Support Article

Privilege in report definition not working

SA-32130

Summary



A privilege was added to report definition. This privilege rule refers to an access When rule. This access When rule checks the logged in requestors' access group and work group to provide the appropriate access. When this privilege is associated with the report definition and run, the report definition is not executed even though the user has the privileges and an error is displayed.

Error Messages



com.pega.pegarules.pub.PRRuntimeError: PRRuntimeError
at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:686)
at com.pega.pegarules.session.internal.mgmt.PRThreadImpl.runActivitiesAlt(PRThreadImpl.java:582)
at com.pega.pegarules.session.internal.engineinterface.service.HttpAPI.runActivities(HttpAPI.java:1968)




Steps to Reproduce

  1. Create a report definition.
  2. Associate a privilege testpriv to it in the Data Access tab.
  3. Create or add a role in the access group.
  4. Create an ARO.
  5. Associate a privilege to it in Privileges tab and mention an access When rule under Level.
  6. Run the report definition.

Root Cause



A defect in Pegasystems’ code or rules pzResolveSecurity. Evaluation of havePrivilege access on execution of the report is not done.

Resolution



Apply HFix-31291.

Published January 5, 2017 - Updated January 12, 2017

Have a question? Get answers now.

Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.