Scott,
I think I answered my own question, here is when fields are visible.

If Dynamic Groups have access (Submitter, Assignee, Assignee Group, etc), if
you have Allow Any User to Submit checked.  If none of those conditions are
true, then the field is not visible, if any of those conditions are true,
but the situation does not match them having access to the data, the field
is visible, but the data is not. 

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish
Sent: Monday, April 07, 2008 9:39 AM
To: [email protected]
Subject: Re: User can see fields with no permissions

Dwayne,
The user does not have to be the assignee nor the submitter. But these two
groups are implicit groups, just as public is, so if submitter has
permissions to the field then the "testit" person will be able to see the
field (after all, how can you be a submitter to a field if you don't have
permission to see it? Hiding it via workflow is not the same as being able
to see it via permissions.). Same goes for the assignee.

Scott Parrish
IT Prophets, LLC
(770) 653-5203
www.itprophets.com
-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
Sent: Monday, April 07, 2008 11:26 AM
To: [email protected]
Subject: Re: User can see fields with no permissions

This gets us to another topic.  I have a control panel with fields that
"Public" has no permission to.  On this panel are two fields that have no
Public permission, yet "Public" can see them.  But they can't see other
fields with no Public permission.  I've never been able to figure that one
out.

But this situation isn't like that.  There are about 25 fields that "IT"
(now "Info Tech")used to have permission to, but doesn't anymore. "Public"
can't see them, but "IT" still can.  Somehow the system is remembering that
"IT" USED TO have permissions, and is letting "IT" see the fields, but not
the data.

Good suggestion, Scott, but my "testit" person is not the Submitter nor
Assignee to the form.

Dwayne

---- Original message ----
>Date: Mon, 7 Apr 2008 11:04:24 -0400
>From: Scott Parrish <[EMAIL PROTECTED]>
>Subject: Re: User can see fields with no permissions
>To: [email protected]
>
>I would think you could run this test yourself. I did just now before 
>sending off the email.
>
>Scott Parrish
>IT Prophets, LLC
>(770) 653-5203
>www.itprophets.com
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList) 
>[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing
>Sent: Monday, April 07, 2008 11:01 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>Scott,
>I would love for you to prove that to both yourself and me, because I 
>have experienced differently.
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList) 
>[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish
>Sent: Monday, April 07, 2008 8:55 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>LJ,
>This is not true. If you remove all permissions to a field AND uncheck
Allow
>Any User To Submit, then that field will disappear for any user who is 
>not an Administrator, whether this field is a char, int or otherwise. 
>Also, if you remove any implicit permissions (submitter, assignee) and 
>uncheck Allow Any User To Submit, the field will also disappear from the
view.
>
>Dwayne,
>Do you have any implicit permissions on the field, such as submitter or 
>assignee? Also, have you checked this person's membership in other groups?
>(Maybe he is a member of a different group that does have permission to 
>the
>field.)
>
>Scott Parrish
>IT Prophets, LLC
>(770) 653-5203
>www.itprophets.com
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList) 
>[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing
>Sent: Monday, April 07, 2008 9:52 AM
>To: [email protected]
>Subject: Re: User can see fields with no permissions
>
>Dwayne,
>Sorry to say, but removing permission to the field removes their 
>permission to see what's in the field, not the field itself.  The 
>exceptions to this would be 'Trim' fields, buttons, boxes, etc, because 
>those all disappear when you don't have access, but when you don't have 
>access to a Char, Int, etc you simply can't see the contents of the 
>field, but you can still see the field itself
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList) 
>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>Sent: Monday, April 07, 2008 7:29 AM
>To: [email protected]
>Subject: User can see fields with no permissions
>
>Dear List,
>
>We have a permission group called "IT".  We have a form with some 
>fields that "IT" used to have permission to, but we have decided to 
>remove those permissions.  So I went into the Admin Tool and removed 
>"IT" from the permission list in each field.
>
>But when a test user with only "IT" permissions opens the form he can 
>still see all the fields.  If he tries to change the data and save the 
>form he gets, "ARERR [333] You have no access to field : [field name]", 
>but with
"no
>access" he shouldn't even be able to see the field.
>
>I cleared the cache, and made a cosmetic change, and the cosmetic 
>change appears on the screen, so it isn't a caching issue.
>
>What is going on?
>
>(ARS 7.1, RH Linux server, Oracle 10.2 db)
>
>Dwayne Martin
>James Madison University
>
>_______________________________________________________________________
>____
_
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:
>www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
>____
_
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:
>www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
>____
_
>___
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum 
>Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
>____
____
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum 
>Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:
www.rmsportal.com ARSlist: "Where the Answers Are"

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:
www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to