Conference iosg::all-in-1_v30

3132.0. "Update Index Option and Shared Drawer!" by VNABRW::EHRLICH_K (Call me Mr. Vain!) Thu Aug 12 1993 11:29

Hi,
	a customer has detect a 'misfeature' with Update Index and Drawers.
We're using ALL-IN-1 V3.0-1 German LLV .

Problem (which is reproduceable here in our office):

A Shared-Drawer [MANAGER]TEST where MANAGER is the DrawerOwner and USERA+USERB
have READ and CREATE Access.

Everything works fine, but there's a menu option on form FC2 called 
U ('Update Index').

So the customer asked,why it's possible that USERA can change (e.g.) the name of
the document which MANAGER or USERB has created. Because of the access for this
drawer you shouldn't be able to do this !!! You can't EDIT a document, but why
change something !!

This is a good question, but I think the answer is ....

You can also change the folder-name with this option, but then CABINET_REFILE 
fails beacuse it can't delete the document in this folder. That's right
because of READ+CREATE access.
 
Please, can you answer this?

Best Regards
Charly_from_CSC_Vienna
    

    Hi,
    
    If you want us to change the product then you need to enter an SPR. If
    you just want a work-round then in the Named Data of DOCDBENT add the
    following code to XOP ~~MAKE_CHANGES~~ after the line
    
    CAB CURRENT #UPDATE_DOC\
    
    
    DO FC_CHECK_DOCUMENT_ACCESS\
    GET OA$STATUS = 1\
    .IF #FC_DOCUMENT_ACCESS EQS FC$_DOC_SDO_READ
     OR #FC_DOCUMENT_ACCESS EQS FC$_ACCESS_NONE
      THEN
        GET OA$DISPLAY = FC$_NO_EDIT_ACCESS\\
        GET OA$STATUS = 0\
    IFSTATUS\
    
    A similar change would be needed to form FULLDB.
    
    Cheers
    
    Stuart