Issue accessing UWL iView on Portal Home -> Work !!!

[Former Member]

Hi All,

Few of my users are having issues in accessing the UWL iView through the link, Home -> Work

While trying to access, it shows them the following error

"Unable to perform the request. Try again. If the problem persists, inform your system administrator"

While the same user can access his inbox items in the backend system, so I think no issue with backend authorizations.

While looking at the defaultrace file for logs, i found this

#com.sapportals.wcm.repository.security.SecurityAudit.AccessLog#sap.com/irj#com.sapportals.wcm.repository.security.SecurityAudit.AccessLog#user123#172362##n/a##8d95d740127311de8bc000144f9a7086#SAPEngine_Application_Thread[impl:3]_24##0#0#Warning#1#/System/Security/Audit/Access#Plain### user123	| ACCESS.ERROR	| /documents/Links	| node_write_properties#

#com.sap.netweaver.bc.uwl.ui.UWLMain#sap.com/irj#com.sap.netweaver.bc.uwl.ui.UWLMain# user123#172362##n/a##8d95d740127311de8bc000144f9a7086#SAPEngine_Application_Thread[impl:3]_9##0#0#Error#1#/uwl/ui#Plain#Failed to load Universal Worklist! Server side include of the application integrator failed! No child node binded!### 

The UWL iView works fine for me at the same time. What could be the problem here?

Appreciate your help.

Thank you, John

[Former Member · Accepted solution]

Hi,

As mentioned, increasing the trace level can give more clear picture of the exact problem.

If it doesn't help, then raise an OSS

Note 1120556 - Requirements for Issue Handling in the UWL Area

Note 706541 - EP 6.0 Create a separate UWL log file

The UWL log files located in the following directory: usr\sap\<version>\JC00\j2ee\cluster\server0\log\applications\sap.com\uwl

Regards,

Harini S

[Former Member · Accepted solution]

Simon, Harini S

Thanks for your replies.

I turned on the Log Level to "ALL", found the following trace infos

Warning: user123 | ACCESS.ERROR | /documents/Links | node_write_properties
Category:  /System/Security/Audit/Access 

Error: Failed to load Universal Worklist! Server side include of the application integrator failed! No child node binded!
Category: /uwl/ui

Warning:com.sapportals.portal.prt.runtime.PortalRuntimeException: Failed to load Universal Worklist! Server side include of the application integrator failed!
Category: /uwl/ui

Warning: Error: Failed to load Universal Worklist! Server side include of the application integrator failed! No child node binded!
Category: /uwl/ui

The strange thing is the same iView works for few of the users.

Any help??

Thank you, John

[pramod_gopisetty1 · Accepted solution]

Hi John,

For the user for whom it is not working, assign super admin role in Portal and check the same. If it works the problem is end_user permission.

To solve that go to Content Administration - Portal Content - Right Click permissions - add everyone role and check mark end-user permissions.

In case this doesn't solve follow as Simon & Harini mentioned.

Hope this helps.

Cheers-

Pramod

[Former Member · Accepted solution]

Before giving end user access to the whole PCD, please just try setting this for the every user folder.

[Former Member · Accepted solution]

Thanks Pramod, Michael

I added the group "authenticated" as end user for the Every User folder. It seems to be working. Strangely i could not add the role "everyone" as end user. Each time I added and saved the setting, somehow it used to get deleted automatically.

However, to add the authenticated group/everyone role as end user for this folder in order to make UWL work seems stange to me. We do not need to assign end user permission explicitly to iviews/worksets order that the end user can access them. If a role contains iViews & worksets , and if you assign the role to the end user, the end user automatically gets end user permission on these objects. We have built our entire PCD on this concept. None of the PCD objects have end user permission for any users, except the super admin & content admin

To add the end user permission to the UWL iViews for the everyone role is definitely something wierd, and not the way we would want to model our PCD secutiry permissions.

Your inputs are welcome.

Thank you, John

[Former Member · Accepted solution]

Did you mean the "Everyone" group when you wrote "everyone role"?

iViews and pages used within roles don't need specfic end user access, as the role assignment covers that need. It's only when you run iViews directly that end user needs access. This is what happens from UWL.

Hope this helps.

[Former Member · Accepted solution]

Michael,

I meant "Everyone" role. Somehow I could not assign the this role to the every user folder.

You are right in saying,

 iViews and pages used within roles don't need specfic end user access, as the role assignment covers that need 

.

We have built our enitre PCD security on this basis.

Am curious to know, why do we have to assign end user permission specifically for the UWL iView. I am not accessing it directly, it's part of the EU_ROLE which we have assigned to the users.

Thank you, John

[Former Member · Accepted solution]

The portal doesn't know that the iView is part of the role! It is being accessed by a URL that contains its PCD location, so there is no way for the run time to be aware it is the same iView as is contained in the eu role.

[Former Member · Accepted solution]

Thanks for your reply, Gentlemen.

Your rewards are on their way...

John Miller

[Former Member]

Hi John,

So the user experiencing problems is the user "user123"? Just want to make sure that the message you posted is indeed related to the issue you users are seeing.

If I were you I would turn up the logging/tracing level on the location com.sap.netweaver.bc.uwl.ui.UWLMain using Visual Admin and see if you can get any more info.

Hope this gets you started toward a solution,

BRgds,

Simon