User source admins can't get reporting rights

  • 7009917
  • 20-Dec-2011
  • 27-Apr-2012


Novell ZENworks 11 Configuration Management Support Pack 1 - ZCM 11 SP1


Some administrators based on user source and assigned reporting rights fail to get rights to ZRS.
You do not have sufficient rights to access BusinessObjects Enterprise Reporting.

and the ZENworks Reporting Server InfoView is grey.
ERROR (from zcc.log):
20 Dec 2011 13:48:28 ============== Exception (begin) ===========================
20 Dec 2011 13:48:28 Exception occured
com.novell.zenworks.datamodel.exceptions.DataModelUsageException: Index 0 is out of bounds.
 at com.novell.zenworks.datamodel.session.jndi.ldap.AttributeGroupingHelper.getUIDs(
 at com.novell.zenworks.datamodel.session.jndi.ldap.LdapAuthoritativeSourceSession.getGroups(
 at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAllAssignedRightsForAdmin(
 at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAdminRights(
 at com.novell.zenworks.admin.pages.reports.ReportRedirection.hasReportRights(
 at com.novell.zenworks.admin.pages.reports.ReportRedirection.onLoad(
Exception Info:
20 Dec 2011 13:48:28     Class....... com.novell.zenworks.datamodel.exceptions.DataModelUsageException
20 Dec 2011 13:48:28     Message..... Index 0 is out of bounds.
20 Dec 2011 13:48:28     Logged at... ReportRedirection...296


This is fixed in version 11.2 - see KB 7010044 "ZENworks Configuration Management 11.2 - update information and list of fixes" which can be found at
Workaround:  Make a group that is in a context included in the User Source list of contexts.  Add the Reporting administrator to that group.

Additional Information

In this case, the Zone User source (Configuration/User Sources) was set to include only specific User Containers, example: ou=Teachers,dc=w2008domain,dc=com.  A user (teacher) in that container was a member of some group in another container.  This problem is not resolved if the user is a member of "Domain Users" group, which is likely not searched for rights.