An exception occurred in the 'OrdersWebService' web service.

Hey All,

I've managed to get the CSharpSite up and running (more or less). This final component is giving me problems and I don't know what it could be. I've checked the Authorization Manager to see if i've added the right roles and it looks sound.I've also double checked the User Mapping for the logins in SQL Server 2005 and haven't found anything suspicious.So i'm throwing my hands up in the air and asking for help. I get this error when I try running the Marketing Manager. The error shown is "you are not authorized to perform operations against the selected web service... " and the Event Log spits this error out:

"Event Type: Error
Event Source: Commerce Server Web Services
Event Category: None
Event ID: 4
Date: 11/17/2006
Time: 3:29:14 PM
User: N/A
Computer: <omitted>
Description:
An exception occurred in the 'OrdersWebService' Web service. Exception details follow:

Microsoft.CommerceServer.NotAuthorizedException: You are not authorized to perform the requested operation. OperationName='View Baskets', OperationID=5, Scope='Application Scope'.
at Microsoft.CommerceServer.Internal.AzApplication.ThrowNotAuthorizedException(String opName, Int32 operationId, String scope)
at Microsoft.CommerceServer.Orders.DataManagement.OrdersAuthorizationStore.AccessCheckSingle(Int32 operationId, String auditMessage)
at Microsoft.CommerceServer.Orders.DataManagement.ServerOrderSystem.GetBasketSearchableProperties(String languageId)
at Microsoft.CommerceServer.Orders.WebService.OrdersWebService.GetBasketSearchableProperties(String languageId)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp."

I do hope someone has the solution to this problem.

Thanks.

Cheers.
John

[3711 byte] By [JohnMathews] at [2007-12-27]
# 1

Just to troubleshoot try adding yourself to the administrator role in the azman store for the orders web service. If the error is still there then you're not updating the right azman file. If error goes away then you've not configured the role correctly.

Thanks

-Vinod

VKUMAR-MSFT at 2007-9-3 > top of Msdn Tech,Commerce Server,Commerce Server 2007...
# 2

John,

You'll want to review the roles in Authorization Manager again for the Orders Web Service. The roles can be found at http://go.microsoft.com/fwlink/?LinkID=57268#Add_Users_to_the_Authorization_Policy_Roles .. As Vinayak suggests, make sure you've tried giving yourself the Administrator role to begin with and then go back to the configuration you were working with. The problem could be the lack of rights in the specific role which you are currently assigned.

You may also want to review the Orders Web Service web.config to ensure that the authorizationPolicyPath is set properly. If it is just a file name without path then it will look inside the current folder where the service is running. A FileMon trace will also show you that it is trying to access the proper policy.

Cheers,
Colin

ColinBowern at 2007-9-3 > top of Msdn Tech,Commerce Server,Commerce Server 2007...
# 3

Thanks Vinayak and Colin,

I've managed to get everything up and running. Turns out it was just the lack of adding my domain username to the AdminGroups. Thanks for your time and patience.

Cheers.

John

JohnMathews at 2007-9-3 > top of Msdn Tech,Commerce Server,Commerce Server 2007...
# 4

Hello!

I'm adding my sollution for completeness of your solution for others to find.

I also got this problem, but it wasn't when I was trying to run anything myself. It occured on a 30 second interval.

I had added myself (I'm part of the Administrators group as well) to the OrderAdminGroup as you suggested, but that still didn't solve the problem.

Then, since the error came in 30 second intervals, I thought it could be the Health Monitor Service that didn't have the correct rights, so I added the CSHealthMonitorSvc user to the OrdersAdministrator role and the problem was solved.

I believe that this is beacause the OrdersViewer Role doesn't have the 'Basket Viewing' task defined. Maybe the Health Monitor Service is checking the Basket for some reason? But giving the Health Monitor Service these rights without really understanding what I'm doing felt like a bad idea.

With this insight, I removed the CSHealthMonitorSvc from the OrdersAdministrator role and added the 'Basket Viewing' task to the OrdersViewer Role. It worked fine!

This is a development environment scenario, so rights don't matter that much, but when I'm eventually will deploy to production it would be interesting to know the "why" as well.

Can anyone explain this, please?

Thanks!

Mikael ?stberg

MikeEast at 2007-9-3 > top of Msdn Tech,Commerce Server,Commerce Server 2007...