MOD2000: Anyone Logged On to Workflow Designer Server Can Use the Team Solutions Manager to Modify Templates (291028)

SYMPTOMS

Anyone who is logged on to the Access Workflow Designer server computer can use the Team Solutions Manager to import, export, rename, or delete templates.

NOTE: Access Workflow Designer is also known as the Workflow Designer for SQL Server.

RESOLUTION

To make sure that only people who have the proper permissions can import, export, rename, or delete templates, install Microsoft Office 2000 Developer version 1.5 or later.

For additional information about how to obtain the latest version of Office 2000 Developer, click the article number below to view the article in the Microsoft Knowledge Base:

283939 MOD2000: How to Obtain and Install Office 2000 Developer Service Pack 2 (SP-2)

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Microsoft Office 2000 Developer version 1.5.

MORE INFORMATION

Steps to Reproduce the Problem

Install Microsoft Windows 2000 Server, Windows 2000 Service Pack 1, Microsoft SQL Server 7.0, and Microsoft Office 2000 Developer, including the workflow server components.
Start the Team Solutions Manager. Start to deploy the Issue Tracking template.
Create a user in the IssueTracking database who has only public permissions, but no permissions on the workflow server computer.
Log on to the workflow server as the user who you created in step 3. Make sure this user has no permissions on the workflow server computer.
Select the workflow server that you created in step 1, and then click Refresh.
In the Team Solutions Manager, click the Templates tab.
Click a SQL workflow template in the template list, and then click Delete. Note that the template is deleted.