General security question

JDE List,

I did some testing in Demo Jr. today and it appears as though application
security applied to the user and application security applied to the group,
that said user is in, is cumulative.

In other words, if I give USER access to P4210 and group TEST access to
P98305 and make USER a member of TEST, USER then has the ability to run
both P4210 and P98305.

Has anyone else experienced this? Is it supposed to work this way? Does
OW (not Demo Jr.) work this way also (I will be testing this next week but
I thought I would ask this list now)?

Thanks in advance,

James



OW B73.3.3 Xe SP18 Update 3

Yes it is supposed to work that way. It is cumulative. User overrides Group
which overrides *PUBLIC

Did you deny them access at any level?

Dave.

David D. Helsley, Inc.
[email protected]
Xe, HPUX, Sp17.1, Oracle, TSE, Web
Xe, W2K, Sp17.1, MSSql, TSE

On basic security:

http://www.questdirect.org/members_only/qaArchives/howsecuret&tsum01.asp

-Rn
(Xe, SP16.0, not-coexistant, Citrix)