PM66412: Users with the CQ privilege 'All Users/Groups Visible' unchecked still can see other users

Rational ClearQuest Fix Pack 10 (8.0.0.10) for 8.0
Rational ClearQuest Fix Pack 3 (8.0.1.3) for 8.0.1
Rational ClearQuest Fix Pack 11 (8.0.0.11) for 8.0
Rational ClearQuest Fix Pack 4 (8.0.1.4) for 8.0.1
Rational ClearQuest Fix Pack 5 (8.0.1.5) for 8.0.1
Rational ClearQuest Fix Pack 12 (8.0.0.12) for 8.0
Rational ClearQuest Fix Pack 6 (8.0.1.6) for 8.0.1
Rational ClearQuest Fix Pack 13 (8.0.0.13) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.0.14) for 8.0
Rational ClearQuest Fix Pack 7 (8.0.1.7) for 8.0.1
Rational ClearQuest Fix Pack 15 (8.0.0.15) for 8.0
Rational ClearQuest Fix Pack 8 (8.0.1.8) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.0.16) for 8.0
Rational ClearQuest Fix Pack 9 (8.0.1.9) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.0.17) for 8.0
Rational ClearQuest Fix Pack 10 (8.0.1.10) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.0.18) for 8.0
Rational ClearQuest Fix Pack 11 (8.0.1.11) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.0.19) for 8.0
Rational ClearQuest Fix Pack 12 (8.0.1.12) for 8.0.1
Rational ClearQuest Fix Pack 20 (8.0.0.20) for 8.0
Rational ClearQuest Fix Pack 13 (8.0.1.13) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.0.21) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.1.14) for 8.0.1
Rational ClearQuest Fix Pack 15 (8.0.1.15) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.1.16) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1

APAR status

• Closed as program error.

Error description

• Users with the CQ privilege 'All Users/Groups Visible' unchecked
  still can see other users in the record tabs when the references
  to users are not in the display list of the query.
  Also when submitting records that have fields which are
  references to users he can see all other users via the choice
  lists of these user reference fields.
  The same applies for groups and is visible in all clients.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  ClearQuest users with the privilege "All Users/Groups
  Visible" unchecked will be shown groups they are not a
  member of in a choice list for a reference to groups field.
  Similarly, they can also see users that are part of these
  groups in a choice list for a reference to users field.
  

Problem conclusion

• A fix is available in ClearQuest 8.0.0.10 and 8.0.1.3.
  
  ClearQuest users with the privilege "All Users/Groups
  Visible" unchecked can now only see the groups they are a
  member of, and can only see users that are a member of those
  same groups, in choice lists for the groups and users record
  types. The exception is the Everyone group, which does not
  provide visibility to any other users.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R711 PSN

     UP