UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21. Read more.
UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21.Read more.
Captain
Captain
758 views

Issues while submitting the wrokflow form

Hi Guys,

When i am trying to submit a workflow as a normal user i am getting a message saying that "User not authorized for action on this entity".
But if i submit the workflow as the manager of the recipient, then i will be able to submit successfully.
I have given access for all users to this workflow in the trustee DN. I also checked whether there is any script which checks if the initiator user is the manager of the recipient at the time of submit action. But there isn't any.
Does anyone know why i am getting this?
Labels (1)
0 Likes
2 Replies
Micro Focus Expert
Micro Focus Expert

Dear shajipappan,

Requesting for a PRD which donot have initiate rights would result such message

Make sure the PRD has enough rights before making a request to it.

The below doc link might help you to provide the required rights for the PRD to solve the issue

https://www.netiq.com/documentation/identity-manager-46/identity_apps_admin/data/t4299dzufz8x.html

Thanks & Regards,
SivaSaran.K.R
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

On 4/27/2018 6:24 AM, sivasaran wrote:
>
> Dear shajipappan,
>
> Requesting for a PRD which donot have initiate rights would result such
> message
>
> Make sure the PRD has enough rights before making a request to it.
>
> The below doc link might help you to provide the required rights for the
> PRD to solve the issue
>
> https://www.netiq.com/documentation/identity-manager-46/identity_apps_admin/data/t4299dzufz8x.html


To elaborate on what Siva is saying, and the docs do not really explain
in this link...

There are a series of attributes in eDir that control permission access
to User App functions. (The IDM engine uses a similar model for
starting/stopping drivers).

You can read more about this in my article from a few weeks ago.

https://www.netiq.com/communities/cool-solutions/different-permissions-user-application/

Basically these attributes, nrfAssignTaskAddressee that Siva references,
do not exist on users. Instead, UA does a getEffectiveWrites() style
call to see if you (logged in user) COULD write to this attribute if you
wanted to, but never does write. Odd, right? Odder is that normal eDir
permissions (Browse and Compare to the eDir objects of the PRD to SEE
the PRD) are used one way, then this model to actually use the PRD. It
is more flexible this way, and allows arbitrary permissions to be added,
by just implementing its enforcement against this model.


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.