Error deleting ActorRole record in Lawson Security Administration

Problem: When deleting an ActorRole we receive the following error: “Error deleting ActorRole record. Error – (Access Denied for Update on Actor for actor=<ActorName>)”

 

To resolve this issue, follow the steps below:

The root cause of this error is the ALLGenAccess_ST security class was removed from the SecurityAdministrator_ST role.

 

To resolve the issue perform the following steps:

1. Run the adminlaw command to place the Landmark environment in a restricted state.
2. Run the following command to turn security off for the Landmark environments GEN productline: secadm security activate gen ALL_ACCESS
3. Log into the rich client as an administrator, open the RoleSecurityClass business class and assign the ALLGenAccess_ST security class to the SecurityAdministrator_ST role and save the change.
4. Run the following command to turn security on for the Landmark environments GEN productline: secadm security activate gen PROCESS_RULES
5. Run the startlaw command to take the Landmark environment out of a restricted state.
6. Test the S3 LSF Security Administrator.

 

NOTE: You may also see the following error attempting to update a user’s Identity record.

“Landmark error adding Identity – (Access Denied for CreateNewIdentityForActor on Actor for actor=<ActorName>)”