"Unauthorized request -- DENIED" error can be raised for an object for which an Object Service Broker user has been granted access permission.

"Unauthorized request -- DENIED" error can be raised for an object for which an Object Service Broker user has been granted access permission.

book

Article ID: KB0086332

calendar_today

Updated On:

Products Versions
TIBCO Object Service Broker for z/OS -
Not Applicable -

Description

Resolution:
Description
"Unauthorized request -- DENIED" error can be raised for an object for which an Object Service Broker user has been granted access permission and for which a SEC_REBIND request has been performed. The object was created by a level 7 userid and the access was performed by a level 1 userid.

Environment
All platforms running TIBCO Object Service Broker for z/OS or TIBCO Object Service Broker for Open Systems Release 5.0.


Symptoms:
"Unauthorized request -- DENIED" error received when an attempt is made to access an object despite the userid being previously granted access authority for the object.

Cause:
The TIBCO Object Service Broker Managing Security 5.0 manual, page 21 under Classification Levels explains that a clearance level-1 user cannot access an object created by a level-7 clearance userid despite having been given access permission to the object.

Resolution:
The clearance level of the object must match that of the userid attempting to use the object. Redefine the object with the correct security level or use a higher level security clearance userid to access the object.


References:
1) TIBCO Object Service Broker Managing Security 5.0 manual

Issue/Introduction

"Unauthorized request -- DENIED" error can be raised for an object for which an Object Service Broker user has been granted access permission.