Clicking the helpdesk notification link of Request Approval URL in ACC displays an error

Technical Articles ID: KB88261
Last Modified: 2024-01-03 10:29:00 Etc/GMT

Environment

Application and Change Control (ACC) 8.x, 7.x
ePolicy Orchestrator (ePO) 5.x
Microsoft Windows - all versions

Problem

You see the following error when you click the helpdesk notification link of the Request Approval URL in ACC:

You are not authorized for this operation

Cause

The cause is that incorrect permissions are set on the security token. The checkSecurityToken permissions are set to True, which enables the Security token and prevents navigation to the URL.

Solution

This issue has been corrected in Application Control ePO extension 8.1.1-103 and later. Upgrade to extension 8.1.1-103. If an upgrade isn't an option, perform the workaround below.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

Modify the checkSecurityToken on the ePO server:

Browse to <Drive>:\<Installation folder>\McAfee\ePolicy Orchestrator\Server\extensions\installed\Solidcore\7.0.1.160\webapp\WEB-INF\mvcactions.xml
Create a backup copy of the mvcactions.xml file.
Edit mvcactions.xml using a text editor (such as Notepad or WordPad).
Locate <action name="showEvents.do" execute="executeShowEvents" permission="perm:scor.events.view.allow" checkSecurityToken="true" /> in mvcactions.xml.
Change the value from "true" to "false" (<action name="showEvents.do" execute="executeShowEvents" permission="perm:scor.events.view.allow" checkSecurityToken="false" />)
Save the change and close the file.
Browse to <Drive>:\<Installation folder>\McAfee\ePolicy Orchestrator\Server\extensions\installed\Solidcore\7.0.1.160\webapp\WEB-INF\proxy-mvcactions.xml
Create a backup copy of the proxy-mvcactions.xml file.
Edit proxy-mvcactions.xml using a text editor.
Locate <action name="showEvents.do" execute="execute" checkSecurityToken="true" />
Change the value from "true" to "false" (<action name="showEvents.do" execute="execute" checkSecurityToken="false" />).
Save the change and close the file.
Restart Solidcore extension. Run https://<ePO-IP>/remote/core.reload-plugin.do?name=SOLIDCORE_META in the ePO console address bar.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Clicking the helpdesk notification link of Request Approval URL in ACC displays an error

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Clicking the helpdesk notification link of Request Approval URL in ACC displays an error

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title