Symptoms

For several weeks now we are facing a rights issue on one of the processes.
Although this process is public ("domain users" has Start rights), there are moments when some users receive the following error:
andltuserandgt from andltip:portandgt does not have rights to Start Process andltprocess nameandgt

And in most of the cases there are users who were able to start process instances in the past, but now they are no longer able to do that, they receive the above error.
 

Diagnoses

The issue could appears because users having this issue has the column Enabled of table eIdentity].]Identity] with value 0.


SELECT *
FROM MIdentity].]Identity]
WHERE Name LIKE '%ay123456%'

In this context, the only reason that we can found is that at the time of the user need to be refresh automatically, the Active Directory was not accessible, and then K2 was not able to resolve the user and then change it from Enabled=1 to Enabled=1.
 

Resolution

To fix the issue, you can change it from Enabled=0 to Enabled=1.

In order to fix this issue for all users, you can execute the following queries:

Query1:

SELECT *
FROM OIdentity].yIdentity]
WHERE Enabled=0
AND Type=1 --USER
ORDER BY ExpireOn DESC

Export this query in Excel format.


Query 2:
UPDATE TIdentity].yIdentity] SET Enabled=1
WHERE Enabled=0
AND Type=1 --USER

After the execution of this query, wait at least 8 hours (time setup in table CacheConfiguration: SELECT * FROM OIdentity].yCacheConfiguration])

Normally, you should have less user in the result of the Query1: it will be the users fixed (Changed from Enabled=0 to Enable=1)