Network Automation Software We are currently migrating this forum
over to our HelpSystems domain. Please
post all new threads in our new
HelpSystems Community Portal.
Post to the HelpSystems Forum
You are not currently logged on. You must be logged on in order to post. Log on
Or Create a new account
AutoMate Discussion
Decrease font size
Increase font size
Topic Title: Security issue with WebSMC
Topic Summary:
Created On: 07/29/2015 01:23 AM
Status: Read Only
Linear : Threading : Single : Branch
Search Topic Search Topic
Topic Tools Topic Tools
View similar topics View similar topics
View topic in raw text format. Print this topic.
 07/29/2015 01:23 AM
User is offline View Users Profile Print this message

Author Icon
BenjaminKorper
Artisan (200-499)

Posts: 231
Joined: 06/18/2009

Hi guys,

We have just started using the Web SMC at one of our clients and found out that if a user doesn't have rights to a certain folder they get a message saying they don't have permissions. However, after refreshing, the workflows do show up.
I have attached 2 screenshots.
I've only managed to test this on v9.0.5.4. Could someone test this behaviour on v10?

Regards,

Benjamin.

 Category Survey


Click for full image
Click for larger image
Click for full image
Click for larger image



-------------------------

 07/31/2015 03:29 PM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Benjamin,

Are you able to get into the folders in question? You will be able to see the folders but will not be able to get inside of the folder itself.

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 08/06/2015 04:27 AM
User is offline View Users Profile Print this message

Author Icon
BenjaminKorper
Artisan (200-499)

Posts: 231
Joined: 06/18/2009

Yes, i am able to get into the folder just by pressing the folder a few times

 Category Survey


-------------------------

 08/07/2015 09:47 AM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Benjamin,

We will test this issue internally and update the thread asap.

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 08/11/2015 03:09 PM
User is offline View Users Profile Print this message

Author Icon
Valentineo McGowan
HelpSystems

Posts: 766
Joined: 09/03/2013

Hello Benjamin,

I have tested this in v10.3.0.13 WebSMC on Windows 8.1

When a user does not have permission to access a folder:
1 A message displays:
"Your account permissions do not allow you to perform the requested task."
2 The user in question will not be able to access any objects contained within this folder. If they attempt to do so again, even if they are able to 'see' the folder name; the same message will display.

 Category Survey


-------------------------

Valentineo McGowan | Technical Consultant
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1 213.738.6966 | F: +1.213.738.7665
 09/10/2015 04:01 AM
User is offline View Users Profile Print this message

Author Icon
BenjaminKorper
Artisan (200-499)

Posts: 231
Joined: 06/18/2009

Hi Valentineo,

Have you tried clicking the folder item a few times?
I can easily reproduce this issue on a v9 install.

Regards,

Benjamin

 Category Survey


-------------------------

 09/14/2015 04:54 PM
User is offline View Users Profile Print this message

Author Icon
Valentineo McGowan
HelpSystems

Posts: 766
Joined: 09/03/2013

Hello Benjamin,

Yes, that is correct, as you stated initially you were able to see this behavior in v9's WebSMC.

Your inquiry into Support was for us to determine if this same behavior existed in v10 (v10.3.0.13) wherein users who do not have permissions to specific folders gain access to them after 'refreshing' or 'clicking the folder(s) multiple times'. They do not.

The Security settings for Users are being adhered to as designed in v10 WebSMC.

 Category Survey


-------------------------

Valentineo McGowan | Technical Consultant
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1 213.738.6966 | F: +1.213.738.7665
 04/06/2017 10:04 AM
User is offline View Users Profile Print this message

Author Icon
KevinWied
n00b (>6 posts)

Posts: 1
Joined: 08/18/2015

Good Morning,

I am experiencing this same issue with Web SMC 10.7.0.3.  When users with restricted rights login to the web SMC they get an error when choosing a restricted folder, but if they click that folder a second time, it opens and allows them access.  I see that Web SMC 11.0 is coming soon.  Will this be addressed in that release?



 Category Survey
AutoMate BPA Server 9 version:
Windows version: Windows Server 2008 R2
 04/10/2017 12:59 PM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hello Kevin,

Would it be possible to set-up a GoToAssist session where we can take a closer look at this issue? If this is possible please send an email over to AutoMate.Support@helpsystems.com with a list of your availability. We want to make sure this gets addressed.

Note: Please reference this forum thread in your email.


 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
Statistics
18258 users are registered to the AutoMate Discussion forum.
There are currently 0 users logged in.
The most users ever online was 5551 on 01/08/2018 at 11:11 AM.
There are currently 1390 guests browsing this forum, which makes a total of 1390 users using this forum.

FuseTalk Enterprise Edition v4.0 - © 1999-2020 FuseTalk Inc. All rights reserved.

Sitemap Network Automation Software Blog