Workflows not able to access external ecma scripts

[8080snk]

Hi Members

We have a workflow which uses a ecma script for or split.

This workflow is not able to access external ecma scripts Getting below error in logs

.granite.workflow.WorkflowException: Unable to find script resource /apps/workflow/scripts/ 

I am trying to add a read permission for the workflow-service.
we use Netcentric AC tool and .yaml file to apply permissions.

how can i add permissions to OOTB workflow-service user in yaml file.

Also is there any other solution.

TIA

[arunpatidar]

Hi @8080snk 

You can write rule inside ace_config tag

- ace_config:

    - workflow-service:
       - path: /apps/workflow/scripts
         permission: allow
         actions: read

[8080snk]

Hi @arunpatidar 

thanks for the solution,

but getting below error

Could not process yaml files / e=biz.netcentric.cq.tools.actool.validators.exceptions.NoGroupDefinedException: Validation error while reading ACE definition nr.1 of authorizable workflow-service is not defined in group configuration
Execution time: 0 ms

could it be coz the user is not defined in the yaml?

TIA

[arunpatidar]

Hi @8080snk 

It could be because of groups are managed externally(out side ACTools)

you can allow permission for external group by setting below

https://github.com/Netcentric/accesscontroltool/blob/develop/docs/AdvancedFeatures.md#configure-memb...

- global_config:
    defaultUnmanagedExternalMembersRegex: .*

[8080snk]

Hi @arunpatidar 

Tried the same with below error

e=biz.netcentric.cq.tools.actool.validators.exceptions.NoGroupDefinedException: Validation error while reading ACE definition nr.1 of authorizable workflow-service is not defined in group configuration
Execution time: 0 ms

Added like below

- global_config:
    defaultUnmanagedExternalMembersRegex: .*
    defaultUnmanagedExternalIsMemberOfRegex: .*
- ace_config:
   - workflow-service:
     - path: /apps
       permission: allow
       privileges: jcr:read

[arunpatidar]

Hi @8080snk 

Please check below issues for help

https://github.com/Netcentric/accesscontroltool/issues?q=is%3Aissue%20state%3Aclosed%20Validation%20... 

[kautuk_sahni]

@8080snk Did you find the suggestions helpful? Please let us know if you need more information. If a response worked, kindly mark it as correct for posterity; alternatively, if you found a solution yourself, we’d appreciate it if you could share it with the community. Thank you!