search cancel

Several reports do not display results for non Symantec Administrators after upgrade to 8.5 RU2

book

Article ID: 175028

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

Data from dataclasses not available in Custom Criteria dialog if user is not part of the Symantec Administrators role.

Right click -> delete computer does not appear with any other role except Symantec Administrators role

In Altiris console, computers can only be deleted with Symantec Administrator role. With the rest of Roles, the Right click -> Delete option does not appear despite have enabled the option in Security Role Manager -> Settings -> Right Click Menu -> Delete and in Role Privileges -> Right Click Menu -> Delete

No error message

Cause

This is a known issues related to "dbo.fnGetTrusteeScopedResources".

Environment

ITMS 8.5 RU2

Resolution

This issue has been reported to the Symantec Development team. This issue fix is targeted to ITMS 8.5 RU3 release.

The current workaround is to use the RU1 version of the function by following the steps below.

  1.  Run the following in order to remove the current version of this fuction:
    DROP FUNCTION [dbo].[fnGetTrusteeScopedResources]
  2. Then run the following to create it back using the original 8.5 RU1 version of it:
    CREATE FUNCTION [dbo].[fnGetTrusteeScopedResources]
    (
        @Trustees   nvarchar(max)
    )
    RETURNS TABLE
    AS
    RETURN
        WITH cte_Trustee ( Guid ) as
        (
            SELECT      DISTINCT st.TrusteeGuid
                FROM    dbo.fnListToTable( @Trustees, ',' ) tr
                JOIN    sec_Trustee st ON st.Trustee = tr.[nstr]
        ),
        cte_IsAdmin ( flSymcAdmin ) AS
        (
            SELECT      COUNT(*) AS [Cnt]
                FROM    cte_Trustee
                WHERE   Guid = '2E1F478A-4986-4223-9D1E-B5920A63AB41'
        ),
        cte_Entity ( EntityGuid ) AS
        (
            SELECT      se.EntityGuid
                FROM    cte_IsAdmin aa
                JOIN    sec_Entity  se ON aa.flSymcAdmin = 1
            UNION ALL
            SELECT      se.EntityGuid
                FROM    cte_IsAdmin aa
                JOIN  ( SELECT     ss.EntityGuid
                            FROM   sec_EntitySource  ss
                            JOIN   sec_EntityTrustee st ON st.EntityGuid = ss.SourceGuid
                            JOIN   cte_Trustee       tt ON tt.Guid = st.TrusteeGuid
                            WHERE  st.Permission >= 0x2000000000000000
                      ) se ON aa.flSymcAdmin = 0
        )
        SELECT    DISTINCT sm.ResourceGuid
            FROM  ScopeMembership   sm
            WHERE sm.ScopeCollectionGuid IN ( SELECT EntityGuid FROM cte_Entity )
    GO

Also please refer to TECH254681 "Right-click context menu is missing items in ITMS 8.5 RU2" for a similar issue with this function.