AnsweredAssumed Answered

What is a system owner authorized to see?

Question asked by Lena Nilsson on Feb 10, 2020
Latest reply on Feb 18, 2020 by Lena Nilsson

Like • Show 0 Likes0
Comment • 6

I am logged in as a system owner for a system called ACSX (monitor).

In a review, we would like to say that a system owner sees more than they are authorized to.

As a system owner, you see all the Change requests made during a review and not just those that belong to the system or systems that you own. I have marked what we think the system owner should be allowed to see.

Is this how it should be?

It looks the same in both 7.0.2 and 7.1.

Diane Mccoy

Feb 12, 2020 8:55 AM

Correct Answer

Hi Lena,

I get the same behavior as you. I can't tell you what the correct behavior is supposed to be but this does not seem like correct behavior to me. For example, in 7.1.1:

I gave user1 business owner priv to App A. This user has no separate review privs or request privs.
In the user review definition, under monitors, I made asset owners approve their assets.
Ran the user review which had multiple applications.
As AveksaAdmin, created multiple CRs to revoke access in different applications including App A.
Logged in as user1. The only activity available to this user is their approval specifically of the App A revocation. This I expected.
This user cannot see any of the CRs under the request menu. This I also expect since he has no request privs. He cannot even see the one request he is allowed to approve. That is only showing as an activity.
And yet, under the review menu he sees ALL change activity associated with the review regardless of application and can click on any request name to see the request details. (what you describe).

Have you opened a support case on this? This behavior does not seem correct to me.

Thanks, Diane

See the reply in context

No one else had this question

Outcomes

Clive Morrish

Feb 10, 2020 10:11 AM

Hi Lena,

I just want to ensure I understand the terminology correctly.

You mention you're logged in as a System Owner of an application (assume Business Owner), but from the screenshot it looks as though you're a logged in as a Review Owner/Monitor.

Please can you confirm?

Actions

Lena Nilsson Feb 12, 2020 8:02 AM

Here I have logged in as a system owner for ACSX in 7.0.2

and in 7.1

and I can see at lot more than just the system that I own.

Actions

Clive Morrish

@ Lena Nilsson on Feb 12, 2020 8:38 AM

For the user you're logged in as, please can you provide a screenshot of the access they are granted to the Aveksa Application.

As per below:

Actions

Lena Nilsson @ Clive Morrish on Feb 12, 2020 9:11 AM

We use a coverage file to set permissions for a system owner. For this owner it looks like this:

Actions

Diane Mccoy

Feb 12, 2020 8:55 AM

Hi Lena,

I get the same behavior as you. I can't tell you what the correct behavior is supposed to be but this does not seem like correct behavior to me. For example, in 7.1.1:

I gave user1 business owner priv to App A. This user has no separate review privs or request privs.
In the user review definition, under monitors, I made asset owners approve their assets.
Ran the user review which had multiple applications.
As AveksaAdmin, created multiple CRs to revoke access in different applications including App A.
Logged in as user1. The only activity available to this user is their approval specifically of the App A revocation. This I expected.
This user cannot see any of the CRs under the request menu. This I also expect since he has no request privs. He cannot even see the one request he is allowed to approve. That is only showing as an activity.
And yet, under the review menu he sees ALL change activity associated with the review regardless of application and can click on any request name to see the request details. (what you describe).

Have you opened a support case on this? This behavior does not seem correct to me.

Thanks, Diane

Actions

Lena Nilsson Feb 18, 2020 7:08 AM

What do you suggest me to do in this case? Shall I open a support case?

Actions

6 Replies

Clive Morrish Feb 10, 2020 10:11 AM
Mark Correct
Correct Answer
Hi Lena,

I just want to ensure I understand the terminology correctly.

You mention you're logged in as a System Owner of an application (assume Business Owner), but from the screenshot it looks as though you're a logged in as a Review Owner/Monitor.

Please can you confirm?
Like • Show 0 Likes0
Actions
Lena Nilsson Feb 12, 2020 8:02 AM
Mark Correct
Correct Answer
Here I have logged in as a system owner for ACSX in 7.0.2

and in 7.1
and I can see at lot more than just the system that I own.
Like • Show 0 Likes0
Actions
- Clive Morrish @ Lena Nilsson on Feb 12, 2020 8:38 AM
  Mark Correct
  Correct Answer
  For the user you're logged in as, please can you provide a screenshot of the access they are granted to the Aveksa Application.
  
  As per below:
  Like • Show 0 Likes0
  Actions
  - Lena Nilsson @ Clive Morrish on Feb 12, 2020 9:11 AM
    Mark Correct
    Correct Answer
    We use a coverage file to set permissions for a system owner. For this owner it looks like this:
    Like • Show 0 Likes0
    Actions
Diane Mccoy Feb 12, 2020 8:55 AM
Unmark Correct
Correct Answer
Hi Lena,

I get the same behavior as you. I can't tell you what the correct behavior is supposed to be but this does not seem like correct behavior to me. For example, in 7.1.1:
- I gave user1 business owner priv to App A. This user has no separate review privs or request privs.
- In the user review definition, under monitors, I made asset owners approve their assets.
- Ran the user review which had multiple applications.
- As AveksaAdmin, created multiple CRs to revoke access in different applications including App A.
  Logged in as user1. The only activity available to this user is their approval specifically of the App A revocation. This I expected.
- This user cannot see any of the CRs under the request menu. This I also expect since he has no request privs. He cannot even see the one request he is allowed to approve. That is only showing as an activity.
- And yet, under the review menu he sees ALL change activity associated with the review regardless of application and can click on any request name to see the request details. (what you describe).
Have you opened a support case on this? This behavior does not seem correct to me.

Thanks, Diane
Like • Show 0 Likes0
Actions
Lena Nilsson Feb 18, 2020 7:08 AM
Mark Correct
Correct Answer
What do you suggest me to do in this case? Shall I open a support case?
Like • Show 0 Likes0
Actions