For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Robert_47833's avatar
Robert_47833
Icon for Altostratus rankAltostratus
Nov 19, 2015

resource admin or manager in one partition can't call REST API

{u'errorStack': [u'java.lang.SecurityException: Authorization failed: user= resource=/mgmt/tm/ltm/data-group/internal/~ip-datagroup~blacklist verb=GET uri: referrer:1.1.1.1 sender:1.1.1.1', u'at com.f5.rest.workers.ForwarderWorker.failPermissionValidation(ForwarderWorker.java:565)', u'at com.f5.rest.workers.ForwarderWorker.evaluateUserPermission(ForwarderWorker.java:633)', u'at com.f5.rest.workers.ForwarderWorker.evaluatePermission(ForwarderWorker.java:537)', u'at com.f5.rest.workers.ForwarderPassThroughWorker.onForward(ForwarderPassThroughWorker.java:202)', u'at com.f5.rest.workers.ForwarderPassThroughWorker.onGet(ForwarderPassThroughWorker.java:370)', u'at com.f5.rest.common.RestWorker.callDerivedRestMethod(RestWorker.java:932)', u'at com.f5.rest.common.RestWorker.callRestMethodHandler(RestWorker.java:899)', u'at com.f5.rest.common.RestServer.processQueuedRequests(RestServer.java:802)', u'at com.f5.rest.common.RestServer.access$000(RestServer.java:43)', u'at com.f5.rest.common.RestServer$1.run(RestServer.java:135)', u'at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)', u'at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)', u'at java.lang.Thread.run(Thread.java:722)\n'], u'message': u'Authorization failed: user= resource=/mgmt/tm/ltm/data-group/internal/~ip-datagroup~blacklist verb=GET uri: referrer:1.1.1.1 sender:1.1.1.1', u'code': 401, u'referer': u'1.1.1.1', u'restOperationId': 3154978}