Select the search type
  • Site
  • Web
Search
You are here:  Support/Forums
Support

Bring2mind Forums

PrevPrev Go to previous topic
NextNext Go to next topic
Last Post 11/07/2006 10:47 AM by  Peter Donker
Retrieving all documents in expanded search
 3 Replies
Sort:
You are not authorized to post a reply.
Author Messages
James Plankenhorn
New Member
New Member
Posts:1


--
10/24/2005 9:16 PM
    I recently installed your DMX module.  When I do an extended search I am receiving all of the document that have been added to the system.  I added a value in the Contents and clicked search.  Not only am I seeing documents that don't contain that value, I am seeing documents that I am excluded from seeing normally.  I can even open them.  Is this going to be fixed soon?  I just tried a clicking the basic search button without entering any criteria and I got everything there as well.  This is a serious problem.  I can't have groups saving any sensitive documents for only their people to see.  Hitting that search button, the whole company can see everything.  Since this ability is there, unchecking the "Show Search Button" option is useless to get around this.

    Beyond this problem, I would suggest you limit searches only to the documents in the folders available to that module.  I am creating modules for various groups, for example H.R. and Accounting.  If I am searching for something in the accounting module, I wouldn't expect to see H.R. stuff in my results.
    Peter Donker
    Veteran Member
    Veteran Member
    Posts:4536


    --
    10/24/2005 9:28 PM

    [QUOTE]jplankenhorn wrote
    I recently installed your DMX module.  When I do an extended search I am receiving all of the document that have been added to the system.  I added a value in the Contents and clicked search.  Not only am I seeing documents that don't contain that value, I am seeing documents that I am excluded from seeing normally.  I can even open them.  Is this going to be fixed soon?  I just tried a clicking the basic search button without entering any criteria and I got everything there as well.  This is a serious problem.  I can't have groups saving any sensitive documents for only their people to see.  Hitting that search button, the whole company can see everything.  Since this ability is there, unchecking the "Show Search Button" option is useless to get around this.

    Beyond this problem, I would suggest you limit searches only to the documents in the folders available to that module.  I am creating modules for various groups, for example H.R. and Accounting.  If I am searching for something in the accounting module, I wouldn't expect to see H.R. stuff in my results.
    [/QUOTE]

    Can you email me more details on this. This is very serious and is impossible as far as I know. Viewing and downloading are logically separate from search results, so this should not even be possible even if the results show too many. My fear is your security system has been compromised somehow. Let's find out what went wrong.

    Peter

    Peter Milliner
    New Member
    New Member
    Posts:40


    --
    10/31/2006 2:13 AM

    Peter,

    I am having the same problem. When using advanced search and contents.  Search returns all documents and folders and allows access to all documents even ones that are restricted to certain roles.

    I am testing this on my development PC which is running XP professional, I am running dnn 3.3.4 and latest dmx 03.04.07

    I have run throught checklist and tested directly from index service and works fine there.

    Was there an answer to this problem

    Cheers

    Peter M
    BRIT

    Peter Donker
    Veteran Member
    Veteran Member
    Posts:4536


    --
    11/07/2006 10:47 AM
    I can't reproduce this error. I am using XP, DNN 4.3.5/DMX 3.4.7 and I can't see anything unusual. I certainly don't see stuff I'm not supposed to see. I'll keep testing but if anyone has any more info I'd like to hear it. Better still: if anyone can show this to me on their installation it would really help finding the cause of this.

    Peter
    You are not authorized to post a reply.