Consultor Eletrônico



Kbase P111923: Dynamics enableFolderPages bypasses security
Autor   Progress Software Corporation - Progress
Acesso   Público
Publicação   12/19/2005
Status: Unverified

FACT(s) (Environment):

Dynamics

SYMPTOM(s):

Dynamics enableFolderPages bypasses token (action) security

Page is enabled if enableFolderPages is called from code regardless of security tokens (actions) defined for the page

FIX:

Set gcSecuredPages variable in _getPropertyValues procedure (
af/sup2/afspfoldrw.w) .
The code is looping through the tab pages so at the end of DO loop add something like:
IF laTabEnabled[x] = NO THEN gcSecuredPages = gcSecuredPages + STRING(X) + ",".
Before the loop is entered clear the variable gcSecuredPages = "" (the procedure is called several times) and remove the "," after leaving the loop.