Support Article
Access Rights not applied when importing records as CSV file
SA-53264
Summary
When switching access roles, Access Rights are not applied when importing records as a CSV file. The data is not imported and the system stops working.
Error Messages
[PegaRULES-Batch-65] [STANDARD] [ ] [ZodiacSR:01.01.01] (ch.PegaAccel_DataImport.Action) ERROR VManager@SR - Error in Obj-Open
com.pega.pegarules.pub.database.AuthorizationException: You are not authorized to open instance LOG-DATAIMPORT PXW-484
From: (B0EAB457F9277C4CCB06FE29CAB21FDA2)
at com.pega.pegarules.pub.database.AuthorizationException.createCannotOpenException(AuthorizationException.java:242)
at com.pega.pegarules.data.internal.access.Opener.open(Opener.java:2250)
at com.pega.pegarules.data.internal.access.DatabaseImpl.open(DatabaseImpl.java:2508)
at com.pega.pegarules.pub.runtime.AbstractActivity.objOpen(AbstractActivity.java:80)
at com.pegarules.generated.activity.ra_action_pzcreatepagesandimportinbatch_0d29feb6e24a7fd5188e54500bf7fce8.step1_circum0(ra_action_pzcreatepagesandimportinbatch_0d29feb6e24a7fd5188e54500bf7fce8.java:230)
at com.pegarules.generated.activity.ra_action_pzcreatepagesandimportinbatch_0d29feb6e24a7fd5188e54500bf7fce8.perform(ra_action_pzcreatepagesandimportinbatch_0d29feb6e24a7fd5188e54500bf7fce8.java:73)
at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3553)
at com.pega.pegarules.session.internal.mgmt.Executable.invokeActivity(Executable.java:10711)...
Steps to Reproduce
- Create a data table and delegate the table to the Manager Access Group.
- Configure the default access group as User:AG from the Manager operator.
- Add Manager:AG in the access group list.
- Log in to the application portal using Manager Operator (with User:AG as default access group).
- Switch the application using the Actions option in the operator to navigate to the Manager portal.
- Import the data to the data table. The system stops working.
Root Cause
A defect in Pegasystems’ code or rules.
The import runs in the async process and uses the default access group. The param.pzUseCurrentAccessGroupForChild parameter in the access group must be set to true, such that the async process uses the user access group. This is set in the pzImportRecordsWrapper activity.
Resolution
Apply HFix-42318.
Published July 31, 2018 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.