Migration from Security Group to Role concept

Migration from Security Group to Role concept

avatar

Hello,

we want to migrate one of our root folder to the role based security system - in the past we used the security group feature. We configured the root folder with following permissions:



In this scenario members of the roles "Marketing" and "Support Group" should be able to see this root folder? However the folder does not appears to the member from the "Marketing" group.

Thanks in advance!

Best Regards,
Min

2017-06-13 11_08_46.png

All Comments (12)

avatar

Hi Min,

If I look at the print screen, this folder isn't the Root Folder Permission. It is a folder at the root level perhaps. But the configuration looks fine and yes the Marketing group should see that folder. I also see that the Globale Administratoren, if it's not an administrator group won't have access to delete any entry because they don't have View access.

Could you have a look at this help topic, you will probably find a lot of good information about the Roles.
https://help.remotedesktopmanager.com/securitysystem_sme.htm

Best regards,

David Grandolfo

avatar

Hi David,

thanks for the link - I know that already :)

Yes you are right, this a Folder on the root level - a special permission isn`t configrured on the "right" Root Folder.. So I doesnt know why the folder isn`t visible for the marketing members.. I also tried to remove, set it back to default and configured new, but always with the same result...
It looks like that the security group is in the background still active.. Could this be the issue?

Thanks for your help!

Regards,
Min

avatar

The next weird behaviour - If we duplicate the folder from the screenshot above, the NEW folder is visible to the Marketing Group - the old one not. (Move all entries to the new one is not an option - the entry loses their sort priority etc..)

Regards,
Min

avatar

Hi Min,

Good test , the problem is clearly about the folder configuration. Could you do on both folder , right-click Clipboard, and copy it. Paste it in a notepad ( it will give you XML) information. Please send me both of the XML, I will compare it and probably find the problem.

Best regards,

David Grandolfo

avatar

Hi Min,

Thanks for the XML in Private message, can you go to Help --> Diagnostic --> Data Source tab--> Database Diagnostic -->Duplicate Groups Tab. Do you have ID's there ?



Also, could you try to perform CTRL + F5 on your computer and on the Marketing computer. If the test is on the same computer but with multiple Data source connected in the Navigation pane. Please do CTRL + F5 on both data source.

Best regards,

David Grandolfo

Datasource_diagnostic.png

avatar

Hi David!

Thanks for the fast response! Indeed, in the Duplicate Groups View the Root Level folder from mentioned above is double listed and also every subfolder from this folder.. :\:

Best Regards,
Min

avatar

Hello,

These sessions listed in the Duplicate Groups tab are the sessions that you can delete. You can use the Remove-RDMSession CmdLet to delete those entries using the IDs and this should resolve you issue. Don't forget to do a full backup of your data source prior to delete these entries just to prevent data loss.

Best regards,

Érica Poirier

avatar

Hi Erica,

I checked the ID`s and compared it with the folder on that the security was configured - I tried to identify the duplicate entry, copied the ID from the Duplicate Groups View, but with no success - the warning appears that the connection was not found.. tried it also with 2 other entries, every time with the ID that was not listed in the RDM GUI - but with the same result..

Best Regards,
Min

avatar

Hello,

The ID's from the Duplicate Groups tab are not displayed in the RDM GUI. But they exist in the database. So the only method to remove those duplicate sessions is to delete them with the Remove-RDMSession CmdLet. Just replace the ID in the following CmdLet with the ones you want to remove.

Remove-RDMSession -ID 'a78c1a27-75b2-479d-aa84-f394e8099790' -Refresh -Force
Best regards,

Érica Poirier

avatar

Hi,

I attached the snapshot - in our case the ID is shown in the RDM Gui - if i delete this, the folder within all subconnections are deleted - if I run the powershell comand with the duplicate ID, the warning appears that the session cannot be found.

Thank you! :)

Regards,
Min

2017-06-15 16_59_54-Remove-Duplicate-ID-Failed.png

2017-06-15 16_57_23-listed-Folder-in-RDM-GUI.png

2017-06-15 16_56_06-Folder-in-RDM-Gui.png

avatar

Hello Min,

Sorry I was wrong about the ID's in the Duplicate Groups tab and also about PowerShell. You can only delete those duplicate entries with a SQL Statement.

Could you please try to delete the duplicate groups with that SQL Statement? Just replace the ID with the proper one.

DELETE FROM dbo.Connections
WHERE ID = '05620053-7155-4b46-bf70-324848e5d71c'
Best regards,

Érica Poirier

avatar

Hi Erica,

No problem! ;)

That did it! And immediately the folder is for the marketing group visible!

Thank you for the support! :)

Regards,
Min