Cloned "Symantec Administrators" role in ITMS 8.5 RU4, after upgrade to ITMS 8.6 RU3 can't import a new SW Package because of missed permissions.
Errors from Console:
You must first configure the Software Library with a valid location before using Software Library as a package source.
An error has occurred during creation of the software package. Check server logs for details.
"1/22/2023 9:25:21 AM","WebApi Controller failure.
The current user 'MyDomain\Role Non Admin' does not have required permission 'read' to load item: 17ad008a-6a9e-46fa-b719-f712999b17eb
[AeXUnauthorizedAccessException @ Altiris.NS.dll]
at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(string)
at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem, IEnumerable<Guid>, ItemLoadFlags)
at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid, IEnumerable<Guid>, ItemLoadFlags, out bool)
at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid, IEnumerable<Guid>, ItemLoadFlags)
at Altiris.SoftwareManagement.SoftwareCatalogConfig.GetDefaultPackageAssignment()
at Altiris.SoftwareManagement.SoftwareCatalogConfig.SetDefaultPackageAssignment<T>(T)
at Altiris.SoftwareManagement.Resources.SoftwarePackageResource.CreateUnconfiguredPackage()
at Altiris.SoftwareManagement.WebApi.Controllers.PackageController.CreateUnconfiguredPackage()
at .lambda_method(Closure, object, object[])
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor+ActionExecutor+<>c_DisplayClass6_2.<GetExecutor>b_2(object, object[])
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext, IDictionary<string,object>, CancellationToken)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ApiControllerActionInvoker+<InvokeActionAsyncCore>d__1.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ActionFilterResult+<ExecuteAsync>d__5.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ExceptionFilterR
Error from Console:
Software import failed.
"1/22/2023 9:26:47 AM","WebApi Controller failure.
Software package '00000000-0000-0000-0000-000000000000' is not found.
[AeXItemNotFoundException @ Altiris.SoftwareManagement.WebApi.dll]
at Altiris.SoftwareManagement.WebApi.Controllers.PackageController.UpdatePackage(Package, AddEditPackageRequest, out PackageRepositoryManager)
at Altiris.SoftwareManagement.WebApi.Controllers.PackageController.ImportPackage(ImportPackageRequest)
at .lambda_method(Closure, object, object[])
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor+ActionExecutor+<>c_DisplayClass6_2.<GetExecutor>b_2(object, object[])
at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext, IDictionary<string,object>, CancellationToken)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ApiControllerActionInvoker+<InvokeActionAsyncCore>d__1.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ActionFilterResult+<ExecuteAsync>d__5.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task)
at System.Web.Http.Controllers.ExceptionFilterResult+<ExecuteAsync>d__6.MoveNext()
ITMS 8.6, 8.7
Item 17ad008a-6a9e-46fa-b719-f712999b17eb belongs to 'Software Catalog Configuration' item (the UI below is visible by a true Symantec Administrator).
This issue has been reported to our Broadcom Development team. Unfortunately, we cannot do anything about the issue because we are not allowed to modify the custom roles.
Workaround: