Item persmission on a shortcut
Hello,
We would like to share items between different folders that are in use by different departments. We have a folder A that is in use by department A. Department A has all the permissions in folder A. The same situation is setup for department B and folder B. The only persmiisons that all departments have is "View" on each other folders.
Now department A wants to share an Item (Credential Entry or maybe a RDP item) with department B. An Administrator that has all the permissions is able to create a shortcut of an item in folder A to the folder B. Department B is able to see the new item in their folder appear, but they are not able to view the password or for example download the item.
Department B is not able to view the password of the item that was shortcut to their folder. It seems that permissions of folder B are not applicable for the item that was "shortcuted' from folder A.
Is this by design? If so, how are we able to share items between different folders/departments with tier own permissions?
We are running RDM 14.1.3.0 with DPS 6.1.3.0
All Comments (5)
Hello,
Only the View permission isn't enough. To be able to view passwords, the following three permissions are required : View, View Password and Execute.
Best regards,
Érica Poirier
Dear Erica,
Thank you for your reply. The departments in question has all the permissions set, view, edit, add etc, on their own folder. Networking department has full permissions set for its own Networking folder. The same counts for the database folder and department.
But if we shortcut an individual item from Networking folder to the Database folder, the Database department is not able to view the password of the item. Or in case of a document, not able to download the document. The item that was shortcut does not copie the folder permissions.
Settings on the Networks folder:
Settings on the Database folder:
Also, why is Execute permission necessary to view a password? This has been introduced in version 14 of RDM. There is no mention of this permission being necessary to view a password so far i can see.
Hello,
From your explanations, I created a similar environment using the same versions and still unable to reproduce the issue. If I create a shortcut from a single entry in FolderA into FolderB, the user who has only access to FolderB can see the entry.
What is the User Type have you configured for those accounts? Is it User or Read Only?
To be honest, I think we should do a remote session to understand that behavior. Your permissions are correctly configured and cannot figure what could cause the issue. Please send an email to ticket@devolutions.net to book an appointment.
Best regards,
Érica Poirier
Hi Erica,
I will need to do a bit more testing at my side, because I receive contradicting results when testing with different accounts. I will schedule time for myself next week to test it.