Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
1.3.2
-
None
-
Chrome 49
Description
Tested on a local instance of XE 7.4.2
1. Register 2 new users: X and Y.
2. Change for both the user type in: Advanced.
3. With user X, create a holiday request.
4. Login with user Y on the holiday request created by user X.
5. Edit the page in Inline mode .
6. Open the page in Object mode.
Actual result:
- User Y cannot edit the holiday request of user X with Inline mode editing. Which is correct and expected result.
- But user Y is able to modify the request of user X in Object mode editing.
Expected result:
- Normal users should not be able to modify the requests created by other users, even in Object mode.