View permission on an object does not check if the user has view permission on the parent container

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
• Fix Version/s: 5.1 EE SP4 (5.1.7), 5.2 EE SP2 (5.2.6)
• Component/s: Application Security > Permissions
• Labels:
  • 5.2_release_notes
• Environment: All

For example, if you remove view permission from a Document Library folder, users still have access to the documents inside the folder. This fix will now recursively check view permissions on all parent folders before allowing access to the document.

This has been turned off by default. To enable it, set this property:

permissions.view.dynamic.inheritance=true