Environment
Novell ZENworks 11 Configuration Management Support Pack 1 - ZCM 11 SP1
Situation
Some administrators based on user source and assigned reporting rights fail to get rights to ZRS.
ERROR:
You do not have sufficient rights to access BusinessObjects Enterprise Reporting.
and the ZENworks Reporting Server InfoView is grey.
and the ZENworks Reporting Server InfoView is grey.
ERROR (from zcc.log):
20 Dec 2011 13:48:28 ============== Exception (begin) ===========================
20 Dec 2011 13:48:28 Exception occured
com.novell.zenworks.datamodel.exceptions.DataModelUsageException: Index 0 is out of bounds.
at com.novell.zenworks.datamodel.session.jndi.ldap.AttributeGroupingHelper.getUIDs(AttributeGroupingHelper.java:56)
at com.novell.zenworks.datamodel.session.jndi.ldap.LdapAuthoritativeSourceSession.getGroups(LdapAuthoritativeSourceSession.java:1314)
at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceServiceImpl.getGroups(AuthoritativeSourceServiceImpl.java:588)
at com.novell.zenworks.datamodel.services.groupings.GroupingImpl.getGroups(GroupingImpl.java:170)
at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAllAssignedRightsForAdmin(HibernateAdministratorSession.java:2572)
at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAdminRights(HibernateAdministratorSession.java:349)
at com.novell.zenworks.datamodel.services.administrators.AdministratorAdminImpl.getEffectiveAdminRights(AdministratorAdminImpl.java:273)
at com.novell.zenworks.admin.pages.reports.ReportRedirection.hasReportRights(ReportRedirection.java:285)
at com.novell.zenworks.admin.pages.reports.ReportRedirection.onLoad(ReportRedirection.java:97)
...
Exception Info:
20 Dec 2011 13:48:28 Class....... com.novell.zenworks.datamodel.exceptions.DataModelUsageException
20 Dec 2011 13:48:28 Message..... Index 0 is out of bounds.
20 Dec 2011 13:48:28 Logged at... ReportRedirection...296
20 Dec 2011 13:48:28 Exception occured
com.novell.zenworks.datamodel.exceptions.DataModelUsageException: Index 0 is out of bounds.
at com.novell.zenworks.datamodel.session.jndi.ldap.AttributeGroupingHelper.getUIDs(AttributeGroupingHelper.java:56)
at com.novell.zenworks.datamodel.session.jndi.ldap.LdapAuthoritativeSourceSession.getGroups(LdapAuthoritativeSourceSession.java:1314)
at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceServiceImpl.getGroups(AuthoritativeSourceServiceImpl.java:588)
at com.novell.zenworks.datamodel.services.groupings.GroupingImpl.getGroups(GroupingImpl.java:170)
at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAllAssignedRightsForAdmin(HibernateAdministratorSession.java:2572)
at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAdminRights(HibernateAdministratorSession.java:349)
at com.novell.zenworks.datamodel.services.administrators.AdministratorAdminImpl.getEffectiveAdminRights(AdministratorAdminImpl.java:273)
at com.novell.zenworks.admin.pages.reports.ReportRedirection.hasReportRights(ReportRedirection.java:285)
at com.novell.zenworks.admin.pages.reports.ReportRedirection.onLoad(ReportRedirection.java:97)
...
Exception Info:
20 Dec 2011 13:48:28 Class....... com.novell.zenworks.datamodel.exceptions.DataModelUsageException
20 Dec 2011 13:48:28 Message..... Index 0 is out of bounds.
20 Dec 2011 13:48:28 Logged at... ReportRedirection...296
Resolution
This is fixed in version 11.2 - see KB 7010044 "ZENworks Configuration Management 11.2 - update information and list of fixes" which can be found at https://www.novell.com/support
Workaround: Make a group that is in a context included in the User Source list of contexts. Add the Reporting administrator to that group.
Additional Information
In this case, the Zone User source (Configuration/User Sources) was set to include only specific User Containers, example: ou=Teachers,dc=w2008domain,dc=com. A user (teacher) in that container was a member of some group in another container. This problem is not resolved if the user is a member of "Domain Users" group, which is likely not searched for rights.