Chocolatey Central Management - Created roles with all permissions do not allow Administration settings to be set

[sync-by-unito]

What You Are Seeing?

Upon the creation of a new role with all permissions and assignment of that role to a user, the user with the newly created role cannot set or change settings. Only a user with the CCM Admin role can affect settings.

What is Expected?

Any role that is created with all permissions should be able to affect settings changes within Chocolatey Central Management.

How Did You Get This To Happen? (Steps to Reproduce)

1. Create a test role with all permissions in Chocolatey Central Management.
2. Assign the newly created test role with all permissions to a user.
3. Log in as that user and navigate to Administration.
4. Attempt to set or affect changes to the Administration settings and select Save all.
5. Notice that the "Settings have been updated. Click the OK button for changes to take affect. The page will automatically refresh." window does not appear.
6. Manually refresh the page with F5.
7. Notice the changes attempted are reverted to their original values.

System Details

• Operating System: Windows Server 2022/Windows 10
• Windows PowerShell Version: 5.1
• Chocolatey CLI Version: 2.4.0
• Chocolatey Licensed Extension version: 6.2.1
• Chocolatey Central Management version: 0.13.1
• Chocolatey License type (Professional / Business / ?): BusinessTrial
• Terminal/Emulator: PowerShell

Output Logs

See GitLab comment.

Workarounds

Assigning the CCM Admin role allows the settings to be managed. Even if you mirror the permissions for CCM Admin, that won't do it. It has to be the CCM Admin role specifically that is assigned.

Proposed Solution

Creation of a role with all permissions should allow settings to be affected.

Related Issues and Tickets

Zendesk Ticket

Done Checklist

• Title is suitable for using in Release Notes?

┆Issue is synchronized with this Gitlab issue by Unito