"Access denied Exception" when saving the file

[tellranga]

Hi,

           As a jasperadmin user with default role settings,  after clicking the save button in the jasper admin console, I am getting an exception as
"Access denied: You do not have permission to take the requested action"

Previous screen to this error page in the server console  says, the file is succesfully validated.

 

Code:

Access denied: You do not have permission to take the requested action. com.jaspersoft.jasperserver.api.JSException: org.acegisecurity.AccessDeniedException: Access is deniedcom.jaspersoft.jasperserver.api.JSException: org.acegisecurity.AccessDeniedException: Access is deniedat com.jaspersoft.jasperserver.war.action.OlapUnitAction.saveOlapUnit(OlapUnitAction.java:441)at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)at java.lang.reflect.Method.invoke(Method.java:585)at org.springframework.webflow.util.DispatchMethodInvoker.invoke(DispatchMethodInvoker.java:103)at org.springframework.webflow.action.MultiAction.doExecute(MultiAction.java:136)at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:203)at org.springframework.webflow.engine.AnnotatedAction.execute(AnnotatedAction.java:142)at org.springframework.webflow.engine.ActionExecutor.execute(ActionExecutor.java:61)at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:180)at org.springframework.webflow.engine.State.enter(State.java:200)at org.springframework.webflow.engine.Transition.execute(Transition.java:229)at org.springframework.webflow.engine.TransitionableState.onEvent(TransitionableState.java:112)at org.springframework.webflow.engine.Flow.onEvent(Flow.java:572)at org.springframework.webflow.engine.impl.RequestControlContextImpl.signalEvent(RequestControlContextImpl.java:207)at org.springframework.webflow.engine.impl.FlowExecutionImpl.signalEvent(FlowExecutionImpl.java:214)at org.springframework.webflow.executor.FlowExecutorImpl.resume(FlowExecutorImpl.java:238)at sun.reflect.GeneratedMethodAccessor171.invoke(Unknown Source)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)at java.lang.reflect.Method.invoke(Method.java:585)at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:281)at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:187)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:154)at org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:66)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)at $Proxy13.resume(Unknown Source)at org.springframework.webflow.executor.support.FlowRequestHandler.handleFlowRequest(FlowRequestHandler.java:115)at org.springframework.webflow.executor.mvc.FlowController.handleRequestInternal(FlowController.java:170)at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153)at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:45)at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:820)at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:755)at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:396)at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:360)at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at com.jaspersoft.jasperserver.war.common.UploadMultipartFilter.doFilter(UploadMultipartFilter.java:86)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:264)at org.acegisecurity.ui.switchuser.SwitchUserProcessingFilter.doFilter(SwitchUserProcessingFilter.java:335)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:107)at org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:110)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.api.metadata.user.service.impl.MetadataAuthenticationProcessingFilter.doFilter(MetadataAuthenticationProcessingFilter.java:136)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicProcessingFilter.java:181)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.war.UserPreferencesFilter.doFilter(UserPreferencesFilter.java:131)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:217)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.war.UserPreferencesFilter.doFilter(UserPreferencesFilter.java:131)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:191)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:148)at org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:90)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at com.jaspersoft.jasperserver.war.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:70)at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:138)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)at java.lang.Thread.run(Thread.java:595)Caused by: org.acegisecurity.AccessDeniedException: Access is deniedat org.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:68)at org.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:275)at org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:63)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)at $Proxy1.saveResource(Unknown Source)at com.jaspersoft.jasperserver.war.action.OlapUnitAction.saveOlapUnit(OlapUnitAction.java:439)... 84 moreorg.acegisecurity.AccessDeniedException: Access is deniedorg.acegisecurity.AccessDeniedException: Access is deniedat org.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:68)at org.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:275)at org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:63)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)at $Proxy1.saveResource(Unknown Source)at com.jaspersoft.jasperserver.war.action.OlapUnitAction.saveOlapUnit(OlapUnitAction.java:439)at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)at java.lang.reflect.Method.invoke(Method.java:585)at org.springframework.webflow.util.DispatchMethodInvoker.invoke(DispatchMethodInvoker.java:103)at org.springframework.webflow.action.MultiAction.doExecute(MultiAction.java:136)at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:203)at org.springframework.webflow.engine.AnnotatedAction.execute(AnnotatedAction.java:142)at org.springframework.webflow.engine.ActionExecutor.execute(ActionExecutor.java:61)at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:180)at org.springframework.webflow.engine.State.enter(State.java:200)at org.springframework.webflow.engine.Transition.execute(Transition.java:229)at org.springframework.webflow.engine.TransitionableState.onEvent(TransitionableState.java:112)at org.springframework.webflow.engine.Flow.onEvent(Flow.java:572)at org.springframework.webflow.engine.impl.RequestControlContextImpl.signalEvent(RequestControlContextImpl.java:207)at org.springframework.webflow.engine.impl.FlowExecutionImpl.signalEvent(FlowExecutionImpl.java:214)at org.springframework.webflow.executor.FlowExecutorImpl.resume(FlowExecutorImpl.java:238)at sun.reflect.GeneratedMethodAccessor171.invoke(Unknown Source)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)at java.lang.reflect.Method.invoke(Method.java:585)at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:281)at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:187)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:154)at org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:66)at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)at $Proxy13.resume(Unknown Source)at org.springframework.webflow.executor.support.FlowRequestHandler.handleFlowRequest(FlowRequestHandler.java:115)at org.springframework.webflow.executor.mvc.FlowController.handleRequestInternal(FlowController.java:170)at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153)at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:45)at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:820)at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:755)at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:396)at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:360)at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at com.jaspersoft.jasperserver.war.common.UploadMultipartFilter.doFilter(UploadMultipartFilter.java:86)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:264)at org.acegisecurity.ui.switchuser.SwitchUserProcessingFilter.doFilter(SwitchUserProcessingFilter.java:335)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:107)at org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:110)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.api.metadata.user.service.impl.MetadataAuthenticationProcessingFilter.doFilter(MetadataAuthenticationProcessingFilter.java:136)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicProcessingFilter.java:181)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.war.UserPreferencesFilter.doFilter(UserPreferencesFilter.java:131)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:217)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at com.jaspersoft.jasperserver.war.UserPreferencesFilter.doFilter(UserPreferencesFilter.java:131)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:191)at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)at org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:148)at org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:90)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at com.jaspersoft.jasperserver.war.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:70)at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:138)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)at java.lang.Thread.run(Thread.java:595)

[cmeier]

Are you using Jasper-Pro?  If so, there is a user with more privs... superuser.  The default Japseradmin user only has permissions in the organization that it was created.

[tellranga]

Thanks,

But I am using Jasper Server V2.1. in Windows OS as a jasperadmin user with default role settings, I logged into jasper admin console and uploaded a Modrian XML file which has cube definitions. After giving a query in MDX Query Screen, I can see a success message, "The OLAP connection was successfully validated.".

But finally when I click save button in the validation Screen, I am getting an exception, "Access denied: You do not have permission to take the requested action"

com.jaspersoft.jasperserver.api.JSException: org.acegisecurity.AccessDeniedException: Access is denied.

 

But surprisingly, this unaltered xml file without any environmental change did worked on previous occations.

 

The working version all of a sudden is not working which puzzles me. Any help, would be highly appreciated ?

[mgeise]

Sounds like there may be a permission issue with the specific folder that you are trying to save into.  What happens if you save to a different folder?

Matt

Jaspersoft

[tellranga]

 

Tried to save the file by doing the following. But none of them worked,

1. first, I created a new folder,
2. next, I created a new user in jasper console with admin access
3. finally, I tried the new user with different roles

During these experimentation, I also ensured my windows network user is having admin access.
But all my above effort ended up in the same exception,
"Access denied: You do not have permission to take the requested action"

very strange ?

 

[mgeise]

Hmmm...very strange.

 

Nothing has changed in your installation, system configuration, classpath, the way you are starting the app, etc. between when it was working and when it stopped working?  Has your browser recently upgraded or anything?

 

Is this JasperServer Community Edition or Professional Edition? Is this the only action where you get an error?  If you edit an existing analysis view by just going through and accepting the previous values, do you also get the error at the end?

 

Matt

Jaspersoft

[tellranga]

Please find my reply,

• Thats true, no environmental changes was done ( like browser upgrade / system configuration etc).
• It is JasperServer V2.1 Community Edition for Windows OS.
• Yes, this is the only action I get error (infact the last step, clicking save button in the validation Screen).
• Existing analysis view which comes as samples are working fine (like foodmart) .

Also, I uninstalled Jasper Server V2.1 and installed V3.1,  but still same error.
So I reverted back to V2.1 itself where I atleast saw a working version of analysis view for some time .
But offcource, now I am unable to come out of this exception ... looks like a dead end...

Post Edited by tellranga at 07/13/2009 08:31

[mgeise]

Since you have the same issue in another version and it is not specific to the functionality, as the foodmart examples work, it points to an issue with one of your repository resources and permissions there - could be datasource permissions, or any other object/folder that your view relies on.  I presume that if you tried setting up a duplicate of the foodmart example, it would work but that the issue is specific to the resources/folders you have created.

 

Short of looking at every related resource and folder where they are stored, etc. it seems you would need to get to a different level of logging or set up the application in a development environment with breakpoints, etc. to see what the issue is.   Jaspersoft support would likely be able to take a copy of your repository and try to reproduce and identify the issue, however this would be something that would require a support contract.

 

Sorry, but I am all out of suggestions without actually looking at the physical repository structure and permissions.

 

Matt

Jaspersoft

[kumarsrs]

I also faced the same problem, when I logined as jasperadmin user. then check the role and permission, some of the permission seem to be missing, i added all the permission which had been listed. then i try save, it was successful.

 

[tellranga]

I see, can you point out which roles & permission you added explicitly.