Consider the following scenario:
- The object's Access Control is configured with both an Identity in the form of a single user and a Zone.
- The referenced user is deleted from the Directory Service (most commonly the Microsoft Active Directory).
- The option Search for non-existing users under the node Administration > Maintenance in the Workspace Control Console is used to remove deleted users from configuration objects.
In this scenario, the object's Access Control is set to the default value: Applied to all users.
The expected behavior is that the access control entry will be referenced as <deleted by datastore maintenance>.
This issue is resolved in Ivanti Workspace Control 10.3.70.0.