Process Security Assignment Vs }ProcessSecurity

[galuska13570]

Tm1 10.2.2
Architect 54-bit

Contributor Error Using Chrome
Version 49.0.2623.110 m

STOP
com.ibm.cognos.pmpsvc.PMPSVCException: An unexpected error was generated by TI process:TI_INTERNAL

User unable to take ownership of the node.

Current Setup of }ProcessSecurity Cube
[]=s: IF(SUBST(!}Processes,1,1)@='}','READ','NONE');

Under my service I had to right click on Processes and click Security Assignments... Then manually enter READ into
}tp_workflow_enter_node
}tp_workflow_leave_node
}tp_workflow_own_node
}tp_workflow_reject_node
}tp_workflow_save_node
}tp_workflow_submit_node
}tp_workflow_update_user_name

The part that confuses me is my rule on }ProcessSecurity cube should be overwriting what is manually entered by going to Security Assignments. Why can I only get this error fixed by manually entering under Security Assignment?

Thank you for the assistance.

[Edward Stuart]

When using Applications, TM1 adds an additional layer of Application security.

You mention that the user is unable to take ownership of the node? What type of application do you have? Does the end user have access to the application/ approval hierarchy? Is it only a TI that fails or can they access the Cube views etc...

When you manually update the }tp cubes does this resolve the issue for the end user in the application or via Architect/ Perspectives?

[galuska13570]

The users have access to the hierarchy and the cube. They can see all the data in contributor and TM1 web just cant take ownership of the node. I have typed up a document in more detail. It still confuses me why the issue was only resolved after granting }Everyone READ access by right clicking on Processes>Security Assignment... Why wouldn't the rules attached to the }ProcessSecurity cube be used to grant this access.

[jwilkins]

Did you try doing a security refresh after writing the rule?

Rule-based security requires a refresh when the calculation changes. Manually setting the security through "Process > Security Assignment", on the other hand, does not require a refresh.