Troubleshoot: Missing policy for a new view

A new view is missing an access control policy.

Problem: Added a new view without an accompanying policy.

Indication: An application error is displayed. In the trace.log file the SiteAdminCanDoEverything policy is logged, but the user is not a Site Administrator.

WC_ACCESSCONT PolicyManagerlmpl.isAllowed isAllowed? User=123;
Action=MyNewView; 
       
Resource=com.ibm.commerce.command.HttpForwardViewCommandlmpl;
Owner=-2001; 
        Resource Ancestor Orgs=-2001,-2001; Resource Applicable
Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.isAllowed Found PolicyName: 
        
SiteAdministractorsCanDoEverything; PolicyType: 2;
PolicyOwner:-2001
WC_ACCESSCONT PolicyManagerlmpl.getPolicyApplicableOrgs Policy
Applicable Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.evaluatePolicy Evaluating
PolicyName: 
        
SiteAdministratorsCanDoEverything
WC_ACCESSCONT d PolicyManagerlmpl.isAllowed PASSED?=false
Solution:

  1. Create a policy for the view. Refer to Adding a new view using existing policies for an example.

  2. Load the policy using the acpload utility.

  3. Update the Registry.

Related concepts

Understanding access control

Related tasks

Implementing access control