Access to internal workflow context is denied.

Hi All,
while starting osb_server1 i am getting below errors. can someone help me to understand what is the reason for this error and how to resolve this?
<Aug 22, 2012 7:34:44 AM CDT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 22, 2012 7:34:47 AM CDT> <Warning> <oracle.soa.services.notification> <BEA-000000> <<.> Notification via email, voice, SMS or IM will not be sent. If you would like to enable them, please configure corresponding sdpmessaging driver. Then modify the accounts and set NotificationMode attribute to either NONE, EMAIL or ALL in workflow-notification-config.xml>
<Aug 22, 2012 7:34:47 AM CDT> <Error> <oracle.soa.services.workflow.verification> <BEA-000000> <<.> createInternalWorkflowContext: access error: access denied (oracle.security.jps.JpsPermission VerificationService.createInternalWorkflowContext)>
<Aug 22, 2012 7:34:47 AM CDT> <Error> <oracle.soa.services.workflow.query> <BEA-000000> <<.> Access to internal workflow context is denied.
Requested access to internal workflow context is not allowed according to security policy.
Ensure that correct security policy is used. If the error persists, contact Oracle Support Services.
ORABPEL-30515
Access to internal workflow context is denied.
Requested access to internal workflow context is not allowed according to security policy.
Ensure that correct security policy is used. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1163)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:99)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:67)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Caused By: java.security.AccessControlException: access denied (oracle.security.jps.JpsPermission VerificationService.createInternalWorkflowContext)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:546)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1156)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:100)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:68)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
>
ORABPEL-30515
Access to internal workflow context is denied.
Requested access to internal workflow context is not allowed according to security policy.
Ensure that correct security policy is used. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1163)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:99)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:67)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Caused by: java.security.AccessControlException: access denied (oracle.security.jps.JpsPermission VerificationService.createInternalWorkflowContext)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:546)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1156)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:100)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:68)
... 2 more
<Aug 22, 2012 7:34:47 AM CDT> <Error> <oracle.soa.services.workflow.evidence> <BEA-000000> <<TaskEvidenceService.initTrustedCAs> ORABPEL-30515
Access to internal workflow context is denied.
Requested access to internal workflow context is not allowed according to security policy.
Ensure that correct security policy is used. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1163)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:99)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:67)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Caused by: java.security.AccessControlException: access denied (oracle.security.jps.JpsPermission VerificationService.createInternalWorkflowContext)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:546)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createInternalWorkflowContext(VerificationService.java:1156)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService$1.run(TaskEvidenceService.java:812)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.getInternalWorkflowContext(TaskEvidenceService.java:809)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.initTrustedCAs(TaskEvidenceService.java:112)
at oracle.bpel.services.workflow.evidence.impl.TaskEvidenceService.startup(TaskEvidenceService.java:100)
at oracle.bpel.services.workflow.common.WorkflowServiceInitializer.run(WorkflowServiceInitializer.java:68)
... 2 more
>

Hi,
Execute the following steps to resolve this issue:
Start both managed servers once from the aserver domain.
This will create a merged system policies file in domain/config/fmwconfig
Stop both managed servers
Start both managed servers from mserver domain.
This will make sure that the system-jazn-policy.xml copied over from domain/config/fwmconfig contains the policies for both SOA and BAM servers
The above steps will copy the system-jazn-policy.xml created from aserver domain to the mserver domain so that it will avoid overwritten of the system-jazn-policy.xml file
Regards,
Kal

Similar Messages

Non-static variable cant accessed from the static context..your suggestion

Once again stuck in my own thinking, As per my knowledge there is a general error in java.
i.e. 'Non-static variable cant accessed from static context....'
Now the thing is that, When we are declaring any variables(non-static) and trying to access it within the same method, Its working perfectly fine.
i.e.
public class trial{
�� public static void main(String ar[]){ ////static context
�� int counter=0; ///Non static variable
�� for(;counter<10;) {
�� counter++;
�� System.out.println("Value of counter = " + counter) ; ///working fine
�� }
�� }
Now the question is that if we are trying to declare a variable out-side the method (Non-static) , Then we defenately face the error' Non-static varialble can't accessed from the static context', BUT here within the static context we declared the non-static variable and accessed it perfectly.
Please give your valuable suggestions.
Thanks,
Jeff

Once again stuck in my own thinking, As per my
knowledge there is a general error in java.
i.e. 'Non-static variable cant accessed from static
context....'
Now the thing is that, When we are declaring any
variables(non-static) and trying to access it within
the same method, Its working perfectly fine.
i.e.
public class trial{
�� public static void
main(String ar[]){ ////static context
�� int counter=0; ///Non
static variable
�� for(;counter<10;) {
�� counter++;
��
System.out.println("Value
of counter = " + counter) ; ///working fine
�� }
�� }
w the question is that if we are trying to declare a
variable out-side the method (Non-static) , Then we
defenately face the error' Non-static varialble can't
accessed from the static context', BUT here within
the static context we declared the non-static
variable and accessed it perfectly.
Please give your valuable suggestions.
Thanks,
JeffHi,
You are declaring a variable inside a static method,
that means you are opening a static scope... i.e. static block internally...
whatever the variable you declare inside a static block... will be static by default, even if you didn't add static while declaring...
But if you put ... it will be considered as redundant by compiler.
More over, static context does not get "this" pointer...
that's the reason we refer to any non-static variables declared outside of any methods... by creating an object... this gives "this" pointer to static method controller.

BPM workflows Vs MDM internal workflows.

need clarity on BPM workflows Vs MDM internal workflows.
My understanding:
BPM are kind of workflows created on portal.
and MDM workflows are internal within MDM system.
Questions:
1. Are BPM workflow and MDM Workflows are connected in anyway.
a. If YES,How? Pls give me an example.
b. If NO, when exactly are MDM workflows used and when are BPM workflows used.
2. How are validations done in BPM
3. What is the role of web services in BPM, when exactly we are using
web services.
.......... Pls explain with example if possible.
Thanks for your help.
Regards,
ve

Hi Veena.
As a definition SAP BPM is a component helps you to model, execute, and monitor your business processes based on a common process model. BPM is used to create composite applications and to streamline a process of execution. It can model the application with different areas using webservices etc.
SAP BPM provides modeling and implementation for a UI centric business process u2013 you can develop the business process based on BPM modeling tools.
1.
a. Are BPM workflow and MDM Workflows are connected in anyway.
As far as I know, it is Not.
b. If NO, when exactly are MDM workflows used and when are BPM workflows used
- MDM Workflow is extensively used in case of MDM Components for Cleansing, de-duplication, validation, approval etc. A MDM Workflow is tightly integrated with the MDM Clients to perform the operations.
- BPM workflow is of UI centric business process to integrate various functional usecases.
2.
Validations are created in BPM using the validation rules framework or BRM(Business Rules Mangement) based on the functionality. User can create their own validations from this layer.
3. As a definition, Web services are typically application programming interfaces (API) or web APIs that can be accessed over a network. So if Im designing an application which creates a purchase order in the back end, an webservice should be exposed where I pass the required inputs and get the desired output. The validations are exposed as webservices which can be used in BPM.
For more information read this Blog:
/people/steffen.ulmer/blog/2009/12/16/sap-mdm-bpm-validations
Regards
Bala

Access to a protected resource was denied.

Hi Experts
I need some help with this error.
I created a small button on a html page and when i click on that button i am calling the url from smartcut.When i click on it, it runs ok and the output is there but it is also displaying a error.
error is on a small internet explorer window,
"Failed to run job.
access to a protected resource was denied.
Detailed Message: NoContentPublisherRole.
Recommended Action: Logoff and logon again. If problem persists contact your local security administrator."
I know the user that i loggedin has publishing access and i also tried log in and log off. didnt work.
hyperion workspace version is 9.3.1
hyperion ui version is 9.3.1
hyperion server version is 9.3.1
Thank you in advance
Kumar

Hi Florent,
1. For the first error "The name has already been shared":
I recommend you can use the the cmdlet "Get-SMBShare" to list all share folders firstly before creating a new share, and check if there is share named "$unit" on remote server.
2. For the second error "The requested object could not be found":
According to your script, you want to creat a new share on remote computer, then add this share folder to the new created namespace on file server, please try the script below:
New-DfsnRoot -Type DomainV2 -TargetPath "\\$newDestServer\$unit" -Path "\\$RootNameSpace\$unit" -EnableSiteCosting $true
New-DfsnFolder -Path "\\$RootNameSpace\$unit\$site" -TargetPath "\\$newDestServer\$unit"
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support

PIX 501 config - access to internal network not working from remote VPN users - everything on the inside is OK

One other thing - I had a problem with the key pairing so I rebuilt the rsa 1024 and the unit started working. Unfortunately I reloaded without the config in place and now I cannot get it to work again. Any help will be greatly apprecaited although I did review a dozen other posts of people having similar problems and for some reason there is never any conclusion as to the solution and I am not sure why.
Some other info from the client end:
I just ran the stats on the client and packets are being encrypted BUT none are decrypted.
Also Tunnel received 0 and sent 115119
Encryption is 168-bit 3-DES
Authentication is HMAC-SHA1
also even though the allow LAN is selected in the Cisco VPN client it states the local LAN is disabled in the client stats
also Transparent tunneling is selcted but in the stats it states it is inactive
I am connecting with the Cisco VPN Client Ver 5.0.07.0440
This config works. It is on the internal net 192.168..40.x and all users obtain dhcp and surf the web. It has required ports opened.The problem is that you can connect remotely via the VPN and you receive an IP address from the remote-vpn pool but you cannot see any machines on the internal network. The pix is at 40.2 and you cannot ping the pix and the pix from the remote PC connecting via the VPN and youcannot ping the remote PC from the PIX console when the remote is connected and receives the first IP address in the VPN pool of 192.168.40.25
I need to see the internal network and map network drives. I have another friend that is running the same config and it works but his computer is on a linksys wireless and has an IP of 192.168.1.x and the IP he receives from the VPN pool is 192.168.1.25 so I do not know if the same network is allowing this config to work even if there is an error in the config. In my present case I obtain the ip of 192.168.40.25 from the VPN pool and my connecting pc on 192.168.1.x I really am not sure how the VPN virtual adapter works. I am assuming it routes all traffic from your connecting PC to and from the virtual adapater but I really do not know for sure.
Other people have had similar issues with accessing the internal network from the VPN. One solution was the split-tunnel, another was the natting and another had to do with the encrption where there and an issue with the encrypt and ecrypt which was stopping the communicaton via the VPN.
I still cannot seem to find the issue with this config and any help will be greatly appreciated.
This is the config
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password somepassword
hostname hostname
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
object-group network internal_trusted_net
network-object 192.168.40.0 255.255.255.0
object-group icmp-type icmp_outside
icmp-object echo-reply
icmp-object unreachable
icmp-object time-exceeded
icmp-object source-quench
access-list OutToIn permit icmp any xxx.xxx.xxx.0 255.255.255.248 object-group icmp_outside
access-list no_nat_inside permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list split_tunnel permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list OutToIn permit ip any any
access-list outbound permit ip any any
(NOTE: I had many more entries in the access list but removed them. Even with the above two allowing everything it does not work)
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside xxx.xxx.xxx.xxx 255.255.255.248
ip address inside 192.168.40.2 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpn_client_pool 192.168.40.25-192.168.40.30
pdm history enable
arp timeout 14400
global (outside) 1 interface
I had this statement missing from the previous posted config but even with the nat (inside) 0 access-list no_nat_inside it still does not work.
nat (inside) 0 access-list no_nat_inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group acl_outside_in in interface outside
access-group outbound in interface inside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.40.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community $XXXXXX$
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set 3des_strong esp-3des esp-sha-hmac
crypto dynamic-map clientmap 50 set transform-set 3des_strong
crypto map vpn 50 ipsec-isakmp dynamic clientmap
crypto map vpn client configuration address initiate
crypto map vpn client configuration address respond
crypto map vpn client authentication LOCAL
crypto map vpn interface outside
isakmp enable outside
isakmp identity address
isakmp client configuration address-pool local vpn_client_pool outside
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup remote-vpn split-tunnel split_tunnel
vpngroup remote-vpn idle-time 10800
vpngroup remote-vpn password ANOTHER PASSWORD
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 192.168.40.0 255.255.255.0 inside
ssh timeout 30
console timeout 60
dhcpd address 192.168.40.100-192.168.40.131 inside
dhcpd dns xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd enable inside
username AUSER password PASSWORD privilege 15
terminal width 80
****************** End of config
I have been searching docs and other people's postings trying to obtain the info to make this work. It appears pretty much boiler plate but I believe my problem is in the natting. I am using a range in the internal network for the VPN pool and I have tried switching this to other networks but this has not helped. Unfortunately I have been unable to get the PDM to work and I believe this is a PC config thing and I did not want to waste the time on it. I read a post where a person using the PDM interface with the same problem (not being able to access the internal network) was able to go to a section in the VPN wizard and set the Address Exeption Translation. They said they originally set the VPN subnet when they did not have to. Many of the other blogs I read also stated that if the natting is not proper for the VPN pool- that it will not work but I am confused by the examples. They show as I do the complete range for an access-list called no_nat_inside but I believe it should only have the VPN pool IP range and not the entire network since the others do require natting - not sure if my thought process is correct here. Any help will be greatly apprecaited. Also this morning I just tried a boiler plate example from CISCO and it also did not do what I need for it to do. And I also connect a PC to obtain an IP to see if I can see it - no good. The PC can ping the PIX and viceversa but no one can ping the remote PC that connects via the CISCO Remote VPN client even though it receive an address from the vpnpool. Also include LAN is checked off on the client. This was mentioned in anther post.
Thank you once again.

Hi,
PIX501 is a very very old Cisco firewall that has not been sold for a long time to my understanding. It also doesnt support even close to new software levels.
If you wanted to replace the PIX501 the corresponding model nowadays would be ASA5505 which is the smallest Cisco ASA firewall with 8 switch port module. There is already a new ASA5500-X Series (while ASA5505 is of the original ASA 5500 Series) but they have not yet introduced a replacing model for this model nor have they stopped selling this unit. I have a couple of them at home. Though naturally they are more expensive than your usual consumer firewalls.
But if you wanted to replace your PIX firewall then I would probably suggest ASA5505. Naturally you could get some other models too but the cost naturally rises even more. I am not sure at what price these are sold as used.
I used some PIX501 firewalls at the start of my career but have not used them in ages since ASA5505 is pretty much the firewall model we use when we need a firewall/vpn device for a smaller network/branch site.
Here is a PDF of the original ASA5500 Series.
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80285492.pdf
Here is a PDF of the new ASA5500-X Series
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
I am afraid that its very hard for me atleast to troubleshoot this especially since I have not seen any outputs yet. Also the very old CLI and lack of GUI (?) make it harder to see what the problem is.
Could you provide the requested outputs?
From the PIX after connection test
show crypto ipsec sa
Screen captures of the VPN Client routing and statistics sections.
- Jouni

Needed details on Workflow context ?

Under Workflow context in Sharepoint designer i want to know behaviour of below listed item.
Associate Name : ?
Associate Manual Start:  ?
Associate Manual Start Required Permission:  ?
Associate Start on Item change:  ?
Associate Start on Item Creation:  ?
Associate Start to Approve Major version:  ?
Associator:  ?
Current item URL:  ?
Current site URL:  ?
Current User:  ?
Date and time last RUN:  ?
Date and Time Started:  ?
Initiator:  ?
Instance ID:  ?
Item Name:  ?
Workflow status URL:  ?
Thanks
venkateshrajan

http://social.technet.microsoft.com/Forums/en-US/5a5d64bc-3583-4dca-9a66-a661491db82c/getting-list-detailsof-the-associated-list-with-workflow-in-custom-workflow?forum=sharepointdevelopmentprevious
http://stackoverflow.com/questions/1243736/how-to-get-the-context-item-in-workflow-activity-sharepoint
The answer to this is a couple steps:
Add the properties to your Custom Activity .cs
Link the properties in your .actions file (so SPD knows how to map to your properties)
Use the properties in your code
STEP 1: Here is the code for the properties (my class is named GetEmails which you will need to rename to be your class):
public static DependencyProperty __ContextProperty = System.Workflow.ComponentModel.DependencyProperty.Register("__Context", typeof(WorkflowContext), typeof(GetEmails));
[Description("The site context")]
[Category("User")]
[Browsable(true)]
[DesignerSerializationVisibility(DesignerSerializationVisibility.Visible)]
public WorkflowContext __Context
get
return ((WorkflowContext)(base.GetValue(GetEmails.__ContextProperty)));
set
base.SetValue(GetEmails.__ContextProperty, value);
public static DependencyProperty __ListIdProperty = System.Workflow.ComponentModel.DependencyProperty.Register("__ListId", typeof(string), typeof(GetEmails));
[ValidationOption(ValidationOption.Required)]
public string __ListId
get
return ((string)(base.GetValue(GetEmails.__ListIdProperty)));
set
base.SetValue(GetEmails.__ListIdProperty, value);
public static DependencyProperty __ListItemProperty = System.Workflow.ComponentModel.DependencyProperty.Register("__ListItem", typeof(int), typeof(GetEmails));
[ValidationOption(ValidationOption.Required)]
public int __ListItem
get
return ((int)(base.GetValue(GetEmails.__ListItemProperty)));
set
base.SetValue(GetEmails.__ListItemProperty, value);
public static DependencyProperty __ActivationPropertiesProperty = DependencyProperty.Register("__ActivationProperties", typeof(Microsoft.SharePoint.Workflow.SPWorkflowActivationProperties), typeof(GetEmails));
[ValidationOption(ValidationOption.Required)]
public Microsoft.SharePoint.Workflow.SPWorkflowActivationProperties __ActivationProperties
get
return (Microsoft.SharePoint.Workflow.SPWorkflowActivationProperties)base.GetValue(GetEmails.__ActivationPropertiesProperty);
set
base.SetValue(GetEmails.__ActivationPropertiesProperty, value);
STEP 2: Then in your .actions file add to your block the mappings for those properties (note the entries for __ListID, __ListItem, __Context, and __ActivationProperties):
<Action Name="[DESCRIPTION OF YOUR ACTION]"
ClassName="[Your.Namespace.Goes.Here].GetEmails"
Assembly="[yourDLLName], Version=1.0.0.0, Culture=neutral, PublicKeyToken=0bfc6fa4c4aa913b"
AppliesTo="all"
Category="[Your Category Goes Here]">
<RuleDesigner Sentence="[blah blah blah]">
<FieldBind Field="PeopleFieldName" Text="people field" Id="1"/>
<FieldBind Field="Output" Text="emailAddress" Id="2" DesignerType="parameterNames" />
</RuleDesigner>
<Parameters>
<Parameter Name="__Context" Type="Microsoft.SharePoint.WorkflowActions.WorkflowContext" Direction="In" />
<Parameter Name="__ListId" Type="System.String, mscorlib" Direction="In" />
<Parameter Name="__ListItem" Type="System.Int32, mscorlib" Direction="In" />
<Parameter Name="PeopleFieldName" Type="System.String, mscorlib" Direction="In" />
<Parameter Name="Output" Type="System.String, mscorlib" Direction="Out" />
<Parameter Name="__ActivationProperties" Type="Microsoft.SharePoint.Workflow.SPWorkflowActivationProperties, Microsoft.SharePoint" Direction="Out" />
</Parameters>
</Action>
STEP 3: Here is an example execute function:
protected override ActivityExecutionStatus Execute(ActivityExecutionContext provider)
Output = string.Empty;
try
SPWeb web = __Context.Web;
// get all of the information we currently have about the item
// that this workflow is running on
Guid listGuid = new Guid(__ListId);
SPList myList = web.Lists[listGuid];
SPListItem myItem = myList.GetItemById(__ListItem);
catch (Exception e)
return ActivityExecutionStatus.Closed;
If this helped you resolve your issue, please mark it Answered

Problem about get the workflow context

There are 2 servers.
One is Weblogic server (server1), deployed a fusion web project on it.
Another is BPM server (server2), deployed the bpm process on it.
On the fusion web project, we use API to get the tasks. But we encountered a problem about get the workflow context.
There are 2 method to get the workflow context.
1. getTaskQueryService().authenticate(userId, password, null, null), this method need to pass in useId and password, we can get the user form request but can't get
password.
2. getTaskQueryService().createContext(request), we pass the request on server1, but can't get the context on server2, exception thrown.
Appreciate if you can give some help.

javax.el.ELException: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[jcooper, ERole]
     at javax.el.BeanELResolver.getValue(BeanELResolver.java:266)
     at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:173)
     at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:200)
     at com.sun.el.parser.AstValue.getValue(Unknown Source)
     at com.sun.el.ValueExpressionImpl.getValue(Unknown Source)
     Truncated. see log file for complete stacktrace
Exception thrown when createContext()

Is there an IDES system of "Access Enforcer" internally at SAP?

Hi expert,
Is there an IDES system of "Access Enforcer" in SAP so that we can access it internally from SAP network?
Thanks.

Very well.
<b>This information is only applicable within SAP's corporate network.</b>
Access Controls 5.1 - compliant user provisioning (Virsa Access Enforcer for SAP)
http://idphl930.phl.sap.corp:50000/AE/index.jsp
ERP Backend: Application Server: idphl932.phl.sap.corp, System Number: 50, system ID: G13, Client: 870
Updated Demo Scripts are located here:
Rsophltrndb\FEPublic\Public\GRC_Workshop\DemoScripts

Nternal workflow error. An internal workflow error occurred.

Hi all
I am getting this exception after approving request by approver
which is actually failing to approve the task
ORABPEL-30023
Internal workflow error.
An internal workflow error occurred.
Refer to the log file that is configured for oracle.soa.services.workflow.* for more details on this error and contact Oracle Support Services.
at oracle.bpel.services.workflow.task.impl.WorkflowUtil.createAndStoreWorkflowError(WorkflowUtil.java:3893)
at oracle.bpel.services.workflow.task.impl.TaskRulesService.executeRulesInternal(TaskRulesService.java:395)
at oracle.bpel.services.workflow.task.impl.TaskRulesService.executeRules(TaskRulesService.java:164)
at oracle.bpel.services.workflow.task.impl.TaskService.performPostActionOperationInTrans(TaskService.java:6437)
at oracle.bpel.services.workflow.task.impl.TaskService.performPostActionOperation(TaskService.java:6125)
at oracle.bpel.services.workflow.task.impl.TaskService.performPostActionOperation(TaskService.java:6096)
at oracle.bpel.services.workflow.task.impl.TaskService.performPostActionOperation(TaskService.java:6072)
at oracle.bpel.services.workflow.task.impl.TaskService.performPostActionOperation(TaskService.java:6054)
at oracle.bpel.services.workflow.task.impl.TaskService.acquireTask(TaskService.java:4623)
at oracle.bpel.services.workflow.task.impl.TaskService.acquireTask(TaskService.java:4591)
at sun.reflect.GeneratedMethodAccessor3803.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)

Thanks for posting your question. If you see a pop-up window that gives you the option to investigate this internal error, make sure you choose "investigate later", and note the location that the log file is saved to.
In case we are unable to obtain the error log file, I have some questions for you. What addons or toolkits are you using in your project? What versions are they? Are you using DAQmx and if so, what version? When you create an installer for another project do you receive the same error, or is it only this specific project? Is there anyway that you could post your project and I could attempt to reproduce the error on my machine? Any information would be helpful in troubeshooting this error, thanks!

Exchange 2010 OWA access on internal LAN login form not working as expected

hi
We have exchange 2010 sp3 installed and working. we have two sites
Site a
1 x CAS
2 X MBX
Site b
1 x cas
2x mbx
site A is the primary site we currently publish owa our through our TMG server located in the DMZ this is working as expected and carries out the forms authentication. our internal domain is company.local but our external domain is company.com
we have created split DNS so that we could use a wildcard cert and to deal with CA new rules. All URL's in Exchange are configured to use the external reference of company.com/
on the IIS server we have a redirection on the root of the site to redirect the requests through to OWA folder and we have basic Authentication enabled. on the OWA folder we have basic and windows authentication.
The problem we have is that when users try to access OWA internally we get username and password box appears once you login with this it then takes you through to the the normal login screen and you have tyo login again I'm thinking that this is the windows
authentication that is causing this but not sure?
also would be good to get an understanding as to what the Authentication, SSL and redirection setting should be set to on your CAS servers as looking at the ECP and autodiscover folder within IIS this currently has a redirect set to go to OWA surely that
cannot be right,
thanks
J

Hi
you are correct, the immediate concern is the double login to owa i do however want to also know what the settings/configuration for Authentication redirection and SSL should be set to on all virtual directories.
we do not have any additional OWA virtual directories just the default
These are the current live servers
Identity                      : ACAS01\owa (Default Web Site)
Url                           : {}
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://email.Company.com.com/owa
ExternalUrl                   : https://email.Company.com/owa
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Fba}
Identity                      : BCAS01\owa (Default Web Site)
Url                           : {}
Exchange2003Url               : https://www.Companyt.co.uk/
FailbackUrl                   :
InternalUrl                   : https://webmail.Company.com/owa
ExternalUrl                   : https://webmail.Company.com/owa
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Fba}
These are the new servers which i have just installed
Identity                     : CAS05\owa (Default Web Site)
Url                           : {}
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://webmail.Company.com/owa
ExternalUrl                   : https://webmail.Company.com/owa
InternalAuthenticationMethods : {Basic, Fba, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Fba}
Identity                      : CAS06\owa (Default Web Site)
Url                           : {}
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://webmail.Company.com/owa
ExternalUrl                   : https://webmail.Company.com/owa
InternalAuthenticationMethods : {Basic, Fba, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Fba}
Identity                      : CAS04\owa (Default Web Site)
Url                           : {}
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://webmail.Company.com/owa
ExternalUrl                   : https://webmail.Company.com/owa
InternalAuthenticationMethods : {Basic, Fba, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Fba}
I have noticed that FBA is set on the new servers does this need turning off and if so is this on IIS or in Exchange?
the link that you have provided talks about creating new Vdir for TMG we are looking at removing TMG and replacing it with KEMP load balancers would we still need to have two Vdir to make FBA work internally and externally
to make a new vdir do you need a new IP address? and what are the steps required in Exchange and IIS to get this working.
thanks
Jason

Accessing the internal memory via USB

I know that you can plug in an 8520 via a USB cable and access the SD card, however I need to access the internal memory. How can I do this without installing the full Desktop manager software?

Install BBSAK to your PC and use it
"Cats may taste like chicken, but they have more bones than rabbits."
Blackberry 101
Tips & Tricks
Videos to learn from on youtube

Portal internal workflow - don't have Workflow Settings menu item

Hi All,
I am a new to webcenter portal and got a problem when trying to configure internal workflow.
According to the oracle document, "http://docs.oracle.com/cd/E29542_01/doc.1111/e27603/cont_workflow.htm#WCPAA11225"
it should have an "Workflow Settings" menu item in the folder details page.
But my webcenter portal don't have it.
attached is my screenshot.
Any comments, suggestion or information are welcome.
thanks
Bright

I've got an exception from UCM log. but I can't reproduce it anymore
<Jan 8, 2015 3:29:07 PM GMT-08:00> <Error> <oracle.ucm.idccs> <UCM-CS-060003> <Event generated by user 'weblogic' at host 'CIS'.>
<Jan 8, 2015 3:29:07 PM GMT-08:00> <Error> <oracle.ucm.idccs> <UCM-CS-000001> <general exception
intradoc.common.ServiceException: !csWfRetrieveInfoError,app1WCSingleApprover!csWfDoesntExist,app1WCSingleApprover
        at intradoc.server.ServiceRequestImplementor.buildServiceException(ServiceRequestImplementor.java:2173)
        at intradoc.server.Service.buildServiceException(Service.java:2402)
        at intradoc.server.Service.createServiceExceptionEx(Service.java:2396)
        at intradoc.server.ServiceRequestImplementor.testAndCreateServiceException(ServiceRequestImplementor.java:2068)
        at intradoc.server.Service.testAndCreateServiceException(Service.java:2361)
        at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1728)
        at intradoc.server.Service.doAction(Service.java:564)
        at intradoc.server.ServiceRequestImplementor.doActions(ServiceRequestImplementor.java:1483)
        at intradoc.server.Service.doActions(Service.java:559)
        at intradoc.server.ServiceRequestImplementor.executeActions(ServiceRequestImplementor.java:1415)
        at intradoc.server.Service.executeActions(Service.java:545)
        at intradoc.server.ServiceRequestImplementor.doRequest(ServiceRequestImplementor.java:751)
        at intradoc.server.Service.doRequest(Service.java:1974)
        at intradoc.server.ServiceManager.processCommand(ServiceManager.java:486)
        at intradoc.server.IdcServerThread.processRequest(IdcServerThread.java:265)
        at intradoc.server.IdcServerThread.run(IdcServerThread.java:160)
        at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:545)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

Root cause of error " Access denied. You do not have permission to perform this action or access this resource" - workflow - SharePoint 2013

Good evening, technet community
I hope you are doing well.
When configuring my SharePoint workflow, I encounter the problem below:
Problem Description:
Let's say my domain is: test.com, my group user is: test\group , my user is: test\user1
Except an admin account with full control at both "Web Application" and "Site Collection", all others account all have problem when creating a list item. After creating a list item, the workflow status is "cancelled" immediately
with the following message:
RequestorId: 262a35e4-99f4-40f0-929b-5d04b415f147. Details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["10"],"SPRequestGuid":["262a35e4-99f4-40f0-929b-5d04b415f147"],"request-id":["262a35e4-99f4-40f0-929b-5d04b415f147"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Thu, 06 Nov 2014 12:14:28 GMT"],"Server":["Microsoft-IIS\/7.5"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
{"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have permission to perform
this action or access this resource."}}} at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor,
BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)
- The workflow is still fail even I assign "full control" to my users group "test\group" – at Site Collection level.
Surprisingly, I have successfully found a solution for this error message. However, I still have some points that I do not clearly understand. Let's start with my solution first.
Solution:
*** i. Assign permission policy at Web Application level – Central Admin site ***
1. Central Administration ==> Application management
==> Manage Web application
2. Go to "permission policy", then create a new permission level. This permission level contains all "edit item" permission.
3. Select "user policy", then I assign it directly to my user account: test\user1.
*** ii. Assign "edit item" permission at Site Collection level ***
1. Site Setting ==> Site permission
2. Assign "Edit" permission to my test\group.
(Actually I removed all permissions of my user group at Site Collection level. It seem my group has inherited permission from Web Application level, is that correct? )
*** iii. Create a new list item and workflow runs ……. ***
==> My question is:
1. Why I cannot assign permission to my users group - "test\group" -
at "Web Application" level? Instead I have to assign permission policy for each users, one by one?
2. Could you please let me know how to collect full detail error message of workflow status?
Thank you very much! Have a nice weekend.

Thank you for your very detail response.
Point 1: Yes my 2 service: user profile & profile sync service are running. I performed "full synchronization" as well. Actually i've tried 3 another action plans before coming up with the solution i posted:
*** Actions completed ***
1. Activate the feature: workflow can use app permissions.
Site actions > Site Settings > Site features >activate the feature below:
Workflows can use app permissions
2.
Refresh trusted security token services metadata feed
Get-SPTimerJob
"RefreshMetadataFeed"
| Start-SPTimerJob
- then restart the machine.
3. Start full user profile synchronization.
Point 2:
- Yes my user had Edit permission at workflow task list + list affected by workflow.
I have just remove all permissions of my user at "Site Collection" level. However, when i show my user permissions at my workflow task list and my users still have "Edit" Permission ( assigned at Web Application level. These permissions
still exist even after my workflow task list stop inheriting permission).
==> the problems probably belongs to "permission" at "Site Collection level". It seems "permission level at my Site Collection does not work". All users accounts are also suffer from the same issues except farm admin account
( which has full control at Web Application level).
I would appreciate if your guys can guide me how to make "permission" at my "Site Collection level" work again?
Thank you very much.

Configuring access to Internal server from external source for public users ( DNS HTTP HTTPS FTP )

Hello there :)
i,ve faced a problem as the following :
i,ve internal network ( domain network ) with standlone TMG i want TMG to Allow public users to access
1- web server with load balance on port 5555
2- mail server with HTTPS for OWA
3- DNS to make public users make query to solve Domain name
4- FTP with load balance on port 5555
please anyone can help me with configuring this n make external users access the following mentioned above

Hi,
You could get start from the following blogs.
Microsoft Forefront TMG – Webserver Load Balancing
http://www.isaserver.org/articles-tutorials/configuration-general/Microsoft-Forefront-TMG-Webserver-Load-Balancing.html
Enabling Forms-based Authentication for External and Internal OWA 2010 Users in Exchange 2010 published using Forefront TMG 2010
http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/enabling-forms-based-authentication-external-internal-owa-2010-users-exchange-2010-published-using-forefront-tmg-2010-part2.html
TMG Firewall Name Resolution
http://www.isaserver.org/articles-tutorials/installation-planning/TMG-Firewall-Name-Resolution-Part3.html
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

ASA Remote Access VPN: internal LAN cannot connect to connected VPN clients

Hi community,
I configured IPSec remote Access VPN in ASA, and remote client use Cisco VPN client to connect to the HQ. The VPN is working now, VPN clients can connect to Servers inside and IT's subnet, but from my PC or Servers inside LAN cannot ping or initial a RDP to connected VPN clients. Below is my configuration:
object-group network RemoteVPN_LocalNet
network-object 172.29.168.0 255.255.255.0
network-object 172.29.169.0 255.255.255.0
network-object 172.29.173.0 255.255.255.128
network-object 172.29.172.0 255.255.255.0
access-list Split_Tunnel remark The Corporation network behind ASA
access-list Split_Tunnel extended permit ip object-group RemoteVPN_LocalNet 10.88.61.0 255.255.255.0
ip local pool remotevpnpool 10.88.61.10-10.88.61.15 mask 255.255.255.0
nat (inside,outside) source static Allow_Go_Internet Allow_Go_Internet destination static remotevpnpool remotevpnpool
crypto ipsec ikev1 transform-set myset esp-aes esp-sha-hmac
crypto dynamic-map dyn1 1 set ikev1 transform-set myset
crypto map mymap 65000 ipsec-isakmp dynamic dyn1
crypto map mymap interface outside
tunnel-group remotevpngroup type remote-access
tunnel-group remotevpngroup general-attributes
address-pool remotevpnpool
authentication-server-group MS_LDAP LOCAL
default-group-policy Split_Tunnel_Policy
I don't know what I miss in order to have internal LANs initial connection to connected vpn clients. Please guide me.
Thanks in advanced.

Hi tranminhc,
Step 1: Create an object.
object network vpn_clients
subnet 10.88.61.0 mask 255.255.255.0
Step 2: Create a standard ACL.
access-list my-split standard permit ip object RemoteVPN_LocalNet
Step 3: Remove this line, because I am not sure what "Allow_Go_Internet" included for nat-exemption.
no nat (inside,outside) source static Allow_Go_Internet Allow_Go_Internet destination static remotevpnpool remotevpnpool
Step 4: Create new nat exemption.
nat (inside,outside) source static RemoteVPN_LocalNet RemoteVPN_LocalNet destination static vpn_clients vpn_clients
Step 5: Apply ACL on the tunnel.
group-policy Split_Tunnel_Policy attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list value my-split
Step 6:
I assume you have a default route on your inside L3 switch point back to ASA's inside address. If you don't have one.
Please add a default or add static route as shown below.
route 10.88.61.0 mask 255.255.255.0 xxx.xxx.xxx.xxx
xxx.xxx.xxx.xxx = equal to ASA's inside interface address.
Hope this helps.
Thanks
Rizwan Rafeek

Access to internal workflow context is denied.

Similar Messages

Maybe you are looking for