Group Global Custom Object Navigate rights did not flow to the Resource Global rights upon upgrade
search cancel

Group Global Custom Object Navigate rights did not flow to the Resource Global rights upon upgrade

book

Article ID: 266979

calendar_today

Updated On:

Products

Clarity PPM On Premise Clarity PPM SaaS

Issue/Introduction

Group Global Custom Object Navigate rights did not flow to the Resource Global rights upon upgrade, thus the resource cannot access any of the custom objects they had access to in the prior release.

 

STEPS TO REPRODUCE:

  1. Group A has rights to  Create and View All for Custom Object 1 and Create and Edit All for Custom Object B. In the prior release , this inherently granted navigate rights 
  2. Add a user to this group and then go to the Resource >Global rights and you can see the rights to the custom object match the group 
  3. Upgrade to 16.1.1-- in this release, the navigate rights were decoupled, but they were supposed to "remain" for the user and the admins then would remove as needed. 
  4. Once upgraded, check the Group rights for A and B -- the navigate rights are correctly there for the Custom Objects
  5. Go to the user who is in that group and access the Global rights: the user is missing all navigate rights, but has the Edit/Create/View rights as in the prior release. So the user has lost all custom object access. 
  6. Go to the Group, remove the Navigate rights and Re-Add them
  7. Check the user again, and the rights appear.

NOTE: If we add the rights to Resource level, they get carried on correctly. The issue is with Group only.

Environment

Release : 16.1.1, 16.1.2

Resolution

DE69640, fixed in 16.1.3

Workaround:

  • If not upgraded yet: Assign the permission directly to Resource before upgrading
  • If already upgraded, remove the Group permission and assign back