nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

access to workareas not authorized

skip11

Hi,

Teamsite 6.5, Solaris 8, CCPro, using iwgroups to control access to branches.

For a user who is NOT in an iwgroup which is set on a sub-branch, clicking through branches to the workarea
gets the expected permission denied. By crafting a url in the location bar the user can bypass security
and get to the workarea with full permissions.

Has anyone else seen this ? I have reproduced it for several users.

Regards,

R.Barger
Credit Suisse Group
Zurich, Switzerland

Find more posts tagged with

Comments

Adam Stoller

Have you tried this setting in iw.cfg ?...
[iwproxy_access_control_enabled]
# By default, iwproxy allows any authenticated TeamSite user to view any file in
# TeamSite. This section allows the administator to specify files for which
# iwproxy should verify the user's ability to read the file from the file
# system.
_default=yes
...It looks like it should do what you want ... let us know what happens... (you'll probably have to stop/restart iwproxy in order for it to take effect).

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

skip11

Hi fish,

No, that didn't get it. I have a case open, but it's dragging on, and I'd like to know if this is a bug.

thanks,

R.Barger
Credit Suisse Group
Zurich, Switzerland

coschtl

Hi,

did you get any results on this case?
We are facing a similar problem on windows.

Thanks in advance,
Stephan