Status/Resolution/Reason: Closed/Withdrawn/Duplicate
Reporter/Name(from Bugbase): Dave I. / ()
Created: 05/29/2019
Components: Administrator, Administrator Console
Versions: 2016
Failure Type: Non Functioning
Found In Build/Fixed In Build: 314028 /
Priority/Frequency: Normal / Most users will encounter
Locale/System: English / Win 2016
Vote Count: 0
Problem Description: After upgrading to update 10 on CF2016 Enterprise, the normal users (developers) who were created in the Security | User Manager panel and were granted the Allowed Role to see the Server Settings > Settings Summary, can no longer load that page in the admin console. The admin account can still see this page fine.
Steps to Reproduce: Just performed the hf-2016-00010-314028 hotfix, login as a limited user, and try to click on the Settings Summary page on the left panel.
Actual Result: In the ColdFusion logs, we are seeing the following:
-- application.log
"Error","http-nio-8501-exec-8","03/06/19","16:23:19","cfadmin","The current user is not authorized to invoke this method. The specific sequence of files included or processed is: E:\ColdFusion2016\CFTST-FinDEV\wwwroot\CFIDE\administrator\reports\index.cfm, line: 105 "
-- cf_custom_error.log
"Information","http-nio-8501-exec-8","03/06/19","16:23:18","CFADMIN","/CFIDE/administrator/reports/index.cfm [/CFIDE/adminapi/accessmanager.cfc 105 ] : The current user is not authorized to invoke this method. - The current user is not authorized to invoke this method. <br>The error occurred on line 105.)"
-- exception.log
"Error","http-nio-8501-exec-8","03/06/19","16:23:19","cfadmin","The current user is not authorized to invoke this method. The specific sequence of files included or processed is: E:\ColdFusion2016\CFTST-FinDEV\wwwroot\CFIDE\administrator\reports\index.cfm, line: 105 "
coldfusion.runtime.CustomException: The current user is not authorized to invoke this method.
Expected Result: User granted this role can run the page successfully.
Any Workarounds: None, besides uninstalling the hotfix.
Attachments:
Comments: