Configuring the mashup for systems that have BAC turned ON - pegasystems/uplus-wss GitHub Wiki

Broken Access Control (BAC) is enabled by default in Pega 8.5 and you will need to update the Mashup configuration in the Settings page to provide an additional parameter called the 'Channel ID' - see https://community.pega.com/knowledgebase/articles/pega-customer-service-enhancements-prevent-broken-access-control/pega-customer-service-enhancements-prevent-broken-access-control for more details on BAC

In the Pega 8.5 mashup snippet, the gadget request will pass the channel id value as pwmChannelID parameter value along with action parameters. To get the channel id, it is required to create a 'Mashup' channel in your application using the Channels landing page - this page can be accessed from App Studio or Dev Studio

If you fail to pass the correct channel id, the following error will be seen

When you create your web channel for your quicklinks or todoList - click on the button ‘Generate Mashup code’ to get your channel ID

You will need to use the latest version of Uplus on github to see the ‘Channel ID’ field present in the settings page.

make sure that the application name, channel ID and the URL that you enter in the Settings page exactly match the settings in the channel that you created.