Refine your search:

According to http://www.splunk.com/base/Documentation/4.1.4/Admin/Apparchitectureandobjectownership

it sounds like if a user has the ability to promote saved searches and other objects to the App level, they should be able to promote all objects on that list, including dashboards/views.

I'm currently building some dashboards under 4.1.3 as a regular user. I was able to save searches and search macros and then set them to be App-visible.

When I created a view and try to promote it, I get a red error bar: Splunk could not update permissions for resource data/ui/views Client is not authorized to perform requested action

Bug, misconfiguration, or misunderstanding?

asked 04 Aug '10, 21:29

mctester's gravatar image

mctester
6523324
accept rate: 75%

edited 04 Aug '10, 22:38

Johnvey's gravatar image

Johnvey ♦♦
2.2k1217

It's 4.1.3 on solaris, for the record.

(04 Aug '10, 21:32) Jason

One Answer:

It depends on the app-specific permissons, which are controlled by $SPLUNK_HOME/etc/apps/<app_name>/metadata/default.meta

For example, in the search app, only admin users have write permissions for views -

### VIEWS

[views]
access = read : [ * ], write : [ admin ]

If you change the permissions so that the user role has write-access, then you should be able to promote your views.

link

answered 04 Aug '10, 22:56

Mick's gravatar image

Mick ♦
4.0k1327
accept rate: 52%

Wow, smart guy, that Mick.

(05 Aug '10, 14:09) Jason
1

If you don't vote up my answer, nobody knows how smart I am. Click the "up" arrow if you find the answer useful people!

(10 Aug '10, 15:27) Mick ♦
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×117
×62

Asked: 04 Aug '10, 21:29

Seen: 955 times

Last updated: 04 Aug '10, 22:56

Copyright © 2005-2012 Splunk, Inc. All rights reserved.