Re: Hidden permissions

[Brian Bishop]

** Hi Sarah,   This issue is also applicable to the User Tool. If you write a macro to open a form, as a basic user,  and then amend the macro to open a form with just “Public Hidden” access it will open and give you access to the data. I raised this as a security issue with Remedy but was told it was “as designed” so had to raise an enhancement requesting the facility to be able to create forms  that users can access data in but not be able to open.   Mind you I thought that was what hidden forms were!!   Brian Bishop   From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Evans, Sarah (Outsourcing) Sent: 19 April 2006 10:18 To: arslist@ARSLIST.ORG Subject: Hidden permissions   Hi   I’ve found on the product defects this:   ID SW00222152: It is still in the status of New.   The form can still be accessed through Mid-Tier directly if Hidden permissions are set on the form.   Has the person who logged it heard anything back from Remedy?  If so what did they say?   Also anyone at Remedy is there a time estimate for this fix?   Thanks Sarah   This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. __20060125_______________________This posting was submitted with HTML in it___ __20060125_______________________This posting was submitted with HTML in it___