Dwayne, The user does not have to be the assignee nor the submitter. But these two groups are implicit groups, just as public is, so if submitter has permissions to the field then the "testit" person will be able to see the field (after all, how can you be a submitter to a field if you don't have permission to see it? Hiding it via workflow is not the same as being able to see it via permissions.). Same goes for the assignee.
Scott Parrish IT Prophets, LLC (770) 653-5203 www.itprophets.com -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin Sent: Monday, April 07, 2008 11:26 AM To: [email protected] Subject: Re: User can see fields with no permissions This gets us to another topic. I have a control panel with fields that "Public" has no permission to. On this panel are two fields that have no Public permission, yet "Public" can see them. But they can't see other fields with no Public permission. I've never been able to figure that one out. But this situation isn't like that. There are about 25 fields that "IT" (now "Info Tech")used to have permission to, but doesn't anymore. "Public" can't see them, but "IT" still can. Somehow the system is remembering that "IT" USED TO have permissions, and is letting "IT" see the fields, but not the data. Good suggestion, Scott, but my "testit" person is not the Submitter nor Assignee to the form. Dwayne ---- Original message ---- >Date: Mon, 7 Apr 2008 11:04:24 -0400 >From: Scott Parrish <[EMAIL PROTECTED]> >Subject: Re: User can see fields with no permissions >To: [email protected] > >I would think you could run this test yourself. I did just now before >sending off the email. > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 11:01 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >Scott, >I would love for you to prove that to both yourself and me, because I have >experienced differently. > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish >Sent: Monday, April 07, 2008 8:55 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >LJ, >This is not true. If you remove all permissions to a field AND uncheck Allow >Any User To Submit, then that field will disappear for any user who is not >an Administrator, whether this field is a char, int or otherwise. Also, if >you remove any implicit permissions (submitter, assignee) and uncheck Allow >Any User To Submit, the field will also disappear from the view. > >Dwayne, >Do you have any implicit permissions on the field, such as submitter or >assignee? Also, have you checked this person's membership in other groups? >(Maybe he is a member of a different group that does have permission to the >field.) > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 9:52 AM >To: [email protected] >Subject: Re: User can see fields with no permissions > >Dwayne, >Sorry to say, but removing permission to the field removes their permission >to see what's in the field, not the field itself. The exceptions to this >would be 'Trim' fields, buttons, boxes, etc, because those all disappear >when you don't have access, but when you don't have access to a Char, Int, >etc you simply can't see the contents of the field, but you can still see >the field itself > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin >Sent: Monday, April 07, 2008 7:29 AM >To: [email protected] >Subject: User can see fields with no permissions > >Dear List, > >We have a permission group called "IT". We have a form with some fields >that "IT" used to have permission to, but we have decided to remove those >permissions. So I went into the Admin Tool and removed "IT" from the >permission list in each field. > >But when a test user with only "IT" permissions opens the form he can still >see all the fields. If he tries to change the data and save the form he >gets, "ARERR [333] You have no access to field : [field name]", but with "no >access" he shouldn't even be able to see the field. > >I cleared the cache, and made a cosmetic change, and the cosmetic change >appears on the screen, so it isn't a caching issue. > >What is going on? > >(ARS 7.1, RH Linux server, Oracle 10.2 db) > >Dwayne Martin >James Madison University > >___________________________________________________________________________ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >___________________________________________________________________________ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >___________________________________________________________________________ _ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org >Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > >___________________________________________________________________________ ____ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org >Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" ____________________________________________________________________________ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
