Delivered CI Security

Summary:

How do I grant security to the delivered INTFC_FINPHY_SS_A component interface?

Delivered CI Security

Tina (guest) 20 Feb 2010 18:20

I currently have access to the INTFC_FINPHY_SS_A delivered component interface while using my own Userid - which is a clone of VP1. I am trying to set up a new User with access to this CI. I have added the CI and Full Access to all Methods on one of their permission lists - but it's still now working for them. I am not aware of any security requirement through Integration Broker. Is there another security setting that I am missing for this User?

Thanks,
Tina

Re: Delivered CI Security

Praj 21 Feb 2010 23:31

Hi, sometimes its easier if you verify security through a database SQL tool.

You can run the following SQL to determine which permission lists (CLASSID) have access to the component interface (BCNAME):

select * 
from PSAUTHBUSCOMP 
where BCNAME = 'INTFC_FINPHY_SS_A'

Check the AUTHORIZEDACTIONS field, the value should be set to 4 (full access) for each method (BCMETHOD).

Then, check if the user you are working with has access to one of the permission lists.

Here's the SQL you can use to do this (replace VP1 with the appropriate user ID):

select * 
from 
  PSOPRCLS A inner join PSAUTHBUSCOMP B
  on A.OPRCLASS = B.CLASSID
where 
  A.OPRID = 'VP1'
  and B.BCNAME = 'INTFC_FINPHY_SS_A' 
;

If you get no results returned, then the user does not have at least one of the permission lists to give them access to the component interface.

Re: Delivered CI Security

Tina (guest) 22 Feb 2010 22:05

Praj,

Thank you for your response. I have run both SQL's and got the following results.

My permission list contains full access to this CI:

CLASSID BCNAME BCMETHOD AUTHORIZEDACTIONS
ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Cancel 4
ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Create 4
ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Find 4
ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Get 4
ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Save 4

And my user (PAP3396) has security to this permission list:

OPRID OPRCLASS CLASSID BCNAME BCMETHOD AUTHROIZEDACTIONS
PAP3396 ZZ_AM_ADDITIONAL_CONFIG ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Cancel 4
PAP3396 ZZ_AM_ADDITIONAL_CONFIG ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Create 4
PAP3396 ZZ_AM_ADDITIONAL_CONFIG ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Find 4
PAP3396 ZZ_AM_ADDITIONAL_CONFIG ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Get 4
PAP3396 ZZ_AM_ADDITIONAL_CONFIG ZZ_AM_ADDITIONAL_CONFIG INTFC_FINPHY_SS_A Save 4

Any other ideas?

Thanks,
Tina

Re: Delivered CI Security

Praj 22 Feb 2010 22:09

Hi Tina,

Could you please post the error you get for the user when they try to use the CI / what they are trying to do?

Re: Delivered CI Security

Tina (guest) 22 Feb 2010 23:32

Praj,

From the Excel CI tool I get the following error messages after pressing the Submit Data button:

"The response text is not valid XML. Login data cleared"

If I run it again and enter my UserID/Password (a clone of VP1) I do not receive the error and my data is uploaded successfully.

Thanks,
Tina

Re: Delivered CI Security

Praj 23 Feb 2010 01:03

Thanks Tina.

In your connect information in ExcelToCI, what is the node you are using?

If you navigate to:
PeopleTools > Integration Broker > Integration Setup > Nodes and open that node up (e.g. PT_LOCAL) can you confirm that this is the local node? (local node check box is checked)

The other thing it could be is that web library security to WEBLIB_SOAPTOCI. You can use the view, PSAUTHWEBLIBVW to see which permission lists have access to this web library with the following SQL:

select distinct CLASSID from PSAUTHWEBLIBVW where MENUNAME = 'WEBLIB_SOAPTOCI';

If your user doesn't have access to any of these permission lists then the error will occur. You can either give the user access to one of these permission lists (e.g. PTPT1200), however if you want to lock security down, then find a permission list that the user already has, then navigate to:

PeopleTools > Security > Permissions & Roles

Open the permission list you want to use, then go to the web libaries tab, add WEBLIB_SOAPTOCI, press Edit, and confirm they have full access to all functions.

Re: Delivered CI Security

Tina (guest) 23 Feb 2010 01:28

Praj,

I finally found the solution. The WEBLIB_SOAPTOCI Web Library also has to be added to the ZZ_AM_ADDITIONAL_CONFIG permission list.

It's now working.

Thanks for your help. This is my first experience with PeopleSoftWiki.com I found it extremely helpful - as well as your own personal wiki! They are now both on my favorites list.

Thanks,
Tina

Re: Delivered CI Security

Praj 23 Feb 2010 01:44

Great, glad I could help and thanks for your feedback on the wiki.