Security Error on DS Form for wfwk.3

 8 Replies
 0 Subscribed to this topic
 12 Subscribed to this forum
Sort:
Author
Messages
Woozy
Veteran Member
Posts: 709
Veteran Member
    I have created a series of Design Studio versions of WFWK.3 (workflow trigger). Basically, I modified the form to default the service name and description, and removed the fields that were not required.

    All the forms work fine for me, but other users can see and use one of the forms, but get a Servlet Xpress error when they try to use the others (see attached).

    The xml files are identical except for the defaulted fields.

    The only other difference is security. I have full rights (under LAUA), and the other users have limited rights (under LS Security). The users can see and use WFWK.3 directly, and they can see and use one of the DS forms, but not the others.

    Our security folks are out of ideas.

    I have tried:
    - reindexing forms
    - changing prodline/changing back
    - IOS Cache Refresh

    I have attached 3 files: the error message received when selecting the bookmark, the DS form that works (wfwk3ltmint_supers.txt) and one of the DS forms that don't work (wfwk3ltmint_jobs.txt).

    I'm stumped on this one, and I'd appreciate any help I can get. Thanks!
    Attachments
    Kelly Meade
    J. R. Simplot Company
    Boise, ID
    John Henley
    Posts: 3353
      Are any of the other users using locales?
      Have you tried checking file permissions on the .xml files?

      Thanks for using the LawsonGuru.com forums!
      John
      Woozy
      Veteran Member
      Posts: 709
      Veteran Member
        Yep - they are all lawson/lawson 0666.
        Kelly Meade
        J. R. Simplot Company
        Boise, ID
        John Henley
        Posts: 3353
          Are any of the other users using locales?
          Thanks for using the LawsonGuru.com forums!
          John
          Woozy
          Veteran Member
          Posts: 709
          Veteran Member
            Nope - we don't have any locale options other than default.
            Kelly Meade
            J. R. Simplot Company
            Boise, ID
            Woozy
            Veteran Member
            Posts: 709
            Veteran Member
              By the way, I also had the user try using my machine/browser, where I know the forms all work for my user. He got the same error on my machine as he did on his own machines.
              Kelly Meade
              J. R. Simplot Company
              Boise, ID
              John Henley
              Posts: 3353
                Did you modify the DS .xml by hand?
                Reason I ask is because in the file that doesn't work, on the _f3 / SERVICE field, you have an attribute deftkn="" and you don't have that in the .xml file that does work...
                Thanks for using the LawsonGuru.com forums!
                John
                Woozy
                Veteran Member
                Posts: 709
                Veteran Member
                  I didn't modify any of the files by hand.
                  Kelly Meade
                  J. R. Simplot Company
                  Boise, ID
                  Woozy
                  Veteran Member
                  Posts: 709
                  Veteran Member
                    Well, I finally got to the bottom of it. It appears to me this is a little bug in Design Studio.

                    John nailed it when he mentioned the deftkn attribute that was in the non-working file and not in the working file.

                    It appears that when a field is changed to "output only" using Design Studio, one attribute is changed (tp="Text" becomes tp="Out") and four new attributes are added (hsel="0" hdet="0" hselrul="0" deftkn="") to that field in the xml file.

                    It appears that the deftkn="" is causing the problem. If I change it to deftkn="0", then the problem goes away immediately.

                    For even more fun, if the "output only" setting is removed, the deftkn=0 attribute is not removed so the error remains.

                    LAUA security isn't bothered by this attribute, but LS Security takes a big nose-dive when it sees it.

                    By the way, we're on DS v9.0.1.4.199.

                    Off to create a CASE ticket...Yay.
                    Kelly Meade
                    J. R. Simplot Company
                    Boise, ID