Clarity: Group OBS Access Rights for SubObject Edit All access does not allow the end-user to edit all SubObject instances

Document ID : KB000049651
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

Created a Group with OBS Access Rights to allow the end-user the ability to edit all subobject instances. This does not work as expected. The end-user is not able to edit all subobject instances. Only on instances where the end-user created the record is he allowed to edit the instance.

Steps to Reproduce:

Prerequisite:

  1. user-defined subobject exists on the Project Object (example: if PMO Accelerator is installed, the 'Status Reports' object will exist and be used in the STR)

  2. OBS used for Security Access Rights associated with the Project Object
  1. Login to Clarity as an administrator

  2. Administration > Groups > Click 'New' group > OBS Group 1

  3. Group's Access Rights > OBS Units > Add the following Rights to grant access to the subobject instances for 'OBS Unit 1'

    Project - Edit All - Status Report
    Project - View All - Status Report
    Project - Create - Status Report
    Project - View

  4. Group > Global Rights > Add 'Project - Navigate'

  5. Assign Resource01, Resource02 to the group (they have no other access rights)

  6. Home > Projects > Create a new project (myProject1) and select 'OBS Unit 1' so that the resources will have access to this project

  7. Create some subobject instances for the 'Status Reports' subobject

  8. Login as Resource01

  9. Home > Projects > myProject1 > Properties : Status Reports subpage list view

  10. See the subobject instances already created by the admin user > click into one

    Expected Result: should be able to edit this instance
    Actual Result: it is view only

  11. Create a new subobject instance record (created by Resource01)

  12. After saving, Resource01 is able to edit this instance

  13. Login as Resource02

  14. Home > Projects > myProject1 > Properties : Status Reports subpage list view

    See the subobject instances already created by the admin user and the 'Resource01' user> click into one

    Expected Result: should be able to edit this instance
    Actual Result: it is view only

  15. Create a new subobject instance record (created by Resource02)

  16. After saving, Resource02 is able to edit this instance

Expected Result: Should be able to edit subobject instances created by other users due to assigned access rights
Actual Result: Not able to edit subobject instances created by other users

Solution:

Workaround:
Grant access to edit-all at the Global level

Status/Resolution:
This issue is documented as CLRT-68470 and is marked as a duplicate to CLRT-67197.
Resolved in Clarity 13.0.1 Generic Patch. Reference TEC572268
Resolved in Clarity 13.1.0

Keywords: CLARITYKB, CLRT-68470, CLRT-67197, clarity13resolved, clarity1310resolved.