Incorrect privileges to get groups for user

Hi Guys,

We have a scenario where we have to update a comment in one of the Tabs on screen. When we update the comment using an user from a group and try to login with another user from a different group and when trying to open that comment tab I am seeing the following error. It is working fine in the lower environments. The group Properties are similar in lower and testing environments.

 

Thanks in Advance.

 

 

Logs:

2017-08-14 14:53:46,181 [[ACTIVE] ExecuteThread: '21' for queue: 'weblogic.kernel.Default (self-tuning)'] ERROR com.appiancorp.rest.shared.AppianExceptionMapper - Internal Server Error on REST API invocation.
com.appiancorp.process.expression.ExpressionRuntimeException$AppianExceptionProvider: Expression evaluation error in rule '_addcomments' (called by rules '_viewloanaddcomentsdocuments' > '_viewloanmainscreen') at function 'apply' [line 45]: com.appiancorp.suiteapi.common.exceptions.AppianException: Incorrect privileges to get groups for user. [User Context: np_int_invrepoman1] (APNX-1-4198-000)
    at com.appiancorp.process.expression.ExpressionRuntimeException.<init>(ExpressionRuntimeException.java:70)
    at com.appiancorp.process.expression.ExpressionRuntimeException.<init>(ExpressionRuntimeException.java:66)
    at com.appiancorp.core.expr.fn.looping.LoopingFunction.evaluateList(LoopingFunction.java:43)
    at com.appiancorp.core.expr.fn.looping.LoopingFunction.evaluateList(LoopingFunction.java:32)
    at com.appiancorp.core.expr.fn.looping.Apply.eval(Apply.java:20)
    at com.appiancorp.core.expr.fn.Function.eval0(Function.java:58)
    at com.appiancorp.core.expr.DefaultEvaluable.eval(DefaultEvaluable.java:175)
    at com.appiancorp.core.expr.tree.FunctionCall.evalImmediate(FunctionCall.java:353)
    at com.appiancorp.core.expr.tree.FunctionCall.evalEvaluable(FunctionCall.java:320)
    at com.appiancorp.core.expr.tree.FunctionCall.eval(FunctionCall.java:392)
    at com.appiancorp.core.expr.Tree.eval0(Tree.java:213)
    at com.appiancorp.core.expr.Tree.eval(Tree.java:209)
    at com.appiancorp.core.expr.tree.FunctionCall.evalChildren(FunctionCall.java:176)
    at com.appiancorp.core.expr.tree.FunctionCall.evalImmediate(FunctionCall.java:339)
    at com.appiancorp.core.expr.tree.FunctionCall.evalEvaluable(FunctionCall.java:320)
    at com.appiancorp.core.expr.tree.FunctionCall.eval(FunctionCall.java:392)
    at com.appiancorp.core.expr.Tree.eval0(Tree.java:213)
    at com.app


Caused by: javax.script.ScriptException: com.appiancorp.suiteapi.common.exceptions.AppianException: Incorrect privileges to get groups for user. [User Context: np_int_invrepoman1]
    at com.appiancorp.process.expression.CustomFunction.eval0(CustomFunction.java:183)
    at com.appiancorp.core.expr.DefaultEvaluable.eval(DefaultEvaluable.java:175)
    at com.appiancorp.core.expr.fn.looping.HigherOrderFunction.apply(HigherOrderFunction.java:185)
    at com.appiancorp.core.expr.fn.looping.HigherOrderFunction.apply0(HigherOrderFunction.java:97)
    at com.appiancorp.core.expr.fn.looping.HigherOrderFunction.apply(HigherOrderFunction.java:68)
    at com.appiancorp.core.expr.fn.looping.LoopingFunction.evaluateList(LoopingFunction.java:39)
    ... 275 more
Caused by: com.appiancorp.suiteapi.common.exceptions.AppianException: Incorrect privileges to get groups for user. [User Context: np_int_invrepoman1]
    at com.appiancorp.psshared.peoplefunctions.GetGroupsForMemberUser.getGroupsForMemberUser(GetGroupsForMemberUser.java:32)
    at sun.reflect.GeneratedMethodAccessor1913.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:497)
    at com.appiancorp.process.expression.CustomFunction$1.call(CustomFunction.java:758)
    at com.appiancorp.common.ContextClassLoaderSwitcher.runInContext(ContextClassLoaderSwitcher.java:25)
    at com.appiancorp.process.expression.CustomFunction.evaluate(CustomFunction.java:753)
    at com.appiancorp.process.expression.CustomFunction.evalDynamic(CustomFunction.java:204)
    at com.appiancorp.process.expression.CustomFunction.eval0(CustomFunction.java:176)
    ... 280 more
Caused by: PrivilegeException[null=>null]: Insufficient permission
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
    at sun.reflect.DelegatingConstructorAccessorImpl

  Discussion posts and replies are publicly visible

Parents
  • Hi nagavenkatamuneervarmas,

    I think the problem here is you are trying to fetch all groups related to the last updated user as per the given comment in this thread(apply(fn!getgroupsformemberuser, <lastUpdatedUserId>)). Please check in which groups the last updated user belong to. If he belongs to any restricted or personal groups you will get a privilege issue as mentioned in your problem description.

    Point is to check the user's group's security type is restricted or personal and whether the user who is trying to open the UI have access to those groups.

    Regards
    Suresh
Reply
  • Hi nagavenkatamuneervarmas,

    I think the problem here is you are trying to fetch all groups related to the last updated user as per the given comment in this thread(apply(fn!getgroupsformemberuser, <lastUpdatedUserId>)). Please check in which groups the last updated user belong to. If he belongs to any restricted or personal groups you will get a privilege issue as mentioned in your problem description.

    Point is to check the user's group's security type is restricted or personal and whether the user who is trying to open the UI have access to those groups.

    Regards
    Suresh
Children
No Data