In my experience, if you don't want them to see the field, the only option I
have been able to work with is to hide it with workflow in situations where
you don't want them to see it.  one thing you want to be very careful about
when dealing with Tab permissions though, if you remove a persons permission
to a Tab, they also can't access anything on that tab, you can look at a tab
as a container of sorts, if you can't get into the room with your
possessions in it, then you can't access your possessions, you can look at
tabs and fields on the tabs in the same manner. 

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
Sent: Monday, April 07, 2008 8:47 AM
To: [email protected]
Subject: Re: User can see fields with no permissions

I was wrong.  The person with "IT" permission can see the fields, but no
data.

We don't even want them to see the fields.  They are on a page and we have
removed permissions to the page.  But the test person can still see the
page.  But there is another page that no group (but Administrator) has
permission to, and the test person can't see it.  So why can he see some
pages he has no permission to and not others?

I also have a test login with no permissions (except Public) and that person
cannot see the page that IT sees, nor the page with no permissions.

Here is an added complication.  We also have a permission group called "IT
Manager".  I thot maybe "IT" was inheriting permissions from "IT Manager",
so I change the group name from "IT" to "Info Tech", but that didn't change
anything.  I even restarted the server.  Do groups with overlapping names
affect each other?  I am grasping at straws.

Dwayne

---- Original message ----
>Date: Mon, 7 Apr 2008 10:29:52 -0400
>From: "Tanner, Doug" <[EMAIL PROTECTED]>
>Subject: Re: User can see fields with no permissions
>To: [email protected]
>
>Yes, They can not only see the field but they can see the data - This 
>is implied with View access to the field. DT
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList) 
>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>Sent: Monday, April 07, 2008 10:25 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>But they CAN see the contents of the field itself.  If there is data 
>there the test person can read it.
>
>Dwayne
>
>---- Original message ----
>>Date: Mon, 7 Apr 2008 07:51:52 -0600
>>From: LJ Longwing <[EMAIL PROTECTED]>
>>Subject: Re: User can see fields with no permissions
>>To: [email protected]
>>
>>Dwayne,
>>Sorry to say, but removing permission to the field removes their
>permission
>>to see what's in the field, not the field itself.  The exceptions to
>this
>>would be 'Trim' fields, buttons, boxes, etc, because those all
>disappear
>>when you don't have access, but when you don't have access to a Char,
>Int,
>>etc you simply can't see the contents of the field, but you can still
>see
>>the field itself
>>
>>-----Original Message-----
>>From: Action Request System discussion list(ARSList) 
>>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>>Sent: Monday, April 07, 2008 7:29 AM
>>To: [email protected]
>>Subject: User can see fields with no permissions
>>
>>Dear List,
>>
>>We have a permission group called "IT".  We have a form with some
>fields
>>that "IT" used to have permission to, but we have decided to remove
>those
>>permissions.  So I went into the Admin Tool and removed "IT" from the 
>>permission list in each field.
>>
>>But when a test user with only "IT" permissions opens the form he can
>still
>>see all the fields.  If he tries to change the data and save the form
>he
>>gets, "ARERR [333] You have no access to field : [field name]", but
>with "no
>>access" he shouldn't even be able to see the field.
>>
>>I cleared the cache, and made a cosmetic change, and the cosmetic
>change
>>appears on the screen, so it isn't a caching issue.
>>
>>What is going on?
>>
>>(ARS 7.1, RH Linux server, Oracle 10.2 db)
>>
>>Dwayne Martin
>>James Madison University
>>
>>______________________________________________________________________
>>_
>________
>>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum 
>>Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
>_
>_______
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum 
>Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>DISCLAIMER Important! This message is intended for the above named
person(s) only and is CONFIDENTIAL AND PROPRIETARY. If you are not the
intended recipient of this e-mail and have received it in error, please
immediately notify the sender by return email and then delete it from your
mailbox. This message may be protected by the attorney-client privilege
and/or work product doctrine.  Accessing, copying, disseminating or re-using
any of the information contained in this e-mail by anyone other than the
intended recipient is strictly prohibited. Finally, you should check this
email and any attachments for the presence of viruses, as the sender accepts
no liability for any damage caused by any virus transmitted by this email.
Thank you.

>
>_______________________________________________________________________
>________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org 
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:
www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to