ERM role generation

[Former Member]

Hi all,

i have GRC 5.2 installed. Did the post installation steps. In ERM when i try to create a role without any conflicting tcodes the role is getting generated, but when i include any 2 tcodes risk is showing up, i have mitigated the risk, when generating the role it is giving the below error. Please help me out as i am a beginner.

2009-12-22 00:50:59,140 [SAPEngine_Application_Thread[impl:3]_29] ERROR No intenationalized value found for key : FrontPageDesc20

2009-12-22 00:51:05,250 [SAPEngine_Application_Thread[impl:3]_33] ERROR No intenationalized value found for key : FrontPageDesc20

2009-12-22 00:53:13,546 [Thread-139] ERROR java.lang.NullPointerException

2009-12-22 00:54:48,640 [SAPEngine_Application_Thread[impl:3]_28] ERROR com.virsa.re.role.actions.GenerateRoleAction

java.lang.Throwable:

[Former Member]

Post the full error message and in the backend system check the ST22 dump and post that too... it help us and you to analyze the issue...

Cheers !!

Zaheer

[Former Member]

Hi Zaheer,

i am not getting any abap dump in the backend. In ERM the sysltem logs is as follows:

2009-12-22 18:14:01,875 [SAPEngine_Application_Thread[impl:3]_6] ERROR User : not found to get full name

2009-12-22 18:14:14,656 [SAPEngine_Application_Thread[impl:3]_6] ERROR com.sap.security.api.NoSuchUserAccountException: USER_AUTH_FAILED: User account for logonid "?" not found!

java.lang.Throwable: com.sap.security.api.NoSuchUserAccountException: USER_AUTH_FAILED: User account for logonid "?" not found!

at com.virsa.service.umi.ume.UMESearchUser.getUserById(UMESearchUser.java:135)

at com.virsa.re.bo.impl.SearchUserBO.getUserById(SearchUserBO.java:96)

at com.virsa.re.cache.RECacheUtil.getUser(RECacheUtil.java:2237)

at com.virsa.re.cache.RECacheUtil.getUserFullName(RECacheUtil.java:2209)

at com.virsa.re.cache.RECacheUtil.getUserFullNameWithUserId(RECacheUtil.java:2261)

at com.virsa.re.role.actions.RoleActionHelper.convertRoleApproverDtoToRoleApproverPo(RoleActionHelper.java:198)

at com.virsa.re.role.actions.RoleAction.convertDTOToPO(RoleAction.java:1569)

at com.virsa.re.role.actions.RoleAction.getRoleFromDB(RoleAction.java:1024)

at com.virsa.re.role.actions.RoleAction.pageLoadForEdit(RoleAction.java:805)

at com.virsa.re.role.actions.RoleAction.execute(RoleAction.java:107)

at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:265)

at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)

at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

2009-12-22 18:14:14,671 [SAPEngine_Application_Thread[impl:3]_6] ERROR User : ? not found to get full name

2009-12-22 18:16:34,125 [Thread-120] ERROR java.lang.NullPointerException

2009-12-22 18:25:19,781 [SAPEngine_Application_Thread[impl:3]_36] ERROR com.virsa.re.role.actions.GenerateRoleAction

java.lang.Throwable:

at com.virsa.utils.VLogger.logError(VLogger.java:453)

at com.virsa.re.bo.impl.GenerateRoleBO.generateRole(GenerateRoleBO.java:109)

at com.virsa.re.role.actions.GenerateRoleAction.generateRole(GenerateRoleAction.java:224)

at com.virsa.re.role.actions.GenerateRoleAction.execute(GenerateRoleAction.java:83)

at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:265)

at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)

at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)

at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:286)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)

at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)

at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:286)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)

at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)

at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

[Former Member]

Hi,

It looks like there is a user Authorisation failure here somewhere. Have you checked that the user is authorised to run the risk analysis on the roles in question? It maybe that it is getting as far as that but RAR cannot authenticate the user correctly to complete the analysis?

Otherwise, I would check the ERM configuration to ensure that it is performing the risk analysis at the correct place and that it is considering mitigation controls correctly.

Simon