Hello,
Here is the situation:
My user account has all 5 functions that can be seen in MDS Web UI, including system administrator. I have a test model that I created and granted another system administrator (same rights) permission to update.
In order to test permissions on attribute level I went into one of the entities in the model and tried to deny myself permission on Code attribute for that entity. After that I got an error saying "The user does not have the permission to perform the operation".
Now I cannot see my model in the "model" tab of permissions for users/groups. It is also gone from "System administration" area so I cannot change the structure of the model.
The same happened for the second system administrator. So right now nobody can change permissions for my model or its structure. I can still see the model in both "Explorer" and Excel add-in and can work with all entities, including the one I tried
to deny myself permission on.
Questions:
1. How can I get back the fulls rights on this model, to able to change permissions/structure?
2. Do I have some special permissions on created model that other systadmins do not have? If so how can I give these permissions to someone else?
Edit:
After some research I found this in [mdm].[viw_SYSTEM_SECURITY_USER_MODEL] in MDS database
-- Determine Model effective permissions. In order for a user to be a model administrator he
-- must have total update permission for all model metadata components and all member data. If
-- read only and/or update member permissions exists for hierarchy parent nodes then those nodes
-- are the only ones the user is allowed to see, thus the other nodes are restricted. In this
-- case the user would not be a model administrator. The only exception to this is if the member
-- permission is update on the root node.
Now I understand why this happened. If I deny myself a permission on something inside the model I lose model admin rights. I also remember now testing the deny for the second system administrator on this model too, so he is no longer model admin I guess.
Too bad this was not mentioned in documentation...
Question still stands, how do I get back control of the model if there is no administrator left for it?
