I bet the two fields on the Console have "Allow any User to Submit" Even though, you are not submitting directly into a Console :)
-----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin Sent: Monday, April 07, 2008 11:26 AM To: arslist@ARSLIST.ORG Subject: Re: User can see fields with no permissions This gets us to another topic. I have a control panel with fields that "Public" has no permission to. On this panel are two fields that have no Public permission, yet "Public" can see them. But they can't see other fields with no Public permission. I've never been able to figure that one out. But this situation isn't like that. There are about 25 fields that "IT" (now "Info Tech")used to have permission to, but doesn't anymore. "Public" can't see them, but "IT" still can. Somehow the system is remembering that "IT" USED TO have permissions, and is letting "IT" see the fields, but not the data. Good suggestion, Scott, but my "testit" person is not the Submitter nor Assignee to the form. Dwayne ---- Original message ---- >Date: Mon, 7 Apr 2008 11:04:24 -0400 >From: Scott Parrish <[EMAIL PROTECTED]> >Subject: Re: User can see fields with no permissions >To: arslist@ARSLIST.ORG > >I would think you could run this test yourself. I did just now before >sending off the email. > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 11:01 AM >To: arslist@ARSLIST.ORG >Subject: Re: User can see fields with no permissions > >Scott, >I would love for you to prove that to both yourself and me, because I have >experienced differently. > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Scott Parrish >Sent: Monday, April 07, 2008 8:55 AM >To: arslist@ARSLIST.ORG >Subject: Re: User can see fields with no permissions > >LJ, >This is not true. If you remove all permissions to a field AND uncheck Allow >Any User To Submit, then that field will disappear for any user who is not >an Administrator, whether this field is a char, int or otherwise. Also, if >you remove any implicit permissions (submitter, assignee) and uncheck Allow >Any User To Submit, the field will also disappear from the view. > >Dwayne, >Do you have any implicit permissions on the field, such as submitter or >assignee? Also, have you checked this person's membership in other groups? >(Maybe he is a member of a different group that does have permission to the >field.) > >Scott Parrish >IT Prophets, LLC >(770) 653-5203 >www.itprophets.com > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of LJ Longwing >Sent: Monday, April 07, 2008 9:52 AM >To: arslist@ARSLIST.ORG >Subject: Re: User can see fields with no permissions > >Dwayne, >Sorry to say, but removing permission to the field removes their permission >to see what's in the field, not the field itself. The exceptions to this >would be 'Trim' fields, buttons, boxes, etc, because those all disappear >when you don't have access, but when you don't have access to a Char, Int, >etc you simply can't see the contents of the field, but you can still see >the field itself > >-----Original Message----- >From: Action Request System discussion list(ARSList) >[mailto:[EMAIL PROTECTED] On Behalf Of Dwayne Martin >Sent: Monday, April 07, 2008 7:29 AM >To: arslist@ARSLIST.ORG >Subject: User can see fields with no permissions > >Dear List, > >We have a permission group called "IT". We have a form with some fields >that "IT" used to have permission to, but we have decided to remove those >permissions. So I went into the Admin Tool and removed "IT" from the >permission list in each field. > >But when a test user with only "IT" permissions opens the form he can still >see all the fields. If he tries to change the data and save the form he >gets, "ARERR [333] You have no access to field : [field name]", but with "no >access" he shouldn't even be able to see the field. > >I cleared the cache, and made a cosmetic change, and the cosmetic change >appears on the screen, so it isn't a caching issue. > >What is going on? > >(ARS 7.1, RH Linux server, Oracle 10.2 db) > >Dwayne Martin >James Madison University > >_______________________________________________________________________ _____ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ _____ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: >www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ _____ >___ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org >Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > >_______________________________________________________________________ ________ >UNSUBSCRIBE or access ARSlist Archives at www.arslist.org >Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" DISCLAIMER Important! This message is intended for the above named person(s) only and is CONFIDENTIAL AND PROPRIETARY. If you are not the intended recipient of this e-mail and have received it in error, please immediately notify the sender by return email and then delete it from your mailbox. This message may be protected by the attorney-client privilege and/or work product doctrine. Accessing, copying, disseminating or re-using any of the information contained in this e-mail by anyone other than the intended recipient is strictly prohibited. Finally, you should check this email and any attachments for the presence of viruses, as the sender accepts no liability for any damage caused by any virus transmitted by this email. Thank you. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
