Projects are Viewable in Agreements Without Rights

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

A user who doesn't have rights to view Projects can see Projects through the Agreement grid, if they have the "Hierarchy - View - All" right

1. Create a Resource, assign all "Agreement" and "Idea" based Global Rights. Also assign "Hierarchy - View - All".
2. Log into Clarity MUX with the user, and access "Agreements"
3. Add a new row to the grid. In the "Predecessors" or "Successors" field, double click, and Projects will display in the list.

Expected Results:
The user should not be able to view Projects since they do not have rights to them.

Actual Results:
The Projects display in the list.

Resolution

The resolution for this problem is included in 16.2.1. It was originally tracked as DE79105.

Workaround:
Remove the "Hierarchy - View - All" right for the Resource