Proxy access rights are inconsistent between native GroupWise client and WebAccess.

In a native GroupWise client R2 version, in Tools | Options | Security there is a Proxy Access tab. Here we split Modify rights into 3 separate sections:

1. Options

2. Rules

3. Folders

 

In WebAccess client this option is still done in old way like it was in GW2014 version, i.e. there is a single options to "Modify Options / Rules / Folders". 

If you from WebAccess client set this combined option and then want, for instance, from a Proxy mailbox create a new folder, you get error message "Required User Database Rights not granted".

This has been reported to our development and a graphical GUI change of WebAccess would be expected in SP1.

 

The R2 back-end code is enforcing separation of the access bits regardless of the client used. The new R2 client can see and modify all 4 security settings. Old clients and WebAccess now can only see and modify the Options setting despite the UI stating that it will do options, rules and folders. So if you set the option in WebAccess against a R2 PO the POA will set ONLY the options setting which does NOT grant sufficient rights for the proxied user to modify rules or folders, nor sufficient rights to modify proxy access for others.