Carbon Console shows blank page when secondary user store admin opens Identity Providers → Resident

[sajith-madhusanka]

Description

Problem

When an admin user from a secondary user store (AD or LDAP) logs into the Carbon Management
Console and navigates to Identity Providers → Resident, the page renders completely blank.
No error message is shown. The same page loads fine for primary (local) user store admins.

Root cause

idp-mgt-edit-local.jsp calls IdentityGovernanceAdminClient.getConnectorList() to render
the Governance Connectors section. The backing SOAP service (IdentityGovernanceAdminService)
requires the /permission/admin/manage Carbon permission. Secondary user store admin roles
typically don't carry this permission, so the call fails with AxisFault: Access Denied.

The JSP only catches ClassNotFoundException (added for APIMANAGER-5713). The AxisFault —
which extends java.rmi.RemoteException in Axis2 1.6.x — reaches Tomcat unhandled, which
aborts the page render.

Steps to Reproduce

1. Configure a secondary user store (Active Directory or LDAP) in WSO2 API Manager.
2. Create an admin user in the secondary user store. Assign Identity Provider management
   permissions, but not the root /permission/admin/manage Carbon permission.
3. Log in to the Carbon Management Console (https://<host>:9443/carbon) as that user.
4. Navigate to Identity → Identity Providers → Resident.

Result: Blank page.
Expected: The Resident IDP page loads. If the user lacks /permission/admin/manage, the
Governance Connectors section should simply be absent — the rest of the page should still render.

Version

3.2.0

Environment Details (with versions)

No response