<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-15"> </head> <body text="#000000" bgcolor="#ffffff"> <tt>Hello Pki Users, I have an problem to access the DogTAG Publishing tab of the PKIConsole. I want to enable a new CRL File publishing object as described into the section 8.2.1 of the admin guide. but I receive the error "You are not allowed to perform this operation" anytime I'm trying to access the publishing tab and subObjects. The ca_log show this error ___ /var/log/pki-ca/debug [10/Oct/2010:11:06:52][http-9445-Processor24]: LdapBoundConnFactory.java:391:returnConn() returnConn: mNumConns now 3 [10/Oct/2010:11:06:52][http-9445-Processor24]: AAclAuthz.java:643:evaluateExpressions() evaluated expression: group="Registration Manager Agents" to be true [10/Oct/2010:11:06:52][http-9445-Processor24]: SignedAuditEventFactory.java:78:create() SignedAuditEventFactory: create() message=[AuditEvent=AUTHZ_FAIL][SubjectID=admin][Outcome=Failure][aclResource=<null>][Op=<null>] authorization failure [10/Oct/2010:11:06:52][http-9445-Processor24]: LdapBoundConnFactory.java:343:getConn() getConn: mNumConns now 2 [10/Oct/2010:11:06:52][http-9445-Processor24]: LdapBoundConnFactory.java:391:returnConn() returnConn: mNumConns now 3 [10/Oct/2010:11:06:52][http-9445-Processor24]: SignedAuditEventFactory.java:78:create() SignedAuditEventFactory: create() message=[AuditEvent=ROLE_ASSUME][SubjectID=admin][Outcome=Failure][Role=Certificate Manager Agents, Registration Manager Agents, Trusted Managers, Administrators, Security Domain Administrators, Enterprise CA Administrators, Enterprise KRA Administrators, Enterprise OCSP Administrators, Enterprise TKS Administrators, Enterprise RA Administrators, Enterprise TPS Administrators] assume privileged role I have checked everywhere in the PKIConsole ACL's tab, but I didn't find anything ... Does somebody would have an idea how to fix it ? Thank you .. </tt> </body> </html>