Troubleshooting: Missing policy for a new view
A new view is missing an access control policy.
Problem: Added a new view without an accompanying policy.
Indication: An application error is displayed. In the trace.log file the SiteAdminCanDoEverything policy is logged, but the user is not a Site Administrator.
WC_ACCESSCONT PolicyManagerlmpl.isAllowed isAllowed? User=123;
Action=MyNewView;
Resource=com.ibm.commerce.command.HttpForwardViewCommandlmpl;
Owner=-2001;
Resource Ancestor Orgs=-2001,-2001; Resource Applicable
Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.isAllowed Found PolicyName:
SiteAdministratorsCanDoEverything; PolicyType: 2;
PolicyOwner:-2001
WC_ACCESSCONT PolicyManagerlmpl.getPolicyApplicableOrgs Policy
Applicable Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.evaluatePolicy Evaluating
PolicyName:
SiteAdministratorsCanDoEverything
WC_ACCESSCONT d PolicyManagerlmpl.isAllowed PASSED?=false
Solution:
- Create a policy for the view. Refer to Adding a new view using existing policies for an example.
- Load the policy using the acpload utility.
- Update the Registry.