Batch Search Does Not Respect Site Security

Users that belong to site security group can search for and open batches that belong to a site they should not have access to. These same batches cannot be found in the uncommitted batches dataform.
Download and install the latest service pack, which contains all fixes from previous service packs. If you are running an older version, download and install the latest version and then the service pack.
 

Steps to Duplicate

1. Setup a user with sufficient privileges to access, create, and edit batches. Add a site to their role.
2. Create a batch template and assign a different site than used in step 1.
3. Add a new batch using the site secured template and fill out at least one line. Note the batch number.
4. Run CRM as the site secured user account from step 1.
5. Navigate to Administration > Batch > Uncommitted Batches and note that you cannot find the site secured batch.
6. Click on Batch Search and enter the Batch Number. Note that you can find, open, and edit this batch.
 

Environment

 Blackbaud CRM
 4.0
 4.0
 4.0.173.0

Was this article helpful?


Thanks for your feedback! Did this solve your issue?

Comments (optional):


Thanks for your feedback!
We're glad it was helpful but sorry it didn’t solve your issue. If you need assistance, click Chat with Support below.
We’re sorry to hear that. Please tell us why.

 I don't like how this works.

 The answer is confusing.

 The answer didn't match what I was searching for.

Additional Comments (optional):


Thanks for your feedback! If you need assistance, click Chat with Support below.
Thanks for your feedback. Help us make our products even better by sharing details in our Idea Banks or our online Community.
Thanks for letting us know. We'll work on clarifying the information in the article. If you need assistance, click Chat with Support below.
Thanks for letting us know. We'll work on updating the search engine to return more relevant results.