User can perform signoffs despite having no signoff privileges in Empower - WKB4049

SYMPTOMS

• User does not have the privilege to do signoffs
• In a specific project, the user is able to perform signoffs

ENVIRONMENT

• Empower 2

CAUSE

Allowed Access in the project properties access tab is set to Owner and Group, and Group User Type is set to Administrator, meaning that all members of groups granted access to the project have Administrator privileges.

FIX or WORKAROUND

1. Set Group User Type to User's Own Type.

ADDITIONAL INFORMATION

The privileges associated with a Group User Type overrides individual user type privileges. Therefore, a group of Guests has Administrator privileges if the Group User Type is set to Administrator and the Guest group is allowed access.