WebSphere Portal – runtime database permissions lost after running “run-wcm-admin-task-reset-event-log”

WebSphere Portal – runtime database permissions lost after running “run-wcm-admin-task-reset-event-log”

Hi all,

if you`re using WebSphere Portal and you`ve configured a database runtime user (with restricted access rights) – what you hopefully have 😉 this might be interesting for you.

When importing WCM content several times, the ConfigEngine Task “run-wcm-admin-task-reset-event-log” might be helpful because simply deleting content does not always remove all references.

Explanation of this task (copied from here):

From time to time, you might need to reset the web content event log. The event log can be reset only on a syndicator server. Any changes that are made by resetting the event log are then syndicated to its corresponding subscribers. In most cases, you reset the event log on the server you imported or migrated data onto, or on a syndicator to troubleshoot syndication problems in a syndication relationship. 

The problem now is that this task seems to delete table permissions in the JCR database. Mainly permissions that the WebSphere Portal runtime user needs to access those tables.

You will see errors like:

wcm-reset1

Even a select is not possible anymore with the runtime user.

You can resolve this issue by simply reassigning the database permissions for the runtime user (here my runtime user is in user group wpgrp1 – that`s why I assign permissions to this group):

GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ACL TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.PROT_RES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ACL_ENTRY TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ROLE_INST TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.LNK_USER_ROLE TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.UNIQUE_NAME TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.PROT_RES_DEP TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.CONTENT_MAPPING TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_OBJECTS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_TIMERS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.JOBS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.OBJECTS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.TASKJOBMAPPING TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.TASKS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_USER_SHORTCUT TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_CONTROLLABLES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_LIBRARIES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_PROJECTS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_PROJLIBS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_SYNDICATORS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_SYNDLIBS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_VERSIONS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_VPORTALS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_SYND_FAILURE TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_SYND_SESSION TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.WCM_SYND_EXTRA_DATA TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.OPENJPA_SEQUENCE_TABLE TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.SHORTCUT_SEQ TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTADMINDOMAINS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTACCESSCODES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOLLNAME TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTSYSCONTROL TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTATTRDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTATTRGROUP TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTNLSLANGUAGES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTMAXKEYWORD TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTNLSKEYWORDS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITEMTYPEDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITVIEWDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITVIEWID TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOMPDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOMPATTRS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOMPATTRSFK TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOMPVIEWDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTCOMPVIEWATTRS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITEMS001001 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITEMVER001001 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTLINKS001001 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTMIMETYPES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTITEMSTODELETE TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTXDOOBJECTS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTRI001001 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTVIEWACCESS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMUT00600001 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNODELOCKS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRWS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNSURIS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNSPREFIXES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMUTSWIDE0 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMUTMWIDE0 TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRWSNODES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRLINKS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRDELTALINKS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRLINKREL TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRDELTALR TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRGLBLPROPS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRADDTLPROPS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNODETYPES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRPROPDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNODEDEFS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRRNODETYPES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRSUPERTYPES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTIMESTAMPS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRIDS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRDUMMY TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRMAXSNSIDX TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRGENDDL TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRINDEXNAMES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRINDEXES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSPENDING TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSERRORS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSINDEXES TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSPATHINFO TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSPOSCOR TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSNEGCOR TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRAPPL TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRNODEREGISTER TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSFULLCRAWLTOPICS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSSUBSCRIPTIONMANAGER TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSSEEDLISTPENDING TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRTSINCSUBSMSGS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCREDITIONINFO TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCREDITIONS TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRREMOVEHLP TO wpgrp1 
GRANT SELECT, INSERT, UPDATE, DELETE ON jcr.ICMSTJCRIMPORTREF TO wpgrp1 

That`s all 😉
I was not able to find a explanation why this issue happens. But it happens on all our systems after running the reset-wcm-task.

Leave a Reply

Your email address will not be published. Required fields are marked *