Able to modify the Booking Status, not having Resource – Hard Book rights
Article ID: 188118
Updated On:
Products
Clarity PPM On Premise
Clarity PPM SaaS
Issue/Introduction
Steps to Reproduce:
1. Create a user and add all access rights except the Resource - Hard Book - All one
2. Login as that user
3. Create a project and add a team member to the project
4. On The Classic UI, on the team list view notice the Booking Status field
5. The field is not editable (when the user has got Hard Booking rights, the field is editable)
6. Check the Staff Member Properties page. The Booking Status field is also read-only (when the user has got Hard Booking rights, the field is editable).
7. Back on the team list, select the Soft Booked team member
8. On the Actions menu, select the Set Allocation action
9. Set the Booking Status field to Hard
Expected Results: To get an error: You do not have the rights to perform the action
Actual Results: The team member is Hard Booked when I do not have rights to do so.
1. Create a user and add all access rights except the Resource - Hard Book - All one
2. Login as that user
3. Create a project and add a team member to the project
4. On The Classic UI, on the team list view notice the Booking Status field
5. The field is not editable (when the user has got Hard Booking rights, the field is editable)
6. Check the Staff Member Properties page. The Booking Status field is also read-only (when the user has got Hard Booking rights, the field is editable).
7. Back on the team list, select the Soft Booked team member
8. On the Actions menu, select the Set Allocation action
9. Set the Booking Status field to Hard
Expected Results: To get an error: You do not have the rights to perform the action
Actual Results: The team member is Hard Booked when I do not have rights to do so.
Cause
This is caused by DE54281
Resolution
This is fixed as from version 15.9.2
Feedback
Yes
No
Powered by
