In SAS® Drug Development 4.4 and before, duplicate audit records were created when attempting to change permissions and apply changes to a very large folder tree created in the Repository.

To see this behavior:

1. Create a folder structure that contains 4,451 folders and 56,000 files

   At the top of this folder/file structure is a single folder

   /SAS/Files/API_Files

2. The parent folder has these permissions in addition to the default permissions set on the Current and Default tabs.

   user_1 : Allow checked for all 5

   user_2 : Allow checked for all 5

   user_3 : Allow checked for all 5

   user_4 : Allow checked for all 5

   user_5 : Allow checked for all 5

   Note: those permissions had previously been set on the folder before checking in the files.

3. Then attempt to remove two users from the permissions on the Current and Default tabs.

4. Select this folder: /SAS/Files/API_Files
5. Open the Permissions for the folder
6. Select the Current tab
7. Click Users or Groups icon
8. Select user_4 and user_5 at the same time
9. Click Delete icon (X)
10. Clicked the OK button
11. Select Replace radio button that cascades to all files and folders
12. Click the Set button
13. Repeat the same steps for the Default tabs right after clicking Set button for Current tab.

Expected to see the:

• 56,000 audit records for the file permission changes
  • One for each file in the tree
• 8,902 audit records for the folder permission changes
  • One for each folder in the tree, Current permissions: 4,451
  • One for each folder in the tree, Default permissions: 4,451

Actual results:

• 62,731 audit records for the file permission changes
• 9,338 audit records for the folder permission changes
  • 4,887 Permissions changed actions
  • 4,451 Default permissions changed actions (this number is correct)




Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS Drug Development	Linux for x64	4.4	4.5	9.4 TS1M2	9.4 TS1M2

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.