PM95649: object heading and text can be edited with only read access

Rational DOORS and Rational DOORS Web Access 9.5.2
Rational DOORS and DOORS Web Access Fix Pack 1 (9.5.2.1) for 9.5.2
Rational DOORS Fix Pack 2 (9.5.2.2) for 9.5.2

APAR status

• Closed as program error.

Error description

• The object heading and object text attributes can be edited by a
  user who only has read access to the attribute value.
  
  To recreate:
  
   - create a module with some objects
   - restrict access to he values of object heading and object
  text to read-only for a given user
   - open the module as that user
   - right-click an object and open its properties dialog
   - now select the object again, so the focus returns to the
  module window
   - type some text (it will not appear) then select a different
  object
   - the first character of the text typed will be applied
  
  The modification will be applied to the heading if a previous
  heading value edisted, otherwise it will be applied to the
  object text.
  
  Workaround:
  
  Implement your own ACL system using a trigger.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The object heading and object text attributes can be edited
  by a user who only has read access to the attribute value.
  
  To recreate:
  
   - create a module with some objects
   - restrict access to he values of object heading and object
  text to read-only for a given user
   - open the module as that user
   - right-click an object and open its properties dialog
   - now select the object again, so the focus returns to the
  module window
   - type some text (it will not appear) then select a
  different object
   - the first character of the text typed will be applied
  
  The modification will be applied to the heading if a
  previous heading value edisted, otherwise it will be applied
  to the object text.
  
  Workaround:
  
  Implement your own ACL system using a trigger.
  

Problem conclusion

• The code has been changed so that the product issue no
  longer occurs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TLOGIC DOORS

• Fixed component ID

  5724V61DR

Applicable component levels

• R930 PSN

     UP