Operators group permissions to create tasks from Command line not allowed
book
Article ID: 85848
calendar_today
Updated On:
Products
CA Automic Dollar Universe
Issue/Introduction
Error Message : CLI: Access denied error
Patch level detected:Univiewer Management Server 6.1.00 Product Version: Dollar.Universe 6
The Operators group has the operator role, which has full permission to create/delete/update/etc tasks.
It also has permission to use uprocs, mu, and submission account in tasks as well which seems sufficient for any task manipulation activity when using UniViewer Console.
It is all the default permissions in DU and not modified at all.
The submission account of a uproc falls in the Operators group (based on System User Patterns). The uproc calls a create task command (uxadd task ...) and it fails with an access denied error.
Environment
OS: All
Cause
Cause type: Defect Root Cause: This is an expected behaviour ( Operators role should not be able to create / update / duplicate / delete Tasks). The problem was that the UVMS 6.1.x would set wrong default permissions for the Operators group.
Resolution
Update to a fix version listed below or a newer version if available. Create/update/duplicate/delete are disabled on Task when initializing the Operator Permissions.
Fix Status: Released
Fix Version(s): Component: Univiewer Management Server Dollar Universe 6.2.21 - Available