401 Unauthorized Error when accessing a task from REST API which contains Role or Privilege in Access Control definition

[Former Member]

Hi Team,

As of IDM 7.2 SP8 patch2, when we use Enterprise role or Privilege in the access control definition of a task, accessing this task from UI5 i.e REST API is giving unauthorized error even though user is already having the required role or privilege.

But the task is working fine if we use fixed user ID or keeping blank value in allowed users field.

Attached the current access control definition of the task we configured & the error message info for reference

Regards,

Venkata Bavirisetty

[avatartest]

Hi Venkata,

Do you use the old version of the REST API, or the REST API v2?

Actually - when I looked in the Access Control that you have configured - this looks unfamiliar to me  - do you want to use the "XXXXXX" string as a wildcard? Like *?

I would expect that this to be done with a filter in the access control - did you use this?

Kind Regards,

Rali

[Former Member]

Hi Ralitsa,

Thanks for your response and sorry for late reply.

The XXXX in role is not used as a wild card. the name itself is in that format. I have searched the role and then selected from search list.

Let me know if you need any clarifications?

Refards,

Venkata Bavirisetty

[Former Member]

Hi Venkata,

Is this a custom UI or not ?

BR,

Simona

[Former Member]

Hi Simona,

Thanks for your quick response.

Yes. The UI tasks are custom developed in UI5 through REST API which SAP supported from SP8 I believe.

Let me know if you need any more information.

Regards,

Venkata Bavirisetty

[Former Member]

Hi Venkata,

Try to add the attribute MXREF_MX_PRIVILEGE into the UI task list with attributes, so the UI can access the user's assignments.

Br,

Simona

[Former Member]

Hi Simona,

Thanks for the suggestion. Seems adding the attribute MXREF_MX_PRIVILEGE has no effect. In fact I tried adding all MXREF* & MXMEMBER* Attributes but no effect.

Regards,

Venkata Bavirisetty