nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to create xml file through Form API

Samir_Friend

Env: TS6.5 UNIX

Hi,
I have an external IPL file which creates an XML file in the location:
/templatedata/Article

When I invoke this IPL through console, the XML file gets generated as desired but when I hit this IPL using callServer from my DCT js, I get an exception saying "permission denied". I have checked the permissions on all folders but I am not able to figure out the cause.
Please suggest what should I be looking into.

TIA
Samir

Find more posts tagged with

Comments

Adam Stoller

Env: TS6.5 UNIX

Hi,
I have an external IPL file which creates an XML file in the location:
/templatedata/Article

When I invoke this IPL through console, the XML file gets generated as desired but when I hit this IPL using callServer from my DCT js, I get an exception saying "permission denied". I have checked the permissions on all folders but I am not able to figure out the cause.
Please suggest what should I be looking into.

TIA
Samir

Determine the process owner of the script when executed through the callServer process (print out values of $<, $>, $(, and $) into a logifle)

Ambuj

Env: TS6.5 UNIX

Hi,
I have an external IPL file which creates an XML file in the location:
/templatedata/Article

When I invoke this IPL through console, the XML file gets generated as desired but when I hit this IPL using callServer from my DCT js, I get an exception saying "permission denied". I have checked the permissions on all folders but I am not able to figure out the cause.
Please suggest what should I be looking into.

TIA
Samir

Have you given execute access to all?
Did you check with any other IPL file - kept at some other location?

kaalraa

Env: TS6.5 UNIX

Hi,
I have an external IPL file which creates an XML file in the location:
/templatedata/Article

When I invoke this IPL through console, the XML file gets generated as desired but when I hit this IPL using callServer from my DCT js, I get an exception saying "permission denied". I have checked the permissions on all folders but I am not able to figure out the cause.
Please suggest what should I be looking into.

TIA
Samir

What access permissions are been set over the folder - /templatedata/Article. It should be 0766 or 0777. Apart from that the user who is executing the IPL during run time, should have proper WORKAREA permissions.

HTH

Samir_Friend

The permissions on all folders for the Article heirarchy is 777.

I got this string in the logfile when I printed the process owner($<, $>, $(, $) in the same sequence:

Through FormAPI: 610296102960001 6000160001 60001
Through console: 54454410 30001 1010 30001 10

I am not sure how to change this. Please guide.

ISCBorisB

The permissions on all folders for the Article heirarchy is 777.

I got this string in the logfile when I printed the process owner($<, $>, $(, $) in the same sequence:

Through FormAPI: 610296102960001 6000160001 60001
Through console: 54454410 30001 1010 30001 10

I am not sure how to change this. Please guide.

Try getpwuid($<), getpwuid($>), etc...

Synthese_commune.rptdesign

Samir_Friend

Thanks ISCBorisB,
I am gettinbg the following entries in the logs after executing from Teamsite:

[html]
$logger->debug(getpwuid($<));
$logger->debug(getpwuid($>));
$logger->debug(getpwuid($());
$logger->debug(getpwuid($)));
[/html]

Log generated through FormAPI:

[html]
iwuix6102960001Interwoven TeamSite UI Daemons UserInterwoven TeamSite UI Daemons User/app/teamsite/iw-home/bin/sh
[2008/10/22 10:50:59] DEBUG (/app/teamsite/iw-home/iw-perl/site/lib/CPB/MYFI/Content/Utils.pm 605) iwuix6102960001Interwoven TeamSite UI Daemons UserInterwoven TeamSite UI Daemons User/app/teamsite/iw-home/bin/sh
[2008/10/22 10:50:59] DEBUG (/app/teamsite/iw-home/iw-perl/site/lib/CPB/MYFI/Content/Utils.pm 606) nobodyx6000160001NobodyNobody/
[2008/10/22 10:50:59] DEBUG (/app/teamsite/iw-home/iw-perl/site/lib/CPB/MYFI/Content/Utils.pm 607) nobodyx6000160001NobodyNobody/
[/html]

Log generated through console:

[html]
dm18122x54410Mat, Deepak [Created on 26/1/06]Mat, Deepak [Created on 26/1/06]/export/home/dm1812/bin/sh
[2008/10/22 10:52:45] DEBUG (/app/teamsite/iw-home/iw-perl/site/lib/CPB/MYFI/Content/Utils.pm 605) dm18122x54410Mat, Deepak [Created on 26/1/06]Mat, Deepak [Created on 26/1/06]/export/home/dm18122/bin/sh
[/html]

I am not able to figure out why the permissions(users) are different in both the cases. Even if it is, can you please suggest how to resolve the issue.

Thanks

ISCBorisB

Who throws this "Permission Denied" Warning?

If it's your browser, chances are that server side run was Ok but generated Java Script is not allowed to modify DC Form.
Does your callServer URL Parameter Domain differ from TeamSite Domain?

Samir_Friend

Hi,
I want to know how to set process owners for Teamsite tasks and also how to change them in UNIX environment.
I didn't find anything relevant in the Teamsite documentation.

Can anyone pls help me with this issue? I need to have a resolution ASAP!

TIA

Adam Stoller

Thanks ISCBorisB,
...
Log generated through FormAPI:
iwui x 61029 60001 [...real-uid]
iwui x 61029 60001 [...effective-uid]
nobody x 60001 60001 [...real-gid]
nobody x 60001 60001 [...effective-gid]
Log generated through console:
dm18122 x 544 10 [...real-uid]
dm18122 x 544 10 [...effective-uid]
I am not able to figure out why the permissions(users) are different in both the cases. Even if it is, can you please suggest how to resolve the issue.

Thanks

It's not permissions, it's the effective UID that's changed - as indicated in the [cleaned-up] log output - when you run from the command line, it is you who is running the command. When you run it through FormAPI - the application server process owner (iwui) is running the command for you, and not doing any kind of impersonation.

Therefore you either need to add iwui to the group with permissions or figure out how to get your FormAPI invoked command to be handled with impersonation so that even if the real-uid is "iwui" - the effective-uid would be yours (not sure off-hand exactly how [if] this can be done) - but at least it gives you something to play with ;-)

ISCBorisB

not sure off-hand exactly how this can be done

This can probably be done by using iw_cgi_wrapper.cgi or perhaps by creating CGI Counterpart to ipl code (like we used to do in Windows
by copy/rename show_env.cgi) and calling this cgi.

However, as I indicated before good chances are that the "Server" part of callServer runs fine. The whole issue has a distinct smell of browser cross-domain
Security problem

Samir_Friend

Is there any way you know of, to alter the permissions of Teamsite UI Daemon(probably in Teamsite UI maybe) for particular/all tasks?

Nonetheless, I am hoping of finding a UNIX OS CLT which could allow me to alter the usernames for tasks/threads. Smiley Very Happy

Will post the solution though when I find one!

Thanks

Samir_Friend

Who throws this "Permission Denied" Warning?

If it's your browser, chances are that server side run was Ok but generated Java Script is not allowed to modify DC Form.
Does your callServer URL Parameter Domain differ from TeamSite Domain?

The permission denied exception is thrown when I try to open/create the XML file in my customized utils.pm method.
I believe(not sure though) that the JavaScript has nothing to do with the creation of the XML file since it is being created by a function in utils.pm which is getting invoked by the IPL file.

Also, my callServer URL parameter is "/iw-bin/xmlgenerator.ipl" which is relative to Teamsite.

Samir_Friend

This can probably be done by using iw_cgi_wrapper.cgi or perhaps by creating CGI Counterpart to ipl code (like we used to do in Windows
by copy/rename show_env.cgi) and calling this cgi.

However, as I indicated before good chances are that the "Server" part of callServer runs fine. The whole issue has a distinct smell of browser cross-domain
Security problem

Hey! great idea, I believe it might just work.
I will try it out and post the tale if it does.
Meanwhile, if you come across any other possible solution, please do let me know.

Thanks!

Samir_Friend

Hey! great idea, I believe it might just work.
I will try it out and post the tale if it does.
Meanwhile, if you come across any other possible solution, please do let me know.

Thanks!

Sorry forgot to post the solution for this:

In my case, using callServer("/iw-bin/iw_cgi_wrapper.cgi/sample.ipl",....) worked fine and this time it didn't throw the permissions error. :rolleyes:

The CGI wrapper automatically maps the process owner to the user and not the Web Deamon.

Thanks for your help guys!