Hi all,

as mentioned in a previous post, we've emulated the migration process by actually migrating a copy of our RTC 1.0.1.1 production database to our RTC 2.0 lab environment.

We even did link the RTC 2.0 lab instance to an RQM 2.0 lab instance.

We then created a Defect from RQM to RTC.
I decided to secure that project in RTC.

When I tried to access that WI with an unauthorized user, I was amazed to see that I was able to open that WI .

So I've tried other ACL restriction methods like actually using Members of the project area hierarchy and the Users in the access list only.
This "unwelcomed" user was neither part of the project nor from the access list and he was still able to access the "secret" Work Item.

The weird thing is that after creating a new WI from RTC (after applying the ACL security) that user was not able to access that WI as it should be!

So the security will only be applied to new artifacts that were created into the repository after the application of the ACL security ?

All the prior WI will still be accessble by everyone?

Please advise.