SYMPTOM:
In Strategy Developer, users that do not have permission to see an attribute can still see it in the folder. Example:
User "a" has been given the "Denied All" permission to attribute "test":
But this user can still see the attribute through Developer.
CAUSE:
This is because user "a" has either the privilege "Bypass schema objects security access checks" under the Architect group or "Bypass all object security access checks" under the Administration group. These privileges will enable a Strategy user to bypass access control limitations:
