Able to see all Global Variables even with restrictions vis as-gvar policy

Products

• CA Workload Automation AE

Issue/Introduction

I'm able to see all Global Variables,  using '*'  as the filter.   A bunch of these are actually restricted for viewing via as-gvar EEM policy.  Why is it happening

 

Environment

Release : 12.0

Component :

Cause

as-list EEM policy for autorep was enabled and All Identities was listed with the grant. This policy was over-riding the as-gvar policy's restrictions. 

Resolution

Set the as-list EEM policy for autorep to Explicit Deny,  or  remove All Identities from this policy and add selecting admin users who should be able to see all the variables even with as-gvar restrictions.