IBM Support

CWSIA0069E: The user does not have authorization to carry out this
operation

Troubleshooting


Problem

Your message producer is not able to connect to the JMS destination in your Service Integration Bus for WebSphere Application Server and throws a CWSIA0069E error.

Symptom

The following errors are thrown in the JVM logs (SystemOut.log):

javax.jms.JMSSecurityException: CWSIA0006E: The authorization for the supplied user name was not successful.

Caused by: javax.jms.JMSSecurityException: CWSIA0069E: The user does not
have authorization to carry out this operation. See the linked exception
for details.
at
com.ibm.ws.sib.api.jms.impl.JmsMsgProducerImpl.<init>(JmsMsgProducerImpl.java:381) at
com.ibm.ws.sib.api.jms.impl.JmsSessionImpl.instantiateProducer(JmsSessionImpl.java:1442) at
com.ibm.ws.sib.api.jms.impl.JmsSessionImpl.createProducer(JmsSessionImpl.java:866) at
gov.fbi.sentinel.search.manager.SearchIndexJMSQueuingStrategy.publishInBulkToQueue(SearchIndexJMSQueuingStrategy.java:136)
... 134 more
Caused by: com.ibm.wsspi.sib.core.exception.SINotAuthorizedException:
CWSIK0018E: Send access to destination SearchQueue was denied for user with subject .
at
com.ibm.ws.sib.comms.common.CommsByteBuffer.parseSingleException(CommsBy teBuffer.java:1786)

Cause

CWSIA0069E indicates that the application does not have authorization to create a producer for the requested JMS destination.

The primary reason for an authorization failure on a destination is that the user is
not in the relevant role for the destination being accessed.

Resolving The Problem

Make sure that user has the proper authorization to access that destination as per this table.

Access Authorizations
Destination type Access roles
queue sender, receiver, browser, creator
port sender, receiver, browser, creator
webService sender, receiver, browser, creator
topicSpace sender, receiver
foreignDestination sender
alias sender, receiver, browser


After this you have to restart the messaging engine for these changes to take effect. Some times you may have to sync the servers in case of clusters to push this information to all members of the clusters. See the following sections of the Information Center for details on working with user roles in the different versions of WebSphere Application Server:

WAS V9.0: Administering destination roles

WAS V8.5.5: Administering destination roles

WAS V8.0: Administering destination roles

WAS V7.0: Administering destination roles

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Service Integration Technology","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"9.0;8.5.5;8.0;7.0","Edition":"Base;Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Problem Determination","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"","label":"HP Itanium"},{"code":"PF016","label":"Linux"},{"code":"","label":"Linux on Power"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"","label":"UNIX"}],"Version":"7.5;7.1","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SS7J6S","label":"WebSphere Enterprise Service Bus"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Admin","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"}],"Version":"","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}},{"Product":{"code":"SSFNNX","label":"WebSphere Enterprise Service Bus Registry Edition"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSQH9M","label":"WebSphere Process Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Product Synonym

WebSphere Application Server WAS SIB SIBUS SI BUS

Document Information

Modified date:
15 June 2018

UID

swg21624564