revert activity fails with "Precondition forbidden check failed"

[Former Member]

Hi!

I am trying to revert an activity from within the DTR (via the NWDI web GUI) but do not succeed with that. Instead I get the following error message:

"Error: Precondition forbidden check failed for resource {resourceType='ACTIVITY', getPath()='/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615', resourceID='74c2cdd5fb2211e0b6f9005056b304d1', objectID='74c2cdd5fb2211e0b6f9005056b304d1', path='/act/', name='act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615'}."

The activity was created when attempting to delete a DC. I now want to revert this activity by means of the following steps:

1) enter NWDI 7.0

2) select Design Time Repository which opens the Repository Browser

3) press the icon for "Activity Search"

4) search for "Opened only" activities

5) select the activity and press the icon for "Revert Activity"

6) Tick the checkbox "Delete the activity resource also"

Thereafter, I get above mentioned error message.

Is there anybody who knows how to solve the problem?

Best regards,

Ekkehart

[ErvinSzolke · Accepted solution]

@Anurag, can you please tell me the number of your ticket, so I can have a look what is the progress of that one ?

[Former Member]

Thanks for your help, Ervin. You have solved the problem.

Best regards, Ekkehart

[Former Member]

I had this error when deleting DTR catalog, containing data of previously dropped track. Issue was solved by recursively deleting of nested catalogs.

[ErvinSzolke]

For the record I also write here what was the solution, please mark the thread as answered:

The problem was that somehow the folder of the resource has been reverted, but not the content.

Therefore the activity - however it was apparently reverted - was not empty, and non-empty activities cannot be deleted. It had actually nothing to do with authorization, only the fact that the activity was not empty and this is why the error message referred to "forbidden".

So I have checked out the folder (command "co") of this file (this was the folder /DCs/elfa.se/web/ws.orderservice.deploy/_comp) inside the same activity and by this I have resolved the conflict.

TEST:/>co /ws/elfa4/elfa.se_ELFA.SE/dev/inactive/DCs/elfa.se/web/ws.orderservice.deploy/_comp /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a

7615

Created working resource: /wr/9a61c5620f8411e1b809005056b304d1

$wr[0]=/wr/9a61c5620f8411e1b809005056b304d1

$act[0]=/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

Now the next I have done is simply reverting and deleting the activity from the DTR webui which was succesful without errors.

Best Regards,

Ervin

[ErvinSzolke]

Hi Anurag,

no, we are still working on the issue, I don't have update at the moment. For the issue which is in progress in this thread I have asked for a service connection, I am waiting for it at the moment in order to start the analysis on customer system.

Best Regards,

Ervin

[Former Member]

Hi Ervin,

Thanks for the update.

We have also raised an OSS message related to this issue and the connection is also open.

Please let me know in case you find some solution for it.

Thanks & Regards,

Anurag

[ErvinSzolke]

Hello Ekkehart,

let's continue the investigation in the SAP ticket you have opened.

I sent that ticket back to you and asked for a service connection, see details in the message.

I suggest at this point to suspend this discussion here in SDN, and once we found a solution I will of course update this thread with my findings.

Thanks and Regards,

Ervin

[Former Member]

Hi Ervin,

We are also facing the same issue.

I've gone through this thread completely and have tried and followed the steps but still I am not able to revert the acticity.

Did you find any solution to this problem.

If yes, kindly share the solution or let us know if there is any SAP note for it.

Thanks & Regards,

Anurag Gwari

[Former Member]

Sorry, yes j2ee_eklo is a member of the NWDI.Administrators group.

Here comes the complete list of membership (UME-databas):

Administrators

NWDI.Administrators

NWDI.Configurators

NWDI.Developers

NWDI.Guests

NWDI.Operators

NWDI.QManagers

/ Ekkehart

[ErvinSzolke]

Hi,

what you mentioned is the role, and you referred to the role

NWDI.Administrator

What I meant is the group

NWDI.Administrators

(notice the "s" at the end).

Regards,

Ervin

[ErvinSzolke]

Hi,

is the user J2EE_EKLO part of the UME group NWDI.Administrators?

You mentioned earlier the roles but here the ACLs are checked as per the groups.

Thanks and Regards,

Ervin

[Former Member]

Hi,

yes it is. As earlier mentioned user J2EE_EKLO has the following roles:

UME Roles from User J2EE_EKLO:

NWDI.Administrator

Everyone

LcrAdministrator

Administrator

NWDI.Developer

LcrInstanceWriterAll

Best regards, Ekkehart

[ErvinSzolke]

Hi,

can you please provide me the contents of http://<host>:<port>/dtr/ws/system/config/active/ACLs/byPath/acl.xml ?

Regarding your question

Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?

refer to this thread "Developing for multiple releases with NWDI"

Thank you and Regards,

Ervin

[Former Member]

Here comes the requested information:

<?xml version="1.0" encoding="UTF-8"?>

<acls>

<acl>

<resource>/</resource>

<ace>

<isgroup />

<principal>NWDI.Administrators</principal>

<grant>

<privilege>access</privilege>

<privilege>read</privilege>

<privilege>write</privilege>

<privilege>checkin</privilege>

<privilege>import</privilege>

<privilege>export</privilege>

<privilege>integrate</privilege>

<privilege>adminA</privilege>

<privilege>adminX</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.Developers</principal>

<grant>

<privilege>read</privilege>

<privilege>write</privilege>

<privilege>checkin</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.XDevelopers</principal>

<grant>

<privilege>read</privilege>

<privilege>write</privilege>

<privilege>checkin</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.QManagers</principal>

<grant>

<privilege>read</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.Operators</principal>

<grant>

<privilege>read</privilege>

<privilege>write</privilege>

<privilege>checkin</privilege>

<privilege>import</privilege>

<privilege>export</privilege>

<privilege>integrate</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.Configurators</principal>

<grant>

<privilege>read</privilege>

<privilege>write</privilege>

</grant>

<description></description>

</ace>

<ace>

<isgroup />

<principal>NWDI.Guests</principal>

<grant>

<privilege>read</privilege>

</grant>

<description></description>

</ace>

</acl>

</acls>

[ErvinSzolke]

Hi,

then most likely your user does not have proper authorization. Which user do you use and what are its roles?

Can you please doublecheck the ACL settings of this user as well?

http://help.sap.com/saphelp_nw73/helpdata/en/4c/5fbf43f8da4a3ce10000000a15822b/frameset.htm

Best Regards,

Ervin

[Former Member]

Hi Ervin!

Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?

I have double checked the things you asked for:

1) UME Roles from User J2EE_EKLO:

NWDI.Administrator

Everyone

LcrAdministrator

Administrator

NWDI.Developer

LcrInstanceWriterAll

-

---

2) ACL settings for this user:

I followed the instructions in your link to "Users in the DTR". When looking at the "Permissions view" of the "DTR perspective" in the developer studio the list is completely empty. When opening the context menu in the list all options ("Add Principal", "Edit Principal", ...) are greyed out.

Best regards,

Ekkehart

[ErvinSzolke]

Hi,

please attempt to revert using the DTR Console and let me know the outcome. Please use the version I pointed out in my previous post.

Regards,

Ervin

[Former Member]

Hi Ervin!

Thanks for your tip. I tried it but with no success. Here is what I did:

>revert -obo /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

Reverted the activity "/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615".

>delete /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

Error: Received "403 Forbidden" response for the request: DELETE /dtr/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

Precondition: DAV:forbidden

>

Do you have any other ideas?

Best regards, Ekkehart

[ErvinSzolke]

Hi,

Could you please invoke the commands in this order below with DTR console:

revert -obo /act/myActivity

delete /act/myActivity

If the options like obo for the command revert is not available, then please use the DTR console attached to this note:

#1377679 -- DTR Console "replicate command" don't work

(http://service.sap.com/sap/support/notes/1377679)

Regards,

Ervin

[junwu]

have you tried from nwds to do that?

[Former Member]

Answer to John Wu: Yes, I have. I get the same error message there.