You are viewing limited content. For full access, please sign in.

Question

Question

Prevent or control digital signature removal

Security
Updated September 3, 2015
asked on August 13, 2015

"Removing a Signature

Users with appropriate rights can remove signatures from a document. To remove a signature, you must either have created the signature yourself, be the owner of the document, or have the Delete Entry entry access right for the document. In addition, in all cases, you must have the Delete feature right. Signatures cannot be removed if an existing countersignature depends on them."

Any user with Delete rights can remove someone else's digital signature.   I signed a test document.  another user removed my signature.  How can I limit this.  Only super admins or the signer should be able to remove a signature

 

0 0

Replies

replied on August 20, 2015

To keep a user from deleting someone else's digital signature, you would have to deny that user the "Delete Entry" access rights of that document. 

0 0
replied on September 3, 2015

Ashley,

This promotes a different issue. For full named users that require access to the repository and need access to delete documents they would now be prevented from doing so. Has there been any insight in pursuing this to be associated with a different access right instead? Has any SCR been filed as well? Are there any other alternative solutions for this?

I have presented an alternative to the customer by having a toDelete or some other folder to move documents to so that they may be deleted from there though since the repository is so large and having many issues this could potentially causes a security issue if documents are being placed in there if others should have no access to them.

0 0
replied on September 3, 2015

The logic here is that if the user had rights to delete the document, they could delete the signature that way anyway. What's the scenario for being able to delete a document but not the signature on it? 

0 0
replied on September 3, 2015 • Show version history

It would be a process where the document needs to be signed by multiple people and would be passed through the repository. If it arrived to a current state and the following user needed to sign and lets say "accidentally" deleted the signature but did not delete the document then the first signature would no longer be available.

The other argument is to have the original signer to be able to delete their own signature though there would be ways around preventing this as well or to prevent the document from continuing with its intended process. Thanks for the reply.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...