CALL - Add Object - com.uc4.communication.requests.TemplateList '1000': Access denied

Products

• CA Automic Workload Automation - Automation Engine
• CA Automic One Automation

Issue/Introduction

A user who does not have access to create USER objects was updating a notification (email) object and in the Recipients list accidently clicked "add object" which threw the big red exception.

Error during XRequest
com.uc4.communication.requests.TemplateList '1000': Access denied

Is there any way to hide the add object button and/or keep a giant red error from the users?

Environment

Release : 21.0.5

Resolution

With 21.0.7 the error now shows:

Warning
Failed to create object. 'USER.NEW.1/DEPT': Access denied

which is a much more descriptive message.  There's also information that shows up in the Messages window when using SECURITY_AUDIT_FAILURE:

9/6/2023 09:22:46 PM

 

U00004519 Access violation details: Used filter: 'USER' .

9/6/2023 09:22:46 PM

 

U00004505 Access violation: User: 'USERNAME/DEPT' Object: 'USER.NEW.1/DEPT' Access type: 'U00909801 W' Reason: prohibition in authorization profile: 'USERNAME/DEPT'.

9/6/2023 09:22:44 PM

 

U00004512 Access trace: User: 'USERNAME/DEPT' Object: '0100' Access: 'U00909801 W'.