General User with Delete Access - Archer 6.8P2
We have an application, the only role that has access to this application is General User, and it only has Read Only access to Content Record. There is no App Owner, and no record permission fields at all. However, there are a few users, some only have General User role (no any type of admin groups or roles), some have some regular groups, can read, write, and even delete all records in this application (and some other applications, we are only using this app for troubleshooting currently).
We tried to delete these users’ entry in the PreComputedTaskPermission table, but when the user logged on, the read, write, delete access would be created in this table and come back automatically.
This is a copy of our Prod instance db and restored into a new stage server. We upgraded it to 6.8 from 6.4.
Has anyone else run into this before?
Raise a ticket to support for investigation.
I suspect that you may corrupted your DB, especially as you did deletion in the PreComputedTaskPermission table.
This is definitely a support case.
Interesting, the user has full access but it's not granted by a role, listed as a content admin or sysadmin.
Definitely best to open a ticket with support on this.