AnsweredAssumed Answered

What additional permission need to be set for this kind of error when using User.WS

Question asked by kh32344 on Apr 6, 2016
Latest reply on Apr 15, 2018 by ta0070620

Like • Show 0 Likes0
Comment • 4

Here is the problem when calling User.WS getUser(),

('Could not get users for course', '_440370_1')

Server raised fault: '[WSFW004]Access Denied Access to this resource is prohibited. (system.user.VIEW)'

We have given this Web Service requestor the following permissions in system role, and he enrolled in course '_440370_1'

Course/Organization Control Panel (Users and Groups) > Users

Administrator Panel (Users) > Users

Administrator Panel (Users) > Users > Edit > View Course Enrollments

system.lmsintegration.admin.VIEW

Administrator Panel (Users) > Users > Search, Not Blank

Administrator Panel (Users) > Users > Edit > View Organization Enrollments

User management by Web Services

Even more strange, it is a hit and miss situation. Sometimes, the program runs without problem, sometimes, it throws the error. We have multiple frontend servers sit behind the load balancer and we are managing hosted.

Thanks,

ta0040047 Apr 8, 2016 2:35 AM

Correct Answer

Look for a cookie which name starts with NSC. Managed hosting's load balancer uses this cookie for sending the client to one app server. You need to send this cookie back on each request to ensure your client connects to the same app on each request. The web services on each app server do not share your client login state.

See the reply in context

1 person had this question

Outcomes

ta0040047 Apr 8, 2016 2:35 AM

2 people found this helpful

Actions

mkauffman @ ta0040047 on Apr 12, 2016 8:52 PM

Here is some .NET code that you can use to make this happen. Add a 'cookie container' to every end point. This code shows how to do so for the ContextWS endpoint:

internalContextWS = new ContextWS();

internalContextWS.CookieContainer = new System.Net.CookieContainer();

internalContextWS.Url = baseWebServiceUrl + "/Context.WS";

Actions

kh32344 Apr 13, 2016 11:12 AM

Thanks for Tasnai and Mark. I opened a behind.blackboard ticket with tier II support on this problem before I posted it here. Don't know what happen to that end, but the problem went away without any code change to add cookies, etc. My case is still open with the blackboard support. Another data point is that the same error message never shows when the role of WS requester is administrator. If the assumption of "The web services on each app server do not share your client login state." is correct, I should be able to reproduce the problem with the administrator role as well.

Actions

ta0070620 Apr 15, 2018 1:31 AM

I am having the same issue for User.WS getUser().
I am using Java.

UserFilter uf = new UserFilter();

uf.setId(lstEnrolledIds);

uf.setFilterType(2); // GET_USER_BY_ID_WITH_AVAILABILITY

UserWS uWS = UserWSFactory.getUserWSForTool();

UserVO[] lstUserVO = uWS.getUser(uf);

The error details are:

INFO | jvm 1 | 2018/04/11 09:31:02 | SEVERE: Servlet.service() for servlet [jsp] in context with path [/webapps/ntu-hdlgrade-BBLEARN] threw exception [java.lang.RuntimeException: [WSFW004]Access Denied Access to this resource is prohibited. (system.useradmin.generic.VIEW)] with root cause

INFO | jvm 1 | 2018/04/11 09:31:02 | blackboard.platform.security.AccessException: Access Denied Access to this resource is prohibited. (system.useradmin.generic.VIEW)

INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.security.SecurityUtil.checkEntitlement(SecurityUtil.java:199)

INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.ws.AxisHelpers.logAndValidateMethodCallBefore(AxisHelpers.java:273)

INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.ws.WebServiceWrapper.invoke(WebServiceWrapper.java:146)

INFO | jvm 1 | 2018/04/11 09:31:02 | at com.sun.proxy.$Proxy939.getUser(Unknown Source)

INFO | jvm 1 | 2018/04/11 09:31:02 | at org.apache.jsp.process_005fpreview_jsp._jspService(process_005fpreview_jsp.java:134)

Actions

4 Replies

ta0040047 Apr 8, 2016 2:35 AM
Unmark Correct
Correct Answer
Look for a cookie which name starts with NSC. Managed hosting's load balancer uses this cookie for sending the client to one app server. You need to send this cookie back on each request to ensure your client connects to the same app on each request. The web services on each app server do not share your client login state.
2 people found this helpful
Like • Show 2 Likes2
Actions
- mkauffman @ ta0040047 on Apr 12, 2016 8:52 PM
  Mark Correct
  Correct Answer
  Here is some .NET code that you can use to make this happen. Add a 'cookie container' to every end point. This code shows how to do so for the ContextWS endpoint:
  internalContextWS = new ContextWS();
  internalContextWS.CookieContainer = new System.Net.CookieContainer();
  internalContextWS.Url = baseWebServiceUrl + "/Context.WS";
  Like • Show 0 Likes0
  Actions
kh32344 Apr 13, 2016 11:12 AM
Mark Correct
Correct Answer
Thanks for Tasnai and Mark. I opened a behind.blackboard ticket with tier II support on this problem before I posted it here. Don't know what happen to that end, but the problem went away without any code change to add cookies, etc. My case is still open with the blackboard support. Another data point is that the same error message never shows when the role of WS requester is administrator. If the assumption of "The web services on each app server do not share your client login state." is correct, I should be able to reproduce the problem with the administrator role as well.
Like • Show 0 Likes0
Actions
ta0070620 Apr 15, 2018 1:31 AM
Mark Correct
Correct Answer
I am having the same issue for User.WS getUser().
I am using Java.
UserFilter uf = new UserFilter();
uf.setId(lstEnrolledIds);
uf.setFilterType(2); // GET_USER_BY_ID_WITH_AVAILABILITY
UserWS uWS = UserWSFactory.getUserWSForTool();

UserVO[] lstUserVO = uWS.getUser(uf);

The error details are:

INFO | jvm 1 | 2018/04/11 09:31:02 | SEVERE: Servlet.service() for servlet [jsp] in context with path [/webapps/ntu-hdlgrade-BBLEARN] threw exception [java.lang.RuntimeException: [WSFW004]Access Denied Access to this resource is prohibited. (system.useradmin.generic.VIEW)] with root cause
INFO | jvm 1 | 2018/04/11 09:31:02 | blackboard.platform.security.AccessException: Access Denied Access to this resource is prohibited. (system.useradmin.generic.VIEW)
INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.security.SecurityUtil.checkEntitlement(SecurityUtil.java:199)
INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.ws.AxisHelpers.logAndValidateMethodCallBefore(AxisHelpers.java:273)
INFO | jvm 1 | 2018/04/11 09:31:02 | at blackboard.platform.ws.WebServiceWrapper.invoke(WebServiceWrapper.java:146)
INFO | jvm 1 | 2018/04/11 09:31:02 | at com.sun.proxy.$Proxy939.getUser(Unknown Source)
INFO | jvm 1 | 2018/04/11 09:31:02 | at org.apache.jsp.process_005fpreview_jsp._jspService(process_005fpreview_jsp.java:134)
Like • Show 0 Likes0
Actions

What additional permission need to be set for this kind of error when using User.WS

Outcomes

Related Content

Recommended Content