| Subject: | Users without "Add", "Edit" and "Delete" access can upload files under "Download". |
| Summary: | Users without "Add", "Edit" and "Delete" access can upload files under "Download". The "Browse and Upload" feature is available. Refer to Figure 1. Figure 1: Upload files
|
| Audit Notes: | Edited by rashna on 12/06/20 15:40. Edited by rashna on 12/06/20 15:40. |
| 12 Jun 2020 | 03:38PM Comment 1 by Sanjay (Link Technologies) Assigned To: Rashna (Edge Business Solutions) Followup Date: 17-06-2020 05:36 PM Time Taken: 2.00 |
| Development work for this case has been completed. The change will be available in version:12.0.0612 1. The following changes were made(Include Database object names, Program classes and any other relevant information): - Add check for Attachments ADD access. User can upload attachments only if they have ADD access to Attachments Menu ("FR002")
2. Affected Areas: - Attachments
3. The issue was caused by: - Correction to Security
4. Notes:
5. Next Step: UAT ---------------------- Development Reference: |
|
| 12 Jun 2020 | 03:40PM Comment 2 by Rashna (Edge Business Solutions) ETC was changed from 15/06/2020 to 17/06/2020 |
| 16 Jun 2020 | 03:10PM Comment 3 by Rashna (Edge Business Solutions) Assigned To: Rashna (Edge Business Solutions) Followup Date: 18-06-2020 05:08 PM Time Taken: 1.00 |
| QA Results Tests carried out according to requirements specified on the case header Test Results Summary Table 1 - Summarised list of issues | No | Test Description | Pass/Fail | | 1 | Disable the "Add", "Edit" and "Delete" access for Downloads for role Employee. Login as user A006, validate that the browse and upload option is disabled. | Pass |
Environment Details - OS version: Windows Server 2012
- Application version: 12.0.0616
- Setup: Demo
- Server : 10.0.0.14
- Database: LINKSOFT-DEMO-11-RASHNA
Next Step:
|
|