中文
漏洞编号 ENH-000108613
已提交 Oct 08, 2017
Modified Jul 25, 2018
严重性 Low
应用于 ArcGIS Online
找到的版本 5.3
程序语言 N/A
服务器平台 Windows 10.0 64 Bit
客户端平台 Windows 10.0 64 Bit
数据库 N/A
区域设置 N/A
状态 Implemented
修正版本 6.1
SP 修复

漏洞 ENH-000108613

摘要

Edit widget in Web AppBuilder does not show any message when Level 1 user edits a Hosted Feature Layer, shared with the Organization.


附加信息

N/A


备用解决方案

User Story:

It is really useful when the widget shows a message that the user does not have privileges to edit the feature layer, like what Smart Editor widget do. The user might get confused if they don’t have knowledge about AGOL licensing.


Steps to Demonstrate:

1. Sign in to AGOL as a level 2 user to create an app.
2. Launch Map Viewer, add a Hosted Feature Layer which is editable and shared with organization.
3. Launch Web AppBuilder and select the Web map you created in step 2.
4. Add Edit Widget and Smart Edit widget.
5. Save the app and shared with organization.
6. Sign out from AGOL and sign in to AGOL as a level 1 user.
7. Open the app.
8. Open the Edit widget and try to edit a feature. Editing operation is not executed without any message.
9. Open the Smart Editor widget and try to edit a feature. You will get a message below.
"You are currently signed in as: 'user name'. You do not have access to this resource: https://xxxxx.arcgis.com/xxxxx/arcgis/rest/services/xxxxx/FeatureServer/0/applyEdits
User does not have the privilege to perform this operation"
It clearly notices the reason why editing is not executed to the user.

Video to demonstrate the issue:
https://www.screencast.com/t/DnnxEaPL