PRODUCT IOTS » product-uem 6.5.0 GA

product version 6.2.3.0

Description
When a request is sent to enroll a device into "Active" status, even a user who is not the owner is able to change the status. And it results in the device going to a "Removed" status.

1. Enroll a device with the owner as "admin" (to move into Created state)
2. Send request using postman to enroll device, but with token credentials of a different user (to move into Active state)
   Example request:
   

   {
     "name": "<<device name here>>" ,
     "description": "DEVICE_DESCRIPTION_VALUE",
     "deviceIdentifier": "<<device name here>>",
     "enrolmentInfo": {
       "ownership": "COPE",
       "owner": "<<user name here>>" 
     },
     "properties": [
       {
         "name": "SERIAL",
         "value": "<<device name here>>" 
       },
       {
         "name": "DEVICE_MODEL",
         "value": "ENTGRA_TEST" 
       }
     ],
     "deviceInfo" : {
       "deviceDetailsMap" : {
           "FIRMWARE_MODEL" : "<<firmware model name here>>",
           "FIRMWARE_VERSION" : "009011004",
           "SDK_VERSION" : "123" 
       }
     }
   }
   
   

observation
Upon creating, the device is listed in "Created" status as expected.
After sending the enrollment request, even from a different user, the device moves into the "Active state" in the "All Devices" section. However, when you navigate into the single device page, the device status is shown as "Removed" and is in an unusable state.