PermissionDeniedException when calling iUser.getAllRoles()

Question

My call to

aUser.getAllRoles();

throws the exception:

PermissionDeniedException: Session 1 (cuongtruc.tran) is not allowed to call method public java.util.List ch.ivyteam.ivy.security.internal.User.getAllRoles(). The session does not fulfill the permission rule SESSION (MATCHES THIS AND OWNS UserReadOwnRoles PERMISSION) OR OWNS UserReadRoles PERMISSION OR OWNS UserReadRoles@SYSTEM PERMISSION

I even tried with grant admin permisson to that user but still throws the same exception.

Accepted Answer

2

Hello,

You can execute your code with systemUserPermissions using a callable function. In this Example I get a List of Roles of a User.

List<IRole> roles = Ivy.session().getSecurityContext().executeAsSystemUser(new Callable<List<IRole>>(){
            public List<IRole> call() throws Exception {
                List<IRole> roles = iuser.getRoles();
                return roles;
            }

        });

link

answered 26.02.2014 at 15:42

Raphael Bürgin
(suspended)
accept rate: 55%

The method getRoles() only returns the roles that are directly assigned to the user. Whereas the method getAllRoles() returns also the roles that the user inherits because of the hierarchy of the roles.

(04.03.2014 at 17:21) Reto Weiss ♦♦

Answer 2

1

Login with "Developer" user

Or

Grant Developer's permission for your Test User role

ivy.session.loginSessionUser("Developer","Developer");
ivy.wf.getApplication().getSecurityDescriptor().grantPermissions(ivy.wf.getApplication().getSecurityDescriptor().getSecurityDescriptorType().getRootPermissionGroup(),
                ivy.session.getSecurityContext().findRole("Everybody")
);

link

answered 26.02.2014 at 09:54

Tho Tran
(suspended)
accept rate: 0%

This way is overtake the root permisson, it works thought but I'm worry about security.

But anyway, it will be an alternative way if the method below doesn't work. :)

(27.02.2014 at 03:21) Tran Cuong Truc

PermissionDeniedException when calling iUser.getAllRoles()

Follow this question

Related questions