on 10-24-2011 5:34 PM
Hi!
I am trying to revert an activity from within the DTR (via the NWDI web GUI) but do not succeed with that. Instead I get the following error message:
"Error: Precondition forbidden check failed for resource {resourceType='ACTIVITY', getPath()='/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615', resourceID='74c2cdd5fb2211e0b6f9005056b304d1', objectID='74c2cdd5fb2211e0b6f9005056b304d1', path='/act/', name='act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615'}."
The activity was created when attempting to delete a DC. I now want to revert this activity by means of the following steps:
1) enter NWDI 7.0
2) select Design Time Repository which opens the Repository Browser
3) press the icon for "Activity Search"
4) search for "Opened only" activities
5) select the activity and press the icon for "Revert Activity"
6) Tick the checkbox "Delete the activity resource also"
Thereafter, I get above mentioned error message.
Is there anybody who knows how to solve the problem?
Best regards,
Ekkehart
@Anurag, can you please tell me the number of your ticket, so I can have a look what is the progress of that one ?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thanks for your help, Ervin. You have solved the problem.
Best regards, Ekkehart
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
For the record I also write here what was the solution, please mark the thread as answered:
The problem was that somehow the folder of the resource has been reverted, but not the content.
Therefore the activity - however it was apparently reverted - was not empty, and non-empty activities cannot be deleted. It had actually nothing to do with authorization, only the fact that the activity was not empty and this is why the error message referred to "forbidden".
So I have checked out the folder (command "co") of this file (this was the folder /DCs/elfa.se/web/ws.orderservice.deploy/_comp) inside the same activity and by this I have resolved the conflict.
TEST:/>co /ws/elfa4/elfa.se_ELFA.SE/dev/inactive/DCs/elfa.se/web/ws.orderservice.deploy/_comp /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a
7615
Created working resource: /wr/9a61c5620f8411e1b809005056b304d1
$wr[0]=/wr/9a61c5620f8411e1b809005056b304d1
$act[0]=/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615
Now the next I have done is simply reverting and deleting the activity from the DTR webui which was succesful without errors.
Best Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Anurag,
no, we are still working on the issue, I don't have update at the moment. For the issue which is in progress in this thread I have asked for a service connection, I am waiting for it at the moment in order to start the analysis on customer system.
Best Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Ekkehart,
let's continue the investigation in the SAP ticket you have opened.
I sent that ticket back to you and asked for a service connection, see details in the message.
I suggest at this point to suspend this discussion here in SDN, and once we found a solution I will of course update this thread with my findings.
Thanks and Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Ervin,
We are also facing the same issue.
I've gone through this thread completely and have tried and followed the steps but still I am not able to revert the acticity.
Did you find any solution to this problem.
If yes, kindly share the solution or let us know if there is any SAP note for it.
Thanks & Regards,
Anurag Gwari
Sorry, yes j2ee_eklo is a member of the NWDI.Administrators group.
Here comes the complete list of membership (UME-databas):
Administrators
NWDI.Administrators
NWDI.Configurators
NWDI.Developers
NWDI.Guests
NWDI.Operators
NWDI.QManagers
/ Ekkehart
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
what you mentioned is the role, and you referred to the role
NWDI.Administrator
What I meant is the group
NWDI.Administrators
(notice the "s" at the end).
Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
is the user J2EE_EKLO part of the UME group NWDI.Administrators?
You mentioned earlier the roles but here the ACLs are checked as per the groups.
Thanks and Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
can you please provide me the contents of http://<host>:<port>/dtr/ws/system/config/active/ACLs/byPath/acl.xml ?
Regarding your question
Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?
refer to this thread "Developing for multiple releases with NWDI"
Thank you and Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Here comes the requested information:
<?xml version="1.0" encoding="UTF-8"?>
<acls>
<acl>
<resource>/</resource>
<ace>
<isgroup />
<principal>NWDI.Administrators</principal>
<grant>
<privilege>access</privilege>
<privilege>read</privilege>
<privilege>write</privilege>
<privilege>checkin</privilege>
<privilege>import</privilege>
<privilege>export</privilege>
<privilege>integrate</privilege>
<privilege>adminA</privilege>
<privilege>adminX</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.Developers</principal>
<grant>
<privilege>read</privilege>
<privilege>write</privilege>
<privilege>checkin</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.XDevelopers</principal>
<grant>
<privilege>read</privilege>
<privilege>write</privilege>
<privilege>checkin</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.QManagers</principal>
<grant>
<privilege>read</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.Operators</principal>
<grant>
<privilege>read</privilege>
<privilege>write</privilege>
<privilege>checkin</privilege>
<privilege>import</privilege>
<privilege>export</privilege>
<privilege>integrate</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.Configurators</principal>
<grant>
<privilege>read</privilege>
<privilege>write</privilege>
</grant>
<description></description>
</ace>
<ace>
<isgroup />
<principal>NWDI.Guests</principal>
<grant>
<privilege>read</privilege>
</grant>
<description></description>
</ace>
</acl>
</acls>
Hi,
then most likely your user does not have proper authorization. Which user do you use and what are its roles?
Can you please doublecheck the ACL settings of this user as well?
http://help.sap.com/saphelp_nw73/helpdata/en/4c/5fbf43f8da4a3ce10000000a15822b/frameset.htm
Best Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Ervin!
Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?
I have double checked the things you asked for:
1) UME Roles from User J2EE_EKLO:
NWDI.Administrator
Everyone
LcrAdministrator
Administrator
NWDI.Developer
LcrInstanceWriterAll
-
2) ACL settings for this user:
I followed the instructions in your link to "Users in the DTR". When looking at the "Permissions view" of the "DTR perspective" in the developer studio the list is completely empty. When opening the context menu in the list all options ("Add Principal", "Edit Principal", ...) are greyed out.
Best regards,
Ekkehart
Hi,
please attempt to revert using the DTR Console and let me know the outcome. Please use the version I pointed out in my previous post.
Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Ervin!
Thanks for your tip. I tried it but with no success. Here is what I did:
>revert -obo /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615
Reverted the activity "/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615".
>delete /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615
Error: Received "403 Forbidden" response for the request: DELETE /dtr/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615
Precondition: DAV:forbidden
>
Do you have any other ideas?
Best regards, Ekkehart
Hi,
Could you please invoke the commands in this order below with DTR console:
revert -obo /act/myActivity
delete /act/myActivity
If the options like obo for the command revert is not available, then please use the DTR console attached to this note:
#1377679 -- DTR Console "replicate command" don't work
(http://service.sap.com/sap/support/notes/1377679)
Regards,
Ervin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
have you tried from nwds to do that?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
87 | |
10 | |
10 | |
10 | |
7 | |
6 | |
6 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.