> Do groups with overlapping names affect each other?

Sometimes, yes.  Nesting Group Names is, in my experience, a bad
idea...I learned the hard way.  I supported a site that created a group
named "Help Desk" and another named "Central Help Desk" and permissions
overlapped.  They called me to diagnose the problem, and it was a mess
to clean up.

Also, keep in mind that with pages the actual page has permissions and
the *page holder* itself has permissions.  Check both.

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
Sent: Monday, April 07, 2008 9:47 AM
To: arslist@ARSLIST.ORG
Subject: Re: User can see fields with no permissions

I was wrong.  The person with "IT" permission can see the fields, but no
data.

We don't even want them to see the fields.  They are on a page and we
have removed permissions to the page.  But the test person can still see
the page.  But there is another page that no group (but Administrator)
has permission to, and the test person can't see it.  So why can he see
some pages he has no permission to and not others?

I also have a test login with no permissions (except Public) and that
person cannot see the page that IT sees, nor the page with no
permissions.

Here is an added complication.  We also have a permission group called
"IT Manager".  I thot maybe "IT" was inheriting permissions from "IT
Manager", so I change the group name from "IT" to "Info Tech", but that
didn't change anything.  I even restarted the server.  Do groups with
overlapping names affect each other?  I am grasping at straws.

Dwayne

---- Original message ----
>Date: Mon, 7 Apr 2008 10:29:52 -0400
>From: "Tanner, Doug" <[EMAIL PROTECTED]>  
>Subject: Re: User can see fields with no permissions  
>To: arslist@ARSLIST.ORG
>
>Yes, They can not only see the field but they can see the data - This
is
>implied with View access to the field. DT 
>
>-----Original Message-----
>From: Action Request System discussion list(ARSList)
>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>Sent: Monday, April 07, 2008 10:25 AM
>To: arslist@ARSLIST.ORG
>Subject: Re: User can see fields with no permissions
>
>But they CAN see the contents of the field itself.  If there is data
>there the test person can read it.
>
>Dwayne
>
>---- Original message ----
>>Date: Mon, 7 Apr 2008 07:51:52 -0600
>>From: LJ Longwing <[EMAIL PROTECTED]>  
>>Subject: Re: User can see fields with no permissions  
>>To: arslist@ARSLIST.ORG
>>
>>Dwayne,
>>Sorry to say, but removing permission to the field removes their
>permission
>>to see what's in the field, not the field itself.  The exceptions to
>this
>>would be 'Trim' fields, buttons, boxes, etc, because those all
>disappear
>>when you don't have access, but when you don't have access to a Char,
>Int,
>>etc you simply can't see the contents of the field, but you can still
>see
>>the field itself 
>>
>>-----Original Message-----
>>From: Action Request System discussion list(ARSList)
>>[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin
>>Sent: Monday, April 07, 2008 7:29 AM
>>To: arslist@ARSLIST.ORG
>>Subject: User can see fields with no permissions
>>
>>Dear List,
>>
>>We have a permission group called "IT".  We have a form with some
>fields
>>that "IT" used to have permission to, but we have decided to remove
>those
>>permissions.  So I went into the Admin Tool and removed "IT" from the
>>permission list in each field.
>>
>>But when a test user with only "IT" permissions opens the form he can
>still
>>see all the fields.  If he tries to change the data and save the form
>he
>>gets, "ARERR [333] You have no access to field : [field name]", but
>with "no
>>access" he shouldn't even be able to see the field.
>>
>>I cleared the cache, and made a cosmetic change, and the cosmetic
>change
>>appears on the screen, so it isn't a caching issue.
>>
>>What is going on?
>>
>>(ARS 7.1, RH Linux server, Oracle 10.2 db)
>>
>>Dwayne Martin
>>James Madison University
>>
>>______________________________________________________________________
_
>________
>>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>_______________________________________________________________________
_
>_______
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
>
>DISCLAIMER Important! This message is intended for the above named
person(s) only and is CONFIDENTIAL AND PROPRIETARY. If you are not the
intended recipient of this e-mail and have received it in error, please
immediately notify the sender by return email and then delete it from
your mailbox. This message may be protected by the attorney-client
privilege and/or work product doctrine.  Accessing, copying,
disseminating or re-using any of the information contained in this
e-mail by anyone other than the intended recipient is strictly
prohibited. Finally, you should check this email and any attachments for
the presence of viruses, as the sender accepts no liability for any
damage caused by any virus transmitted by this email.  Thank you.

>
>_______________________________________________________________________
________
>UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
>Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

________________________________________________________________________
_______
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to