But they CAN see the contents of the field itself.  If there is data there the 
test person can read it.

Dwayne

---- Original message ----
>Date: Mon, 7 Apr 2008 07:51:52 -0600
>From: LJ Longwing <[EMAIL PROTECTED]>  
>Subject: Re: User can see fields with no permissions  
>To: arslist@ARSLIST.ORG
>
>Dwayne,
>Sorry to say, but removing permission to the field removes their permission
>to see what's in the field, not the field itself.  The exceptions to this
>would be 'Trim' fields, buttons, boxes, etc, because those all disappear
>when you don't have access, but when you don't have access to a Char, Int,
>etc you simply can't see the contents of the field, but you can still see
>the field itself 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>Sent: Monday, April 07, 2008 7:29 AM
>To: arslist@ARSLIST.ORG
>Subject: User can see fields with no permissions
>
>Dear List,
>
>We have a permission group called "IT".  We have a form with some fields
>that "IT" used to have permission to, but we have decided to remove those
>permissions.  So I went into the Admin Tool and removed "IT" from the
>permission list in each field.
>
>But when a test user with only "IT" permissions opens the form he can still
>see all the fields.  If he tries to change the data and save the form he
>gets, "ARERR [333] You have no access to field : [field name]", but with "no
>access" he shouldn't even be able to see the field.
>
>I cleared the cache, and made a cosmetic change, and the cosmetic change
>appears on the screen, so it isn't a caching issue.
>
>What is going on?
>
>(ARS 7.1, RH Linux server, Oracle 10.2 db)
>
>Dwayne Martin
>James Madison University
>
>_______________________________________________________________________________
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to