Cisco Bug: CSCtc38587 - User without "modify devices" privileges can edit configuration
Nov 10, 2016
- Cisco Security Manager
Known Affected Releases
Symptom: User without privileges can access CSM and modify configuration although configuration may not complete. Errors on the logs show: [ERROR] ,(ContextSettingPersister.java:553),updatePolicies caught an vms exception: Device Not Authorized,com.cisco.nm.vms.platform.persistors.ContextSettingPersister,TP-Processor1 Conditions: User logging into CSM will not be authorized to modify config. CSM working in Workflow mode with no Activity or Deployment Approval required.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases