-
Bug
-
Resolution: Fixed
-
Low
-
4.20.1, Insight 8.9.8
-
2
-
Severity 2 - Major
-
Issue Summary
When a user have a Developer Role to an object, but no Role / access to view a referenced Objects, using the Schema View>Bulk Edit will remove the references not visible to the User - hence data will be lost unknowingly
Reproducible in Data Center: Yes
Steps to Reproduce
- As an Insight Admin/Manager, set up a reference from Object Type A to Object Type B, and create a few Objects in both types, with reference. For example, Object A1 has a reference to Object B1, Object A2 has a reference to Object B2
- Grant the Developer Role to a user (User X) for Object Type A
- Make sure that User X does not have any role for Object Type B, not even a User Role
- Log in as User X, and navigate to Object Type A, note that User X does not see the Attribute referencing Object Type B
- In the Object Schema View - use the cog icon to Bulk Edit the objects in Object Type A, for example, make changes to a simple Text Attribute.
Expected Results
The Bulk edit should not affect the Attributes which User X is not allowed to see, the 'A' Objects will keep their references to the 'B' objects.
Actual Results
ALL the 'A' Objects were edited, and the reference to the 'B' Objects has been removed, while User X is not aware.
If the Referenced Attribute is set to be required (Cardinality min = 1) - then the Bulk edit will fail with an error "At least one value must be set", but this does not make sense to User X, as all seems to be in order
...
Workaround
Use the Insight>Search for object to filter and bulk edit the objects - bulk edit here will not remove the references not visible to the User
However, if the user is unaware of the existence of the referenced objects there is no indication that data is removed at all...
When User X edits only ONE object in the Schema View, this does not happen, and no invisible reference is removed! The same should apply to Bulk Edit