This article addresses an issue where the "View Activity Log" option in the PERMISSIONS module > General System Actions allows users with custom roles to view the activity log, even though they do not have the permission assigned. Despite the "View Activity Log" option being unchecked, users can still access the data.

Environment

Octane 16.1.100 and 16.1.200

Situation

After upgrading from Octane version 16.0.400 to version 16.1.100, it was observed that users with a custom role could now view the activity log in the workspace, even though they did not have permission to do so. This was confirmed by verifying that the "View Activity Log" option was unchecked for the custom role by following these steps:

1.Sign into Octane.
2.Select Settings > Spaces > Permissions
3.Select the custom role
4.In the left panel > Select General System Actions
5.Verify that the View Activity Log option is unchecked.

Read full article