User with permissions "Read Only" on Node Settings can modify "Node variables, Node files and Licenses"

Document ID : KB000085571
Last Modified Date : 14/04/2018
Show Technical Document Details
Issue:
Error Message :
No error is displayed

Patch level detected:Dollar Universe 6.2.00
Product Version: Dollar.Universe 6.2.0

Description :The user XXX has the following permissions on the nodes belonging to the company UNIV60:

Object Type Key Action Rule Granted by Role
Node Settings NODE_SETTINGS=* Display Allow DUAS UNIV60/X Read-only

He can modify the following objects on the Node Settings of the nodes belonging to the company UNIV60:
node variables
node files
licenses
Environment:
OS: All
Cause:
Cause type:
Defect
Root Cause: There was no specific permissions for the Node variables, Node files and Licenses
Resolution:
The correction affects Univiewer Console and Dollar Universe:

UVC : added multiple AccessDenied exceptions.
DU : added permission check for mentioned objects.

Fix Status: Released

Fix Version(s):
Component: Application.Server
Version: Dollar.Universe 6.3.01
Additional Information:
Workaround :
N/A