Symptoms
For several weeks now we are facing a rights issue on one of the processes.
Although this process is public ("domain users" has Start rights), there are moments when some users receive the following error:
andltuserandgt from andltip:portandgt does not have rights to Start Process andltprocess nameandgt
And in most of the cases there are users who were able to start process instances in the past, but now they are no longer able to do that, they receive the above error.
Diagnoses
The issue could appears because users having this issue has the column Enabled of table [Identity].[Identity] with value 0.
SELECT *
FROM [Identity].[Identity]
WHERE Name LIKE '%ay123456%'
In this context, the only reason that we can found is that at the time of the user need to be refresh automatically, the Active Directory was not accessible, and then K2 was not able to resolve the user and then change it from Enabled=1 to Enabled=1.
Resolution
To fix the issue, you can change it from Enabled=0 to Enabled=1.
In order to fix this issue for all users, you can execute the following queries:
Query1:
SELECT *
FROM [Identity].[Identity]
WHERE Enabled=0
AND Type=1 --USER
ORDER BY ExpireOn DESC
Export this query in Excel format.
Query 2:
UPDATE [Identity].[Identity] SET Enabled=1
WHERE Enabled=0
AND Type=1 --USER
After the execution of this query, wait at least 8 hours (time setup in table CacheConfiguration: SELECT * FROM [Identity].[CacheConfiguration])
Normally, you should have less user in the result of the Query1: it will be the users fixed (Changed from Enabled=0 to Enable=1)
