You currently do not have sufficient rights to perform this action when accessing a job

Products

• IT Management Suite

Issue/Introduction

A user is trying to view a job and is presented with the message "You currently do not have sufficient rights to perform this action. Please contact your local area network administrator for further assistance."

In the Console:

When the user views the job they are presented with the message "You currently do not have sufficient rights to perform this action. Please contact your local area network administrator for further assistance."

 

In the Notification Server Logs:

Unhandled error

The current user 'User' does not have required permission 'read' to load item: 858b3fb1-fc88-42b9-a469-54970fdb3196
   [Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]
   at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
   at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags, Boolean& cacheHit)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.TaskManagement.UI.Controls.JobEditControl.CheckJobNodes(IBaseJob job)
   at Altiris.TaskManagement.UI.TaskControls.TaskEditControl.CreateChildControls()
   at System.Web.UI.Control.EnsureChildControls()
   at Altiris.TaskManagement.Web.ManageTask.InitializeControls()
   at Altiris.TaskManagement.Web.ManageTask.Page_Load(Object sender, EventArgs args)
   at System.Web.UI.Control.OnLoad(EventArgs e)
   at Altiris.NS.UI.Controls.PageCachePage.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Cause

The job is referencing a job or task that the user does not have read permissions to. 

Resolution

Move the referenced job or task to a location where the user has access to, or grant the role in which the user is a member of read permission to the job or task in its current location.

The job or task being referenced can be determined by viewing the properties of the item by gathering the guid referenced in the logs and browsing to the following URL.

• http://servername/Altiris/NS/ItemPropertiesNS7.aspx?view=properties&ConsoleGuid={3faa8b67-250b-42ad-8186-fe2f49a9e707}&ItemGuid=ITEMGUID

​For example, using the guid referenced in the sample log file in the Error Message section:

1. Browse to the Properties URL using the guid referenced in the logs http://servername/Altiris/NS/ItemPropertiesNS7.aspx?view=properties&ConsoleGuid={3faa8b67-250b-42ad-8186-fe2f49a9e707}&ItemGuid=858b3fb1-fc88-42b9-a469-54970fdb3196
   
   
   • Name: the name of the job or task
   • Folder: the path in the console where the job or task is located (Note: '\Notifcation Server\Tasks\Jobs and Tasks' refers to Manage > Jobs and Tasks in the console)
2. Browse to the location of the job/task in the SMP Console
3. Move the job or task to a location where the user has read permissions to, or grant the role permission to the job/task using the security role manager (Settings > Security > Security Role Manager)