SA-4471

Summary

You have installed HFix-5535 (Implementation of Implicit Privilege Paradigm in PRPC 6.2 SP2) and also added the “Rule-Obj-XML” class to the user role. However, you still get a permissions error for the stream XML rule.

Error Messages

You are not authorized to open instance RULE-OBJ-XML <CLASS> <SERVICE>!<URL> <TIMESTAMP>

Steps to Reproduce

 

1. Install HFix-5535.


2. Add "Rule-Obj-XML" class to a Role.


3. Add the Role to the AccessGroup.


4. Run a Connect Soap service.


5. Observe error message for a stream XML rule.


 

Root Cause

The root cause of this problem is a defect in customer application code/rules.

Resolution

This issue is resolved through the following local change:
You need to authorize the class <CLASS> <SERVICE> as specified in the error message. Authorizing the rule type Rule-Obj-XML is not enough to allow opening all rules that apply to all classes.