EEM Access Policy does not work properly

Products

• CA Workload Automation AE - Scheduler (AutoSys)

Issue/Introduction

EEM Access Control Policy does not work as expected when protecting Monitoring views.  Based on the EEM security policy I created, the access to the view is properly denied when running a Permission Check in EEM.

But in WCC Monitoring Views, I am still able to see all the defined views 

 

 

Environment

WCC

Resolution

When any CA EEM policy that affects Monitoring is changed, by default, it takes 60 minutes to be reflected in CA WCC.

The default timeout value reduces the overhead of checking CA EEM for every request.

However, you can set the timeout to a lower value to reflect CA EEM security changes in Monitoring more quickly.

Setting the value to 0 allows security changes to be reflected immediately.

Steps to change this default setting in WCC are:

       -  Open the Configuration tab

       -  In “Preferences” , open the "View/Modify Preferences" drop down list and select "Monitoring" then click GO

        -  Look for option “Security Cache Timeout” and change it from 60 (minutes) to 0 or a lower value

Changes are dynamic, there is no need to recycle WCC