PRB: Read-Only Visual SourceSafe User Can Modify Web Projects (166680)


The information in this article applies to:

  • Microsoft Visual InterDev 1.0
  • Microsoft Visual InterDev 6.0
  • Microsoft Visual SourceSafe for Windows 5.0
  • Microsoft Visual SourceSafe for Windows 6.0
This article was previously published under Q166680

SYMPTOMS

Users that are allowed read-only access to a Visual SourceSafe (VSS) project, but have been entered as Administrators to the FrontPage Web project can disable source control for the Web project, giving them full control over the project.

CAUSE

Visual InterDev allows all project administrators to enable or disable source control.

RESOLUTION

Only users allowed to enable or disable source control should be given administrator level access to the Web project.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

User rights for the Web project can be modified by selecting Web Permissions from the Project menu, while VSS user rights must be changed within the Visual SourceSafe Administrator utility.

Steps to Reproduce Behavior

  1. Create a Web project.
  2. Enable source control for the project.
  3. Give user X Read-only VSS access to the project.
  4. Give user X Administrator rights to the FrontPage Web project.
  5. Have user X open the Web project in Visual InterDev.
  6. In Visual InterDev version 1.0, do a Project/Disable Source Control. In version 6.0, go to Source Control under Project and select Disconnect Web Project.

REFERENCES

For the latest Knowledge Base articles and other support information on Visual InterDev and Active Server Pages, please see the following page on the Microsoft Technical Support site:

http://support.microsoft.com/search/default.aspx?qu=vinterdev

Modification Type:MajorLast Reviewed:5/2/2006
Keywords:kbinterop kbprb KB166680
©2004 Microsoft Corporation. All rights reserved.