Unable to purge from JSS (getting error)

[donmontalvo]

We have a Smart Computer Group that contains computers we want to purge from JSS. For some reason we are getting the below error when we select Delete Computers. Is anyone seeing this?

The admin has [x]Manage Smart Computer Groups and [x]Delete Inventory Items enabled for their account. I also tested with top level access to JSS, got the same error.

[EDIT] We tested in both Safari and Firefox, got the same error...we also restarted Tomcat just in case it might be causing the problem. No luck.

Thoughts? Ideas?

TIA
Don

external image link

[donmontalvo]

A quick Google search for "JSS+CSRF" shows there was a bug in 8.6 or older that was fixed in 8.6.1...just a wild guess, regression?

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4051

Don

[donmontalvo · Accepted solution]

It's a bug...

Hey Don, Thanks for reaching out. The CSRF error is a known defect when mass deleting computers. We have found that if we choose to delete the computers and peripherals the error is not there, however, we then remove any of the peripherals that were associated. This is referenced as D-003225 internally. We can look to the release notes of future revisions of the Casper Suite to see when this has been addressed. Please let us know if there is anything else we may help with. Kindest Regards, XXXXXXXXXX JAMF Support

[donmontalvo]

BTW, we ended up purging one at a time, didn't run into any problems.

Thanks,
Don