We're running Commerce Server 2002 on Windows Server 2000 SP4.

We have set up a few BizDesk users and set permissions for them to view cert
ain catalogs, which they can, when they log in.

Now, when they try and create a new Virtual Catalog or edit an existing one,
 they can "Include/Exclude" ALL the catalogs - even the ones that have DENY 
permissions for them.

Is this supposed to happen? If not, what can be done?

Any help would be much appreciated.

Thank you!

[ Post a follow-up to this message ]

This might seem to be an issue with Bizdesk. I dont have a resolution for
Bizdesk.
You should evaluate the Comemrce Feature Pack which provides a finely
grained security model for catalog system and also adresses the issue you
raised. Besides the feature pack provides a winforms UI and a web service.

--------------------
Thread-Topic: Adding restricted Base Catalogs to non-restricted Virtual
Catalogs
thread-index: AcRpOSilpkqtp67GTNiC0ItbwHAf8g==
X-WBNR-Posting-Host: 202.135.192.158
From: examnotes <Nikola@discussions.microsoft.com>
Subject: Adding restricted Base Catalogs to non-restricted Virtual Catalogs
Date: Tue, 13 Jul 2004 17:26:08 -0700
Lines: 11
Message-ID: <75C51F21-4DDA-407C-85C9-897439EE2198@microsoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.commerceserver.catalog
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 127.0.0.1
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.commerceserver.catalog:4812
X-Tomcat-NG: microsoft.public.commerceserver.catalog

We're running Commerce Server 2002 on Windows Server 2000 SP4.

We have set up a few BizDesk users and set permissions for them to view
certain catalogs, which they can, when they log in.

Now, when they try and create a new Virtual Catalog or edit an existing
one, they can "Include/Exclude" ALL the catalogs - even the ones that have
DENY permissions for them.

Is this supposed to happen? If not, what can be done?

Any help would be much appreciated.

Thank you!


Thanks
Vinayak Tadas
Microsoft
http://blogs.msdn.com/vinayakt

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use. © 2002 Microsoft Corporation. All rights
reserved.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
Get Secure!  For more info visit http://www.microsoft.com/security.  Please
reply to the newsgroups only.  Thanks

[ Post a follow-up to this message ]