User with permissions "Read Only" on Node Settings can modify "Node variables, Node files and Licenses"

book

Article ID: 85571

calendar_today

Updated On:

Products

CA Automic Dollar Universe

Issue/Introduction

Error Message :
No error is displayed

Patch level detected:Dollar Universe 6.2.00
Product Version: Dollar.Universe 6.2.0

Description :The user XXX has the following permissions on the nodes belonging to the company UNIV60:

Object Type Key Action Rule Granted by Role
Node Settings NODE_SETTINGS=* Display Allow DUAS UNIV60/X Read-only

He can modify the following objects on the Node Settings of the nodes belonging to the company UNIV60:
node variables
node files
licenses

Cause

Cause type:
Defect
Root Cause: There was no specific permissions for the Node variables, Node files and Licenses

Environment

OS: All

Resolution

The correction affects Univiewer Console and Dollar Universe:

UVC : added multiple AccessDenied exceptions.
DU : added permission check for mentioned objects.

Fix Status: Released

Fix Version(s):
Component: Application.Server
Version: Dollar.Universe 6.3.01

Additional Information

Workaround :
N/A