I'm working on an o.o.b version of 10.1.
I have a group "View Released" who I want to only see Released objects and download.
The group has a Profile that stops all modifications available via the profile.
At the Default PDM Library I created a policy to allow that group to Read wtobjects at Released. Works great.
Problem is they can see In Work and they could check out In Work!
I then created a policy to deny everything but read on all objects for that group. That stops the Check out at In Work.
I don't want to create a policy to deny Read at each object state as that would get complicated.
Anyone know what is allowing visibility