Try it with a test field...

Create a field with just an explicit group permission, Like IT Manager, and
your IT test should not be able to see it.

Add Assignee permission to the field - then they will see it.  If you have
Assignee, Assignee Group, Submitter etc. permissions then they will be able
to see the field, because they *might* be in that role for some of the data
records.

David Sanders
Remedy Solution Architect
Enterprise Service Suite @ Work
==========================
ARS List Award Winner 2005
Best 3rd party Remedy Application
 
See the ESS Concepts Guide
 
tel +44 1494 468980
mobile +44 7710 377761
email [EMAIL PROTECTED]
 
web http://www.westoverconsulting.co.uk
 

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Tanner, Doug
Sent: Monday, April 07, 2008 4:31 PM
To: [email protected]
Subject: Re: User can see fields with no permissions

I bet the two fields on the Console have "Allow any User to Submit"
Even though, you are not submitting directly into a Console :)


-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
Sent: Monday, April 07, 2008 11:26 AM
To: [email protected]
Subject: Re: User can see fields with no permissions

This gets us to another topic.  I have a control panel with fields that
"Public" has no permission to.  On this panel are two fields that have
no Public permission, yet "Public" can see them.  But they can't see
other fields with no Public permission.  I've never been able to figure
that one out.

But this situation isn't like that.  There are about 25 fields that "IT"
(now "Info Tech")used to have permission to, but doesn't anymore.
"Public" can't see them, but "IT" still can.  Somehow the system is
remembering that "IT" USED TO have permissions, and is letting "IT" see
the fields, but not the data.

Good suggestion, Scott, but my "testit" person is not the Submitter nor
Assignee to the form.

Dwayne

---- Original message ----
>Date: Mon, 7 Apr 2008 11:04:24 -0400
>From: Scott Parrish <[EMAIL PROTECTED]>  
>Subject: Re: User can see fields with no permissions  
>To: [email protected]
>
>I would think you could run this test yourself. I did just now before
>sending off the email.
>
>Scott Parrish
>IT Prophets, LLC
>(770) 653-5203
>www.itprophets.com 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing
>Sent: Monday, April 07, 2008 11:01 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>Scott,
>I would love for you to prove that to both yourself and me, because I
have
>experienced differently. 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish
>Sent: Monday, April 07, 2008 8:55 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>LJ,
>This is not true. If you remove all permissions to a field AND uncheck
Allow
>Any User To Submit, then that field will disappear for any user who is
not
>an Administrator, whether this field is a char, int or otherwise. Also,
if
>you remove any implicit permissions (submitter, assignee) and uncheck
Allow
>Any User To Submit, the field will also disappear from the view.
>
>Dwayne,
>Do you have any implicit permissions on the field, such as submitter or
>assignee? Also, have you checked this person's membership in other
groups?
>(Maybe he is a member of a different group that does have permission to
the
>field.)
>
>Scott Parrish
>IT Prophets, LLC
>(770) 653-5203
>www.itprophets.com 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing
>Sent: Monday, April 07, 2008 9:52 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>Dwayne,
>Sorry to say, but removing permission to the field removes their
permission
>to see what's in the field, not the field itself.  The exceptions to
this
>would be 'Trim' fields, buttons, boxes, etc, because those all
disappear
>when you don't have access, but when you don't have access to a Char,
Int,
>etc you simply can't see the contents of the field, but you can still
see
>the field itself 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>Sent: Monday, April 07, 2008 7:29 AM
>To: [email protected]
>Subject: User can see fields with no permissions
>
>Dear List,
>
>We have a permission group called "IT".  We have a form with some
fields
>that "IT" used to have permission to, but we have decided to remove
those
>permissions.  So I went into the Admin Tool and removed "IT" from the
>permission list in each field.
>
>But when a test user with only "IT" permissions opens the form he can
still
>see all the fields.  If he tries to change the data and save the form
he
>gets, "ARERR [333] You have no access to field : [field name]", but
with "no
>access" he shouldn't even be able to see the field.
>
>I cleared the cache, and made a cosmetic change, and the cosmetic
change
>appears on the screen, so it isn't a caching issue.
>
>What is going on?
>
>(ARS 7.1, RH Linux server, Oracle 10.2 db)
>
>Dwayne Martin
>James Madison University
>
>_______________________________________________________________________
_____
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum
Sponsor:
>www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
_____
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum
Sponsor:
>www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
_____
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
________
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

DISCLAIMER Important! This message is intended for the above named person(s)
only and is CONFIDENTIAL AND PROPRIETARY. If you are not the intended
recipient of this e-mail and have received it in error, please immediately
notify the sender by return email and then delete it from your mailbox. This
message may be protected by the attorney-client privilege and/or work
product doctrine.  Accessing, copying, disseminating or re-using any of the
information contained in this e-mail by anyone other than the intended
recipient is strictly prohibited. Finally, you should check this email and
any attachments for the presence of viruses, as the sender accepts no
liability for any damage caused by any virus transmitted by this email.
Thank you.


____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to