search

Netcentric / accesscontroltool

Rights and roles management for AEM made easy
Eclipse Public License 1.0
151 stars 91 forks source link

Permission Denied Error When Running ACTool in Stage/Production #759

Open abogatan-ibm opened 3 months ago

abogatan-ibm commented 3 months ago

Description:

I'm encountering an issue with the ACTool where it fails to execute in stage/production environments, displaying a "Permission Denied" error message. The tool functions correctly in the UAT environment with the same configuration, suggesting that the problem is specific to the production setup. The error appears to originate from the NetCentric page itself, rather than the system configuration. Unfortunately, the error message does not specify which permissions are required or lacking.

Steps to Reproduce:

Request:

Could you please provide clarification on which specific permissions are required to run the ACTool in production? Any guidance on resolving this issue would be greatly appreciated.

abogatan-ibm commented 3 months ago

Hi team, I am just checking in on this issue. Any updates or guidance would be greatly appreciated. Thank you!

ghenzler commented 2 months ago

@abogatan-ibm You should have a POST request to https://author-p.....-e....adobeaemcloud.com/mnt/overlay/netcentric/actool/content/overview/content/items/actoolpanel that returns 200 (I just checked on a STAGE instance from another program and it worked fine). For your setup you have to check where the request is denied. As a first step of analysis tail the author's access logs using https://github.com/adobe/aio-cli-plugin-cloudmanager?tab=readme-ov-file#aio-cloudmanagerenvironmenttail-log-environmentid-service-name to see if AEM itself is rejecting the request for some reason or if the infrastructure in between is responsible for this.