Question

Live browse issue for clients using the Command Center post upgrade to 11.32.20

  • 26 September 2023
  • 2 replies
  • 166 views

Badge +1

 

Morning All,

We recently upgrade our environment to 11.32.20 from 11.28.68, post update our clients are unable to perform guest file browse operations from the Admin Console. Prior to the upgrade clients were able to perform these operations without issue. Has anyone else ran into this issue?

The user can see their VMs in the Command Center, they can see the backup history for their VM, they can pick a date and select the type of restore they want to perform but as soon as they do that, they receive the following generic error.

         Something went wrong.

         Incident ID: 9pyq1nb2

In the WebServer.log file we are seeing the following error related to the browse. 

12016 50 09/25 11:20:39 50 domain\user GetSubclientProperties - request handling interrupted : ['CV.WebServer.Handlers.HandlerException: User [domain\user] does not have required capability [View] for this subclient and this operation. at CV.WebServer.Handlers.CVSubclient.GetSubclientProperties(Associations associations, Int32 userId, Int32 localeId, ListPropertyLevels propLevel) at CV.WebServer.Controllers.SubclientController.GetSubclientProperties(String subclientId) at lambda_method650(Closure , Object , Object[] ) at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.SyncActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.InvokeActionMethodAsync() at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.InvokeNextActionFilterAsync() --- End of stack trace from previous location --- at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.InvokeInnerFilterAsync() --- End of stack trace from previous location --- at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeNextExceptionFilterAsync>g__Awaited26_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)'].Response status code set to [403]

It would appear that the main issue is with the following error. 

GetSubclientProperties - request handling interrupted : ['CV.WebServer.Handlers.HandlerException: User [domain\user] does not have required capability [View] for this subclient and this operation.

We have not changed any of the configured permissions for the client or the Commvault defined owner permissions between 11.28 and 11.32. Users who have the Master roll can of course still restore files for the same VM that is failing for the client. 

The user in question is a member of the System created View role.

 

Thanks,

Chad 


2 replies

Userlevel 2
Badge +3

Chad,

 

If the same user was able to perform live browse before upgrade, he should be able to continue after upgrade.  can you please escalate this as TR. we are not aware of this issue.

 

Thanks,

Bhama

Badge +1

Bhama,

 

I actually have a case opened for it right now. It is the same user, due to the error we were receiving we did some experimenting in our environment and configured the permissions at the data set level where the subclient is and the process works without issue. While this does work this is not something that we could configure for all users in our environment as it allows users to view all VMs whether they have owner permissions to the VM or not. To be clear they cannot perform any restore functions against the VM but still it is a security risk just the same. It also isn’t something that we can mange going forward as we have users and external groups being added and removed continuously. 

 

Thanks,

Chad 

Reply