Error saving MCS Profile: the following permissions are required: MCS Write

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We are getting an error when trying to save the MCS profile. 

When we check the log's on OC server we see:

" 2023-10-03 10:08:52.456 [https-jsse-nio-8443-exec-39]  ERROR com.ca.uim.mcs.api.controller.ProfileSummaryController:updateProfile:294 controller.ProfileSummaryController - Unexpected error occured.
com.ca.uim.mcs.api.exception.ForbiddenException: Insufficient permission for operation - the following permissions are required: MCS Write "  

 

Environment

DX UIM 2.4.* / 23.4.* 

Cause

missing/corrupt ACL 

Resolution

the cause of this issue is that the "MCS Write" is probably missing from the \hub\security.cfg (primary hub) 

 

Check if it's there: 

   <MCS Write>
      desc = Manage MCS profiles from Operator Console
      type = Operator Console
      access = admin
   </MCS Write>

 

If this is not there, check the file, in the primary hub: \Nimsoft\probes\service\distsrv\base_acls.cfg

 

Check if the MCS Write ACL is there. 

 

    <MCS Write>
      name = MCS Write
      desc = Manage MCS profiles from Operator Console
      access = admin
      type = Operator Console     
      apply_to_existing_acls = Superuser,Administrator
   </MCS Write>

 

If it's not there, add it to this file. 

If it's there and it is not present in the security.cfg follow the instruction below: 

 

So the following actions should resolve the problem: 

 

 

1.  In Infrastructure Manager, navigate to the distsrv probe on the Primary hub.

 

2. With the distsrv probe selected, press "Ctrl-P" the probe Utility (pu) should appear.

 

3. In the probe commandset, select callback set_acl_init with the parameter value "base_acls.cfg". The callback updates the security.cfg with the ACLs, it will not delete any ACLs, nor change any ACLs.

 

5. In the Iinfrastructure Manager, open Security -> Manage Access Control List. Check to make sure the ACL has  <MCS Write>. 

6. Check if the user used to use MCS has the MCS Write option ticked now

 

7. Logout, and log back in with the user, the issue should now be resolved. 

Additional Information

An alternative symptom observed is that the MCS Profile Spins and never save. In that case the error INSUFFICIENT_PERMISSIONS_ALL_REQUIRED  the following permissions are required: MCS Write may be only visible in the Browser Developer Tool session inside the Network response logs error.