IV89017: 'DOWNLOAD' LINK SOMETIMES MISSING IN THE 'NOTES & DOCUMENTS' SECTION OF A CONTRACT

3.4.2-TIV-TAP-FP005-WIN
3.4.2-TIV-TAP-FP005-README
3.4.2-TIV-TAP-FP005-LIN
3.4.2-TIV-TAP-FP005-AIX
3.5.1-TIV-TAP-FP002-WIN
3.5.1-TIV-TAP-FP002-README
3.5.1-TIV-TAP-FP002-LIN
3.5.1-TIV-TAP-FP002-AIX

APAR status

• Closed as fixed if next.

Error description

• Non-admin users that are in a group with full access to a
  lease are finding that sometimes they are able to view
  the 'Download' option for documents present in a service
  contract's 'Notes & Documents' tab but not others.
  
  The problem seems to be a result of the user permission & the
  group permission sections in the 'Permissions' tab of the
  document being missing for downloads. Once user & group
  information security group access is added, the 'Download'
  option becomes available.
  
  This problem appears when you have at least 2 non-admin users,
  both in a group with full access to lease.  If user #1 uploads a
  document to the lease and user #2 opens the lease and wants to
  download it, user #2 can't as no 'Download' link is present.
  When document permissions are examined, user #2 has no  access
  to the download option.
  

Local fix

• Modify the document's permissions tab and provide download
  access at a user and/or group level to the user that is unable
  to download
  

Problem summary

• Security was recently tightened, not allowing people without
  permission to download documents.  In the notes and documents
  tab, there are no permissions given by default to other users.
  Users are allowed to see the document record in TRIRIGA, but
  the Download action is a specific permission that needs to be
  granted.
  

Problem conclusion

• A new property  HONOR_DOCUMENT_PERMISSIONS_MODEL_FOR_DOWNLOAD
  has been added to TRIRIGAWEB.properties. This property
  determines whether or not a users permissions to a document
  record are checked against the document permissions  model when
  a user clicks the download link in the document record.
  TRUE: a user or groups ability to download a document must be
  set explicitly on the permissions tab of each document record
  that is created.
  FALSE: if a user or group can open a document record they can
  download the record regardless of the group/user permissions
  set on the permissions tab
   This is targeted to the 3.5.1.3 fix pack as well as the 2h2016
  release.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

•    None
  999
  

Fix information

Applicable component levels