Disabled "Create children" folder permission still allows the creation of items in the folder
book
Article ID: 379488
calendar_today
Updated On:
Products
IT Management Suite
Issue/Introduction
There is an issue where Security roles with disabled 'Folder Permission' - 'Create Children" are still able to create Items in this folder on main "Filters" page.
Steps to duplicate:
Perform an AD import of "Roles and Accounts" from your AD
Go to Manage > Filters > create there own custom root folder and two sub-folders and this custom root folder > create custom filter in each sub-folder.
Go to "Roles" page and clone default "Symantec Administrators" role > remove there NSAppIdentity account and add any Domain Admin account in this cloned role.
Open Security role manager for this cloned role > choose "Filters" in drop-down menu and remove all default enabled permissions from root "Filters" folder > save changes. Now click "+" and select there your custom root folder > click "OK" > now enable "Create Children" permission for one of sub-folders and one of sub-folders has disabled "Create Children" permission > save changes.
Login to SMP Console using account from cloned Symantec Administrators role > go to "Manage" > "Filters" > right click on folder that has disabled "Create Children" folder permission > see result, you still can create items there but should not.
Repeat steps from 2 to 5 to make similar for "Jobs and tasks" page.
Environment
ITMS 8.7.1, 8.7.2
Cause
Known issue.
Resolution
This issue has been fixed in our ITMS 8.7.3 Release
Workaround:
Open "Security Role Manager"
Choose affected custom Security role in "Role:" drop-down menu
Choose "Resources" in "View:" drop-down menu
Click on root "Resource Management" folder
Now click "Advanced" button on right side of Security Role Manager page
Click on "NT Authority\Authenticated Users" role and un-check "Create Children" permission > save changes.