Skip to Content
avatar image
Former Member

XS Advanced Error 403 Forbidden

Hello everyone,

Could any one help over here..

We got a problem after installing XSA on our SP12 system, Whenever we try accessing WEBIDE over the URL from xs app webide -urls we are getting an error/message “Forbidden”, not sure what went wrong..

The header response says 403 forbidden..
We have a clean install of SP12, XSA, and we followed the TinyWorld tutorial. https://blogs.sap.com/2016/03/28/developing-with-xs-advanced-a-tinyworld-tutorial/

The SAP HANA Runtime Tools works fine.

I tried to get the URL of HANA Xs Administation tools but I didn't find the app. I don't know if it is installed or we need to install it separately.

Thanks in advance

xsa.png (22.7 kB)
xsversion.png (13.6 kB)
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

9 Answers

  • Best Answer
    Apr 12, 2017 at 12:00 PM

    XSA Admin Tutorial: just use the command xs install <admin.zip file>. You can download the XSA Admin MTAR zip installation file from the Service Marketplace or its on the HANA installation media.

    As far as doing the role collection from the command line: The command you found is for the controller role. It is not enough for the SAP Web IDE. The Web IDE also requires an XSA application role as well. I would really recommend the use of the XSA admin tool to create this additional role.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Thanks, I will try to follow your tutorial to create the role collection. Unfortunately I didn't find the XSA Admin MTAR in Service Marketplace. Can you please provide a link ?

  • avatar image
    Former Member
    Apr 27, 2017 at 11:43 AM

    Hi friends,

    Finally I found what was missed!

    As mentioned in the guides I had already set up role, roles collection and assigned to XSA_TEST user and so on.

    I log on XS Admin

    Afterwards i have been able to connect WEBIDE

    Thanks a lot for your comments

    Best regards.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Houssem,

      When I installed XS Advanced I had to define a orgname XXXXX, later SAP space depends on this org, when I did it from XS Admin I could select my orgname and mark flag for developer. So I supose the command is the same, but you have to adapt your data like orgname I guess.

      Regards.

  • Apr 12, 2017 at 11:09 AM

    It appears as though the XSA Admin tool isn't installed on this system. I strongly recommend its installation. As far as forbidden error, have you create the role collection and assigned it to your user?

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Thanks for your reply. could you please provide me a tutorial to install XSA Admin tool ?
      As far as forbidden error, could you please tell me how can I create the role collection without the XSA Admin tool ?
      is "xs set-space-role Peterinitial SAP SpaceDeveloper" not enough to login on SAP Web IDE ?

  • Apr 12, 2017 at 12:17 PM

    The name is perhaps a bit misleading in the Service Marketplace. Its called XSACMONITORING.

    https://launchpad.support.sap.com/#/softwarecenter/template/products/_APP=00200682500000001943&_EVENT=DISPHIER&HEADER=N&FUNCTIONBAR=Y&EVENT=TREE&TMPL=INTRO_SWDC_SP_INMEMORY&V=MAINT&REFERER=CATALOG-PATCHES&ROUTENAME=products/By%20Category%20-%20SAP%20In-Memory%20(SAP%20HANA)

    Navigation path:

    • SAP IN-MEMORY (SAP HANA )/
    • HANA PLATFORM EDITION/
    • SAP HANA PLATFORM EDITION/
    • SAP HANA PLATFORM EDITION 2.0/

    XS MONITORING 1

    Depending upon your release you might have to adjust the above for HANA 1.0 or HANA 2.0.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Apr 24, 2017 at 05:20 PM

    Dear Thomas,

    I have the same issue HTTP 403 when I try to Access to web ide. However in my case I have installed XSA-ADMIN and I can see logs for webide app

  • [1493053594836] [APP/1-3] SYS #2.0#2017 04 24 19:06:34:835#+02:00#ERROR#/Handler#########AhPm6M77yKuAltaM-GRmJkl5CdxGFN5V######j1wdk6vd#PLAIN##GET request to /watt/index.html completed with status 403 - You do not have the required scopes to access this resource.#
  • [1493053594906] [APP/1-3] SYS #2.0#2017 04 24 19:06:34:906#+02:00#ERROR#/Handler#########AhPm6M77yKuAltaM-GRmJkl5CdxGFN5V######j1wdk6xi#PLAIN##GET request to /favicon.ico completed with status 403 - You do not have the required scopes to access this resource.#
  • [1493053594921] [APP/1-3] SYS #2.0#2017 04 24 19:06:34:921#+02:00#ERROR#/Handler#########AhPm6M77yKuAltaM-GRmJkl5CdxGFN5V######j1wdk6xz#PLAIN##GET request to /favicon.ico completed with status 403 - You do not have the required scopes to access this resource.#
  • Roles and permissions seems to be ok

    Any idea?

    Thanks in advanced

Add comment
10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Apr 27, 2017 at 07:57 AM

    Hi,

    in our case were the RoleCollections empty after the upgrade (2.0 SPS 01)

    Now its working again...

    Add comment
    10|10000 characters needed characters exceeded

  • Apr 27, 2017 at 08:49 AM

    Hi, same problem as mentioned by Emili Delgado

    I get "Forbidden" when trying to access the Web IDE. The log says: "GET request to /watt/index.html completed with status 403 - You do not have the required scopes to access this resource."

    I think I have the correct components installed. I have:

    • XS Monitoring - Installed Version: 1.4.0
    • SAP Web IDE Web Client - Installed Version: 4.1.0
    • SAP HANA XS Advanced Runtime - Installed Version: 1.0.55.288028

    I have access to Web UI for XS Advanced Administration.

    I have users with parameter: parameter 'XS_RC_XS_CONTROLLER_USER' = 'XS_CONTROLLER_USER'

    I have given: xs set-space-role Morten orgname SAP SpaceDeveloper, I tried the same for user XSA_ADMIN

    I have made a role collection with Role Template (and Role Name) = WebIDE_Developer (this is from Application Name webide!i1).

    I have assigned this role collection to both XSA_ADMIN and Morten.

    The command: "xs app webide -urls" tells me the WebIDE is at https://vhcalhdbdb.dummy.nodomain:51023, so I go there, but get the error mentioned: Forbidden.

    What have I missed?

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jun 09, 2017 at 08:16 PM

    Using SAP HANA Express 2.0 SPS1.... I was able to work around the error by exporting the server certificate using Internet Explorer and then importing it again into the xsa-admin using the Trusted Certificates tile. I think you can also use the XS cli to import it.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 28 at 02:02 PM

    Beside

    • Assigning the XSA Roles to the user and
    • the Space (as explained by Emili),

    I also had to either open a new incognito window or clear cookies for logging in with the development user.

    If you switch between admin/dev, it seems that there is a conflict in cookies.

    Add comment
    10|10000 characters needed characters exceeded