
  • Clarity 16.5.0

Workaround:

Grant the Administration - Blueprints - Navigate or Blueprint - View - All global right