Problem Note 36892: In the SASĀ® Fair Banking Web application, you can add a Community Development record that you do not have permission to view
A group permission check was not implemented correctly in the Community Development
feature of SAS Fair Banking. As a result, you can add a record that you do not have permission to view. You can also reassign a record to a group to which you do not belong.
Select the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| SAS System | SAS Fair Banking Server | Microsoft Windows Server 2003 Datacenter Edition | 4.1 | 4.2 |  | 9.2 TS2M2 | 
| Microsoft Windows Server 2003 Enterprise Edition | 4.1 | 4.2 |  | 9.2 TS2M2 | 
| Microsoft Windows Server 2003 Standard Edition | 4.1 | 4.2 |  | 9.2 TS2M2 | 
| 64-bit Enabled AIX | 4.1 | 4.2 |  | 9.2 TS2M2 | 
| 64-bit Enabled Solaris | 4.1 | 4.2 |  | 9.2 TS2M2 | 
*
        For software releases that are not yet generally available, the Fixed
        Release is the software release in which the problem is planned to be
        fixed.
       
A group permission check was not implemented correctly in the Community Development feature of SAS Fair Banking. As a result, you can add a record that you do not have permission to view. You can also reassign a record to a group to which you do not belong.
| Type: | Problem Note | 
| Priority: | high | 
| Date Modified: | 2009-10-16 11:12:05 | 
| Date Created: | 2009-08-17 07:12:17 |