Skip to main content
M
michaBrunner1-Visitor
1-Visitor
February 5, 2019
Question

User has access to Thing even when he does not have permission

  • February 5, 2019
  • 4 replies
  • 2400 views

I want to remove the visibiltiy of a thing for an exsisting user. Despit removing all the visibility, run time and design time permissions the user is still able to see the thing and even edit the properties. He can't add properties or update the thing.

 

The user is called Stefan Arbeitsstellen

The Thing is the TestLoomManager

 

I used the access reports feature to check what is causing him to have this ability, but it shows nothing:
Admin Access Report.png

 

As you can see in this screenshot I'am logged in as Stefan Arbeitsstellen but I am still able to see the TestLoomManager. 

 

SA_Visibility.png

 

I also removed all the permissions for the Templates and Shapes that are used with the TestLoomManager.

 

Do you have any idea whats the cause of this behaviour?

 

Greetings Micha

4 replies

W
wposner-21-Visitor
1-Visitor
February 5, 2019

Check the permissions at the Collections level.  They will override permission settings at the thing level.

M
michaBrunner1-VisitorAuthor
1-Visitor
February 18, 2019

I checked permissions at the collection level. Either the user nor his group have any rights at the collection level for things and projects. (No Visibilty, Run Time and Design Time permissions)

 

The thing is still visible and editable for user Stefan Arbeitsstellen.

 

Is it possible that this has something to do with that the user had once full design rights and then changed some properties of the thing?

 

R
rosharma16-Pearl
16-Pearl
February 18, 2019

verify the collection level permissions at Persistence Providers also

see if somehow that user is mentioned there- try to limit the permissions accordingly

Terms & ConditionsAccessibility statement