Objective Investments - Idea attributes visible to a user without idea rights

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

Within the Objective module it may be possible to view Idea attributes for a Resource who doesn't have rights to view Ideas.

 

Steps to Reproduce:

1. As as Admin, Create a new Objective and Add Projects & Ideas instances to the Objective > Investment module
2. Create a new user "User1"
3. Give these Global rights: Objective Edit All, Objective Navigate, Project - View Access Rights - All, Project - View Management - All (no Idea access rights)
4. Login to MUX as User1, go to the newly created objectives and navigate to investments module
5. Idea instances not seen in the Objective > Investment module grid (as expected)
6. User1 is able to see only Project instances Objective > Investment module grid (as expected)
7. As User1, open the Column panel

Expected Results: Idea attributes should not be visible in the column panel

Actual Results: User1 is able to view the Idea attributes in the column panel and add the same to the grid. (this applies to any investment type for which the user does not have access rights)

Environment

Clarity 16.2.1

Resolution

This is currently under review, and planned for resolution in a future release of Clarity. This is tracked as DE79163.