Workgroup 2012 - Released file visibility issue

[MattH_Work]

Within Vault Workgroup 2012 we can set security so that a user or group (Consumer) can only Read files within the Approved state (all other states have Read, Modify & Delete denied). At the top of the screen this work well, however if the user ticks the "Show All Versions" checkbox on the History tab, they then have access to all versions and (more critically) all states of the file.

 How do we avoid this?

Surely the 'shop floor' should ONLY have access to the files that are released, not every version of that file, released or not!!!

Regards

MattH

[mikel_martin]

Security is always applied to the file master. This includes all historical data for that file.

[scottmoyse]

that seems contrary to what matt seems to be seeing.

[mikel_martin]

Not really. He describes "can only Read files within the Approved state". This means they can read the file. The read access does not apply only to the latest version only, it applies to the file, including all versions.

[scottmoyse]

ok yes, i see now. I assume thats where the Web client comes in, that will only show the latest version at all times won't it?

[MattH_Work]

The web client is not available with Workgroup so this still a problem. Whats the point of revision and security control within Workgroup if the end user has access to all versions of the file. Is'nt the point of all this, that only the right people have access to the right drawing at the right time. 

MattH