nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

iwaccessmigrate promotes our editors to admins?

RonaldV

Hi,

we have just done a ts65sp2 => ts671 upgrade (On Solaris 9).

We just followed the install-guide and run iwaccessmigrate afterwards.

Our branches in ts65 all had a ts-group set as 'group for sharing'. This group contained all users (both admins & editors) that needed access to the branch. (Otherwise this branch would not be visible to a user, EVEN IF you had access to one of it's workareas!, never quite understood this?)

Now after running iwaccessmigrate this group now has admin-privileges on this branch, even the editors. This is NOT what the old situation was.

Has anybody else seen this before?
Is this expected behaviour?
Any hints on how to prevent this?

Cheers, Ronald

Find more posts tagged with

Comments

Adam Stoller

Hi,

we have just done a ts65sp2 => ts671 upgrade (On Solaris 9).

We just followed the install-guide and run iwaccessmigrate afterwards.

Our branches in ts65 all had a ts-group set as 'group for sharing'. This group contained all users (both admins & editors) that needed access to the branch. (Otherwise this branch would not be visible to a user, EVEN IF you had access to one of it's workareas!, never quite understood this?)

Now after running iwaccessmigrate this group now has admin-privileges on this branch, even the editors. This is NOT what the old situation was.

Has anybody else seen this before?
Is this expected behaviour?
Any hints on how to prevent this?

Cheers, Ronald

I'm not sure about preventing it - but if you want to correct it - you need to use the iwaccess CLT.

bcvbbbjnn

Dear RonaldV,

In our case the group for sharing was "OS level groups" and if the OS group had both editors and administrators then it used to provide that OS group the higher privilege that is "admin" role. In certain other cases the OS group used to split into TS groups.
For granting right privileges manually the accessresults.xml needs to be coded with correct groups and then iwaccessmigrate clt needs to be rerun