Uploaded image for project: 'Holiday Request'
  1. Holiday Request
  2. HOLIDAYREQ-35

Restrict the Object edit mode for non-admin users on other requests

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Major
    • None
    • 1.3.2
    • None
    • Chrome 49

    Description

      Tested on a local instance of XE 7.4.2

      1. Register 2 new users: X and Y.
      2. Change for both the user type in: Advanced.
      3. With user X, create a holiday request.
      4. Login with user Y on the holiday request created by user X.
      5. Edit the page in Inline mode .
      6. Open the page in Object mode.

      Actual result:

      • User Y cannot edit the holiday request of user X with Inline mode editing. Which is correct and expected result.
      • But user Y is able to modify the request of user X in Object mode editing.

      Expected result:

      • Normal users should not be able to modify the requests created by other users, even in Object mode.

      Attachments

        Activity

          People

            Unassigned Unassigned
            ihrehorciuc Irina Hrehorciuc
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: