Within SAS Life Science Analytics Framework 5.x, when an object (file or folder) is moved, the object should inherit the default permissions of the folder it was moved to.

However, when a file or folder is moved between contexts, the actual permissions assigned by the application to the Members Group might not be as intended. The defect surfaced impacts only the use of Members Group permissions and does not affect any assigned Group or User permissions.

The Members Group is the default group that contains all users assigned as Members in the context. Within the hierarchy of permissions, defined User permissions take precedence, then defined Group permissions, and then Member permissions. If a user is in two (2) groups, any Deny takes precedence over any Allow.

Note: For the purpose of documenting the defect, a Move consists of using either the cut and paste functionality or the move functionality. The defect does not affect copy and paste. 

As a result of the defect, the actual Member Group permissions of the moved object are determined by the combination of the source permissions and the target permissions. When the permissions should change from Deny (source) to Deny (target), or Deny (source) to Unset (target), the permissions instead change from Deny to Allow. If the permissions on the source object are Allow or Unset, the permissions on the new location are correctly set according to the default permissions for the target location. 

Note that all Moves are captured in the application audit trail. If there is a permission change for Members planned as a result of the Move, the audit trail captures an audit record with the intended permissions. When the permissions of the moved object are incorrectly assigned due to this defect, the audit trail does not accurately reflect the permission change, and the audit trail records what the permissions were supposed to be.

A fix for this issue is provided in SAS Life Science Analytics Framework 5.4.1 via the available 5.4.1b patch.

Operating System and Release Information