Document access

Hello,

I have the following problem: when a user saves a personal document (it isn’t in the repository), anyone other BO user can open that document (given he has read permission to the document). How do I prevent this ? What I want is this: nobody can open someone else’s documents unless they are in repository and have access. I know you can set passwords on documents, but I want this behaviour to be the default, without any extra actions like setting passwords.

Thanks,
Stijn Nuyts
University Hospitals Leuven


Listserv Archives (BOB member since 2002-06-25)

Hi,

Does anybody know how we get denied access to our own documents, the one on our hard-drive? The error message is ‘You are not authorized to use this document (FRM0008)’. But this is a document I created and is saved on my hard_drive. The only thing is that I published it to WEBI corporate document. I then deleted the copy in corporate documents and am trying to republish it back from Business Objects. It won’t let me open it now. What’s wrong?

Thanks.


Listserv Archives (BOB member since 2002-06-25)

In a message dated Wed, 11 Apr 2001 1:20:27 PM Eastern Daylight Time, Sylvia Tze sylvia.tze@MEDTRONIC.COM writes:

<< Does anybody know how we get denied access to our own documents, the one on our hard-drive? The error message is ‘You are not authorized to use this document (FRM0008)’. But this is a document I created and is saved on my hard_drive. The only thing is that I published it to WEBI corporate document. I then deleted the copy in corporate documents and am trying to republish it back from Business Objects. It won’t let me open it now. What’s wrong? >>

This question comes up fairly frequently, but it has been a while so the explanation might be useful again. When you export a document, it has a “security bit” set. This bit says, “I am a secure document, you must have access granted in the repository to be able to open me.” How is that access checked? By finding a link between the user and the resource (document).

So, what happens when you delete the document from the repository? The security check fails, even if you are the original owner!

Two solutions… before deleting the document from the repository, be sure to do a “Save for all users” option. This is a checkbox on the “Save As” dialog box.

Or, if it’s too late for that, you must open the document as a General Supervisor and use the same “Save As” trick. Once the document has been deleted from the repository, this is what will happen.

Universes work the same way.

Regards,
Dave Rathbun
Integra Solutions
www.islink.com


Listserv Archives (BOB member since 2002-06-25)

Hi

We have had this same issue at our company, but we have not deleted the documents from the repository. Does anyone know what might cause this error in that situation?

Snezana Ogrizovic
Decision Support Specialist
Quad/Graphics - Information Systems Department (414) 566-6163


Listserv Archives (BOB member since 2002-06-25)

This is a pretty old thread, so I’m going to re-open it and see if anyone’s figured anything new out…

Short story: User A sends document to repository. User B retrieves document from repository. User B is “not authorized to use this document.” The document was never deleted.

Any new ideas on why this happens??

Thanks! :slight_smile:


JennFisher :us: (BOB member since 2002-06-25)

Hi, Jenn;

Did User A Save for All Users? That may make a difference.


MichaelWelter :vatican_city: (BOB member since 2002-08-08)

:? No. But I thought that option only mattered when distributing via a file system instead of the repository? I thought once a document was in the repository that option was ignored… ?

:crazy_face:


JennFisher :us: (BOB member since 2002-06-25)

Yeah, I think you’re right. Actually, I’ve seen a similar problem recently. I created two reports and published them to Corporate Documents. Then I logged into Webi, using the same ID that I used to publish the documents. I was able to open only one of the documents in Webi. The other one told me that I wasn’t authorised (sic) to open it. :reallymad:


MichaelWelter :vatican_city: (BOB member since 2002-08-08)

Does your ID belong to multiple groups? If one group was not authorized, then you may have issues.

-RM


digpen :us: (BOB member since 2002-08-15)

In my case, no. I only belong to one group.


MichaelWelter :vatican_city: (BOB member since 2002-08-08)

Try this funky stuff (since you spoke about WebI).

Open the document with a General Supervisor and then log out.

Now… log back into WebI as the creator of the document and then try to open it.

:smiley:


digpen :us: (BOB member since 2002-08-15)

digpen, that worked. How irritating! Why does that happen? Why does logging as the GS, opening the document, and logging out again fix the problem. That’s just weird. :x


MichaelWelter :vatican_city: (BOB member since 2002-08-08)