App Control: unable to edit File Rule after first entry with partial policy permission user

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Users with partial policy permission failed to edit file rule after the first entry.

For example:

UserA has UserRole1, for Policy1 (PowerUser)

UserA searches File Catalog for FILE.exe
View Details - Approve by Policy
"Add File Rule" workflow
Selects Policy1, Save&Exit

UserA clicks View Details, Edit Approval by Policy
Click Remove Rule Button

User A attempts to Approve by Policy
"Edit File Rule" workflow
Policy field is missing.

UserA is no longer able to make file rule modifications to this file.

Environment

• App Control server: 8.1.8

Cause

Bug EP-11443.

Resolution

• This issue will be fixed on a future version. 
• The workaround is Software Rules - Files - Add File Rule, add by hash.