Page 1 of 1

COMPLETED CASE CAN BE DELETED BY EVERY PARTICIPATOR

Posted: Thu Oct 04, 2018 10:29 am
by steenkathus
Dears,
I just upgraded from r2740 to r2838. (Using PM->Admin->Upgrade System.)
My sysinfo:Win2003 Server. Firefox v3.5.3(Attachment).
I found the following things which were not happened in r2740 but happened in 2838 and this against our company security policy.
1. Every participator can delete a completed case,even they only have the general permission (PM_LOGIN & PM_Case).(Attachment)
2.Every participator can delete uploaded document no matter this case's status is completed or still to_do. (Cases->Information->Uploaded documents) And the setting of "process permission" seems not functional.(Attachment)

The above two functions are working fine in 2740. Can someone check it out for me? Thanks.

Regards