System administrator cannot edit policy because of not assigning the policy permission

Publication Date:  2012-09-19 Views:  93 Downloads:  0
Issue Description
In the editon of Secospace TSM V100R001C30B03D,we new a system role and assign all the system promission then assigning the role to a system user(administrator),but the system administrator cannot edit policy.
Alarm Information
None.
Handling Process
1、 To check that the step of editing system role and administrator has no mistake.
2、 There are also have some problem after that assigning the role of system tolerant default1、default2、default3 to system user.
3、 Using the system administrator which has superadmin role to enter system and it can edit policy
4、 The 3 steps above can remove the mistake at system role and user ,so the problem should be the assigning of policy editing permission difference between B03D edition and the early one .
5、 Using the system administrator which has superadmin role to enter the system ,the problem will be solved after accrediting other system administrator at the policy mode menu .
Root Cause
1、 There are some problem at the assigning system role and establishing system user.
2、 The permission of editing policy is wrong .
This example is the last one.
Suggestions
There are some difference between Secospace TSM V100R001C30B03D and the early at the assigning of system permission. The superadmin has the superme permission ,though we can that the permission  which has been assigned when we establish the new system role is the same with superadmin role ,only the superadmin has the permission to edit policy, the other system administrator must be accredited by superadmin and then they can edit policy.

END