Support Article
Activity in maystart.xml can't be called from IAC gadget
SA-5397
Summary
User has configured IAC on PRPC 7.1.6 and is observing an error message when loading the gadget. There were SECU0003 warnings in PegaRULES-ALERTSECURITY logs, when activities 'DoClose' and 'pxMenuBarTranslator' are called. There was no exception in PegaRULES.log. Both activities has been listed in maystart.xml and the node has been configured to load the maystart.xml file and set the nodetype to web.
Error Messages
Warnings such as this one was observed in PegaRULES-ALERTSECURITY log.
2015-01-02 04:52:25,056 GMT*7*SECU0003*0*0*cd1f68ef53ddda0e4085351777918e9c*NA*NA*WC875E0CB3AAFBB8AEFB1A1988CDA8DBD*AnOperator*GCS-TestApp-Work*MyAppPortal:01.01.01*245b11eb98f50becf0d0b6c1e2b725d3*N*6*41*WebContainer : 5*TABTHREAD1*com.pega.pegarules.session.internal.mgmt.base.ThreadRunner*dev.testenv.com|192.168.3.198*Activity=pxMenuBarTranslator*Rule-Obj-Activity:ApplicationSetup*@BASECLASS DOUIACTION #20140707T065506.481 GMT Step: 32 Circum: 0*NA*NA*NA*NA*NA*NA*NA*NA*Activity 'GCS-TestApp-Work.pxMenuBarTranslator' was not allowed to run in WEB node because <it is not in the allowed activities list/it’s pyInputMayStart property is not set/it requires authentication>*
Steps to Reproduce
1. Configure IAC 7.1 on PRPC 7.1.6.
2. Configure node type as web in prconfig.xml of PRPC
3. Configure IAC to display pega login screen or createNewWork.
4. Trigger the process.
Observe that instead of processing the new work, there were errors as if the activities did not have MayStart authentication checked (or not listed in maystart.xml)
Root Cause
The root cause of this problem is a defect in Pegasystems’ code/rules. PRPC does not look in maystart.xml for those allowed activities.
Resolution
This issue is resolved through the following local change:
As described in a support article SA-4031 (you can view this from my support portal), here is the resolution:
Add the maystart activity details to the prconfig.xml file.
- Stop the system
- After updating the prconfig.xml file, the PRGenJava and PRGenClasses directories in PegaTemp should be deleted to ensure that all the activities are regenerated with the correct flag of “Allowed to run in web mode”.
- Restart the system
- Test to see if the web note is working as expect
<!-- Settings can still be put in this file. If they are, then the value in this file will override the value in the database
for this node. This is useful for settings which are specific to this node and should not be shared by multiple nodes on this
system. -->
<env name="/Authentication/RedirectGuests" value="false"/>
<!--
<env name="Identification/SystemName" value="prpc"/>
-->
<env name="initialization/SubmitObfuscatedURL" value="required"/>
<env name="authentication/UsePreAuthenticationCookie" value="true"/>
<env name="initialization/nodetype" value="web"/>
<env name="initialization/activities" value="maystart.xml"/>
<WebTestRulesList>
<Activities>
<ActivityName>Code-.Web-Start</ActivityName>
<ActivityName>Code-Security.pzGenerateLoginCacheManifest</ActivityName>
<ActivityName>Code-Security.EndSession</ActivityName>
<ActivityName>Code-Pega-Requestor.pzUpdateRequestorBrowserDetails</ActivityName>
...
... more activities here ...
...
</Activities>
</WebTestRulesList>
Published January 31, 2016 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.