[OPENDJ-6039] AM Config Store Profile doesn't have enough access in ProductionMode when upgrading AM. Created: 28/Feb/19 Updated: 03/Mar/20 Resolved: 04/Mar/19
|Reporter:||Ludovic Poitou||Assignee:||Ludovic Poitou|
When DS is installed as an AM Configuration Store with Production Mode active, AM is not able to run an upgrade. See
During upgrade, AM tries to read the SubSchemaSubentry operational attribute to access the schema, but there is no ACI that grants access to operational attributes.
A simple fix would be to allow the AM config Admin to read, update all operational attributes, in effect, in the profile base-entries.ldif file, replacing:
|Comment by Chris Ridd [ 28/Feb/19 ]|
The change to the ACI will need to be noted in the AM release notes as a pre-upgrade step.
|Comment by carole forel [ 06/Mar/19 ]|
Lightly verified by checking:
still needs validation on am side.