Cannot access APS application tab in CCP v2 after upgrade to 7.3: The operation on resource is not allowed

Modified on: Sat, 18 Nov 2023 5:33 AM

Original Publishing Date:
2020-01-22

Symptoms

Cannot access some APS application tab in CCP v2 after upgrade to 7.3

The following error in /var/log/pa/core.log:

Feb 27 04:37:44.697 : DBG [aps-service:150619 aps-service-task-239:876 pau]: c.p.p.tracer exit by exception: com.parallels.pa.service.connectivity.ejb.CustomOperationProcessorBean.prepareEndpointRequest com.parallels.pa.service.aps.api.A
PSAccessViolationException: The operation on the resource '1c5ea152-eb32-46f6-8298-4f1475f91d5f' is not allowed.
        at com.parallels.pa.service.connectivity.ejb.CustomOperationProcessorBean.prepareEndpointRequest(CustomOperationProcessorBean.java:230)
        at sun.reflect.GeneratedMethodAccessor234.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)

Cause

Odin Automation platform security was hardened on 7.3: the APS application must list its resource permissions explicitly to regulate the access. If, for example, 'referrer' permissions are not defined, while 'owner' permissions are listed, the access to the resource will be blocked for the former.

This is also described in details at the following page: Access Attributes

Resolution

Contact the APS packager to certify the application for OA 7.3 and apply the necessary changes in the application resource schemas.

Internal content

Link on internal Article