Removed "modify the rights" for Everyone Group cannot be undone!?

[Former Member]

Dear All,

I have accidentally misconfigured the group rights in CMC (BO 4.0) in a way that cannot be undone:

In CMC, for application WebIntelligence, I have modified the user security for goup Everyone.

In the advanced security settings I have explicitly removed (forbidden) the following rights:

- Securely modify rights users have to objects.

- Modify the rights users have to this object

- Edit this object

No the dramtic effect of this setting is, that even administrators can't reset this! All options to change any access settings for application Web Intelligence are greyed out!

My assumption is, that this is because in any combination of rights (coming from different groups of a user) for the same object (here: application Web Intelligence) always the most restrictive setting "wins". At least I have read something like that.

Now I'm desperately looking for any way to undo the above mentioned settings. And preferrably without re-installing the whole system...

Maybe there is a workaround such as resetting the whole Everyone group?

Any help is highly appreciated!

Thank you in advance

Jan

[former_member203619 · Accepted solution]

Hi Jan,

I tested this on my side, and while members of the administrator group are prevented from modifying the settings - the actual "Administrator" user is not.  In my tests, I found two options:

1. Log in as Administrator, go to Applications -> Web Intelligence -> User Security, and click the "Reset Security Settings" button underneath.

2. Log in as Administrator, go to Applications -> Web Intelligence -> User Security, click on the Everyone Group, select "Assign Security" -> Advanced -> Add/Remove Rights, and then just set the rights back to inherited or explicity granted.

I tested this on a BI4 SP2 Patch 14 system.

Thanks

Shawn

[Former Member · Accepted solution]

Hi Shawn,

thank you very much for your reply!

I've tried both of your options.

Unfortunately neither of them is working in my case, because the "Reset Security Settings" as well as the "Add/Remove Rights" link is greyed out an cannot be used when I logon as Administrator.

As it is working in your case, I assume that it depends on the Patch level of the installation.

Therefore I will ask IT team to patch the BO system to a more recent version and give you an update whether your options are working then.

Regards

Jan

[Former Member · Accepted solution]

Dear Shawn,

I should have read your message more accurately!

Indeed it is perfectly working with the actual user "Administrator" - as described by you.

I always assumed that there would be no difference between the "Administrator" user and any other named user that is assigned to the same user groups as the "Administrator".

Obviously there is a difference, because as seen in my case, the "Administrator" has more privileges that any other user - regardless of the group assignements.

Thank you very much again for your support!

Regards

Jan

[former_member203619 · Accepted solution]

You're welcome - glad it worked for you.

Shawn

[evagelia_karaoulidou]

Hello Jan,

I have the same problem with temporary storage in the Central Management Console.

Did manage to find a solution without re-installing the whole system??

Thank you in advance

Evangelia