Document Management Permissions for Group allowing non-group members to view document

[Dakker]

Hi,

We have implemented the Document Management system in our ServiceNow instances. We are running Xanadu patch 6. When we create a document and try to restrict the document by Group Permissions, others outside the group can view, edit and delete the document. What do we have set or doing wrong?

Steps to reproduce:

1. Create and save a new document as one user in a group.

2. In the document's Access Setting, click Sharing Permissions 

3. In the Group Permissions tab add a New group and give that group read permissions

4. Create a new version of the document (uploading the version)

5. Save everything and impersonate another user who is not in the group

6. The user can view and edit the document.

[Dr Atul G- LNG]

Hi @Dakker 

Look like some product issue.Better log a now support case.

[Dakker]

I have submitted a case ticket with ServiceNow. They are investigating the issue. No solution as of yet.

[Dakker · Accepted solution]

The solution is:

When checking the box "By referenced records" in the Access Settings, the permissions to the document are set to match the related table the document is referenced by. This means if the person is not in any of the Shared Groups but has read access to the table that the document is referenced, they automatically get read access as well.