User group cannot see data and menus in MashUp Runtime

[Ferdinand_TW]

Users belonging to a UserGroup cannot see data and Menus in MashUps.  
The userGroup is part of a organisation. The organisation has visibility of all components within the project, including mashups, things, menus, and everything existing in the project.

However, users in the not-Administrators groups only partially see the components at runtime. Attached is an example of the homepage:

And this is how Administrators group see the same Mashup: 

So, the userGroup don't see data and menus, but can see widgets, styleTheme and images. 

For comparison, I tried to check the permissions of the image and the menu, which are set exactly the same way (I am attaching a screenshot of only one for simplicity):

 

Naturally, by adding the UserGroup to the Administrators group, they can see everything correctly, but this is not the solution.

[Velkumar]

Hi @Ferdinand_TW 

Do you see any errors in the application log? If so, could you please share the application logs here?

We also need to grant permissions to the PlatformSubsystem for certain functionalities. You can find the exact issue in the application log.

/VR

[Ferdinand_TW]

Thank you @Velkumar , here the logs

It seems that the user (DGer...) has not authorization for some services, both custom and native in thingworx. 
Navigating to one of this service, there are no authorizations set to some group or user for the single service. 
Why is this happening? 
Also adding access in runtime to the single service, the situation is the same. 

[AdamK_93 · Accepted solution]

Hi @Ferdinand_TW ,

You should not compare settings to an Administrative access. Administrators have all access over the platform, hence they do not need explicit permissions to run/view anything.

Based on your details, I would say you must explicitly need to grant Runtime Permissions to the "non-administrative" UserGroup you mentioned, to be able to execute services like "GetEffectiveMenu" on "LabMenu".

However I'm not sure whether you use a Service to execute it, or you directly added the Services to a mashup.

So here are some steps that I'd suggest:

1. If you have a Helper Thing which executes the GetEffectiveMenu service on a specific menu (LabMenu), you must grant Execute Runtime permission to the "System" user on the LabMenu, becuase it is wrapped service, and Execute runtime permission to the UserGroup on the Helper Thing.
   just an example: 
2. If you have the LabMenu added as data service (direct service call) in a mashup, you must explicitly need to grant Execute runtime permission to the UserGroup you mentioned on that specific menu (and all the rest if needed)

If the specific users have Visibility over the entities, and only runtime errors are occured, then you need to grant execute runtime permissions on all the required Entities for the usergroups explicity. (or if wrapped, then only to the helper thing, and "System" user access to the subsequent 'wrapped' services)

Here you can find more details about the System user.

PTC.Support - System User (Wrapped Service Usage) 

Hope the above helps solving your case.

Regards,

Adam