When adding new rights to a Admin Role the check boxes for "Allow" are marked instead of "Unset".
This is very dangerous espacilly for the "Device Rights" because there are two registers "Device Rights" and "Quick Task Rights".
By simply adding a right without modifying the Privileges you give an admin full rights.

Also in the dialog for adding new rights directly to a user, all "Allow" checkboxes are marked not the "Deny" checkboxes.

by: S. M. | over a year ago | ZENworks Control Center