Support Article
Execution denied for class Rule-Obj-FieldValue
SA-36731
Summary
Reported for Financial Services Industry Foundation (FSIF) 7.17
The Know Your Customer (KYC) for Financial Services application is built upon several applications, including Pega FSIF, which contains the ruleset CMISPlus.
In the CMISPlus ruleset, a specific Access of Role to Object (ARO) rule has been added. This ARO is defined for Rule-Obj-FieldValue. It sets all access for Read, Write, and Delete of rules and instances and for processing reports and activitities to production level 4. The ARO is defined for the PegaRULES:SysAdm4, which is currently used as the access role for a specific user to investigate issues in the pre-production environment.
Each and every time the user logs in, he or she gets a new entry in the log file stating that access is denied to the LookupList activity defined on Rule-Obj-FieldValue class. The user also sees log entries indicating that sections cannot be displayed.
Error Messages
2017-03-21 06:58:58,558 [ -http--86] [TABTHREAD0] [ ] [ KYC:01.01.13] ( internal.mgmt.Executable) ERROR xxx - Execution denied for class: Rule-Obj-FieldValue (activity: LookupList)
at com.pegarules.generated.activity.ra_action_getlistoffieldvalues_55ef46d507e79e3704643f511cdd9dab.step3_circum0(ra_action_getlistoffieldvalues_55ef46d507e79e3704643f511cdd9dab.java:436)
2017-03-21 07:00:37,253 [ tomcat-http--35] [TABTHREAD2] [ ] [ KYC:01.01.13] ( WBOpen._baseclass.Action) ERROR xxxx - Error opening page
com.pega.pegarules.pub.database.AuthorizationException: You are not authorized to open instance RULE-OBJ-ACTIVITY RULE-OBJ-FIELDVALUE LOOKUPLIST #20130919T000529.634 GMT
Steps to Reproduce
Log in to the Pega FSIF 7.17 KYC application in a pre-production environment using an access group that has PegaRULES:SysAdm4 defined as its role.
Root Cause
A defect in Pegasystems’ code or rules
Users see the error in the pre-production system because the production level is set to 5.
A patch is needed to update the production value to 5 in the rule: Access of Role to Object
PegaRULES:SysAdm4 on class Rule-Obj-FieldValue.
Resolution
Apply HFix-33528.
Published May 6, 2017 - Updated December 2, 2021
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.