Users are Able to Move Pages where they do not have Access (Doc ID 1531954.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle WebCenter Portal - Version 11.1.1.6.0 and later
Information in this document applies to any platform.

Symptoms

A few nodes with pages hierarchy (node 1, node 2, node3....) were created.

Access settings:
On node 1 Group 1 can Grant, Update, Create, etc, so any user in Group1 has complete access to the node
On node 2 Group 2 can Grant, Update, Create, etc, so any user in Group 2 has complete access to the node
On node 3 Group 3 can Grant, Update, Create, etc, so any user in Group 3 has complete access to the node.

It all works fine.

Issue
user in Group 3 can move pages into node 1.
user in Group 2 can move pages into node 2.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms