xRPM iViews Runtime Errors, access denied, not with su_admin role

[Former Member]

Hello,

I have an interessting problem. We have installed xRPM 2.0 on Backend and have installed the xRPM BP in Portal EP 6.0 (SPS13). Using the xRPM demo roles we got some access denied errors if we try to access some iViews. This is not the case if the user has the super_admin role, too. One Idea was there is missing access to the system objects. But I checked it and all users having eu_role which had access to the system objects, too (User enabled). Why is a succesfully access bind to the super_admin role and where is this fixed?

Has someone an idea what I could check next?

Thanks and Regards

Alex

[guillaume-hrc · Accepted solution]

Hi,

I had a similar problem. I fixed it by simply adding the group Everyone (or whatever group you want to have access to PCD object) to the root folder Portal Content.

<b>Content Administration -> Portal Content -> Open (Permissions)</b>

By the way, you may have more precise replies in the SAP xApps forum.

Cheers,

Message was edited by: Guillaume Garcia

[Former Member · Accepted solution]

Hello Guillaume,

thank you for your answer. I wonder about this solution. Normaly if I adding a user to the demo xRPM roles they should have access to all the objects of the role. Why you did gave the eu_user access to the complete pcd folder? You just need to give access to the folder where the xRPM demo objects are saved. Did you try this first unsuccessfully?

Regards

Alex

[guillaume-hrc · Accepted solution]

Well, basically we encounter this problem on QUA and PRD environment. It was as I said in the DEV system, we just applied the same settings.

Besides, I was afraid that even if I granted access to specific iView, these ones being delta-linked with standard ones, I would also have to grant access to the standard iViews.

Cheers,

[Former Member · Accepted solution]

Hello Guillaume and Kevin,

Kevin your solution didn't worked on my system. I restarted the server and the user had access denied to the xRPM iViews.

Guillaume, looks like your solution works fine. I gave the eu_user access to the pcd folder and this works.

Will be interesting which solution SAP recommends because I think this solution is not very secure.

Thanks and Regards

Alex

[Former Member · Accepted solution]

Hello Guillaume,

In pcd under content for endusers you will find the folder com.sap.pct.rpm with all content of the xRPM BP. Later I will try giving only here the acess for the users because I have some other important tasks open. Maybe this works too.

Regards

Alex

[guillaume-hrc · Accepted solution]

OK. Let us know if this works !

Cheers,

[Former Member]

Hello,

continued with investigation and found out that this problem seems to related to security zones permissions. In the Error I found something about high_safety. (I checked the xRPM ducumentation there was no hint that you are not able to access the iViews if you have no super_admin role. Only you neeed the role to configure the iViews! Fine!)

How can I simply enable end user access to all demo xRPM iViews. Is this really a file based permission configuration with changing hundreds of portalapp.xml files? No other way possible?

Please answer,

Thanks an regards

Alex

Does someon has experience with this issue?

[Former Member]

Hi Alexander.

I now have the same error as below. Have you resolved for yourself? Or do you have any further information. Any help you could provide me would be greatly appreciated.

Thanks!

[Former Member]

Hello Kevin,

no sorry I didn't found a solution myself. I oppened a OSS Message related to this problem. A first answer I received was about checking some Notes. But I have xRPM 2.0 SP5 and BP for xRPM 60.6. The given notes are for >=SP 4 and didn't described my problem.

I will post the result if I get a solution by SAP. If you have something in the meantime about this problem please let me know.

Thanks

Regards

Alex

[Former Member]

Hi Alex,

I think this should work.

Navigate to System Admin => System Config => Service Config => Portal Runtime => Central Configuration

Once there, update the parameter <b>portal.runtime.security.mode</b> == "development".

This is also a tidy place to update the portal html head on all pages

portal.html.head.title == "My Company Portal".

Save changes and then restart server.

Regards,

Kevin

[Former Member]

Hello Kevin,

thanks for your hint. I tried to find out more about the parameter but couldn't find anything on help.sap.com. I see the parameter is on production at the moment. SAP didn't respond yet. I will change the parameter now and see what happens.

Regards

Alex