Question

Results in Search When Access Denied

Web Client Version 10

Updated February 26, 2019

asked on February 26, 2019

Alright - I am sure I am missing/overlooking something simple. Need another pair of eyes!

How can files show up in search results when the individual has no rights on the folder or the document?

We are using Web Client 10.2.1.362. I have a customer doing a search by entry name. Documents are showing up in the search results that she should not be seeing. They do not open for her but they show up. What am I missing?

She does not have any rights on the folder. She does not have any rights on the document. The document has no templates, metadata fields, or security tags. She is not in the groups that do have access to the folder.

What am I missing? I have also tested this with another individual and doing the exact same search, the files names do not appear in her search.

I have attached shots showing no access to the folder, no access to the document, and the results she gets when she searches.

Thanks for any insight I can get.

AccessRights.png (95.59 KB)

| Download

0 0

Replies

replied on February 26, 2019

Do they have the Bypass Browse privilege?

0 0

View 1 previous reply

replied on February 26, 2019

1) Are they in any groups that have privileges. Either bypass browse or manage entry access could lead to this. Check the everyone group too.

2) Do these documents have shortcuts? While almost all content rights are controlled on the source entry, shortcuts have their own browse rights.

0 0

replied on February 26, 2019

She is in 5 different groups and none of them have any privileges. The only privilege the everyone group has is bypass filter. No shortcuts on the documents.

0 0

replied on February 26, 2019

Hrm - trying to think of possibilities here. It's like a puzzle...

Is the user a member of an external directory service, like active directory or windows account? If so, they will be controlled by any rights allowed by any directory groups, even if that's not shown within Laserfiche.

Is the user account, if not a directory user themselves, set up with a linked directory account?

You mentioned they have no rights on the folder. I assume you checked the document itself? Allows directly on the document will take precedence over blanks over denies higher in the tree and will prevent browsing but will allow searching.

0 0

replied on February 26, 2019

Justin -

1) We run LF off Active Directory Groups.

2) See image in original post showing the effective rights on both the folder and the individual document.

3) The name of the document shows up in the search but says access denied when she tries to open it.

This screen shot shows all her groups and that they have no privleges. Also shows her individual windows account with Inherit rights from group membership and which rights are inherited.

IndividualRights.png (273.75 KB)

| Download

0 0

replied on February 26, 2019

Ok... how about document owner? Check if the user is the owner on the document. I think that doesn't show up in the effective access rights, but would provide auto-browse (but not read).

0 0

replied on February 26, 2019

Document owner is Import Agent

0 0

You are not allowed to follow up in this post.

Question

Question

Results in Search When Access Denied

Replies

Sign in to reply to this post.