Question

FME Server 2020.0 requires manually fix API Token Permissions after restoring configuration?

  • 14 March 2020
  • 8 replies
  • 19 views
takashi
Rank
Userlevel 2
Badge +17

Hello,

I upgraded FME Server from 2019.2 to 2020.0, and restored the configuration by importing the backup file which has been downloaded before uninstalling the previous version.

Some of existing workspaces are run via API (request from a web page) and access a PostgreSQL database to read features with a FeatureReader, execute a SQL query with a SQLExecutor and so on.

What I observed is, after upgrading to 2020.0, the workspaces failed to access the PostgreSQL database and logged this error message.

FME Server error: `FME Server error: `Unauthorized request by user due to lack of proper permissions.'

I was able to resolve the failure by manually adding access permission for the database connection to the API token, but it's a bit troublesome if you need to check and fix permissions of every Token whenever upgrading FME Server.

I upgraded the FME Server several times before (FME 2019.0 -> 2019.1 -> 2019.2), but I didn't need to modify permissions of the API token.

Is it an intentional change in FME 2020?

8 replies

warrendev
Rank
Badge +16

I had the same issues when I installed FME Server 2020.0.

steveatsafe
Rank
Badge +11

We are investigating this. Thank you for posting.

SteveatSafe
jiriteach
Badge

I am experiencing this same issue with 2020 but with Server Apps - where a workspace needs to be run anonymously for a data upload task. The upload task needs to access a web connection which is why its failing with "Unauthorized request by user due to lack of proper permissions".

Is there any workaround for this in my case? Since its executing anonymously so how do I add permissions?

If I execute the workbench from the admin interface - it works OK.

Thanks

takashi
Rank
Userlevel 2
Badge +17

I am experiencing this same issue with 2020 but with Server Apps - where a workspace needs to be run anonymously for a data upload task. The upload task needs to access a web connection which is why its failing with "Unauthorized request by user due to lack of proper permissions".

Is there any workaround for this in my case? Since its executing anonymously so how do I add permissions?

If I execute the workbench from the admin interface - it works OK.

Thanks

Hi @jiriteach, try manually setting the permission to access the Web Connection for the API Token of the Server Apps. You can modify permissions of API Token for FME Server App via the Token Management page in FME Server Web UI (log in with admin user or the owner of the Server Apps).

See here to learn more: Managing Security Tokens

jiriteach
Badge

Hi @jiriteach, try manually setting the permission to access the Web Connection for the API Token of the Server Apps. You can modify permissions of API Token for FME Server App via the Token Management page in FME Server Web UI (log in with admin user or the owner of the Server Apps).

See here to learn more: Managing Security Tokens

Perfect - Thanks. Provided the permission and it works. Thanks for the pointer.

H
Badge +2

Hi @takashi, @jiriteach and @warrengis,

Thank you for reporting this issue, after some investigation it looks like this was an intentional change when upgrading to 2020 or newer from any prior version to apply some security improvements we implemented.

I have now created an article to cover this and will also be filing an issue with our documentation team to ensure this requirement is clearly indicated, and also our FME Server Development team to see if we can provide additional logging to make this step clear to the Administrator as well.

 

 

I am sorry for the inconvenience this may have caused, the good news is that the requirement to manually fix these token/user permissions is a one off and will not be required again going forwards in later upgrades.
zander
Rank
Badge +1

I am experiencing this same issue with 2020 but with Server Apps - where a workspace needs to be run anonymously for a data upload task. The upload task needs to access a web connection which is why its failing with "Unauthorized request by user due to lack of proper permissions".

Is there any workaround for this in my case? Since its executing anonymously so how do I add permissions?

If I execute the workbench from the admin interface - it works OK.

Thanks

I am having the same issue with 2020 Server Apps: Unauthorized request by user due to lack of proper permissions.'

H
Badge +2

I am having the same issue with 2020 Server Apps: Unauthorized request by user due to lack of proper permissions.'

Hi @frankzandersc,

If the workspace behind your Server App contains Web or Database Connections that are not stored as Published Parameters as Takashi suggested you will need to manually go and modify the App's Token permissions to give this access. Please see the instructions of this article under the heading 'API Token Permissions' for full instructions on how to fix this.

Reply


Community Stats

28,670
Posts
109,366
Replies
36,531
Members
Terms & ConditionsCookie settings
A product of
Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.