Skip to Content
author's profile photo Former Member
Former Member

revert activity fails with "Precondition forbidden check failed"

Hi!

I am trying to revert an activity from within the DTR (via the NWDI web GUI) but do not succeed with that. Instead I get the following error message:

"Error: Precondition forbidden check failed for resource {resourceType='ACTIVITY', getPath()='/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615', resourceID='74c2cdd5fb2211e0b6f9005056b304d1', objectID='74c2cdd5fb2211e0b6f9005056b304d1', path='/act/', name='act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615'}."

The activity was created when attempting to delete a DC. I now want to revert this activity by means of the following steps:

1) enter NWDI 7.0

2) select Design Time Repository which opens the Repository Browser

3) press the icon for "Activity Search"

4) search for "Opened only" activities

5) select the activity and press the icon for "Revert Activity"

6) Tick the checkbox "Delete the activity resource also"

Thereafter, I get above mentioned error message.

Is there anybody who knows how to solve the problem?

Best regards,

Ekkehart

Add a comment
10|10000 characters needed characters exceeded

Related questions

13 Answers

  • Best Answer
    Posted on Nov 15, 2011 at 12:50 PM

    @Anurag, can you please tell me the number of your ticket, so I can have a look what is the progress of that one ?

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 24, 2011 at 05:59 PM

    have you tried from nwds to do that?

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 26, 2011 at 10:06 AM

    Hi,

    Could you please invoke the commands in this order below with DTR console:

    revert -obo /act/myActivity

    delete /act/myActivity

    If the options like obo for the command revert is not available, then please use the DTR console attached to this note:

    #1377679 -- DTR Console "replicate command" don't work

    (http://service.sap.com/sap/support/notes/1377679)

    Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 26, 2011 at 10:56 AM

    Hi,

    please attempt to revert using the DTR Console and let me know the outcome. Please use the version I pointed out in my previous post.

    Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Ervin!

      Thanks for your tip. I tried it but with no success. Here is what I did:

      >revert -obo /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

      Reverted the activity "/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615".

      >delete /act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

      Error: Received "403 Forbidden" response for the request: DELETE /dtr/act/act_w_elfa4_elfa_2e_se_ELFA_2e_SE_dev_inactive_u_j2ee_eklo_t_2011_10_20_13_49_12_GMT_eff0e751-8e72-46e2-be9d-b843181a7615

      Precondition: DAV:forbidden

      >

      Do you have any other ideas?

      Best regards, Ekkehart

  • Posted on Oct 26, 2011 at 01:59 PM

    Hi,

    then most likely your user does not have proper authorization. Which user do you use and what are its roles?

    Can you please doublecheck the ACL settings of this user as well?

    http://help.sap.com/saphelp_nw73/helpdata/en/4c/5fbf43f8da4a3ce10000000a15822b/frameset.htm

    Best Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Ervin!

      Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?

      I have double checked the things you asked for:

      1) UME Roles from User J2EE_EKLO:

      NWDI.Administrator

      Everyone

      LcrAdministrator

      Administrator

      NWDI.Developer

      LcrInstanceWriterAll

      -


      2) ACL settings for this user:

      I followed the instructions in your link to "Users in the DTR". When looking at the "Permissions view" of the "DTR perspective" in the developer studio the list is completely empty. When opening the context menu in the list all options ("Add Principal", "Edit Principal", ...) are greyed out.

      Best regards,

      Ekkehart

  • Posted on Oct 27, 2011 at 01:34 PM

    Hi,

    can you please provide me the contents of http://<host>:<port>/dtr/ws/system/config/active/ACLs/byPath/acl.xml ?

    Regarding your question

    Just for your information - our NWDI has version 7.0 whereas our Netweaver AS & Developer Studio is 7.2. Having different versions should be alright, shouldn't it?

    refer to this thread "Developing for multiple releases with NWDI"

    SAP Netweaver CE 7.1 Ehp1 SP5 & multiple SAP release version support

    Thank you and Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Here comes the requested information:

      <?xml version="1.0" encoding="UTF-8"?>

      <acls>

      <acl>

      <resource>/</resource>

      <ace>

      <isgroup />

      <principal>NWDI.Administrators</principal>

      <grant>

      <privilege>access</privilege>

      <privilege>read</privilege>

      <privilege>write</privilege>

      <privilege>checkin</privilege>

      <privilege>import</privilege>

      <privilege>export</privilege>

      <privilege>integrate</privilege>

      <privilege>adminA</privilege>

      <privilege>adminX</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.Developers</principal>

      <grant>

      <privilege>read</privilege>

      <privilege>write</privilege>

      <privilege>checkin</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.XDevelopers</principal>

      <grant>

      <privilege>read</privilege>

      <privilege>write</privilege>

      <privilege>checkin</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.QManagers</principal>

      <grant>

      <privilege>read</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.Operators</principal>

      <grant>

      <privilege>read</privilege>

      <privilege>write</privilege>

      <privilege>checkin</privilege>

      <privilege>import</privilege>

      <privilege>export</privilege>

      <privilege>integrate</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.Configurators</principal>

      <grant>

      <privilege>read</privilege>

      <privilege>write</privilege>

      </grant>

      <description></description>

      </ace>

      <ace>

      <isgroup />

      <principal>NWDI.Guests</principal>

      <grant>

      <privilege>read</privilege>

      </grant>

      <description></description>

      </ace>

      </acl>

      </acls>

  • Posted on Oct 28, 2011 at 11:38 AM

    Hi,

    is the user J2EE_EKLO part of the UME group NWDI.Administrators?

    You mentioned earlier the roles but here the ACLs are checked as per the groups.

    Thanks and Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi,

      yes it is. As earlier mentioned user J2EE_EKLO has the following roles:

      UME Roles from User J2EE_EKLO:

      NWDI.Administrator

      Everyone

      LcrAdministrator

      Administrator

      NWDI.Developer

      LcrInstanceWriterAll

      Best regards, Ekkehart

  • Posted on Oct 28, 2011 at 12:17 PM

    Hi,

    what you mentioned is the role, and you referred to the role

    NWDI.Administrator

    What I meant is the group

    NWDI.Administrators

    (notice the "s" at the end).

    Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Oct 28, 2011 at 12:51 PM

    Sorry, yes j2ee_eklo is a member of the NWDI.Administrators group.

    Here comes the complete list of membership (UME-databas):

    Administrators

    NWDI.Administrators

    NWDI.Configurators

    NWDI.Developers

    NWDI.Guests

    NWDI.Operators

    NWDI.QManagers

    / Ekkehart

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 28, 2011 at 01:15 PM

    Hello Ekkehart,

    let's continue the investigation in the SAP ticket you have opened.

    I sent that ticket back to you and asked for a service connection, see details in the message.

    I suggest at this point to suspend this discussion here in SDN, and once we found a solution I will of course update this thread with my findings.

    Thanks and Regards,

    Ervin

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Ervin,

      We are also facing the same issue.

      I've gone through this thread completely and have tried and followed the steps but still I am not able to revert the acticity.

      Did you find any solution to this problem.

      If yes, kindly share the solution or let us know if there is any SAP note for it.

      Thanks & Regards,

      Anurag Gwari

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.