Troubleshoot: Missing policy for a new view
A new view is missing an access control policy.Problem: Added a new view without an accompanying policy.
Indication: An application error is displayed. In the trace.log file the SiteAdminCanDoEverything policy is logged, but the user is not a Site Administrator.
WC_ACCESSCONT PolicyManagerlmpl.isAllowed isAllowed? User=123; Action=MyNewView; Resource=com.ibm.commerce.command.HttpForwardViewCommandlmpl; Owner=-2001; Resource Ancestor Orgs=-2001,-2001; Resource Applicable Orgs=-2001WC_ACCESSCONT PolicyManagerlmpl.isAllowed Found PolicyName: SiteAdministractorsCanDoEverything; PolicyType: 2; PolicyOwner:-2001WC_ACCESSCONT PolicyManagerlmpl.getPolicyApplicableOrgs Policy Applicable Orgs=-2001WC_ACCESSCONT PolicyManagerlmpl.evaluatePolicy Evaluating PolicyName: SiteAdministratorsCanDoEverythingWC_ACCESSCONT d PolicyManagerlmpl.isAllowed PASSED?=falseSolution:
- Create a policy for the view. Refer to Adding a new view using existing policies for an example.
- Load the policy using the acpload utility.
- Update the Registry.
Related concepts
Understanding access controlRelated tasks
Implementing access control