Unable to attach to sub-object of Idea with only OBS rights

Products

• Clarity PPM SaaS
• Clarity FedRAMP
• Clarity PPM On Premise

Issue/Introduction

A custom sub-object of Idea has an attachment attribute. The resources in the environment have no Global Idea rights, they only have OBS specific Idea rights. When attempting to upload an attachment to the sub-object, an error is received
 

STEPS TO REPRODUCE - 
1. Create a new Object, make it a sub-object of "Idea". Ensure it's API enabled.
2. Create an attachment attribute on the Object. Ensure it's API enabled.
3. Create a Resource, and related to Ideas only provide the Global right "Idea Management - Navigate". Provide all OBS Idea related rights to the user, for a specific OBS.
4. Create an Idea Blueprint, and add the sub-object module.
5. As the new Resource, log in, access an Idea associated to the OBS they have rights to. Access the sub-object, and create a new row. Then attempt to upload an attachment.

EXPECTED RESULTS:

The attachment should upload.

ACTUAL RESULTS:

It fails with error:
"Could not upload"

Logs show:
User ABC tried to access attachment for object subidea, but does not have permission.
com.ca.ppm.rest.exception.AuthException: API-1007 : You are not authorized to process request. Contact your system administrator for necessary security rights.

Environment

Clarity 16.3.3

Resolution

This issue doesn't occur in 16.4.0.

WORKAROUND:
Providing Global right "Idea - Edit - All"

Additional Information

This was reviewed as DE178008