Uploaded image for project: 'HPCC'
  1. HPCC
  2. HPCC-17073

ConfigMgr multiple places to set workunitsBaseDN is confusing

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Active
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 5.6.8
    • Fix Version/s: None
    • Component/s: Config UI
    • Labels:
      None
    • Compatibility:
      Minor

      Description

      The users in the group HealthcarePHIClaims were not able to run ecl workunits.

      The error is:
      00000053 2017-02-14 08:18:03.309 6760 6809 "Got from queue W20170214-081803 for user fuceta_ldap"
      00000054 2017-02-14 08:18:03.310 6760 6809 "ERROR: Workunit Access Denied - action: updating user:fuceta_ldap workunit:W20170214-081803 scope:fuceta_ldap"
      00000055 2017-02-14 08:18:03.310 6760 6809 "ERROR: 5000: /jenkins/workspace/LN-Candidate-withplugins-5.6.8-rc1/LN/centos-6.0-x86_64/LN/ecl/eclrepository/Pending.cpp(1411) : CompilerServer::run exception : Workunit Access Denied - action: updating user:fuceta_ldap workunit:W20170214-081803 scope:fuceta_lda

      Workaround:
      We had to go on the ldap server and set the permissions directly since it was not exposed through the eclwatch interface.

      from eclserver.xml

      workunitsBased
      n="ou=workunits,ou=phiclaims"

      from esp.xml
      workunitsBasedn="ou=workunits,ou=phiclaims"/

      Permissions displayed on eclwatch for group HealthcarePHIClaims
      ---------------------------------------------------------------------------------------start
      Workunit Scopes ou=workunits,ou=ecl,dc=internal,dc=sds

      Esp Features for WsAttributesAccessPhiclaims ou=wsattributesaccessphiclaims,ou=espservices,ou=phiclaims,dc=internal,dc=sds

      Esp Features for WsEclPhiclaims ou=wseclphiclaims,ou=espservices,ou=phiclaims,dc=internal,dc=sds

      Esp Features for SMC_HealthCarePHIClaimsProduction ou=smc_healthcarephiclaimsproduction,ou=espservices,ou=phiclaims,dc=internal,dc=sds

      File Scopes ou=files,ou=ecl,dc=internal,dc=sds

      Repository Modules ou=mdm,ou=ecl,ou=mdm,dc=internal,dc=sds

      ----------------------------------------------------------------------------------end

      Too add to the confusion..within

      Esp Features for SMC_HealthCarePHIClaimsProduction

      there are two controls which would seem to be related but do not appear to be.

      Access to others' workunits
      Access to own workunits

        Attachments

          Activity

            People

            • Assignee:
              kenrowland Kenneth A Rowland
              Reporter:
              fuceta Fernando Uceta
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Due:
                Created:
                Updated: