"not granted ManageEcommerce in Backend" exception

Hello

I have the user with "Customers (ecommerce)" role assigned.

On behalf of this user, I make web service call

sitefinity.catalog-on-demand.com/.../

in attempt to read all product type data. This call results in an exception

----------------------------------------
Timestamp: 21.01.2014 19:31:14
Message: HandlingInstanceID: 75be90ac-7852-4662-8b39-67179606dfed
An exception of type 'Telerik.Sitefinity.Security.SecurityDemandFailException' occurred and was caught.
-------------------------------------------------------------------------------------------------------
01/21/2014 23:31:14
Type : Telerik.Sitefinity.Security.SecurityDemandFailException, Telerik.Sitefinity, Version=6.3.5000.0, Culture=neutral, PublicKeyToken=b28c218413bdf563
Message : Telerik.Sitefinity.Security.Data.StaticRoot, Telerik.Sitefinity was not granted ManageEcommerce in Backend for principals with IDs ff000030-a810-6a09-bb90-33c3c2392e4f
Source : Telerik.Sitefinity
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Void Demand(Telerik.Sitefinity.Security.Model.ISecuredObject, System.String, System.Guid[], Int32, Telerik.Sitefinity.Model.IOwnership)
Stack Trace :    at Telerik.Sitefinity.Security.SecurityExtensions.Demand(ISecuredObject item, String permissionSet, Guid[] principals, Int32 actions, IOwnership actualOwnerObject)
   at Telerik.Sitefinity.Security.AppPermission.Demand(Int32 actions)
   at Telerik.Sitefinity.Security.AppPermission.Demand(AppAction[] actions)
   at Telerik.Sitefinity.Modules.Ecommerce.Catalog.Web.Services.ProductTypeService.GetProductTypesInternal(String provider, String sortExpression, Int32 skip, Int32 take, String filter)
   at Telerik.Sitefinity.Modules.Ecommerce.Catalog.Web.Services.ProductTypeService.GetProductTypes(String provider, String sortExpression, Int32 skip, Int32 take, String filter)
   at SyncInvokeGetProductTypes(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage41(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage3(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage1(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)

Additional Info:

MachineName : HOME-1234567890
TimeStamp : 21.01.2014 19:31:14
FullName : Telerik.Sitefinity.Utilities, Version=6.3.5000.0, Culture=neutral, PublicKeyToken=b28c218413bdf563
AppDomainName : /LM/W3SVC/1/Root/Default-2-130348062540625000
ThreadIdentity :
WindowsIdentity : NT AUTHORITY\NETWORK SERVICE
Requested URL : sitefinity.catalog-on-demand.com/.../

Category: ErrorLog
Priority: 0
EventId: 90000
Severity: Error
Title:Enterprise Library Exception Handling
Machine: HOME-1234567890
App Domain: /LM/W3SVC/1/Root/Default-2-130348062540625000
ProcessId: 3500
Process Name: d:\windows\system32\inetsrv\w3wp.exe
Thread Name:
Win32 ThreadId:2784
Extended Properties:
---------------------------------------

 Comments?

Thank you

PS. This very call on behalf of the admin goes fine

Someone correct me if I'm wrong, but anything under /Sitefinity/Services is protected to only admins...general users can only get to /Sitefinity/Public/Services.

This is my experience too. But documented somewhere, isn't it?

Hi Mikhail,

Thank you for your kind feedback. We have logged this as a task for our Documentation team. Please keep in touch so we canlet you know once the article is ready.

Regards,
Boyan Barnev
Telerik