user_admin Role no longer works

Brian Lancaster · ‎09-16-2015

Ever since we upgraded to Fuji user who have the user admin role are no longer able to see any users. When they click on Users under User Administration menu they get the following error "Security constraints prevent access to requested page". Any thoughts on what might cause this?

bernyalvarado · ‎09-16-2015

Hi Brian,

Thanks for the clarification.

You must have a read ACL with the name of sys_user. This ACL is at the table label. If it doesn't exist then nobody (except system admins) will have access to your sys_user table (unless your system is configured to allow by default access to everybody to anything).

If it doesn't exist, you may want to create that ACL at the table label. Table: sys_user Field: - NONE -. You can make it open since in theory anyone should have access to the sys_user table.

Thanks,

Berny

View solution in original post

loupetridish · ‎12-09-2015

Guys, sorry to go back to this post but this is the exact issue I am having. When I went System Security > Access Control (ACL) and looked for sys_user I found that I have 5 of those ACLs.

sys_user - create

sys_user - delete

sys_user - read

sys_user - write

sys_user.* - read

If those are all available any idea why users can't view the "KPI - Average Work Effort for REsolving Incidents by Category" when they click the 4 hours 12 minutes average.

Brian Lancaster · ‎12-09-2015

That sounds like a issue with the incident table ACL not the sys_user table.

loupetridish · ‎12-09-2015

Okay so I am at a loss here. I gave the user the report_admin role which gives the user the Reports application along with all of the modules. Based on the Wiki that should give the user full access to Reports. However when I click the "4 hours and 12 minutes" link it get the the following message - Security constraints prevent access to requested page

If I give the user the admin role it works fine but obviously that is overkill.

Brian Lancaster · ‎12-09-2015

I would suggest opening that as an admin then right clicking on the top of the list and choose Configure > Dictionary. This should tell you what table the info is in and then you can look at the ACLs from there.

loupetridish · ‎12-09-2015

Thank you Brian