I have created a simple script tool that should get one parameter (a feature class) and print some unique values from a single field. The Python code looks like this: import arcpy def get_species ( observationFeatureClass , field , query ) : with arcpy . da . SearchCursor ( observationFeatureClass , [ field ] , query ) as species : return sorted ( { s [ 0 ] for s in species } ) ofc = arcpy . GetParameterAsText ( 0 ) fld = "gatunek" qry = "kategoria = 'inwazyjna'" for i , s in enumerate ( get_species ( ofc , fld , qry ) , start = 1 ) : arcpy . AddMessage ( f "Gatunek nr {i}: {s}" ) If I run this tool straight from the ArcGIS Pro, providing a hosted feature service as a parameter, everything works well. But, when I publish the result as a Web Tool on our portal, it is unable to access the service and it returns: "RuntimeError: cannot open ". Previously, we had a problem with accessing protected resources from a custom print service and it was resolved by applying a patch, but this tool fails regardless of the service permissions. We work with ArcGIS Pro 2.5 and ArcGIS Enterprise 10.7.

Yes, it is secured. Both, the tool and the feature service are owned by me. I have full access to them. I am publishing and running this tool with the same account. Unfortunately, even if I allow public access to the feature service, the error keeps occuring.

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

A Python Web Tool is unable to access a hosted feature service

andk

I have created a simple script tool that should get one parameter (a feature class) and print some unique values from a single field. The Python code looks like this:

<SPAN class="keyword token">import</SPAN> arcpy

<SPAN class="keyword token">def</SPAN> <SPAN class="token function">get_species</SPAN><SPAN class="punctuation token">(</SPAN>observationFeatureClass<SPAN class="punctuation token">,</SPAN> field<SPAN class="punctuation token">,</SPAN> query<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">:</SPAN>
    <SPAN class="keyword token">with</SPAN> arcpy<SPAN class="punctuation token">.</SPAN>da<SPAN class="punctuation token">.</SPAN>SearchCursor<SPAN class="punctuation token">(</SPAN>observationFeatureClass<SPAN class="punctuation token">,</SPAN> <SPAN class="punctuation token">[</SPAN>field<SPAN class="punctuation token">]</SPAN><SPAN class="punctuation token">,</SPAN> query<SPAN class="punctuation token">)</SPAN> <SPAN class="keyword token">as</SPAN> species<SPAN class="punctuation token">:</SPAN>
        <SPAN class="keyword token">return</SPAN> sorted<SPAN class="punctuation token">(</SPAN><SPAN class="punctuation token">{</SPAN>s<SPAN class="punctuation token">[</SPAN><SPAN class="number token">0</SPAN><SPAN class="punctuation token">]</SPAN> <SPAN class="keyword token">for</SPAN> s <SPAN class="keyword token">in</SPAN> species<SPAN class="punctuation token">}</SPAN><SPAN class="punctuation token">)</SPAN>

ofc <SPAN class="operator token">=</SPAN> arcpy<SPAN class="punctuation token">.</SPAN>GetParameterAsText<SPAN class="punctuation token">(</SPAN><SPAN class="number token">0</SPAN><SPAN class="punctuation token">)</SPAN>
fld <SPAN class="operator token">=</SPAN> <SPAN class="string token">"gatunek"</SPAN>
qry <SPAN class="operator token">=</SPAN> <SPAN class="string token">"kategoria = 'inwazyjna'"</SPAN>

<SPAN class="keyword token">for</SPAN> i<SPAN class="punctuation token">,</SPAN> s <SPAN class="keyword token">in</SPAN> enumerate<SPAN class="punctuation token">(</SPAN>get_species<SPAN class="punctuation token">(</SPAN>ofc<SPAN class="punctuation token">,</SPAN> fld<SPAN class="punctuation token">,</SPAN> qry<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">,</SPAN> start<SPAN class="operator token">=</SPAN><SPAN class="number token">1</SPAN><SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">:</SPAN>
    arcpy<SPAN class="punctuation token">.</SPAN>AddMessage<SPAN class="punctuation token">(</SPAN>f<SPAN class="string token">"Gatunek nr {i}: {s}"</SPAN><SPAN class="punctuation token">)</SPAN>‍‍‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

If I run this tool straight from the ArcGIS Pro, providing a hosted feature service as a parameter, everything works well. But, when I publish the result as a Web Tool on our portal, it is unable to access the service and it returns: "RuntimeError: cannot open <Hosted Feature Service URL here>".

Previously, we had a problem with accessing protected resources from a custom print service and it was resolved by applying a patch, but this tool fails regardless of the service permissions.

We work with ArcGIS Pro 2.5 and ArcGIS Enterprise 10.7.

Trouver plus de publications taguées avec

Accepted answers

All comments

LukeHenderson1

andk, Was there a resolution to your issue? I am experiencing the same thing. .pyt works locally but not as a web tool.

Anonymous User

Ah gotcha. Wasn't quite sure how you were hitting the service and saw 'web' in the title so I thought of webmap/http access, which if the service is not publicly shared, the user gains access to the service through requesting/providing tokens every time they use the tool.

I interpret that documentation statement as referring to only the tools code. There is still a lot of other things that needs to be done in order for the tools to be used.

... Is it set up as a secured service? Was it shared with a group of authorized users? Halfway down: Connect to secure services—Portal for ArcGIS | Documentation for ArcGIS Enterprise

andk

Yes, but the tool is to be published on the portal. Users will run it against various feature services (from the portal's analysis tab in the web map view). They should be able to choose a feature class from the portal's resources. The tool cannot require providing credentials every time when someone wants to use it.

Documentation says: "Most Python script tools that execute successfully on your computer will publish and execute successfully as a web tool—you do not have to modify your script in any way." (source).

Maybe I have missed something, but in ArcGIS Pro I am logged in to the portal and I am able to simply run arcpy.da.SearchCursor(<service url>, ...) either from the python console or as a script tool. Authenticaton is handled in the background. The same tool, published and executed from the portal's interface, has a problem with accessing resources selected by an authenticated user.

Anonymous User

I think the process would be for the requestor to hit the token generator for your organizations portal and get their token. It won't get the currently logged in user on the server side, if I am understanding you correctly. If the requestor token request is successful, they can make the request to your processing service by appending the token onto the end of the request url. There are a few examples of getting a token floating around, this is how I do it. svc would be your service name.

<SPAN class="keyword token">import</SPAN> requests

<SPAN class="comment token"># ---------------------------------------------------------------------------</SPAN>
<SPAN class="keyword token">def</SPAN> <SPAN class="token function">getToken</SPAN><SPAN class="punctuation token">(</SPAN>port<SPAN class="punctuation token">,</SPAN> expiration<SPAN class="punctuation token">,</SPAN> server<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">:</SPAN>
    <SPAN class="keyword token">try</SPAN><SPAN class="punctuation token">:</SPAN>
       <SPAN class="comment token"># Create dictionary of credentials</SPAN>
       query_dict <SPAN class="operator token">=</SPAN> <SPAN class="punctuation token">{</SPAN>
                    <SPAN class="string token">'username'</SPAN><SPAN class="punctuation token">:</SPAN> username<SPAN class="punctuation token">,</SPAN>
                    <SPAN class="string token">'password'</SPAN><SPAN class="punctuation token">:</SPAN> password<SPAN class="punctuation token">,</SPAN>
                    <SPAN class="string token">'expiration'</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="number token">60</SPAN><SPAN class="punctuation token">,</SPAN>
                    <SPAN class="string token">'client'</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">'requestip'</SPAN>
                <SPAN class="punctuation token">}</SPAN>

       url <SPAN class="operator token">=</SPAN> <SPAN class="string token">"https://{}:{}/arcgis/admin/generateToken?f=json"</SPAN><SPAN class="punctuation token">.</SPAN>format<SPAN class="punctuation token">(</SPAN>server<SPAN class="punctuation token">,</SPAN> port<SPAN class="punctuation token">)</SPAN>
       token <SPAN class="operator token">=</SPAN> requests<SPAN class="punctuation token">.</SPAN>post<SPAN class="punctuation token">(</SPAN>url<SPAN class="punctuation token">,</SPAN> query_dict<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">.</SPAN>json<SPAN class="punctuation token">(</SPAN><SPAN class="punctuation token">)</SPAN>

       <SPAN class="comment token"># If token cannot be generated</SPAN>
       <SPAN class="keyword token">if</SPAN> <SPAN class="string token">"token"</SPAN> <SPAN class="operator token">not</SPAN> <SPAN class="keyword token">in</SPAN> token<SPAN class="punctuation token">:</SPAN>
           <SPAN class="keyword token">raise</SPAN> ValueError<SPAN class="punctuation token">(</SPAN><SPAN class="string token">'Did not return a token: {}'</SPAN><SPAN class="punctuation token">.</SPAN>format<SPAN class="punctuation token">(</SPAN>token<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">)</SPAN>
       <SPAN class="keyword token">else</SPAN><SPAN class="punctuation token">:</SPAN>
           <SPAN class="keyword token">return</SPAN> token<SPAN class="punctuation token">[</SPAN><SPAN class="string token">'token'</SPAN><SPAN class="punctuation token">]</SPAN>

       <SPAN class="keyword token">except</SPAN> requests<SPAN class="punctuation token">.</SPAN>exceptions <SPAN class="keyword token">as</SPAN> e<SPAN class="punctuation token">:</SPAN>
           <SPAN class="keyword token">raise</SPAN> Exception<SPAN class="punctuation token">(</SPAN><SPAN class="string token">"Could not connect to machine {} on port {}\n{}"</SPAN><SPAN class="punctuation token">.</SPAN>format<SPAN class="punctuation token">(</SPAN>server<SPAN class="punctuation token">,</SPAN> port<SPAN class="punctuation token">,</SPAN> e<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">)</SPAN>

       <SPAN class="keyword token">except</SPAN> RuntimeError<SPAN class="punctuation token">:</SPAN>
           logger<SPAN class="punctuation token">.</SPAN>info<SPAN class="punctuation token">(</SPAN><SPAN class="string token">'Runtime Error: {}'</SPAN><SPAN class="punctuation token">.</SPAN>format<SPAN class="punctuation token">(</SPAN>traceback<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">)</SPAN>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

The return token will get appended to the request url string like this:

service_url <SPAN class="operator token">=</SPAN> <SPAN class="string token">"{}/services/{}?token={}&f=json"</SPAN><SPAN class="punctuation token">.</SPAN>format<SPAN class="punctuation token">(</SPAN>url<SPAN class="punctuation token">,</SPAN> svc<SPAN class="punctuation token">,</SPAN> token<SPAN class="punctuation token">)</SPAN>‍

result <SPAN class="operator token">=</SPAN> requests<SPAN class="punctuation token">.</SPAN>post<SPAN class="punctuation token">(</SPAN>service_url<SPAN class="punctuation token">)</SPAN><SPAN class="punctuation token">.</SPAN>json<SPAN class="punctuation token">(</SPAN><SPAN class="punctuation token">)</SPAN>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

Hope this helps and maybe someone more versed in this area can assist.

andk

I forgot to mention that I've set up Portal's log level to 'info', but there is no information about the execution of my tool. I've also checked Srever's log messages and there is only the error that I've mensioned above.

ArcGIS Server log

Update:

I thought setting up a log level on a Portal affects also a federated server... My bad.

Now I have set the server's log level to "debug" and I figured out that the job is submitted with a valid access token but then the request to the service is anonymous:

DEBUG	13 mar 2020, 13:11:13	A request was made for service 'Hosted/<service name>.MapServer' but it did not have adequate credentials.	Admin
DEBUG	13 mar 2020, 13:11:13	Exception in authorize Token Required	Server
DEBUG	13 mar 2020, 13:11:13	Computed privilege for user = ACCESS	Admin
FINE	13 mar 2020, 13:11:13	HTTP Referer: Not Available	Server
INFO	13 mar 2020, 13:11:13	Request user: Anonymous user, Service: Hosted/<service name>/FeatureServer	Rest
DEBUG	13 mar 2020, 13:11:13	ARCGIS_PORTAL_TOKEN Authentication, Token is not available in the request, request is treated as anonymous	Server‍‍‍‍‍‍‍‍‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

So my question is: How to set the authentication in my script tool to pass currently logged user's token to external requests?

Anonymous User

Maybe check out the portal logs and see what is happening- About portal logs—Portal for ArcGIS (10.8) | Documentation for ArcGIS Enterprise

Rejoindre la conversation

Les membres connectés peuvent publier, suivre les mises à jour, et plus encore. Nouveau ici ? Inscrivez-vous gratuitement.

Liens rapides

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.