KB441671: A user that has the edit metric privileges disabled is still able to save a metric in MicroStrategy Web 10.4 HF5 and above.

Symptom

A user that has the edit metric privileges disabled is still able to save a metric in Strategy Web 10.4 HF5 and above when searching the metric and saving a copy of the original metric:

Steps to reproduce

1. Create a user that has all the privileges under the following categories:
   
1. Web Reporter
2. Web Analyst
3. Web Professional
4. Common privileges
2. Disable the privileges that give the user the ability to edit the metrics:
   
1. Web Create derived metrics (Under Web Analyst)
2. Web drill on metrics (Under Web Analyst)
3. Web User Metric Editor (Under Web Professional)
3. Go to Strategy Web and login with the user created in step 1.
4. Search for the Revenue metric and click on it.

1. Change the formula to:

Revenue{~+} + 1

1. Choose the Save As option, change the name and click Save.
2. Notice the metric is saved successfully.

Cause

This is a known issue in Strategy Web 10.4 HF5, 10.9 and above.
 

Action

This issue has been addressed with Strategy 2020 and above. Upgrade to take advantage of the fix.