j2ee_admin can't acces to /nwa

[ONavas]

HI all,

I have SAP PI 7.31 installed and working fine around 3 months, but now I can't connect to http://host:port/nwa after I change the Active Profile for user j2ee_admin.

I can't found other method to change the Active Profile for j2ee_admin to "Complete List" and the user is not locked.

With other user, like ZPISUPER (copied from PISUPER) the /nwa page have the Active Profile corretly with initial "Complete List".

I think its a security issue because the error is an persission requirement for the user j2ee_admin.

[divyanshu_srivastava3]

Assign these roles to J2EE_ADMIN user.....

• SAP_BC_WEBSERVICE_ADMIN
• SAP_J2EE_ADMIN
• SAP_SLD_ADMINISTRATOR

Log on as the administrator(whichever user is working) to UME and assign the J2EE administrator group the Super Administration role.

[ONavas]

Hi Divyanshu

Those roles are already assigned to j2ee_admin

In ABAP Stack

In Java Stack throught http://host:port/useradmin

[Former Member]

Hi Oscar,

We have the same issue. When we clicked on the active profile 'BPM Business Admin' the user who logged in could not see anything in NWA and we get the error message 'you do not have the permisson to view this application'.

Please let me know the solution.

Thanks,
Ravi

[ONavas]

I don't have solution, but I make a Docu.htm page to link to some usefull services from /nwa.

This is my http://host:port/dir

If you want this file, I can share with you.

[Former Member]

Hi Oscar,

Do you have a solution to the problem that you had in not being able to access /nwa from the java page. I get the same error "You do not have permission to view this application". The same case for System info and other links in the index page.

Regards,

Ninu

[ONavas]

Hi Ninu,

I don't have solution for this issue. I have only a specific Docu.htm with links to direct access for this customer. Because this issue is in a development environment and only I work with SAP PI for this customer ,  I can live with "Docu.htm" solution.

[Former Member]

Can you please share the Docu.htm file?

Regards,

Ninu

[ONavas]

Search and replace host:port with your parameters.

Rename the file to Docu.htm (SND don't access uploaded files with this extension)

And finally put the file into the correct path of your server. You can see the path in the page http://host:port/dir under the pi tools

Docu_htm.txt.zip

[susansun01]

Hi Ninu,

Please see note 1791919. It seems the same issue.

Best Regards,

Susan

[ONavas]

I think this is the solution, but the customer don't want to update the system now.

[kushalsambhunath_banerjee]

Dear Oscar ,

I am also facing the same problem. Just want to check with you related to the points that you have explained in your post :

1 ) You mentioned : Search and replace host:port with your parameters.

       My Question : From where to search ..? AND what to replace..

2 ) You mentioned : (SND don't access uploaded files with this extension)

       My Question  : Can you please kindly elaborate on this SND term.

3 ) You mentioned : finally put the file into the correct path of your server

       My Question :  Can you please mention your server correct path so that I can reciprocate into my server ..?

4 ) You mentioned : You can see the path in the page http://host:port/dir under the pi tools

       My Question  : Are you saying URL path ... if yes ... then what will be the path in the OS level..

Extremely sorry to disturbing you in this way. I am really in bad position related to this issue in Production server.

Great Thanks in advance for your reply & support on this.

An as such I can sense you heading towards the correct direction for solution.

Thanks

Kushal

[ONavas]

Hii Kushal,

1 ) You mentioned : Search and replace host:port with your parameters.

       My Question : From where to search ..? AND what to replace..

    ==> From the file Docu_htm.txt.zip with an example to access all PI tools from NWA

2 ) You mentioned : (SND don't access uploaded files with this extension)

       My Question  : Can you please kindly elaborate on this SND term.

     ==> The file Docu_htm.txt into the ZIP file need to be renamed to Docu.htm

3 ) You mentioned : finally put the file into the correct path of your server

       My Question :  Can you please mention your server correct path so that I can reciprocate into my server ..?

      ==> When you are connected to you PI system throuth http://sappi:50000/dir (this is http://host:port/dir ) you can see at the bottom a information about the correct path for your system.

4 ) You mentioned : You can see the path in the page http://host:port/dir under the pi tools

   ==> In PI with ABAP Stack, you can upload de file with SXDA_TOOLS transaction, or if you have acces at system level, you can copy the file to the path

[Former Member]

Dear Oscar ,

Actually I am planning to apply the fix-Patch which is mentioned in the SAP note

1791919 - Previous profile selection cannot be reverted in NWA.

Any idea whether this works properly for this issue ...?

Thanks

Kushal

[kushalsambhunath_banerjee]

Dear Oscar ,

Thanks for discussing this issue. I have managed to resolve this issue by Applying the below SAP Notes Patch correction.

1791919 - Previous profile selection cannot be reverted in NWA.

The Patch file name was :

LMNWAUIFRMRK04P_2-20007064.SCA

Great Thanks for the correct guidance & answer.

Thanks

Kushal

[ONavas]

Thanks Kushal,

I will ask to customer if they agree to apply this note.

Thanks again

[Former Member]

Hi,

Could you please check with basis whether the user(j2ee_admin) is having sufficient roles to access the same.

Regards

Venkat

[ONavas]

The roles for j2ee_admin was not changed. The problem is to return to other correct profile. Test scenario:

1.- create new user copy of pisuper

2.- logon to /nwa (the current Active Profile is now Complete List)

3.- change Active Profile for this user in /nwa

4.- Now this new user can't login again to /nwa

[Former Member]

Hi ,

Can you compare both users (j2ee_admin and PISUPER) in SUIM tcode .

Regards

venkat

[ONavas]

The error is not in roles, because without modification of the user ZPISUPER (from PISUPER) I can connect to /nwa, but when I change the Active Profile for this user without any other modificacion like roles, I can't connect anymore to /NWA.

j2ee_admin has more permission than pisuper, because it's the java admin user.