WebCenter CMIS REST API Authentication Header Is Ignored - Error: "Unable to create virtual folder. User 'anonymous' does not have sufficient privileges." (Doc ID 1497313.1)

Last updated on NOVEMBER 19, 2016

Applies to:

Oracle WebCenter Portal - Version 11.1.1.4.0 and later
Information in this document applies to any platform.
Checked for relevance on 29-Dec-2014

Symptoms

When trying to create a folder in UCM using the WebCenter CMIS REST API, it fails and the error in WC_Spaces.log says "Unable to create virtual folder. User 'anonymous' does not have sufficient privileges."

<Sep 28, 2012 5:04:08 PM EDT> <Notice> <Diagnostics> <BEA-320068> <Watch 'UncheckedException' with severity 'Notice' on server 'WC_Spaces' has triggered at Sep 28, 2012 5:04:08 PM EDT. Notification details:
WatchRuleType: Log
WatchRule: (SEVERITY = 'Error') AND ((MSGID = 'WL-101020') OR (MSGID = 'WL-101017') OR (MSGID = 'WL-000802') OR (MSGID = 'BEA-101020') OR (MSGID = 'BEA-101017') OR (MSGID = 'BEA-000802'))
WatchData: DATE = Sep 28, 2012 5:04:08 PM EDT SERVER = WC_Spaces MESSAGE = [ServletContext@1006214484[app:webcenter module:/rest path:/rest spec-version:2.5 version:11.1.1.4.0], request: Workmanager: default, Version: 0, Scheduled=true, Started=true, Started time: 59 ms
[
POST /rest/api/cmis/children/UCM_Dev?uid=IDC:Folder/861686343471000002 HTTP/1.1
User-Agent: Apache Chemistry OpenCMIS/0.8.0-SNAPSHOT
Content-Type: application/atom+xml;type=entry
Authorization: Basic d2VibG9naWM6UGFzc3dvcmQxMjMh
Cache-Control: no-cache
Pragma: no-cache
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Transfer-Encoding: chunked

]] Root cause of ServletException.
oracle.webcenter.content.integration.RepositoryException: Sep 28, 2012 5:04:08 PM oracle.webcenter.content.integration.spi.ucm.FolderManager createFolder
SEVERE: Unable to create folder in repository UCM_Dev with name Test Folder beneath parent folder with collectionId 861686343471000002.  When calling service COLLECTION_ADD, as user anonymous, at timestamp 9/28/12 5:04 PM, recieved status code -20.

    at oracle.webcenter.content.integration.spi.ucm.FolderManager.createFolder(FolderManager.java:409)
    at oracle.webcenter.content.integration.spi.ucm.FolderManager.addFolder(FolderManager.java:144)
    at oracle.webcenter.content.integration.spi.ucm.NodeOps.createNodeImpl(NodeOps.java:1016)
    at oracle.webcenter.content.integration.spi.ucm.NodeOps.createNodeWithNodeTypeAndContentType(NodeOps.java:998)
    at sun.reflect.GeneratedMethodAccessor4251.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.logging.NOPSLoggingFilter.createNodeWithNodeTypeAndContentType(NOPSLoggingFilter.java:83)
    at sun.reflect.GeneratedMethodAccessor4250.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.validation.NOPSValidationFilter.createNodeWithNodeTypeAndContentType(NOPSValidationFilter.java:112)
    at sun.reflect.GeneratedMethodAccessor4249.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.cache.NOPSCacheFilter.createNodeWithNodeTypeAndContentType(NOPSCacheFilter.java:106)
    at sun.reflect.GeneratedMethodAccessor4248.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestNodeOpsDelegate.createNodeWithNodeTypeAndContentType(LatestNodeOpsDelegate.java:141)
    at oracle.webcenter.content.integration.federated.internal.delegate.NodeLogic.createNodeWithType(NodeLogic.java:63)
    at oracle.webcenter.content.integration.federated.internal.delegate.NodeLogic.createNode(NodeLogic.java:115)
    at oracle.webcenter.content.integration.federated.internal.NodeManagerImpl.addNode(NodeManagerImpl.java:183)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.doCreate(Children.java:505)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.doCreateOrMove(Children.java:278)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.createOrMove(Children.java:108)
    at sun.reflect.GeneratedMethodAccessor3833.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:175)
    at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:67)
    at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:208)
    at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:115)
    at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:75)
    at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:115)
    at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:67)
    at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:775)
    at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:740)
    at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:731)
    at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:372)
    at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:452)
    at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:633)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.security.wls.filter.SSOSessionSynchronizationFilter.doFilter(SSOSessionSynchronizationFilter.java:291)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.wcps.client.PersonalizationFilter.doFilter(PersonalizationFilter.java:75)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.webcenter.content.integration.servlets.ContentServletFilter.doFilter(ContentServletFilter.java:168)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.adf.share.http.ServletADFFilter.doFilter(ServletADFFilter.java:62)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
    at java.security.AccessController.doPrivileged(Native Method)
    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
    at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
    at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
    at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
    .......
Caused By: oracle.stellent.ridc.protocol.ServiceException: Unable to create virtual folder. User 'anonymous' does not have sufficient privileges.
    at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:142)
    at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:108)
    at oracle.webcenter.content.integration.spi.ucm.UCMBridge.executeRequest(UCMBridge.java:778)
    at oracle.webcenter.content.integration.spi.ucm.FolderManager.createFolder(FolderManager.java:390)
    at oracle.webcenter.content.integration.spi.ucm.FolderManager.addFolder(FolderManager.java:144)
    at oracle.webcenter.content.integration.spi.ucm.NodeOps.createNodeImpl(NodeOps.java:1016)
    at oracle.webcenter.content.integration.spi.ucm.NodeOps.createNodeWithNodeTypeAndContentType(NodeOps.java:998)
    at sun.reflect.GeneratedMethodAccessor4251.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.logging.NOPSLoggingFilter.createNodeWithNodeTypeAndContentType(NOPSLoggingFilter.java:83)
    at sun.reflect.GeneratedMethodAccessor4250.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.validation.NOPSValidationFilter.createNodeWithNodeTypeAndContentType(NOPSValidationFilter.java:112)
    at sun.reflect.GeneratedMethodAccessor4249.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.filter.cache.NOPSCacheFilter.createNodeWithNodeTypeAndContentType(NOPSCacheFilter.java:106)
    at sun.reflect.GeneratedMethodAccessor4248.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestInterfaceVersionWrapper.invoke(LatestInterfaceVersionWrapper.java:73)
    at $Proxy227.createNodeWithNodeTypeAndContentType(Unknown Source)
    at oracle.webcenter.content.integration.federated.internal.delegate.LatestNodeOpsDelegate.createNodeWithNodeTypeAndContentType(LatestNodeOpsDelegate.java:141)
    at oracle.webcenter.content.integration.federated.internal.delegate.NodeLogic.createNodeWithType(NodeLogic.java:63)
    at oracle.webcenter.content.integration.federated.internal.delegate.NodeLogic.createNode(NodeLogic.java:115)
    at oracle.webcenter.content.integration.federated.internal.NodeManagerImpl.addNode(NodeManagerImpl.java:183)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.doCreate(Children.java:505)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.doCreateOrMove(Children.java:278)
    at oracle.webcenter.content.integration.cmis.rest.resources.Children.createOrMove(Children.java:108)
    at sun.reflect.GeneratedMethodAccessor3833.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:175)
    at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:67)
    at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:208)
    at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:115)
    at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:75)
    at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:115)
    at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:67)
    at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:775)
    at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:740)
    at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:731)
    at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:372)
    at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:452)
    at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:633)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.security.wls.filter.SSOSessionSynchronizationFilter.doFilter(SSOSessionSynchronizationFilter.java:291)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.wcps.client.PersonalizationFilter.doFilter(PersonalizationFilter.java:75)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.webcenter.content.integration.servlets.ContentServletFilter.doFilter(ContentServletFilter.java:168)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
   ......
    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
    at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
    at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
 SUBSYSTEM = HTTP USERID = <WLS Kernel> SEVERITY = Error THREAD = [ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)' MSGID = BEA-101017 MACHINE = hostname TXID =  CONTEXTID = 0000JcEgOsO5uX85nj5EiZ1GP7QI0000Y7 TIMESTAMP = 1348866248274
WatchAlarmType: AutomaticReset
WatchAlarmResetPeriod: 30000

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms