Hi Aisha,
You seem to be mixing up different terms slightly so I am not 100 % sure about what you are asking and suggesting. Try to read up on our documentation about document access:
https://docs.ifs.com/ifsclouddocs/21r1/CreateAndMaintainDocument/AboutDocumentAccess.htm?StandAlone=true
Especially you should read the section about object-controlled document access there.
What I can say already now is that we have a good tool to understand why, or from where, a user got a certain access. You can find it under Document Revision / Access / Results. Push the Generate button there and you will see a report about how each user has got access to this document, if any.
Let us know if you have any questions after refreshing your understanding about the access concept for documents.
PS. Yes, there is a lot of information in there, and it can be quite dense in places. So read slowly and carefully If you have any ideas on how to make things clearer, we are all ears.
Thanks!
Hello,
Sorry for being unclear in my previous explanation. I will list out the scenarios below:
Scenario 1: Project Access is Off and not being used and Default Object Access for the Project LU is set to View
User A only has access to Company 1, and User B only has access to Company 2
User B creates a Project in Company 2 with documents attached.
User A in the document revisions screen is able to view the documents that User B has created for the project in Company 2.
Scenario 2: Project is On and Default Object Access for the Project LU is set to View
User A only has access to Company 1, and User B only has access to Company 2
User B creates a project in Company 2 with documents attached.
User A can find User B’s document number in the document revisions screen but they are not able to view the document.
How is it possible that User A can view the documents attached to a different company that they do not have access too? Currently, it seems that the project access is what is controlling what the user can and cannot see.
If company access does not determine what the user can and cannot see in terms of documents being attached- does this mean that restricted access has to be used?
I hope this makes sense and thank you for your feedback.
I cannot help you with how project access works, sorry. I can only say how the access works from the document side, and project access (really object access, and in this case from a project) is only part of the picture.
Did you try to generate the access results, and what did it tell you?
Hello.
Yes I generated the access results and it was coming from the Project. After testing, it has come to my understanding that with object level access for projects, unless they have project access switched on, then project team members can see documents even if they do not belong to the company that the project is associated too.
I assume this is because object level access for Projects will not be company specific, as its only dependent on if you have access to the Project LU itself (this could be several different projects).
Thank you for your help.
Regards
Aisha
Hi,
Glad you sorted it out.
Your theory is probably correct. Without project access being enabled, you probably get at least full view access for any user, for documents connected to such projects.