Support Article
Unable to transfer an assignment to another operator
SA-80994
Summary
To prevent users from viewing profiles of other users, Access Roles are modified to specify the 'CanAccessSelf' Access When rule to open the Data-Admin-Operator-ID instances. However, Authorization exception occurs on transferring an assignment to another user.
Error Messages
com.pega.pegarules.pub.database.AuthorizationException: You are not authorized to open instance DATA-ADMIN-OPERATOR-ID XXXXXXX
Steps to Reproduce
- Change the Access Role for Data-Admin-Operator-ID to CanAccessSelf.
- Find an existing assignment.
- Transfer the assignment to another user.
Root Cause
This behavior is as per Pega product design with regards to the security configuration.
The error occurred because the Reassign activity must open the Operator record for the Reassign operator.
Resolution
Perform either of the following local-changes:
- Create a custom Access When rule that allows users to open the Operator record when performing the Transfer action. Use the custom Access When rule instead of CanAccessSelf.
- Create a custom flow action and an activity that uses an advanced agent with the necessary authorization to perform the processing. Use this instead of the out-of-the-box Transfer action.
Published October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.