Today, the Windchill Access Rights "Read" and "Download" are combined, so, if you can't search for a CADDocument in Windchill, you also can't download it to Creo.
From a security perspective, this may make sense, but for a other Business Cases, it is a Handicap:
Imagine Components with the Lifecycle State "Obsolete". In our Company, this are old Objects, and the users are not allowed, to assemble such objects in NEW Assemblies. BUT THEY MUST BE DOWNLOADABLE, if the user is opening existing assemblies where this objects are assembled in.
So, because of this coupled rights, we are unable to hide such obsolete Objects from the users eyes....
Please change this in the way, that "Read" and "Download" are completely separate rights in the Policy Administrator.