Administrator rights appear to be denied after upgrading to ZCM 11.3

  • 7014971
  • 29-Apr-2014
  • 29-Dec-2014

Environment

Novell ZENworks Configuration Management 11.3 ZENworks Control Center - ZCC

Situation

ZCM administrators are imported from LDAP user source
ZCM administrators did not have direct rights assignment before the ZCM upgrade

After the upgrade the ZCM administrators have direct rights assignment of View Leaf right for different object root folders and all other rights are showing as denied.

Those other rights appear to be denied but they are actually unset in the SQL database, so respective inherited rights set to Allow are still applying.


Resolution

This is fixed in version 11.3.2 - see KB 7015776 "ZENworks Configuration Management 11.3.2 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7015776

Cause

ZCC can only show Allow or Deny for a right. In this case while respective rights are not set at all, they are nevertheless display as denied.

In this case it is not possible to clearly calculate the effective ZCC administrator rights since it is not indicated whether a right as actually denied or not set at this level but actually only showing to be denied.