Caught exception in runIt(). Details: REQUEST_DENIED

TSuser_Kumar

Hi,

i have seen few threads related to this error of

Now there are two things which makes this work

1. Give deployment access to user in the admin UI

2. Or add user as od-admin in iwodauthorize

But, My query is how to resolve this issue for large number of users

We haven't faced this issue till now and all of a sudden this issue occured, is there any specific reason on why this issue occurs.?

Also,

Is there any CLT to give deployment access for users that we do in the Admin tab?

Thank you,

Find more posts tagged with

Comments

Rick Poulin

The most common solution is to have your workflow run its deployments as a service account, rather than the user that initiated the job.

Unfortunately, iwodauthorize doesn't understand groups, so that's really the only alternative to adding users one by one. And no, the TS Admin Console doesn't have an interface for this. The old ODAdmin UI did, but AFAIK that's not used very much anymore. You could build your own custom screen to wrap the iwodauthorize CLT though..

sample_Bottom_border_ML.rptdesign

TSuser_Kumar

Hi,

Thank you,

But, Is there any equivalent CLT available for adding deployment permission in edit user option under Admin tab.

sample_Bottom_border_ML.rptdesign

nipper

TSuser_Kumar wrote:
Hi,

Thank you,

But, Is there any equivalent CLT available for adding deployment permission in edit user option under Admin tab.

iwodauthorize -d add andy deployment1

sample_Bottom_border_ML.rptdesign

TSuser_Kumar

Hi Andy,

Thank you, so in future If I try to create any user through iwuseradm CLT, It becomes mandatory for me to go for iwodauthorize CLT as well as we have this issue at present.

Does changing the service account for deployment in the workflow is the best solution?

sample_Bottom_border_ML.rptdesign

nipper

That is a business decision. It is a very common approach.

sample_Bottom_border_ML.rptdesign

TSuser_Kumar

Thanks for that.

But is there anything that could have changed for this issue to occur?

I could see no change in the .ipm file, the deployment task was with IW_USER previously and even now.

One thing I noticed in admin tab is all user's including master doesn't have access to deployments, but even that wasn't changed, any possiblity on that change? any Teamsite config file or opendeploy config file being over-ridden?

sample_Bottom_border_ML.rptdesign

TSuser_Kumar

This issue occur's everytime we do release our code base. Is there any opendeploy conf file which stores the details of user access to deployment's, need to verify if the file is available in our release script.

Thank you.

sample_Bottom_border_ML.rptdesign

Rick Poulin

There is a file to store this information, yes, but it contains basically some Java serialized objects (so not exactly human readable). What you can do instead is use the iwodauthorize CLT to check whether a particular user has any roles assigned.

sample_Bottom_border_ML.rptdesign

TSuser_Kumar

Thanks.

The problem is that I agree running a iwodauthrize will provide them the access. But our user's already have the access and it get's removed in some or other way during release. In that scenario am not sure what is the change that is making to remove the deployment access of user's.

sample_Bottom_border_ML.rptdesign

Rick Poulin

Then make sure your build process isn't updating any of the files under the OpenDeployNG/db folder.

sample_Bottom_border_ML.rptdesign