CLRT-74015: OBS - Project modify Baseline right gives user project edit rights, when it should not

[Andrew M]

This is not due to be fixed, so I'm posting this so other users are aware.

I believe there will be an upcoming techdoc covering it too.

 

• When Project modify baseline right is provided via OBS it provides edit rights, when global it does not.

 

How to replicate:

• Create a user
• Create a group add the global rights "project navigate" and project modify baseline
• Provide instance view rights for the user to a project
• Log in - user can only view the project
• Amend the group, instead of project modify baseline being global, set it via the OBS on the project.
• Log back in. User now can edit any project in the OBS.

 

Hope this helps

[navzjoshi00]

Thanks for sharing this, Andy

 

Regards

NJ

[Kathryn Ellis]

Reference TEC493685 : What are the rules for the 'Project - Modify Baseline' and 'Project - Modify Baseline All' access rights?

 

This article was created some time ago.  It describes the current behavior and how you should configure the right based on the current design.

The article has been updated now to include the bug reference and status.