There are a few ways in which users could potentially view documents in their unmasked state even when they have not been granted the privilege to do so.
To ensure that image masks properly display on all documents for which they are configured, do not grant users the following privileges:
-
Modify on Documents: Denying this privilege will prevent users from reordering the pages of a document, which could potentially cause image masks to appear on incorrect pages.
-
Modify Keywords on Documents: Denying this privilege will prevent users from changing Keyword Values, which could potentially nullify Image Masking settings configured for the original Keyword Values.
-
Advanced Document Splitter on Client Based Products: Denying this privilege will prevent users from sending documents to the Document Editor, where the thumbnails of the documents do not display image masks.
Also, if you are using the Image Masking module in conjunction with the Image Statements module, and you have configured Statement Type overrides, do not grant users the following right:
-
The Document Type of the archived statement: Denying this right will prevent users from accessing potentially unmasked archived statements.
For more information on configuring User Group privileges and Document Type rights, see the Configuration module documentation.