WebUI display permission error on logon

Hi All,

We recently upgraded to BigFix v11.03 (everthing went well) but we noticed that when we log into the WebUI we get the attached error when logged on with our master operator admin account.

Note, the error message differs when logging on with a user that doesn’t have the master operator role.

While logged as the Master Operator, it takes me directly to a ‘Permissions’ page and has highlighted three security groups in RED with an ! exclamation mark next to them. If I hover my mouse of them a ‘Data Integrity Error’ banner pops up.

Any ideas?

Check the Permissions page and see if the permissions set are the way you expect.

When WebUI is used to assign permissions, the database records it creates are digitally signed. This message indicates the permissions set in the database no longer match their digital signature. This could happen if the permissions are modified directly in the database, i.e. through a script or SQL query, rather than being set in the WebUI app.

When I try to edit the permissions via the WebUI by clicking on the security group I get the following message “The effective permissions for a role are the least restrictive of the global permissions and role permissions.”

If you’re logged in as a master operator and not seeing the permissions page, you should probably open a support ticket. It sounds like your database may have been tampered with or corrupted. You may need to plan to restore or reinstall WebUI depending on what you find.

Ok, noted. Thanks again for the help mate.

I contacted support today and the following fixed the permission problem I faced.

Reset the WebUI custom configuration in order to remove possible inconsistencies:

  1. Log in as Master Operator (MO).
  2. Run the following cleanup utility:
    https:///pps/admin/util/cleanup
  3. Delete the WebUI data by going to https:///framework/webuidata and clicking Delete All.
  4. Log out and restart the WebUI service.
  5. Wait until the WebUI interface is available again.
  6. Log in as an MO and set up the WebUI roles permissions. For more information, please see:
    The WebUI Permissions Service
3 Likes

Thanks so much for reporting back with your solution!