<Server Name > administrator is not allowed to open the worklist item


Badge +3

Got this error when I tried to use K2ROM to open worklist. But I got this error:
"<Server Name> administrator is not allowed to open the worklist item"

But in actual fact, I am logged on as another user (i.e. approver), and I am trying view approver's worklist.

Anyone encountered this problem b4?

Thanks.


14 replies

Badge +11
You'll probably have to post your code for troubleshooting...

I've seen similar problems when the connection to K2ROM is opened by a specific user (UserA) trying to retrieve worklist items from another user (UserB) not managed by UserA.

Please have a look at the following forum posting:
http://forum.k2workflow.com/viewtopic.php?t=714

If this does not solve your problem, please post your code for troubleshooting.

Regards,
Ockert
Badge +3
I was trying to open the worklist item for "Approver"

Here is the code:
myK2WorklistItem = myK2Conn.OpenWorklistItem(strSrlNo, "ASP")
Badge +3
This is the exception that is being caught.

Thanks.
Badge +11
As which user are you logged on to the machine you're running on?
What does you Connection.Open method call look like?

Regards,
Ockert
Badge +3
icon-quote.gifOckert:
As which user are you logged on to the machine you're running on?
What does you Connection.Open method call look like?

I am log on as Administrator on my local machine.
The dev sever IIS is set to windows authentication. When I logon to my web application I was using "approver" account.

Note: I am using Administrator as my K2 Service account.

here is my code: (strK2Server = server name)

Dim strK2Server As String = ConfigurationSettings.AppSettings("K2Server")
Dim myK2Conn As New K2ROM.Connection
Dim myK2WorklistItem As K2ROM.WorklistItem
myK2Conn.Open(strK2Server)
Badge +11
Looks fine...

Where do you get the 'strSrlNo' parameter from?
Have you had a look in K2.net Service Manager whether the 'Approver' user has in fact got worklist items assigned?

Regards,
Ockert
Badge +3
strSrlNo is from a query string - which is Serial Number for the worklistitem.

I have checked the K2 service manager, the destination has been set to "Approver".

Is it to do with the service account used to run K2 Server service?

Thanks for helping.
Badge +11
It should not have anything to do with the fact that the K2.net Server Service is running under Administrator credentials. Having said that, you should change your K2.net Server Service to run under a domain account with the appropriate rights to query AD.

The Connection.Open() method will open the connection to K2ROM under the credentials of the logged-on user (NOT run-as user but LOGGED-ON user). Everything from that point onwards will be done in the context of this logged-on user. So, in your case it appears as if Administrator is the logged-on user.

Try to specify the Approver's account credentials in the Connection.Open() method.

oK2Connection.Open(k2Server, strCon)


Hope this helps,
Ockert
Badge +3
I have tried to specify my connection string for Approver as follow:
Dim strCon As String
strCon = ";Authentication=Windows;Domain=<DOMAIN NAME>;User=Approver;Password=<Password>"
myK2Conn.Open(strK2Server, strCon)


But still I got the same error message,
"<Server Name> administrator is not allowed to open the worklist item"
Badge +9
Hi,

The error message is a default K2.net error message and can be caused by one of the following reasons:
* The item is assigned to a different user than the current user used in the connection. K2.net Server will only allow the destination user or the destination users manager to access the item.
* The slots has been allocated to another user

Please have a look at the following: Open K2.net Service Manager and use the Worklist option to return a list of Worklist Items.
* Do you see the Worklist item?
* Is the Destination user the same user that you use in the connection string?
* What is the status of the Worklist Item?
Badge +3
icon-quote.gifRĂ©nier:
The error message is a default K2.net error message and can be caused by one of the following reasons:
* The item is assigned to a different user than the current user used in the connection. K2.net Server will only allow the destination user or the destination users manager to access the item.
* The slots has been allocated to another user

Please have a look at the following: Open K2.net Service Manager and use the Worklist option to return a list of Worklist Items.
* Do you see the Worklist item?
* Is the Destination user the same user that you use in the connection string?
* What is the status of the Worklist Item?


I am able to see the worklist item.
The destination user is the same user. i.e. Approver
The status is available.

BTW, we are using Integrated Windows Authentication for our IIS
Badge +11
I am totally confused by the two issues on K2Mega and Eccentrix now.

[quote user= ";Authentication=Windows;Domain=<DOMAIN NAME>;User=Approver;Password=<Password>"
myK2Conn.Open(strK2Server, strCon)


But still I got the same error message,
"<Server Name> administrator is not allowed to open the worklist item"

Please do not use <DOMAIN> and <SERVERNAME> place holders - I need to see the actual values.

Also, can you post me a screenshot of the Worklist items you've found in K2.net Service Manager?

Thanks,
Ockert
Badge +3
icon-quote.gifOckert:

Please do not use <DOMAIN> and <SERVERNAME> place holders - I need to see the actual values.

Also, can you post me a screenshot of the Worklist items you've found in K2.net Service Manager?


Here is the connection string:
strCon = ";Authentication=Windows;Domain=ECCENT;User=HOD;Password=password"
Badge +11
If you log on to K2ROM with the 'ECCENTHOD' user (as in your connection string), there is no way you'll ever see the worklist items of the 'ECCENTRIXHOD' user (Destination User of Worklistitem). Change your connection string to:
strCon = ";Authentication=Windows;Domain=ECCENTRIX;User=HOD;Password=password"
and see if you can retrieve the 3 Worklist items.

Regards,
Ockert

Reply