KB485543: "The Following privilege is required to access the resource you requested: Webuser" error when executing dossier from MicroStrategy 2021 mobile on iOS

Principal Product Specialist • Strategy

This issue has been classified as a defect by MicroStrategy. "The Following privilege is required to access the resource you requested: Webuser" error occurs on mobile due to Incorrect login mode with existed session ID is being invoked. A workaround to enable "reuseRestoredSession" from sys_defaults.xml is available in the current document. A solution/code fix for this issue is not available in current releases but is being reviewed for a future MicroStrategy release.

Starting with the release of Strategy ONE (March 2024), dossiers are also known as dashboards.

SYMPTOM:

In Strategy 2021, connect to Strategy mobile on iOS randomly throw “The following privilege are required to access the requested resource. Check with your WebUser Strategy Intelligence Server administrator to ensure that you have been granted the necessary privilege” error as shown below:

Tomcat access log only has the usuall 200 return code:


xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 -
xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 4
xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 -
xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 96

NOTE:

It is confirmed the user has WebUser privilege assigned properly. However, WebUser should be checked for client web, not mobile.
It is two nodes cluster environment, and issue only happens on node 2.
No mobile customization implemented and no seamless login from library to web when the issue happens.

CAUSE:

This is a known issue with Strategy 2021.
Incorrect login mode with existed session ID is being invoked. In kernel xml API trace, the first session login as "User 2001xxx6" is correct; the second login using the existed session ID shows the username shows null, thus no privilege would be properly inherited.

First login, session ID 0CAD18F25839631E23AA7C559CD1F2F9:


2022-01-17 13:48:55.350+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML Command: <st><sst><st><cmd><crs ln="2001xxx6" pwd="***" npwd="***" pgd="050DCEAA11EB7012BB5B0080EF256459" clid="Server Machine: xxx.xxx.xxx.xx Client Machine: xxxxxx" clmn=" Client Machine Name: xxxxxx" amd="1" snf="33554432" rws="10" sws="1" mid="" clt="29" bypass_clustering="1" vr="11.3.0000.15579J"><reg_opt lcl_rsl="1"><reg_md lcl_id="1033" lcl_rsl="1"/><reg_dt lcl_id="1033" lcl_rsl="1"/><reg_int lcl_id="1033" lcl_rsl="1"/><reg_msg lcl_id="1033" lcl_rsl="1"/><reg_num lcl_id="1033" lcl_rsl="0"/></reg_opt><prompt_instances><prompt_instance  ix="42" v="94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF"/></prompt_instances></crs></cmd></st></sst></st>
2022-01-17 13:48:55.351+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] MSICommandUtilityXML::XMLCreateSession(): Get device id 94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF
2022-01-17 13:48:55.359+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] Create User session ID success << 0CAD18F25839631E23AA7C559CD1F2F9
2022-01-17 13:48:55.367+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML CreateSession Successful: User 2001xxx6, Project 1

The second login using the existed session ID 0CAD18F25839631E23AA7C559CD1F2F9:


2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML Command: <st><sst><st><cmd><crs sid="0CAD18F25839631E23AA7C559CD1F2F9" pwd="***" npwd="***" pgd="" clid="Server Machine: xxx.xxx.xxx.xx Client Machine: xxxxxx " clmn=" Client Machine Name: xxxxxx " amd="512" snf="33554432" rws="10" sws="1" mid="" clt="6" bypass_clustering="1" vr="11.3.0000.15579J"><reg_opt lcl_rsl="1"><reg_md lcl_id="1033" lcl_rsl="1"/><reg_int lcl_id="1033" lcl_rsl="1"/><reg_msg lcl_id="1033" lcl_rsl="1"/><reg_num lcl_id="1033" lcl_rsl="1"/></reg_opt></crs></cmd></st></sst></st>
2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] MSICommandUtilityXML::XMLCreateSession(): Get device id 94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF
2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] Create User session ID success << 6502003062CBB1D03E3E3DDC7D632C3A
2022-01-17 13:51:09.147+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML CreateSession Successful: User , Project -1

ACTION:

Strategy will continue to investigate and post updates as soon as they are available.

WORKAROUND:

Enable "reuseRestoredSession" from sys_defaults.xml, default is off. When it's turned on, mobile server will reuse existing session, instead of creating new one when restoring session.


 <pr des="When restoring sessions from other process should the session be reused or should a new session be created" n="reuseRestoredSession" scp="system" v="1" dt="boolean"/>

Comment

0 comments

Details

Knowledge Article

Published:

June 14, 2022

Last Updated:

March 21, 2024

xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 - xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 4 xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 - xxx.xx.xxx.xx - - [17/Jan/2022:13:51:02 +0900] "POST /MicroStrategyMobile/servlet/mobile HTTP/1.1" 200 96

CAUSE:

First login, session ID 0CAD18F25839631E23AA7C559CD1F2F9:

2022-01-17 13:48:55.350+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML Command: <st><sst><st><cmd><crs ln="2001xxx6" pwd="***" npwd="***" pgd="050DCEAA11EB7012BB5B0080EF256459" clid="Server Machine: xxx.xxx.xxx.xx Client Machine: xxxxxx" clmn=" Client Machine Name: xxxxxx" amd="1" snf="33554432" rws="10" sws="1" mid="" clt="29" bypass_clustering="1" vr="11.3.0000.15579J"><reg_opt lcl_rsl="1"><reg_md lcl_id="1033" lcl_rsl="1"/><reg_dt lcl_id="1033" lcl_rsl="1"/><reg_int lcl_id="1033" lcl_rsl="1"/><reg_msg lcl_id="1033" lcl_rsl="1"/><reg_num lcl_id="1033" lcl_rsl="0"/></reg_opt><prompt_instances><prompt_instance ix="42" v="94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF"/></prompt_instances></crs></cmd></st></sst></st> 2022-01-17 13:48:55.351+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] MSICommandUtilityXML::XMLCreateSession(): Get device id 94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF 2022-01-17 13:48:55.359+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] Create User session ID success << 0CAD18F25839631E23AA7C559CD1F2F9 2022-01-17 13:48:55.367+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358741214976][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML CreateSession Successful: User 2001xxx6, Project 1

The second login using the existed session ID 0CAD18F25839631E23AA7C559CD1F2F9:

2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML Command: <st><sst><st><cmd><crs sid="0CAD18F25839631E23AA7C559CD1F2F9" pwd="***" npwd="***" pgd="" clid="Server Machine: xxx.xxx.xxx.xx Client Machine: xxxxxx " clmn=" Client Machine Name: xxxxxx " amd="512" snf="33554432" rws="10" sws="1" mid="" clt="6" bypass_clustering="1" vr="11.3.0000.15579J"><reg_opt lcl_rsl="1"><reg_md lcl_id="1033" lcl_rsl="1"/><reg_int lcl_id="1033" lcl_rsl="1"/><reg_msg lcl_id="1033" lcl_rsl="1"/><reg_num lcl_id="1033" lcl_rsl="1"/></reg_opt></crs></cmd></st></sst></st> 2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] MSICommandUtilityXML::XMLCreateSession(): Get device id 94E14B66EFC34F3284BE96FA6C639E5FFFFFFFFF 2022-01-17 13:51:09.140+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] Create User session ID success << 6502003062CBB1D03E3E3DDC7D632C3A 2022-01-17 13:51:09.147+09:00 [HOST:xxxx][SERVER:CastorServer][PID:36082][THR:140358728607488][Kernel XML API][Trace][UID:0][SID:0][OID:0] XML CreateSession Successful: User , Project -1

WORKAROUND:

Enable "reuseRestoredSession" from sys_defaults.xml, default is off. When it's turned on, mobile server will reuse existing session, instead of creating new one when restoring session.