Access denied for system

vinsnash

Suddenly I'm getting an error:

Access to business object NSCPers is denied for System

I'm attempting to run a process to update all instances. I get this error even using the administrator level log on.

I've shut down the control panel and restarted. Shut down the control panel and rebooted the whole system. Nothing works.

Any advice on this? What causes it? How to correct?

Vins Nash

tford

Have you looked at the logs?

vinsnash

I have looked at the log but don't really understand it and there doesn't seem to be anyway to copy it, that I can determine, for someone else to look at it.

It shows the 1st process starting and the number of records found (which is correct) for the argument, then shows the next process starting, the action applied to the first instance, and the result of the action which is correct.

Then in a tree line direct from the 2nd process starting node is the indicator of the access for the object being denied to system which appears at the end of the other entries. There is no explanation of why or anything. If the color is significant it is pink. The odd thing is that right under the start node for the 1st process there is an entry in yellow stating that NSCPers cannot be resolved. But then it evidently goes ahead and finds all the instances of the object NSCPers and that total is correct.

I looked at the server and tomcat logs and they just show the same access denial error having been "thrown".

Too many of the log entries are entirely obscure with virtually no meaning to the novice user and there is no explanation I can find in the documentation. Support has told me the entries are perfectly clear. For them maybe not for end users trying to learn the system.

vinsnash

Once more unto the breach ....
I simplified things a bit to see I'd get a better log result.

I have two simple processes

#1 FIND NSCPers WHERE (NSCPers.CO=’Yes’ OR NSCPers.FieldRep=’Yes’ OR NSCPers.RegDir=’Yes’)

 Con_Name

#2 NSCPers.NameLine=NSCPers.Rank+’ ‘+NSCPers.FirstName+’ ‘+NSCPers.LastName+’ ‘+NSCPers.Branch

#1 finds 368 instances of NSCPers which is correct. #2 Con_Name processes 35 instances with the log showing, executing the action and the action result which is correct then fails with the message “Access to object NSCPers denied for System”

The last log entry after what appear to be correct entries for 35 instances is the following:

“Exception while executing process Con_Name Exception class=com.bas.connectionserver.server.AccessDeniedException message Access to business object NSCPers is denied for System”

What is the error about and is there anything that will help resolve this? The server and tomcat logs only show the same error being “thrown”.

tford

I'm wondering if you have a rule something like

PROTECT NSCPers FROM ALL

where maybe it should be

PROTECT NSCPers FROM ALL EXCEPT SYSTEM ????

vinsnash

I do have rules like that but they are predicated on a regular user attribute.

IF LoggedInRegularUser.Status <> 'NHQ' then protect ..... from all

The regular user with status 'NHQ' has administrative access and I've been running other similar processes on NSCPers regularly prior to this logged on with that regular user name and password.

pbrad

Hi,
To me your logic reads, if any users are logged in that have a status other than NHQ then protect... from all logged in users. It seems to me that you want: IF LoggedInRegularUser.Status <> 'NHQ' then protect ..... from LoggedInRegularUser, or better still, create a new Access Level called NHQAdministrator and use access level permissions rather than rules to control access.

Cheers,
Pete