AWI Global Search Shows "My Favorites" Folders from Other Users

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

In the Automic Web Interface (AWI), users can see folders created in the "My Favorites" section of other users when performing a global search. When an unauthorized user attempts to interact with these folders, misleading error messages are displayed.

Symptoms

• A folder created by User A in their "My Favorites" is visible in the global search results for User B.
• When User B clicks on the folder in the search results, the AWI displays: Error: Page not found
• If User B attempts to move the folder via right-click, a popup appears stating: Could not find the object. It may have been deleted or renamed
• AWI logs capture the following error during these attempts: java.lang.IllegalArgumentException: Folder not found

 

Environment

• Product: CA Automic Workload Automation - Automation Engine
• Component: Automic Web Interface (AWI)
• Affected Versions:
  • Automic Automation 21.x, 24.x, 26.x 

Cause

This behavior is identified as a software defect. The global search index currently includes "My Favorites" folders from all users within a client without filtering by owner or applying proper Access Control List (ACL) checks during the search result generation. This leads to the retrieval of objects that the searching user does not have permission to access, resulting in generic "not found" errors.

This issue is tracked under defect DE184929.

Resolution

Engineering is working to either exclude other users' "My Favorites" from the search index or provide a more relevant "Access Denied" error message.

A fix is currently targeted for the following releases:

• Automic Automation Engine 24.4.x - TBA
• Automic Automation Engine 26.x.x - TBA