SOS Security problem

[Quoc-Binh]

Hi All

I have found some security issues a little too annoying.

If you configure your VSS to implement security and set one user with no access right because they may no longer work on a project or simple they cannot access a project which they are not working on.

When using SOS the user can still view the whole project tree and all the files. They cannot get latest version or check-out but still the can see file name, size and version number.

Is this normal?

Regards
Binh.

[lbauer]

Security works differently depending on the version of the VSS Automation Component that SOS is using to communicate with the database.

If you use VSS 6.0d on the SOS Server machine, users with no rights to a project will not be able to see files. With earlier versions of VSS, they may be able to see files but are not able to check them out or modify the database.

It sounds like may you need to install VSS 6.0d on the SOS Server machine. To determine the version of VSS you are using, check this KB article:
http://support.sourcegear.com/viewtopic.php?t=1510

Be aware that if you use VSS 6.0d, you should make a registry change to prevent a concurrency crash:

http://support.sourcegear.com/viewtopic.php?t=10