Question
DICTU RDI
NL
Last activity: 3 Apr 2025 8:57 EDT
403 forbidden error with delegated decision table
I have delegated a decision table to business users and it appears in the delegated rules in the portal. But when user clicks on it, 403 forbidden error appears.
So when i read articles about Basic access control(BAC) . BAC protects application when unregistered requests encoutered it will throw SECU0019 Warning.
As pyBlockUnregistredRequests when rule enables this warning and gives 403 forbidden error in the browser.
Pegasystems Inc.
GB
@naveenb17248660 This is a security feature introduced from Pega 8.5.
please follow the suggestions given in past questions:
DICTU RDI
NL
@MarijeSchillernThanks for responding. This article does not help in my scenario
Because i am not using custom code and also the issue is not due to localization.
HCA Healthcare
US
@naveenb17248660 The 403 Forbidden error happens because Basic Access Control (BAC) blocks unregistered requests when pyBlockUnregisteredRequests is enabled. To fix this, go to Dev Studio → Configure → Security → BAC Security Registry and register the decision table. Also, check if the user’s Access Group has the right Access Role to modify decision tables. Ensure they have the "Delegate Rules" privilege under Access Role Name. If the issue persists, use Tracer to check for security failures. You can also disable pyBlockUnregisteredRequests temporarily to test if BAC is causing the issue. If the URL path is blocked, adjust settings in Security Policies under SysAdmin. Finally, re-enable BAC after registering the rule properly. Let me know if you need a step-by-step guide!
DICTU RDI
NL
@Sairohith Thanks for response
1.I have already disabled pyBlockUnregisteredRequests for dev environment.The cause is BAC.
2. I dont find this option, Dev Studio → Configure → Security → BAC Security Registry
3. I have tried changing the Content security policies under image, style, source sections and temporarily i have allowed all, But do we need to mention the URL's also or just allow all do the job?