Make sure when you are flushing your local Browser cache (in IE) that the 
"Preserve Favorites website data" is UNCHECKED and that Form Data is CHECKED.

Lisa

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:[email protected]] On Behalf Of LJ LongWing
Sent: Thursday, August 07, 2014 11:07 AM
To: [email protected]
Subject: Re: Permission problem

** 
Charlie,
Have you shut down Tomcat, deleted all of the contents of the 'cache' directory 
for Mid-Tier, and restarted?...this is moderately different than a 'Flush 
Cache' from the config console.


On Thu, Aug 7, 2014 at 9:02 AM, Charlie Lotridge <[email protected]> wrote:


        ** 
        I'm at a loss and would appreciate any suggestions on how to fix this.
        

        I have a field on a form that has no privileges configured on it, so no 
one but full admins should see it.  But for some reason an underprivileged user 
account can see this field on the mid-tier running on the same machine, call it 
machine QA.  I have the same form on a server & mid-tier running on machine 
DEV, and the field is appropriately invisible to the (effectively) same user 
account.

        If I point DEV's mid-tier at server QA, the field is appropriately 
invisible.

        If I point QA's mid-tier at server DEV, the field is appropriately 
invisible.

        I've tried the above on different browsers running on different 
machines with the same results.

        So, it seems that the problem manifests ONLY when QA's mid-tier is 
pointing at QA's server.

        I've (of course) tried flushing the cache on QA's mid-tier, bouncing 
QA's Tomcat, and even bouncing machine QA itself, but the problem persists.  
And during the these bounces, I've turned off QA's cache persistence but no joy.

        The field (in this case) is a display field, so this is NOT an issue 
about seeing or modifying data without appropriate privileges.  So I have no 
reason to suspect a problem with ARS itself not enforcing permission policies, 
and in fact the evidence (outlined above) would seem to suggest something wrong 
with QA's mid-tier.  But it IS an issue (to me) that the field is visible.

        I've simplified my description here a bit and the problem does extend 
beyond what I've described here.  But my guess is that if I can solve this 
problem the other similar elements will resolve too.  Still, if appears 
relevant I can describe more details.

        All of the servers and mid-tiers are running v8.1.01

        Has anyone seen this before?  Any suggestions on how to fix this?  I 
haven't gone as far as uninstalling/reinstalling the mid-tier or tomcat yet, do 
anyone think this will help?

        Thanks,
        Charlie
        _ARSlist: "Where the Answers Are" and have been for 20 years_ 


_ARSlist: "Where the Answers Are" and have been for 20 years_ 

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Reply via email to