Site-secured batch template can be accessed by user who does not have that site security setting

May areas of the application can be secured by Site, including batch templates.  A user with a site security that should preclude seeing a site-secured batch template can still see it.

 
Download and install the latest Service Pack which contains all fixes from previous patches. If you are running an older version, download and install the latest version and then the patch.  

Steps to Duplicate

  1. Go to Batch entry
  2. Create and save a new batch using the site secured batch template
  3. Go to Administration>Security>Application users
  4. Select the prerequisite user and run as that user
  5. As this user, got to Batch entry and filter the Uncommitted batches tab to see batches from today
  6. Observe that this user cannot see the batch created running as an admin user
  7. Now, continuing to run as the site secured user, select Add on the uncommitted batches tab
  8. Click the arrow in the Batch template field to display the batch template list
  9. Observe that the site secured template appears in this list and can be selected and a batch created
 
 

Environment

 Blackbaud CRM
 4.0
 4.0
 Blackbaud CRM 4.0.170 (Service Pack 11)

Was this article helpful?