Environment
Novell ZENworks Configuration Management 11.3 ZENworks Control Center - ZCC
Situation
ZCM administrators are imported from LDAP user source
ZCM administrators did not have direct rights assignment before the ZCM upgrade
After the upgrade the ZCM administrators have direct rights assignment of View Leaf right for different object root folders and all other rights are showing as denied.
Those other rights appear to be denied but they are actually unset in the SQL database, so respective inherited rights set to Allow are still applying.
ZCM administrators did not have direct rights assignment before the ZCM upgrade
After the upgrade the ZCM administrators have direct rights assignment of View Leaf right for different object root folders and all other rights are showing as denied.
Those other rights appear to be denied but they are actually unset in the SQL database, so respective inherited rights set to Allow are still applying.
Resolution
This is fixed in version 11.3.2 - see KB 7015776 "ZENworks Configuration Management 11.3.2 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7015776
Cause
ZCC can only show Allow or Deny for a right. In this case while respective rights are not set at all, they are nevertheless display as denied.
In this case it is not possible to clearly calculate the effective ZCC administrator rights since it is not indicated whether a right as actually denied or not set at this level but actually only showing to be denied.
In this case it is not possible to clearly calculate the effective ZCC administrator rights since it is not indicated whether a right as actually denied or not set at this level but actually only showing to be denied.