It's a bug of Vault WebClient Permission Validation.

[piggybank]

hi,

Thanks a lot for your excellent products(Vault/Dragnet) ^oo^

I find it's no use of Permission Validation when you click the version number of a file stored in Vault.
So, If you can visit same project in Dragnet, you can catch the file by "VaultDiff.aspx" even you have not permission for it in Vault.

It's different from VaultHistory.aspx, GetFile.aspx, Blame.aspx.

Sorry, I'm not well in English

================================
The files modified were: Repository Path Version
$/xxxProject/xxxFolder/xxxSubFolder/xxxxfile.cpp 2
================================

[jclausius]

Thanks for the report. I've logged a bug for this problem.