Report access issue intermittently

rkomma

We are facing a strange issue where the user looses access suddenly to the reports they were previously having access to. Below is the only log that shows any warning/error during the time frame when the user logs in. Appreciate any help.

The error Does not say much.

nqserver.log:

[2017-01-26T11:24:47.512-06:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: a89874109dfaa288:33ca4402:159c9489934:-8000-000000000021a11e,0:1:1:28] [tid: 75333940] The request from BISystemUser:<?xml version="1.0"?><soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken><wsse:Username>BISystemUser</wsse:Username><wsse:Password>xxxxxxxxxx</wsse:Password></wsse:UsernameToken></wsse:Security></soap:Header><soap:Body><sec:getUsersWithPropertiesByTenant xmlns:sec="http://oracle/bi/security/"><searchCriteria><predicate>GUID</predicate><values>61e532a2505c4e97a057d835e896e066</values></searchCriteria><requiredProperties>DISPLAY_NAME</requiredProperties><requiredProperties>DESCRIPTION</requiredProperties><tenantGUID><value></value></tenantGUID></sec:getUsersWithPropertiesByTenant></soap:Body></soap:Envelope> [[

**********  Task: 1. Running for (mls): 10 **********

Description: Execute logical request

User: BISystemUser

SessionID: 3620798464

ProcedureID: 126

SQL Hash: 0x351e4310

SQL::{call NQSSearchIdentities('USERS','GUID=61e532a2505c4e97a057d835e896e066')}

]]

[2017-01-26T11:24:47.512-06:00] [OracleBIServerComponent] [ERROR:1] [] [] [ecid: a89874109dfaa288:33ca4402:159c9489934:-8000-000000000021a11e,0:1:1:28] [tid: 75333940] The response:<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope"><env:Header/><env:Body><ns3:getUsersWithPropertiesByTenantResponse xmlns="" xmlns:ns3="http://oracle/bi/security/"><result><GUID><value>61e532a2505c4e97a057d835e896e066</value></GUID><name>ptrobins</name><description></description><displayName>Robinson, Peggy T.</displayName><properties><values>Robinson, Peggy T.</values><name>DISPLAY_NAME</name></properties><properties><name>DESCRIPTION</name></properties></result></ns3:getUsersWithPropertiesByTenantResponse></env:Body></env:Envelope> [[

**********  Task: 1. Running for (mls): 10 **********

Description: Execute logical request

User: BISystemUser

SessionID: 3620798464

ProcedureID: 126

SQL Hash: 0x351e4310

SQL::{call NQSSearchIdentities('USERS','GUID=61e532a2505c4e97a057d835e896e066')}

]]

Thanks,

R

Gianni Ceresa

I guess you don't need to do anything to "fix" the problem, users login again later or at a different time and access is back?

What probably happen is that users don't get the right/full application role membership during login, that would explain the "intermittently" occurrence.

So investigate on that direction, when you have somebody having lost his permissions check which app roles he is member of.

Also analyse your authentication providers setup, how people are linked to app roles etc.

rkomma

Thanks for the response Gianni.

I checked the user roles when the issue occurs and she is having the role that gives her the access to those missing reports. But still not seeing the reports

I think I need to reorder the providers. Below is the current order

CURRENT ORDER:

MSAD - SUFFICIENT

DefaultAuthenticator - OPTIONAL  --> BISystemUser is present in this.

NEW ORDER:

DefaultAuthenticator - SUFFICIENT  --> BISystemUser is present in this.

MSAD - SUFFICIENT

Thanks

R