Remedy user with no Task permission or role is able to update Task even if task is not assigned to him or his team --Remedy 9.0

Version 1
    Share:|

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    Remedy IT Service Management Suite


    APPLIES TO:

    Remedy 9.0



    QUESTION:

    Remedy user with no Task permission or role is able to update Task even if task is not assigned to him or his team. Also the user can open the Task form direct from URL and make changes.


    ANSWER:

    This is designed behavior for Remedy 9.0.
     

       
    1. The form access is controlled by permission assigned to the form.
    2.  
    3. We checked the permission for form where we found that there are certain roles assigned. for ex. Task User Role.
    4.  
    5. On checking the role on "Roles" form we found that a Group "Task User Computed" is mapped with this role.
    6.  
    7. We checked the Task User Computed role on Group form where we found that there are multiple permission mapped with this role.
    8.  
    9. A person with Incident User or Change User can open the form.
    10.  
    11. Access to the Task Record is controlled by the permissions assigned to Field ID 1 of Task form. Here it is Task ID field.
    12.  
    13. For Task ID field we have Submitter, Assignee Group, Vendor Assignee Group and Unrestricted Access Permission assigned.
    14.  
    15. If user has any of above permission then he can access and modify particular task record
    16.  
    17. In Remedy 8.x and 9.0.x Vendor Assignee Group is populated with Company ID by default. Thus member of company can modify the task.
    18.  
    19. Users with Unrestricted access can also modify the Task Record. We provide Unrestricted access to admin users only.
    20.  
    21. This functionality is as designed and working as expected.
       We have a defect# SW00509983 related to this use case which is fixed in 9.1 SP4
      

     


    Article Number:

    000136977


    Article Type:

    FAQ/Procedural



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles