• State Verified Answer
  • Replies 2 replies
  • Subscribers 94 subscribers
  • Views 193 views
  • Users 0 members are here
Options
Related

Frozen proces VI_Attestation_AttestationCase_AutoRemoveMemberships

Niels de Groot
1 day ago

I have a strange case already made a support call a few weeks ago, but there is no progress on it so far...

So this proces ends up in a frozen state I think the issue stared since upgrading from 9.2 to 9.2.1: VI_Attestation_AttestationCase_AutoRemoveMemberships
(Automatically removes memberships and assignments after negative attestation case decision)

The error:

[81*****222] Error running script 'VI_AttestationCase_RemoveMembership'.
[81*****457] Error saving PersonWantsOrg TECH - OCM - Contractmanager - Doe, John - 1/24/2*****23 1:25:51 PM
[81*****3*****6] Error running 'OnSaving' in logic module 'QER.Customizer.PersonWantsOrg'.
[81**********29] Object of type PwOState does not exist in database or you do not have the relevant viewing permissions.

From the logs I can see that there is rollback:

select * from (select UID_PwOState from PwOState where ((PwOState.Ident_PwOState = N'Denied because I am not the owner.') or (PwOState.UID_PwOState = 'Denied because I am not the owner.'))) as x ORDER BY (select null)
2024-09-30 17:20:47.0042 DEBUG (ObjectLog 9137fddc-1eff-495f-a9bf-1fab68ba17a8 Job 3ea1b065-f8b2-41f1-86b9-97688a6b3d94) : Collection: Run statement and fetch data done in 3ms.
2024-09-30 17:20:47.0042 DEBUG (ObjectLog 9137fddc-1eff-495f-a9bf-1fab68ba17a8 Job 3ea1b065-f8b2-41f1-86b9-97688a6b3d94) : Collection.Count: 0
2024-09-30 17:20:47.0042 DEBUG (ObjectLog 9137fddc-1eff-495f-a9bf-1fab68ba17a8 Job 3ea1b065-f8b2-41f1-86b9-97688a6b3d94) : Getting collection done in 6ms.
2024-09-30 17:20:47.0042 DEBUG (ObjectLog 9137fddc-1eff-495f-a9bf-1fab68ba17a8 Job 3ea1b065-f8b2-41f1-86b9-97688a6b3d94) : Rollback transaction in read/write entity
2024-09-30 17:20:47.0192 DEBUG (ObjectLog 9137fddc-1eff-495f-a9bf-1fab68ba17a8 Job 3ea1b065-f8b2-41f1-86b9-97688a6b3d94) : Session: Rollback Transaction

Now it looks like the QER.Customizer.PersonWantsOrg rolls back because it cannot find an entry in the table PWOState with the Ident_PwOState = 'Denied because I am not the owner.'
My question is should this entry be in the PWOState table, because I only see one entry in this table: Ident_PwOState = 'Assigned by self-service'?

Regards,
Niels

Parents
  • +1 1 day ago

    My best guess.

    The bug is triggered by the combination of

    • specifying a predefined reason
    • having the configuration parameter QER\Attestation\AutoRemovalScope\PWOMethodName set to "Abort"

    If that is the case, ask support for an HF for #465520.

  • 0 2 hours ago in reply to Markus Weiss-Ehlers

    Just to let everyone know:
    After applying the hotfix for bug 465520 a new error appeared. 

    (2024-10-01 15:42:37.967) [810222] Error running script 'VI_AttestationCase_RemoveMembership'.
[810391] Error applying changes to database.
[810339] Could not insert object into Approval sequences because object in Standard reasons referenced by the property Standard reason does not exist.
[810023] Error running statement: insert into PWODecisionHistory (DateHead, DecisionType, IsDecisionBySystem, OrderState, ReasonHead, UID_ITShopOrgFinal, UID_PersonWantsOrg, UID_PWODecisionHistory, UID_QERJustification, UID_ShoppingCartOrder, xdateinserted, xuserinserted, xdateupdated, xuserupdated, xobjectkey) values ('2024-10-01 15:42:27.060', N'Abort', 1, N'Aborted', N'Attestation denied: Denied because I am not the owner.', '2062E9A3-0734-4FDD-A8DA-456264F5DB41', 'b7c7042a-6f93-4d40-8a44-68b43732fcc4', '815cb787-ddfb-4560-9202-591ddef5b789', 'Denied because I am not the owner.', 'f2faba89-7f6d-4557-9f22-bd6a3efb3b64', GetUTCDate(), N'sa', GetUTCDate(), N'sa', '<Key><T>PWODecisionHistory</T><P>815cb787-ddfb-4560-9202-591ddef5b789</P></Key>')
[810137] Could not insert object into PWODecisionHistory because related object in QERJustification does not exist (rule QER_2576).

    In the error you can see the logic is trying to insert the value 'Denied because I am not the owner.' in the field 'UID_QERJustification' so looks like another bug?

    Found this post and also requested hotfix for bug 465294
    https://www.oneidentity.com/community/identity-manager/f/forum/37817/attestation---approval-process-throws-an-error/89265

Reply
  • 0 2 hours ago in reply to Markus Weiss-Ehlers

    Just to let everyone know:
    After applying the hotfix for bug 465520 a new error appeared. 

    (2024-10-01 15:42:37.967) [810222] Error running script 'VI_AttestationCase_RemoveMembership'.
[810391] Error applying changes to database.
[810339] Could not insert object into Approval sequences because object in Standard reasons referenced by the property Standard reason does not exist.
[810023] Error running statement: insert into PWODecisionHistory (DateHead, DecisionType, IsDecisionBySystem, OrderState, ReasonHead, UID_ITShopOrgFinal, UID_PersonWantsOrg, UID_PWODecisionHistory, UID_QERJustification, UID_ShoppingCartOrder, xdateinserted, xuserinserted, xdateupdated, xuserupdated, xobjectkey) values ('2024-10-01 15:42:27.060', N'Abort', 1, N'Aborted', N'Attestation denied: Denied because I am not the owner.', '2062E9A3-0734-4FDD-A8DA-456264F5DB41', 'b7c7042a-6f93-4d40-8a44-68b43732fcc4', '815cb787-ddfb-4560-9202-591ddef5b789', 'Denied because I am not the owner.', 'f2faba89-7f6d-4557-9f22-bd6a3efb3b64', GetUTCDate(), N'sa', GetUTCDate(), N'sa', '<Key><T>PWODecisionHistory</T><P>815cb787-ddfb-4560-9202-591ddef5b789</P></Key>')
[810137] Could not insert object into PWODecisionHistory because related object in QERJustification does not exist (rule QER_2576).

    In the error you can see the logic is trying to insert the value 'Denied because I am not the owner.' in the field 'UID_QERJustification' so looks like another bug?

    Found this post and also requested hotfix for bug 465294
    https://www.oneidentity.com/community/identity-manager/f/forum/37817/attestation---approval-process-throws-an-error/89265

Children
No Data