A4W 4.2 security issue

[Kaz2k]

Has anybody seen this issue?

After adding a new user, we set up the permission, giving the new user only AS permission. After logging out and back in as the new user, all of the modules are there, and they have full access. We tried deleting the user folders, and copying a default USER.ISM file into the site folder, but it had no effect.

We are running PSQL 2000 workstation with SP2, A4W 4.2 with updated PTFs and all modules on a Win 98 system.

Thanks.

 

[africanernie]

try delete the user and site directories. re-install system manager and dont do that again.

e