Question

Unauthorized stamp creation

Laserfiche Security

Updated October 14, 2014

asked on June 13, 2014

If a user that does not have the right to create stamps attempts to create a stamp, it will tell them permission denied as it should. However, if they go back into stamps, the stamp is there. Some of our clients are questioning the entire security setup because of this. This has been an issue since early versions of 8 (when I first reported it), but it does not seem to have been addressed. Is this on anyone's radar at the moment? Are others seeing this behavior?

0 0

Answer

SELECTED ANSWER

replied on June 13, 2014

Right, both issues have been filed as bugs: the error message incorrectly coming up and the description of the privilege in the Administration Console.

Currently there isn't a way to just prevent the user from creating a stamp without preventing them from being able to annotate at all.

0 0

Replies

replied on June 13, 2014 • Show version history

Hi Donald,

The Manage Stamp privilege only controls the ability to modify and delete stamps. It does not enforce stamp creation. The description of the privilege in the Laserfiche Administration Console will need to be updated. Also, the "Permission denied. Access denied. [9013]" error message that is shown when a user tries to create a custom public stamp is a bug as it should not be appearing. In the end though, the correct behavior occurs in that the stamp does get created.

Regards

0 0

replied on June 13, 2014

Please see http://www.laserfiche.com/support/webhelp/Laserfiche/9.1/en-US/AdminGuide/LFAdmin.htm#Permission_Requirements_Stamps.htm. All users can always create, modify, and delete their own personal stamps. Additionally, the 'Manage Public Stamp' privilege does not actually control the ability to create public stamps, simply the ability to rename, modify, or delete them. If a permission denied error is showing up in the Client then either that is a bug/bad message in the Client itself, or there were multiple operations happening (say both a creation and a modification) and the modification was rejected but the creation is fine.

0 0

replied on June 13, 2014

OK, but the description for the Manage Stamp privilege says "Create and Modify all stamps." If that privilege does not stop someone from creating a stamp, what one does?

0 0

SELECTED ANSWER

replied on June 13, 2014

Right, both issues have been filed as bugs: the error message incorrectly coming up and the description of the privilege in the Administration Console.

Currently there isn't a way to just prevent the user from creating a stamp without preventing them from being able to annotate at all.

0 0

replied on June 13, 2014

Thanks...(both Alex and Justin)

0 0

replied on October 14, 2014

We have fixed this in 9.2, https://support.laserfiche.com/HTMLFPresenter.aspx?id=3055 , for both the privilege description and the error message.

0 0

You are not allowed to follow up in this post.

Question

Question

Unauthorized stamp creation

Answer

Replies

Sign in to reply to this post.