Max number of rights in the CAC for a particular application?

[jeffowentn]

Does anyone know if there is a limit to the number of records in the Rights section of an application in the CAC?  I'm trying to import the rights from a tab-delimited text file that has just over 1100 records.  We are currently on Cognos 8.4.1 SP2, on Windows / MS SQL.

We continue to get an unknown error when trying to perform the import.  Unfortunately, there is not much more info.

Some of the error message we are seeing is:

epCamClientAPI                8.4.6203.0            default                 doCall    450         epCamServer_85.CamServer     -2147352567       Unexpected error               
epCamClientAPI                8.4.6203.0            default ClientRequestHandler.cpp           doCall    460         epCamServer_85.CamServer     -2147352567                Unexpected error           
epCamClientAPI                8.4.6203.0            default ClientRequestHandler.cpp           getObjectByNameBatch               132                epCamServer_85.CamServer     -2147352567       Process exception           
epCamClientAPI                8.4.6203.0            default                 doCall    450         epCamServer_85.CamServer     -2147352567       Unexpected error               
epCamClientAPI                8.4.6203.0            default CamClient.cpp   GetObjectByNameBatch              775         epCamServer_85.CamServer     -2147352567         Unexpected error           
ImportUsersHelper_85                8.4.6203.0            Helper                  ResolveFileContentsToJCECompatibleFile            460                epCamServer_85.CamServer     -2147352567       There has been an error while interrogating the namespace ''.~~~~Unexpected error             

Traditionally, we've not had problems importing rights, in the past.  We are leveraging Access Manager 7.4 for our security on the Planning side.

Any help would be greatly appreciated.

Jeff

[ericlfg]

Hey Jeff,

Can you load smaller chunks of the total 1100 rows?  Maybe try to export the rights you currently do have, and then use the Validate button to see if rights that exist in the application are no longer valid from Accman.. 

[jeffowentn]

Thanks, Eric.

So, the original rights has roughly 720 records.  The new file has roughly 1120 records.  I first attempted to cut the file in half, and the first half was loaded with "delete undefined."  That seemed to work fine.  When I tried to upload the second half with "delete undefined" unchecked, there appeared to be no change.  I did not try to reduce the import text files to smaller chunks. 

I do not receive an error during the import, but I see the above error in the epPlanningError.csv.  When the business owner attempts to import the rights, they only receive errors on any of the items that are combination of user classes in Access Manager and either Edit, Review, or View.  The Submit items go through just fine.  Any records that pertain to named users and not user classes, also have no errors.  Ultimately, nothing is loaded due to errors being present.  I've never seen this behavior before, and  I do not receive the same "errors" during the import process.

To my knowledge, nothing has changed in the DB layer, in AM, or in the application layer.  There have been changes to the elist, but that should affect items regardless of whether the import is assigning Submit, Edit, View, or Review rights.

Jeff

[ericlfg]

Hey Jeff,

How is the rights file generated? 

Try reducing the file into more chunks, as there could be a problem in that second half.  Unfortunately there isn't an easier way, but generally an issue with row(s) in the file cause what you're seeing.

[jeffowentn]

Eric,

I can split this up into smaller chunks, but the errors are happening essentially 2 out of every 3 records (since SUBMIT records go through but EDIT and VIEW do not).  Will this still help to narrow down the issue?

The rights files were created in Excel and then saved to tab-delimited text files.  Then, we went in and removed any quotes from the file.  We had already made sure there were no extra spaces anywhere.

Jeff

[SomeClown]

Are the errors consistently repeatable?  Can you make it happen with only a few records?  If so, it might be a problem with the security provider (corrupted accman).  There's a tool floating around in the 7.4 folders (AMCorruptedNamespace or something like that) which might verify if there's a problem on the security source side or not.  Are userclasses specific to the application or shared across other contributor applications?

[jeffowentn]

Thanks, SomeClown.

This may not be terribly helpful, but I had a different experience, this morning, as I had a chance to get back to this.  First of all, the environment has been recycled since I last looked at this, including rebooting the servers, for whatever that is worth.  Second, I split the rights file up into 4 chunks, each one with roughly 250 lines, give or take.  I did find a few items that were problematic.  Some were inconsistencies between the elist item name and the user class name in Access Manager.  One, which I'm still not sure about, I simply created manually, directly in the rights section of the CAC, and saved.  I'm waiting for the business to GTP the application to finalize the change (change management controls), but I expect this should go through. 

Jeff