When security on object access is set to update on an inherited object but the user does not have any access to the superclass, can he still edit the subclass?
In my security I have an object question (superclass). I have different types of questions inheriting from this object question (subclass). A certain userrole has the right to update all attributes of the subclass question types; however, he does not have any update rights for the superclass. Will he still be able to edit all the subclasses?
A user role can commit an object once it has update rights to at least one member (attribute or association). So the answer is yes, the user role will be able to update those attributes of the subclasses to which it has access, even though it has no update rights for the superclass.