Documentum 6.5 Web Services and authorization issue

jzinkovich

Does anyone know if other than being a user setup on the docbase if you have to have certain web service privileges as well? I am a valid user because via DA I can test my connection to the docbase and successfully get in. I am a web service consumer without the DFS Productivity Layer

The steps I am doing are via Java code

1.) Generate JAX-WS Java Client from the WSDL(s) for the ContextRegistryService , ObjectService

2.) Get secure token via ContextRegistryService (successfully getting token)

3.) Inject token into SOAPHeaders via (Headers.create(....) for the Request message to the ObjectService.

4.) When I called the create method apart of the ObjectService I get the following exception.

"AuthorizationException - Authorization failed, please review identities provided in service context"

What exactly is the service context? Trying to figure out what I need to do to modify my user account to be able to connect via web services. Any help is greatly appreciated. Thanks

mszurap

My expirience is with 6.0 SP1, but maybe it can help.

If you add only token to the service context, then you may get that authorization issue. I assume you do not want to add username and password for every request, so you need to do a little "trick" while creating SOAP header. This works for me fine in 6.0SP1:

<![CDATA[
//create soap header like this


      SOAPHeaderElement header = new SOAPHeaderElement(buildSecurityElement(yourTokenFromContextRegistryService));


//create security element object which is put in the header


private Element buildSecurityElement(String sToken) throws ParserConfigurationException {
// CREATE parser for creating DOM objects, root document
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
Document doc = dbf.newDocumentBuilder().newDocument();
// CREATE parent <wsse:Security> and child <wsse:BinarySecurityToken> element
Element securityElement = doc.createElementNS(WSSE_NS, "wsse:Security");
Element child = doc.createElementNS(WSSE_NS, "wsse:BinarySecurityToken");
child.setAttribute("QualficationValueType", "http://schemas.emc.com/documentum#ResourceAccessToken");
Text tokenText = doc.createTextNode(sToken);
child.appendChild(tokenText);
securityElement.appendChild(child);
return securityElement;
} 
]]>

Thanks for Fabian Lee, posted this on powerlink's forums:

So you do not need to modify your user account, every Documentum user can use web services (DFS) too.