A rule in an RSA Security Analytics report displays the message "Waiting to be loaded" indefinitely

[#1]

Article Number

000029129

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.4.x
Platform: CentOS
O/S Version: 6

Issue

When running and viewing a report within the Reports module in RSA Security Analytics 10.4.x,  one or more rules display the message "Waiting to be loaded" as shown in the screenshot below.
Image description
The status never changes even after being displayed for long periods of time.

The /home/rsasoc/rsa/soc/reporting-engine/logs/reporting-engine.log file reports errors similar to the example below.

2014-10-26 23:34:12,870 [GetListValueRequest_15555] ERROR com.rsa.soc.re.ce.command.GetListValueCommand - Error processing command 
com.rsa.soc.re.exception.ReportingException: Action READ is not authorized on resource SA-LIST-ITEM
	at com.rsa.soc.re.contentstore.impl.StorePermissionUtils.checkReadPermission(StorePermissionUtils.java:112)
	at com.rsa.soc.re.contentstore.impl.ListStore.getListValues(ListStore.java:443)
	at com.rsa.soc.re.contentstore.impl.ReportingContentStoreImpl.getListValues(ReportingContentStoreImpl.java:786)
	at com.rsa.soc.re.ce.command.GetListValueCommand.execute(GetListValueCommand.java:41)
	at com.rsa.soc.re.ce.server.ReportEngineController.process(ReportEngineController.java:54)
	at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:65)
	at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:26)
	at com.rsa.netwitness.carlos.transport.spi.AbstractMessageChannel$5.run(AbstractMessageChannel.java:624)
	at com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor$TagExclusiveRunnable.run(SharedThreadPoolExecutor.java:93)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
	at java.lang.Thread.run(Thread.java:745)
Caused by: com.rsa.soc.re.exception.ReportingException: Action is not authorized on resource
	at com.rsa.soc.re.authorization.AuthorizationUtil.checkPermission(AuthorizationUtil.java:165)
	at com.rsa.soc.re.authorization.AuthorizationUtil.checkReadPermission(AuthorizationUtil.java:180)
	at com.rsa.soc.re.contentstore.impl.StorePermissionUtils.checkReadPermission(StorePermissionUtils.java:102)
	... 11 more
2014-10-26 23:34:12,879 [GetListValueRequest_15557] ERROR com.rsa.soc.re.authorization.AuthorizationUtil - Action is not authorized on resource

 

Cause

This issue occurs because the user does not have sufficient permissions for one more components (i.e. rules, lists, etc.) in the report.
The component in question will be reported in the error message shown above.  (In the above example, the component in question is entitled SA-LIST-ITEM.)

Resolution

In order to resolve the issue, a user that already has read/write permissions for the component in question will need to provide read (or read/write) permissions for the role to which the other user belongs.

Notes

For additional information on setting permissions on Reporting Engine components, refer to the knowledgebase article Users in other roles cannot see scheduled reports in RSA Security Analytics 10.3.