# \[BUG-15001\] Bad\_AccessDenied error on all calls to system.tag.configure() in latest 8.0.5-nightly

**URL:** <https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296>\
**Category:** Ignition Early Access\
**Created:** [September 16, 2019, 8:09pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296 "2019-09-16T20:09:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![justin.brzozoski](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justin.brzozoski/32/13452_2.png) [@justin.brzozoski](https://forum.inductiveautomation.com/u/justin.brzozoski)\
**Post date:** [September 16, 2019, 8:09pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/1 "2019-09-16T20:09:51Z")

</div>

Just upgraded our development server from 8.0.3-rc2 to 8.0.5-nightly (b2019091302) today.

All calls to system.tag.configure in our gateway scripts are now failing for Bad\_AccessDenied. I just skimmed the nightly release notes between those two versions, and there were a few things around tag configuration, but nothing that looks directly related.

I have verified that I can configure the tags in the Designer GUI, but I get the error if I call system.tag.configure() from the Designer’s script console.

Is this an issue anyone else is bumping into or are we special? 🙂

If it matters, the tags are from the MQTT Engine provider. I had upgraded that module to the latest nightly build at the same time as I upgraded Ignition, but then downgraded it back to the prior version when I noticed this error. The error is still sticking around, so I’m less inclined to blame MQTT Engine.

---

<div class="post-metadata">

**Author:** ![justin.brzozoski](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/justin.brzozoski/32/13452_2.png) [@justin.brzozoski](https://forum.inductiveautomation.com/u/justin.brzozoski)\
**Post date:** [September 16, 2019, 8:14pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/2 "2019-09-16T20:14:29Z")

</div>

Maybe MQTT Engine isn’t in the clear just yet… I am able to call system.tag.configure() on tags from other providers… Still experimenting…

---

<div class="post-metadata">

**Author:** ![awalker](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/awalker/32/6874_2.png) [@awalker](https://forum.inductiveautomation.com/u/awalker)\
**Post date:** [September 18, 2019, 7:20pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/3 "2019-09-18T19:20:45Z")

</div>

Hi Justin,

I see that you got in contact with support and we have filed a ticket for this issue.

I’ll let you know when we have a fix.

---

<div class="post-metadata">

**Author:** ![Colby.Clegg](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/colby.clegg/32/3282_2.png) [@Colby.Clegg](https://forum.inductiveautomation.com/u/Colby.Clegg)\
**Post date:** [September 20, 2019, 10:53pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/4 "2019-09-20T22:53:54Z")

</div>

Hi,

Just wanted to say, this is an issue in the platform, not the CL modules. We recently modified the tag security model, and in this case, changes from scripts get marked as “new” configs. In a normal provider, the “overwrite” policy would let it work, but users aren’t allowed to create new tags in the MQTT provider, so it’s incorrectly failing, instead of treating it like an edit.

Fix is pending for 8.0.5, will let you know when it makes it into a build!

---

<div class="post-metadata">

**Author:** ![awalker](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/awalker/32/6874_2.png) [@awalker](https://forum.inductiveautomation.com/u/awalker)\
**Post date:** [September 27, 2019, 9:35pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/5 "2019-09-27T21:35:02Z")

</div>

This issue was fixed in the 8.0.5 nightly build that was uploaded today (9/27).

---

<div class="post-metadata">

**Author:** ![mitchell-ACS](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mitchell-acs/32/30062_2.png) [@mitchell-ACS](https://forum.inductiveautomation.com/u/mitchell-ACS)\
**Post date:** [October 11, 2019, 4:23pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/6 "2019-10-11T16:23:48Z")

</div>

Hi @awalker, I am on 8.0.5-rc1 (b2019100115) and I am still getting this error when trying to edit MQTT tags through scripting.

---

<div class="post-metadata">

**Author:** ![mitchell-ACS](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mitchell-acs/32/30062_2.png) [@mitchell-ACS](https://forum.inductiveautomation.com/u/mitchell-ACS)\
**Post date:** [October 11, 2019, 5:13pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/7 "2019-10-11T17:13:46Z")

</div>

I think I have located the problem, I was thinking I had to do an “a” in the collision policy because “o” changed the MQTT tag value to stale, but after triggering a rebirth it seems to be working correctly now!

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [October 11, 2019, 5:16pm UTC](https://forum.inductiveautomation.com/t/bug-15001-bad-accessdenied-error-on-all-calls-to-system-tag-configure-in-latest-8-0-5-nightly/28296/8 "2019-10-11T17:16:27Z")

</div>

@mitchell-ACS  
That would make sense. The changes Colby made above are specific to the evaluation of edits, and with an `abort` or `rename` collision policy, the edit can’t go through. Either overwrite mode should work, as you noticed.
