Security Issue - I think I found a Bug

btd · Post by **btd** » Tue Jan 10, 2006 9:08 am

I have spent several hours going in through the Vault Admin tool setting up security for all my users. Only to find that for some unknown reason, some repositories are not shown in their listing and others are!

So I'm puzzled. In my own research I found two places that controls security. The first is "Folder Security" tab and the other Users/Security.

I have found that if I use the keyboard for granting users access to repositories (using User/Securty) that it does not work!

I know this is true becuase when I click the Users tab then choose Security and us ethe keyboard to grant a user access, close the window and then re-neter it, the repository is not checked. The only way to get this to work is to use the mouse!!!

Is this true? If so, do you have a patch? I am on 3.0.5 (2833).

Thanks

Tom

lbauer · Post by **lbauer** » Tue Jan 10, 2006 9:32 am

when I click the Users tab then choose Security and use the keyboard to grant a user access, close the window and then re-neter it, the repository is not checked.

I can try to reproduce this to see if it's fixed in Vault 3.1.6, but I could use more specific steps. From the Users Tab, you select a user and then Security, correct? Then you're in the Security Settings for User X. What keyboard strokes are you using to check or uncheck the Repository Access?

btd · Post by **btd** » Tue Jan 10, 2006 9:59 am

I am using the space bar to select/deselect the security.

Also on a more important note...

What controls security.

I found three ways.
1. Users/Repository Access
2. Repository then Properties then Repository Access
3. Folder Security tab then choose a repository.

It appears to me each of these options are mutually exclusive. Meaning they are not integrated. For example, I can choose to give a user access rights to a repository in option 2 above, but when I choose option 1 above, his rights are not there.

So is there a specific set of instrucitons to set secrity?

Thanks

Tom

lbauer · Post by **lbauer** » Tue Jan 10, 2006 3:18 pm

I wasn't able to reproduce this in Vault 2.0.6, 3.0.7 or 3.1.6. When I used my keyboard to change repository access, the settings remained the same after closing the Admin Tool and they carried over to the other tabs.

I'd suggest upgrading to Vault 3.1.6. It's the latest version of Vault and is a free upgrade from any 3.x version. It may solve the problem. Also, Vault 3.1.x is fully supported on .NET Framework 2.0, which can cause strange behavior in earlier versions of Vault clients.

Upgrade information here:
http://support.sourcegear.com/viewtopic.php?t=5274

Note, for best results, versions of the Vault client, Admin Tool and Vault Server should all be the same.