Unsolved
This post is more than 5 years old
3 Posts
0
3095
User with .PEA file with full access getting "Use of this operation is restricted"
Hello,
I have provided one of our application teams with a .PEA file to access a pool that was set up for them. The profile created for the pool has full access rights to it, and it passes in JCenteraVerify with Read/Write/Delete access all green.
However, when the user attemps to use this .PEA file within his application, he is getting an access denied error when attempting to read back Clips. He is able to write without issue. The error he receives is:
Address of cluster[IPADDRESS?C:\PEAFILE.pea]: Connecting to Centera cluster(IPADDRESS)
clip ID to retrieve: ERDLN6UONRH8Ae6LBO88F5JJVTTG4157TMCVL20N8QE2UIKI8C3DB
Attempting to load C-Clip with clip ID ERDLN6UONRH8Ae6LBO88F5JJVTTG4157TMCVL20N8QE2UIKI8C3DB ... Centera SDK Error: The use of this operation is restricted (transid='albnwsisqpopal/9/READ_CLIP')(-10204)
"albnwsisqpopal" in this case is the user's laptop name.
srbhandary
27 Posts
0
August 19th, 2010 12:00
Hello,
The error is the result of a read on a clip that has not yet been migrated to the default pool. A clip that is not associated with any pool will be tagged as pool = in the node databases. Therefore, the Clip_exists call cannot find the clip in any pool, and the subsequent read operation will fail. This can happen with any Centera SDK integrated application that performs a Clip_exists SDK call.
To resolve the issue, please follow the Primus - emc118842 accessing http://powerlink.emc.com
Regards
S.R.Bhandary
SGB01
3 Posts
0
August 19th, 2010 12:00
Thank you very much for your response. However, I am confused.. I am not writing to the default pool, this is a new/existing pool (but not default).
Second, this is software version 4.1.
Thirdly, the anonymous profile is disabled on our Centera. We already have existing production pools and profiles which are working.
srbhandary
27 Posts
0
August 19th, 2010 13:00
If a profile with a PEA file was used to write the clips the same PEA file should be used to retrieve the clips.
srbhandary
27 Posts
0
August 19th, 2010 13:00
Hello,
This happens if the clip is not associated with any pool when it is writtent to the Centera. And when the any Centera SDK integrated application that performs a Clip_exists SDK call cannot find the clip in any pool, and the subsequent read operation will fail with the SDK error - 10204
Make sure that the right profile is being used and profile used for the operation has the right capabilities for the operation. Make sure the Cluster Mask and/or Virtual Pool Masks grant the capability in question.
Check the pool attributes and be sure that the "e" bit (Exists Bit) is set on the pool profile, the mask, and the access profile.
From Centera CLI run the following command:
Please substitute the pool name you use (abcdef).
Config# show pool detail abcdef
Pool Mask: rdqeDcw (The "e" bit" is set on the Pool Mask, Clip_Exists is allowed on the default pool)
Cluster Mask: rdqe-cw-m- (The "e" bit" is set on the Pool Mask, Clip_Exists is allowed on the cluster)
Profile Name Granted Effective Monitor Cap Enabled Home Pool
profile_abcd rdqe-cw rdqe-cwm yes yes yes (The profile_abcd profile is enable and is allowed to do a Clip_Exists)
if you do not find the e bit, modify the mask to enable the e bit. Assistance to modify the bits can be found on global services online help documentation.
SGB01
3 Posts
0
August 19th, 2010 13:00
The Pool mask and the Cluster mask already have the "e" bit set.
Pool Mask: rdqeDcwh
Cluster Mask: rdqe-cw--h
Profile Name Granted Effective Monitor Cap Enabled Home Pool
-------------------------------------------------------------------------------
FileNetUAT rdqeDcwh rdqe-cwh yes yes yes
FileNetUATro r-qe---- r-qe---- no yes yes
-------------------------------------------------------------------------------
EMCDennis
124 Posts
0
August 19th, 2010 13:00
You will get this error if you are attempting to read a clip that you do not have rights to read.
Its possible that this clip is a member of a pool that the profile does not have granted rights to.
Unfortunately, there is no simple way to determine what pool a specific clip belongs to. You could try granting rights to various pools (1 at a time) to the profile to help determine this.
EMC Centera Support can look at the clip XML content and tell you what profile wrote it and what pool it resides in.