Most Excellent, working as designed Doug -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing Sent: Monday, April 07, 2008 11:45 AM To: [email protected] Subject: Re: User can see fields with no permissions
Scott, I think I answered my own question, here is when fields are visible. If Dynamic Groups have access (Submitter, Assignee, Assignee Group, etc), if you have Allow Any User to Submit checked. If none of those conditions are true, then the field is not visible, if any of those conditions are true, but the situation does not match them having access to the data, the field is visible, but the data is not. -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish Sent: Monday, April 07, 2008 9:39 AM To: [email protected] Subject: Re: User can see fields with no permissions Dwayne, The user does not have to be the assignee nor the submitter. But these two groups are implicit groups, just as public is, so if submitter has permissions to the field then the "testit" person will be able to see the field (after all, how can you be a submitter to a field if you don't have permission to see it? Hiding it via workflow is not the same as being able to see it via permissions.). Same goes for the assignee. Scott Parrish IT Prophets, LLC (770) 653-5203 www.itprophets.com -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin Sent: Monday, April 07, 2008 11:26 AM To: [email protected] Subject: Re: User can see fields with no permissions This gets us to another topic. I have a control panel with fields that "Public" has no permission to. On this panel are two fields that have no Public permission, yet "Public" can see them. But they can't see other fields with no Public permission. I've never been able to figure that one out. But this situation isn't like that. There are about 25 fields that "IT" (now "Info Tech")used to have permission to, but doesn't anymore. "Public" can't see them, but "IT" still can. Somehow the system is remembering that "IT" USED TO have permissions, and is letting "IT" see the fields, but not the data. Good suggestion, Scott, but my "testit" person is not the Submitter nor Assignee to the form. Dwayne ---- Original message ---- >Date: Mon, 7 Apr 2008 11:04:24 -0400 >From: Scott Parrish <[EMAIL PROTECTED]> >Subject: Re: User can see fields with no permissions >To: [email protected] > >I would think you could run this test yourself. I did just now before >sending off the email. > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 11:01 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >Scott, >I would love for you to prove that to both yourself and me, because I >have experienced differently. > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish >Sent: Monday, April 07, 2008 8:55 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >LJ, >This is not true. If you remove all permissions to a field AND uncheck Allow >Any User To Submit, then that field will disappear for any user who is >not an Administrator, whether this field is a char, int or otherwise. >Also, if you remove any implicit permissions (submitter, assignee) and >uncheck Allow Any User To Submit, the field will also disappear from the view. > >Dwayne, >Do you have any implicit permissions on the field, such as submitter or >assignee? Also, have you checked this person's membership in other groups? >(Maybe he is a member of a different group that does have permission to >the >field.) > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 9:52 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >Dwayne, >Sorry to say, but removing permission to the field removes their >permission to see what's in the field, not the field itself. The >exceptions to this would be 'Trim' fields, buttons, boxes, etc, because >those all disappear when you don't have access, but when you don't have >access to a Char, Int, etc you simply can't see the contents of the >field, but you can still see the field itself > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin >Sent: Monday, April 07, 2008 7:29 AM >To: [email protected] >Subject: User can see fields with no permissions > >Dear List, > >We have a permission group called "IT". We have a form with some >fields that "IT" used to have permission to, but we have decided to >remove those permissions. So I went into the Admin Tool and removed >"IT" from the permission list in each field. > >But when a test user with only "IT" permissions opens the form he can >still see all the fields. If he tries to change the data and save the >form he gets, "ARERR [333] You have no access to field : [field name]", >but with "no >access" he shouldn't even be able to see the field. > >I cleared the cache, and made a cosmetic change, and the cosmetic >change appears on the screen, so it isn't a caching issue. > >What is going on? > >(ARS 7.1, RH Linux server, Oracle 10.2 db) > >Dwayne Martin >James Madison University > >_______________________________________________________________________ >____ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ >____ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ >____ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum >Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ >____ ____ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum >Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" ________________________________________________________________________ ____ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" ________________________________________________________________________ ____ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" DISCLAIMER Important! This message is intended for the above named person(s) only and is CONFIDENTIAL AND PROPRIETARY. If you are not the intended recipient of this e-mail and have received it in error, please immediately notify the sender by return email and then delete it from your mailbox. This message may be protected by the attorney-client privilege and/or work product doctrine. Accessing, copying, disseminating or re-using any of the information contained in this e-mail by anyone other than the intended recipient is strictly prohibited. Finally, you should check this email and any attachments for the presence of viruses, as the sender accepts no liability for any damage caused by any virus transmitted by this email. Thank you. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
