The user does not have access to the detection rule for the referenced software resource

Products

• Client Management Suite
• IT Management Suite
• Software Management Solution
• IT Management Suite

Issue/Introduction

A few users stopped being able to open a few software delivery policies.

Getting a message saying that they do not have permission to access a few specific object.

 

Environment

Release: 8.5 RU3, RU4

Cause

The root cause is that the user does not have enough permission to access that specific object.

The issues that you might see in the Altiris logs are the following ones:

 

=================================================================================================

 

The user does not have access to the detection rule for the referenced software resource. Check that the user has required permissions(see Permissions\Settings\Notification Server\Resource and Data Class Settings\Resource Associations\System Permissions - Read permission).
-----------------------------------------------------------------------------------------------------
Date: 11/09/2020 15:04:55, Tick Count: 494408328 (5.17:20:08.3280000), Host Name: XXXXXXXX, Size: 575 B
Process: w3wp (11168), Thread ID: 197, Module: Altiris.SoftwareManagement.dll
Priority: 2, Source: Altiris.SoftwareManagement.Resources.SoftwareComponentResource.get_DetectionRule
File: C:\ProgramData\Symantec\SMP\Logs\a127.log

 

=================================================================================================

 

Unhandled error

Could not load the 'Software Component Supersedes Software Component' Resource Associations. Click menu: Settings->Security->Permissions. And select item: Settings->Notification \Server\Resource Associations\Software Management\
   [Altiris.NS.Exceptions.AeXSecurityException @ Altiris.SoftwareManagementSolution]
   at Altiris.SoftwareManagementSolution.Controls.DeliverSoftwareSelectorControl.GetSupercedes(IResource oSoftwareComponent)
   at Altiris.SoftwareManagementSolution.Controls.DeliverSoftwareSelectorControl.UpdateSupercedes(IResource oSoftwareComponent)
   at Altiris.SoftwareManagementSolution.Controls.DeliverSoftwareSelectorControl.SetPageValues(Guid guidSoftwareComponent)
   at Altiris.SoftwareManagementSolution.ClientTasks.DeliverSoftwareExEditControl.SetInitialValues()
   at Altiris.TaskManagement.Web.ManageTask.InitializeControls()
   at Altiris.TaskManagement.Web.ManageTask.Page_Load(Object sender, EventArgs args)
   at System.Web.UI.Control.OnLoad(EventArgs e)
   at Altiris.NS.UI.Controls.PageCachePage.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Exception logged from: 
   at Altiris.TaskManagement.UI.AltirisPageInstanceCachePage.OnAltirisPageInstanceCachePageError(Object, EventArgs)
   at System.Web.UI.TemplateControl.OnError(EventArgs)
   at System.Web.UI.Page.HandleError(Exception)
   at System.Web.UI.Page.ProcessRequestMain(Boolean, Boolean)
   at System.Web.UI.Page.ProcessRequest(Boolean, Boolean)
   at System.Web.UI.Page.ProcessRequest()
   at System.Web.UI.Page.ProcessRequest(System.Web.HttpContext)
   at Altiris.NS.UI.Controls.PageCachePage.ProcessRequest(System.Web.HttpContext)
   at Altiris.NS.UI.AltirisPage.ProcessRequest(System.Web.HttpContext)
   at System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(System.Web.HttpApplication+IExecutionStep)
   at System.Web.HttpApplication.ExecuteStep(System.Web.HttpApplication+IExecutionStep, Boolean&)
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

User [XXXXXXXX], Auth [XXXXXXXX], AppDomain [/LM/W3SVC/1/ROOT/Altiris/TaskManagement-2-132442444041975544]

HTTP [GET]: http://XXXXXXXX/Altiris/TaskManagement/ManageTask.aspx?ItemGuid=745f7b8b-31a0-4ef9-9091-69129d305c12&PageInstance=8f8c9f6b-643a-40b0-a920-6e413df05446
 ip: [XXXXXXXX]; languages: [XXXXXXXX];
 response: [200 OK]; x-smp-nsversion: [8.5.5032.0];

-----------------------------------------------------------------------------------------------------
Date: 11/09/2020 15:04:59, Tick Count: 494411921 (5.17:20:11.9210000), Host Name: XXXXXXXX, Size: 3,80 KB
Process: w3wp (11168), Thread ID: 523, Module: Altiris.TaskManagement.dll
Priority: 1, Source: Altiris.TaskManagement.UI.AltirisPageInstanceCachePage.OnAltirisPageInstanceCachePageError
File: C:\ProgramData\Symantec\SMP\Logs\a127.log

 

=================================================================================================

 

Resolution

You need to login to the ITMS Console, using the APP ID, and provide the needed permission to the user/group.

Checking the logs, it will provide some guidance about which permissions are missing:

The user does not have access to the detection rule for the referenced software resource. Check that the user has required permissions(see Permissions\Settings\Notification Server\Resource and Data Class Settings\Resource Associations\System Permissions - Read permission).

Follow the above structure and add the needed permission.