# security (form) bug

**URL:** <https://forum.servoy.com/t/security-form-bug/216>\
**Category:** Classic Servoy\
**Created:** [July 29, 2003, 10:06am UTC](https://forum.servoy.com/t/security-form-bug/216 "2003-07-29T10:06:33Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\
**Post date:** [July 29, 2003, 10:06am UTC](https://forum.servoy.com/t/security-form-bug/216/1 "2003-07-29T10:06:33Z")

</div>

In the security section I have made an extra group with a new user.  
I have de-select the element-settings ‘viewable’ and ‘accesible’ of one specific form.

When this user login, the form is still viewable and accessible!  
Can this be fixed?

P.S. If you de-select ‘viewable’ and ‘accesible’ of an element on the same form than this is working correctly! To deny acces to a complete form is not working.

---

<div class="post-metadata">

**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\
**Post date:** [July 30, 2003, 4:51pm UTC](https://forum.servoy.com/t/security-form-bug/216/2 "2003-07-30T16:51:33Z")

</div>

nobody else?

---

<div class="post-metadata">

**Author:** ![cathleen](https://avatars.discourse-cdn.com/v4/letter/c/71c47a/32.png) [@cathleen](https://forum.servoy.com/u/cathleen)\
**Post date:** [August 4, 2003, 12:00pm UTC](https://forum.servoy.com/t/security-form-bug/216/3 "2003-08-04T12:00:39Z")

</div>

Yeah! me too!  
Is this already been fixed?

---

<div class="post-metadata">

**Author:** ![Jan\_Blok](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@Jan\_Blok](https://forum.servoy.com/u/Jan_Blok)\
**Post date:** [August 4, 2003, 1:39pm UTC](https://forum.servoy.com/t/security-form-bug/216/4 "2003-08-04T13:39:26Z")

</div>

Fixed, will be availeble in next release

---

<div class="post-metadata">

**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\
**Post date:** [August 11, 2003, 2:58pm UTC](https://forum.servoy.com/t/security-form-bug/216/5 "2003-08-11T14:58:52Z")

</div>

If you only select: viewable of a specific form, the records on that form are still accessible and changeable

If you both de-select: viewable and accessible of a specific form, than everything is working fine and the form is totaly blocked!

---

<div class="post-metadata">

**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\
**Post date:** [August 19, 2003, 9:24pm UTC](https://forum.servoy.com/t/security-form-bug/216/6 "2003-08-19T21:24:14Z")

</div>

is this gonna be fixed?

---

<div class="post-metadata">

**Author:** ![admin](https://avatars.discourse-cdn.com/v4/letter/a/3ec8ea/32.png) [@admin](https://forum.servoy.com/u/admin)\
**Post date:** [August 20, 2003, 3:34pm UTC](https://forum.servoy.com/t/security-form-bug/216/7 "2003-08-20T15:34:02Z")

</div>

This issue is on the to fix list and will be fixed asap.

---

<div class="post-metadata">

**Author:** ![Jan\_Blok](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@Jan\_Blok](https://forum.servoy.com/u/Jan_Blok)\
**Post date:** [August 25, 2003, 9:41am UTC](https://forum.servoy.com/t/security-form-bug/216/8 "2003-08-25T09:41:09Z")

</div>

we investigated this problem and it works as expected  
-make a form not viewable and the user cannot enter the form  
-make a form not accessible en the form can be viewed but content not changed

Is your user based in multiple groups? having conflicting rights? (higher rights win)

---

<div class="post-metadata">

**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\
**Post date:** [August 25, 2003, 9:57am UTC](https://forum.servoy.com/t/security-form-bug/216/9 "2003-08-25T09:57:12Z")

</div>

> -make a form not viewable and the user cannot enter the form

this is working fine

> -make a form not accessible en the form can be viewed but content not changed

This is, in my case, not working!  
I have checked several times, the user don’nt have double rights. (I have only 2 users: Administrator and 1 user (in a different group) ) The rights are only applied to the user.

Using Windowx XP Prof.

---

<div class="post-metadata">

**Author:** ![Jan\_Blok](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@Jan\_Blok](https://forum.servoy.com/u/Jan_Blok)\
**Post date:** [August 25, 2003, 2:37pm UTC](https://forum.servoy.com/t/security-form-bug/216/10 "2003-08-25T14:37:40Z")

</div>

We just discovered that recordview/listview is working ok, but tableview is indeed broken.

---

<div class="post-metadata">

**Author:** ![Jan\_Blok](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@Jan\_Blok](https://forum.servoy.com/u/Jan_Blok)\
**Post date:** [September 3, 2003, 12:58pm UTC](https://forum.servoy.com/t/security-form-bug/216/11 "2003-09-03T12:58:33Z")

</div>

Is fixed in the 1.1.1 b6 release
