-
Bug
-
Resolution: Fixed
-
High
-
4.13.10, 4.20.1
-
2
-
Severity 2 - Major
-
66
-
Issue Summary
When a user without permission on all attributes edits the object the restricted attributes are deleted. This happens only on the new object view page.
This looks like a regression of and old bug ICS-1358 affecting the new object view page
Steps to Reproduce
- Log in as Admin
- Create an Object Type - A, with an Object Attribute Type (Reference) to reference Object Type B
- Create an Object A1 referencing Object B1
- Grant Manager permission to User X on Object Type A.
- Make sure User X does not have any Permission on Object Type B - so the Attribute in (2) is not visible to User X
- Log in as User X, note that you can see Object A1, but you do not see the Attribute containing Object B1
- Open the object in the new object view page http://<BASE-URL>/secure/insight/assets/XXX-1234 as User X
- Click Edit and save with/without making any changes
Expected Results
The restricted attribute(s) from User X are kept intact
Actual Results
The restricted attribute(s) from User X are deleted
Workaround
The old object schema view is no longer impacted by this bug. Ask users to edit restricted objects from the old view http://<BASE-URL>/secure/ObjectSchema.jspa?id=XXX&typeId=YYYY&objectId=ZZZ
- has a regression in
-
JSDSERVER-12782 Assets - Regression bug: Editing an object may clear attribute values the User is not allowed to see
-
- Closed
-
- is related to
-
JSDSERVER-10905 Hidden inherited attributes are cleared when user doesn't have permissions
-
- Closed
-
- is resolved by
-
JSDSERVER-10905 Hidden inherited attributes are cleared when user doesn't have permissions
-
- Closed
-
- mentioned in
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...