topic Re: ERROR: Metadata Server denied access to operation. in Administration and Deployment

ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 12:55:07 GMT

NOTE: LOAD TO LASR

NOTE: There were 504 observations read from the data set DB.ACTIVE_HEADERS_DATA.
NOTE: The data set CSLASR.ACTIVE_HEADERS_DATA has 504 observations and 22 variables.
ERROR: Metadata Server denied access to operation.

ERROR: 1016: Metadata Server denied access to operation.
---------------------------------------------------
REFRESHING DB.ALERT_INVESTIGATION_EXTRACT (SQUEEZE=NO) IN LASR
---------------------------------------------------
NOTE: REMOVE FROM LASR
ERROR: Metadata Server denied access to operation.
NOTE: LOAD TO LASR

Re: ERROR: Metadata Server denied access to operation.

alexal — Mon, 18 Jun 2018 12:58:14 GMT

@kuppusamy,

Who starts the autoload process? Are you sure that user exists in the metadata?

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:04:36 GMT

yes, the user is a super user. before it is running properly, even morning it worked fine, but now im getting this error.

Re: ERROR: Metadata Server denied access to operation.

manial — Mon, 18 Jun 2018 13:11:20 GMT

@kuppusamy Could you please check if the super user got unrestricted role in smc.

Ideally unrestricted metadata shouldn't be part of the users role.

Best Regards,

Manas

Re: ERROR: Metadata Server denied access to operation.

alexal — Mon, 18 Jun 2018 13:11:59 GMT

@kuppusamy,

Please repeat the problem and show me the most recent metadata server log as well as /<SASConfig>/Lev<X>/Web/Logs/SASServer12_1/SASLASRAuthorization7.<X>.log from the middle tier. Also, I need to know the user ID.

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:16:29 GMT

there is one metadata server: unrestricted role. the role is not assigned to that user.

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:17:00 GMT

there is one metadata server: unrestricted role. the role is not assigned to that user.

morning also i run the same job with same user.

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:24:12 GMT

yes i got this error:

APP 2018-06-12 09:01:39,644 WARN [ST-45191-chOqGVumzyhQg3E3z3aD-cas itsoftadmin] com.sas.lasr.authorization.service.AuthorizationServiceImpl - ** Access Denied **
APP 2018-06-12 09:01:39,645 WARN [ST-45191-chOqGVumzyhQg3E3z3aD-cas itsoftadmin] com.sas.lasr.authorization.service.AuthorizationServiceImpl - Action: 7
APP 2018-06-12 09:01:39,645 WARN [ST-45191-chOqGVumzyhQg3E3z3aD-cas itsoftadmin] com.sas.lasr.authorization.service.AuthorizationServiceImpl - Tag and Table name: CSDATA.ACTIVE_HEADERS_DATA
APP 2018-06-12 09:01:39,646 WARN [ST-45191-chOqGVumzyhQg3E3z3aD-cas itsoftadmin] com.sas.lasr.authorization.service.AuthorizationServiceImpl - User: itsoftadmin@PMCDC
APP 2018-06-12 09:01:39,646 WARN [ST-45191-chOqGVumzyhQg3E3z3aD-cas itsoftadmin] com.sas.lasr.authorization.service.AuthorizationServiceImpl - Required Permission: Read on Table object

but i gave all rights to that user(dataset wise).

Re: ERROR: Metadata Server denied access to operation.

alexal — Mon, 18 Jun 2018 13:26:39 GMT

@kuppusamy,

That user doesn't' have read permissions on ACTIVE_HEADERS_DATA table object.

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:29:47 GMT

i already gave all rights like r,rm,w,wm,create,delete,administer,checkinmetada everything.

Re: ERROR: Metadata Server denied access to operation.

alexal — Mon, 18 Jun 2018 13:34:16 GMT

@kuppusamy,

Please show me a screenshot from "Explore Authorizations" for that user. Please do that on the table object.

Re: ERROR: Metadata Server denied access to operation.

kuppusamy — Mon, 18 Jun 2018 13:44:37 GMT

Re: ERROR: Metadata Server denied access to operation.

alexal — Mon, 18 Jun 2018 14:00:14 GMT

@kuppusamy,

Are you sure you have no duplicates for that entry? Try to delete it and run the autoload process once again.