I have a Data class which is binded to external table. When I try to save an instance in this table for few roles it says "Database-Authorization-NoModifyAccess" error. But for some roles, I able to save an instance. Can somebody help why I am getting thi
I have a Data class which is binded to external table. When I try to save an instance in this table for few roles it says "Database-Authorization-NoModifyAccess" error. But for some roles, I able to save an instance. Can somebody help why I am getting this error on this class instance?
Pegasystems Inc.
US
What is the applies-to class of the Activity from which you are attempting to save data?
You cannot, for example, save data from a Code-Security activity.
What version of Pega are you using?
Pegasystems Inc.
US
I'm assuming by "roles" you mean "Access Role Names". If so, which roles are allowing the save of new instances and which roles are not allowing the saves and producing the referenced "Database-Authorization-NoModifyAccess" message?
Highmark Health
IN
Its not access role name.. I meant for operator id.. both the operator ids are mapped to same access group so the access roles are same too.. but I can see clipboard and tracer also not accessible for the unauthorized operator id
Pegasystems Inc.
US
The difference could be Organization related. Are the workgroups different for the two operators?
Have you looked at Records -> Security -> Access of Role to Object filtering on your Data class? If not found, then search using the Data class's inheritance hierarchy.
Perhaps there is an Access When rule based on an Organization attribute such as WorkGroup or OrgUnit.
Since you are on 7.2.2, ruling out ABAC (Attribute Based Access Control) security policies.
Pegasystems Inc.
IN
1. Can you try to clone the working operator and see if the new operator created is able to save the instance. If this works may be what Lee is saying might be the case. Some access when condition on write access.
2. If Access When is not the issue, can you add Access Role To Object instance for one of the roles already present for the AG and the data class you are talking about and give access to read and write and see of that solves the problem. If both these does not work we will try more options.