'Error 401 - Unauthorized..' when trying to delete attachment file

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

User receives ‘Error 401 - Unauthorized. You are not authorized to view the page. If you are sure you have access, try logging in again or contact your system administrator.’ when trying to delete an attachment file even though the user has enough access rights for Navigate, Create, Edit All, View All, XOG Access of the object.

Steps to Reproduce:

1. Create custom attribute on the idea object (or any object) with data type attachment
2. Add attachment attribute to idea properties page
3. Create an idea or use an existing idea
4. Upload a file to the attribute as a resource with all Out of the Box (OOTB) idea access rights and hit save
5. Add global access right for this customer object to a user
6. Login with that user and open the Idea instance
7. Try to remove file from the attribute by selecting the (x) icon 

Expected Result: 
File is removed. 

Actual Result: 
‘Error 401 - Unauthorized. You are not authorized to view the page. If you are sure you have access, try logging in again or contact your system administrator.’

Environment

Release: 15.1, 15.2

Cause

Caused by DE29593

Resolution

Fixed in Clarity v15.3 and backported to v15.1 patch 6 and v15.2 patch 2.

Workaround:
Add access right: Object Administration Type: Global.