Execution denied for class Rule-Obj-FieldValue
SummaryReported for Financial Services Industry Foundation (FSIF) 7.17
The Know Your Customer (KYC) for Financial Services application is built upon several applications, including Pega FSIF, which contains the ruleset CMISPlus.
In the CMISPlus ruleset, a specific Access of Role to Object (ARO) rule has been added. This ARO is defined for Rule-Obj-FieldValue. It sets all access for Read, Write, and Delete of rules and instances and for processing reports and activitities to production level 4. The ARO is defined for the PegaRULES:SysAdm4, which is currently used as the access role for a specific user to investigate issues in the pre-production environment.
Each and every time the user logs in, he or she gets a new entry in the log file stating that access is denied to the LookupList activity defined on Rule-Obj-FieldValue class. The user also sees log entries indicating that sections cannot be displayed.
Error Messages2017-03-21 06:58:58,558 [ -http--86] [TABTHREAD0] [ ] [ KYC:01.01.13] ( internal.mgmt.Executable) ERROR xxx - Execution denied for class: Rule-Obj-FieldValue (activity: LookupList)
2017-03-21 07:00:37,253 [ tomcat-http--35] [TABTHREAD2] [ ] [ KYC:01.01.13] ( WBOpen._baseclass.Action) ERROR xxxx - Error opening page
com.pega.pegarules.pub.database.AuthorizationException: You are not authorized to open instance RULE-OBJ-ACTIVITY RULE-OBJ-FIELDVALUE LOOKUPLIST #20130919T000529.634 GMT
Steps to ReproduceLog in to the Pega FSIF 7.17 KYC application in a pre-production environment using an access group that has PegaRULES:SysAdm4 defined as its role.
Root CauseA defect in Pegasystems’ code or rules
Users see the error in the pre-production system because the production level is set to 5.
A patch is needed to update the production value to 5 in the rule: Access of Role to Object
PegaRULES:SysAdm4 on class Rule-Obj-FieldValue.
Published April 19, 2017 - Updated May 5, 2017