Not able to use Workflow capability when starting App from Business Application Studio.

[thejk]

Hi Experts,
I developed an App that uses the Workflow capabilites from SAP Build Process Automation. After deploying the App to the Launchpad, everything works fine (using managed application router).

But if I start the App from within BAS ("npm start") the fetching of the XSRF-Token fails. Read-Access on the Workflow service is working. 

I can read workflow instances etc. without problems but if I try to change something on an instance and therefore try to fetch a XSRF-Token it fails with "403 User does not have sufficient privileges." 

I am using the same user in BAS as in Launchpad, so I wonder why there should be an authorization Problem with my user.

This is my xs-app.json:

And this is the relevant part of my ui5.yaml:

I also tried these parameters, no success:

My User has these Roles:

Any hint is highly appreciated...

Regards,
Jürgen

 

[Archana]

Hello @thejk , 

If you notice in your xsapp.json you are using xsuaa authentication which means it will route through the service instance key and not through the user roles. Please ensure that you have disabled csrfTokenProtection. 

Please follow my earlier blog - troubleshooting section . This blog is based on old workflow service, but the concept remains the same. 

Hope that helps,
Archana