User source admins can't get reporting rights

  • 7009917
  • 20-Dec-2011
  • 27-Apr-2012

Environment

Novell ZENworks 11 Configuration Management Support Pack 1 - ZCM 11 SP1

Situation

Some administrators based on user source and assigned reporting rights fail to get rights to ZRS.
 
ERROR:
 
You do not have sufficient rights to access BusinessObjects Enterprise Reporting.

and the ZENworks Reporting Server InfoView is grey.
 
ERROR (from zcc.log):
 
20 Dec 2011 13:48:28 ============== Exception (begin) ===========================
20 Dec 2011 13:48:28 Exception occured
com.novell.zenworks.datamodel.exceptions.DataModelUsageException: Index 0 is out of bounds.
 at com.novell.zenworks.datamodel.session.jndi.ldap.AttributeGroupingHelper.getUIDs(AttributeGroupingHelper.java:56)
 at com.novell.zenworks.datamodel.session.jndi.ldap.LdapAuthoritativeSourceSession.getGroups(LdapAuthoritativeSourceSession.java:1314)
 at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceServiceImpl.getGroups(AuthoritativeSourceServiceImpl.java:588)
 at com.novell.zenworks.datamodel.services.groupings.GroupingImpl.getGroups(GroupingImpl.java:170)
 at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAllAssignedRightsForAdmin(HibernateAdministratorSession.java:2572)
 at com.novell.zenworks.datamodel.session.hibernate.HibernateAdministratorSession.getAdminRights(HibernateAdministratorSession.java:349)
 at com.novell.zenworks.datamodel.services.administrators.AdministratorAdminImpl.getEffectiveAdminRights(AdministratorAdminImpl.java:273)
 at com.novell.zenworks.admin.pages.reports.ReportRedirection.hasReportRights(ReportRedirection.java:285)
 at com.novell.zenworks.admin.pages.reports.ReportRedirection.onLoad(ReportRedirection.java:97)
...
Exception Info:
20 Dec 2011 13:48:28     Class....... com.novell.zenworks.datamodel.exceptions.DataModelUsageException
20 Dec 2011 13:48:28     Message..... Index 0 is out of bounds.
20 Dec 2011 13:48:28     Logged at... ReportRedirection...296

Resolution

This is fixed in version 11.2 - see KB 7010044 "ZENworks Configuration Management 11.2 - update information and list of fixes" which can be found at https://www.novell.com/support
 
Workaround:  Make a group that is in a context included in the User Source list of contexts.  Add the Reporting administrator to that group.

Additional Information

In this case, the Zone User source (Configuration/User Sources) was set to include only specific User Containers, example: ou=Teachers,dc=w2008domain,dc=com.  A user (teacher) in that container was a member of some group in another container.  This problem is not resolved if the user is a member of "Domain Users" group, which is likely not searched for rights.