Support Article
Privilege in report definition not working
SA-32130
Summary
A privilege was added to report definition. This privilege rule refers to an access When rule. This access When rule checks the logged in requestors' access group and work group to provide the appropriate access. When this privilege is associated with the report definition and run, the report definition is not executed even though the user has the privileges and an error is displayed.
Error Messages
com.pega.pegarules.pub.PRRuntimeError: PRRuntimeError
at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:686)
at com.pega.pegarules.session.internal.mgmt.PRThreadImpl.runActivitiesAlt(PRThreadImpl.java:582)
at com.pega.pegarules.session.internal.engineinterface.service.HttpAPI.runActivities(HttpAPI.java:1968)
Steps to Reproduce
- Create a report definition.
- Associate a privilege testpriv to it in the Data Access tab.
- Create or add a role in the access group.
- Create an ARO.
- Associate a privilege to it in Privileges tab and mention an access When rule under Level.
- Run the report definition.
Root Cause
A defect in Pegasystems’ code or rules pzResolveSecurity. Evaluation of havePrivilege access on execution of the report is not done.
Resolution
Apply HFix-31291.
Published January 12, 2017 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.