... facing error when i login with adminstrator user or normal user
You are not allowed to run statement 'Webportal.ATT_LimitedSqlForPendingAttestationD'. [810292]
... facing error when i login with adminstrator user or normal user
You are not allowed to run statement 'Webportal.ATT_LimitedSqlForPendingAttestationD'. [810292]
2026-10-03 12:29:51.3829 TRACE ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : User from trusted frontend -> ignore risk.
2026-10-03 12:29:51.3829 DEBUG ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : ExistsAsync - Getting data for query:
FROM Person
WHERE [(UID_Person <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (UID_Person in (select UID_Person from dbo.QER_FTPersonsAreMe('7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')))]
EXISTS
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : ClaimConnectionAsync - read write, _transaction == null
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : -- Connection 1 switched from Available to Working after comparison
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : Read/Write Pool --> existing connection 1
2026-10-03 12:29:51.3829 DEBUG ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : (< 1 ms) - select 1 where exists (select 1 from Person where ((UID_Person <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (UID_Person in (select UID_Person from dbo.QER_FTPersonsAreMe('7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')))))
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : -- Connection 1 switched from Working to Available
2026-10-03 12:29:51.3829 DEBUG ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : Run statement and fetch data done in 0ms.
2026-10-03 12:29:51.3829 TRACE ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : Classification risk: 0, fp: , hash: , trusted hash: , already checked: False, tries: 0, last try: - ago, where clause: (orderstate = N'Assigned') and (isnull(ValidUntil, '1899-12-30 00:00:00.000') < '2026-10-17 10:29:51.384') and (ValidUntil > '1899-12-30 00:00:00.000')
2026-10-03 12:29:51.3829 TRACE ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : User from trusted frontend -> ignore risk.
2026-10-03 12:29:51.3829 TRACE ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : Classification risk: 0, fp: , hash: , trusted hash: , already checked: False, tries: 0, last try: - ago, where clause: UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')) UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')))
2026-10-03 12:29:51.3829 TRACE ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : User from trusted frontend -> ignore risk.
2026-10-03 12:29:51.3829 DEBUG ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : GetCountAsync - Getting data for query:
FROM PersonWantsOrg
COUNT
WHERE [(orderstate = N'Assigned') and (isnull(ValidUntil, '1899-12-30 00:00:00.000') < '2026-10-17 10:29:51.384') and (ValidUntil > '1899-12-30 00:00:00.000')]
WHERE [UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')) UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')))]
CONTEXT 'PWOAccessAsManagerReduced' = 'true'
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : ClaimConnectionAsync - read write, _transaction == null
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : -- Connection 1 switched from Available to Working after comparison
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : Read/Write Pool --> existing connection 1
2026-10-03 12:29:51.3829 DEBUG ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : (1 ms) - exec sp_set_session_context @key = N'PWOAccessAsManagerReduced', @value = N'true';select count(*) from PersonWantsOrg where ((orderstate = N'Assigned') and (isnull(ValidUntil, '1899-12-30 00:00:00.000') < '2026-10-17 10:29:51.384') and (ValidUntil > '1899-12-30 00:00:00.000')) and (UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f')) UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where UID_PersonWantsOrg in (select UID_PersonWantsOrg from PersonWantsOrg where (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (uid_personinserted <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') UNION ALL select UID_PersonWantsOrg from PersonWantsOrg where (uid_personwantsorg in (select uid_personwantsorg from pwodecisionhistory where (uid_personhead <> '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') and (decisiontype in (N'Unsubscribe', N'Prolongate')))) and (uid_personordered = '7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f'))));exec sp_set_session_context @key = N'PWOAccessAsManagerReduced', @value = null
2026-10-03 12:29:51.3829 TRACE ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : -- Connection 1 switched from Working to Available
2026-10-03 12:29:51.3829 DEBUG ( ObjectLog etqhjd1jkl3x0hsmr0xrjuwi) : Run statement and fetch data done in 1ms.
2026-10-03 12:29:51.3829 INFO (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : Executed endpoint 'portal/person/config'
2026-10-03 12:29:51.3829 INFO (Microsoft. ) : Request finished HTTP/1.1 GET localhost/.../config - 200 - application/json;+charset=utf-8 9.1721ms
2026-10-03 12:29:51.3829 INFO (Microsoft. ) : Request starting HTTP/1.1 GET localhost/.../pendingitems - - -
2026-10-03 12:29:51.3829 TRACE (Microsoft. ) : All hosts are allowed.
2026-10-03 12:29:51.3829 TRACE ( WebLog ) : BulkCache: looking up 1 keys, 0 cache misses
2026-10-03 12:29:51.3829 TRACE ( WebLog ) : BulkCache: looking up 1 keys, 0 cache misses
2026-10-03 12:29:51.3829 TRACE ( WebLog ) : BulkCache: looking up 1 keys, 0 cache misses
2026-10-03 12:29:51.3829 TRACE ( WebLog ) : Session ID etqhjd1jkl3x0hsmr0xrjuwi: live session group found
2026-10-03 12:29:51.3829 DEBUG (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : 1 candidate(s) found for the request path '/portal/pendingitems'
2026-10-03 12:29:51.3829 DEBUG (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : Request matched endpoint 'portal/pendingitems'
2026-10-03 12:29:51.3829 TRACE (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : The endpoint does not specify the IRequestSizeLimitMetadata.
2026-10-03 12:29:51.3829 INFO (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : Executing endpoint 'portal/pendingitems'
2026-10-03 12:29:51.3829 DEBUG ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : Request to URL localhost/.../pendingitems mapped to handler pendingitems
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : Session ID etqhjd1jkl3x0hsmr0xrjuwi: live session group found
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : XSRF protection token disabled for HTTP GET, not checking.
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : Get permission for verb none:
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : Checking 1 permissions
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : No group permissions are defined for GET portal/pendingitems
2026-10-03 12:29:51.3829 TRACE ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : All permissions met
2026-10-03 12:29:51.3829 DEBUG ( SqlLog etqhjd1jkl3x0hsmr0xrjuwi) : Running limited statement Webportal.ATT_LimitedSqlForPendingAttestationD
2026-10-03 12:29:51.3829 DEBUG ( StopWatch etqhjd1jkl3x0hsmr0xrjuwi) : Getting LimitedSQLPermissions/Webportal.ATT_LimitedSqlForPendingAttestationD from cache. done in 0ms.
2026-10-03 12:29:51.3829 ERROR ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : An error occurred while processing the request: GET localhost/.../pendingitems System.Exception: An error occurred while processing the request: GET localhost/.../pendingitems
---> VI.DB.DataAccess.NoPermissionToRunStatementException: You are not allowed to run statement 'Webportal.ATT_LimitedSqlForPendingAttestationD'.
at VI.DB.DataAccess.PermissionsStatementProvider.GetStatementAsync(String id, LimitedSqlStatementType statementType, CancellationToken cancellationToken)
at VI.DB.DataAccess.DbStatementRunner.SqlExecuteScalarAsync(String id, IEnumerable`1 parms, CancellationToken cancellationToken)
at ATT.CompositionApi.Api.ATT_WebPortal_PendingItems.<>c.<<GetPendingItems>b__2_0>d.MoveNext()
--- End of stack trace from previous location ---
at QER.CompositionApi.PendingItems.ExtensionMethods.GetValueAsync(IPendingItem item, ISession session, IPendingItemContext context, CancellationToken ct)
at QER.CompositionApi.Portal.PendingItemsApi.<>c__DisplayClass0_0.<<Build>b__0>d.MoveNext()
--- End of stack trace from previous location ---
at QBM.CompositionApi.Definition.RouteExtensionMethods.<>c__DisplayClass17_0`1.<<HandleGet>b__0>d.MoveNext()
--- End of stack trace from previous location ---
at QBM.CompositionApi.ApiManager.JsonResponseBuilder.InnerJsonResponseBuilder.WriteAsync(IRequest qr, CancellationToken ct)
at QBM.CompositionApi.Compression.CompressionResponseBuilder.CompressedResponse.WriteAsync(IRequest qr, CancellationToken ct)
at QBM.CompositionApi.ApiManager.MethodRequestHandler.SendAsync(HttpContext request)
--- End of inner exception stack trace ---
2026-10-03 12:29:51.3829 INFO (Microsoft. etqhjd1jkl3x0hsmr0xrjuwi) : Executed endpoint 'portal/pendingitems'
2026-10-03 12:29:51.3829 INFO (Microsoft. ) : Request finished HTTP/1.1 GET localhost/.../pendingitems - 500 - application/json;+charset=utf-8 3.7197ms
2026-10-03 12:29:51.7696 TRACE ( SqlLog ) : Cleanup physical connection pool Read/Write Pool
2026-10-03 12:29:51.7696 TRACE ( SqlLog ) : 0 connections disposed.
2026-10-03 12:29:51.7696 TRACE ( SqlLog ) : Available = 10
2026-10-03 12:30:01.7705 TRACE ( SqlLog ) : Cleanup physical connection pool Read/Write Pool
2026-10-03 12:30:01.7705 TRACE ( SqlLog ) : 0 connections disposed.
2026-10-03 12:30:01.7705 TRACE ( SqlLog ) : Available = 10
2026-10-03 12:30:05.2544 TRACE ( WebLog ) : AutoRestartPlugin: No API errors.
2026-10-03 12:30:11.7695 TRACE ( SqlLog ) : Cleanup physical connection pool Read/Write Pool
2026-10-03 12:30:11.7695 TRACE ( SqlLog ) : 0 connections disposed.
2026-10-03 12:30:11.7695 TRACE ( SqlLog ) : Available = 10
Appears to be a permissions thing.....
2026-10-03 12:29:51.3829 ERROR ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : An error occurred while processing the request: GET localhost/.../pendingitems System.Exception: An error occurred while processing the request: GET localhost/.../pendingitems ---> VI.DB.DataAccess.NoPermissionToRunStatementException: You are not allowed to run statement 'Webportal.ATT_LimitedSqlForPendingAttestationD'.
I had a quick look at my environment and can't find any easily identifiable access control. Can your user ('7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') view pending attestations fine?
Appears to be a permissions thing.....
2026-10-03 12:29:51.3829 ERROR ( WebLog etqhjd1jkl3x0hsmr0xrjuwi) : An error occurred while processing the request: GET localhost/.../pendingitems System.Exception: An error occurred while processing the request: GET localhost/.../pendingitems ---> VI.DB.DataAccess.NoPermissionToRunStatementException: You are not allowed to run statement 'Webportal.ATT_LimitedSqlForPendingAttestationD'.
I had a quick look at my environment and can't find any easily identifiable access control. Can your user ('7c611ff4-ee5b-4d4f-a0c4-4190ff4efb5f') view pending attestations fine?