In CV03N, Original gets copied to temp folder inspite of no authorisation

Hi,

In CV03N, when a user opens an attachment from the Originals section, the copy of the attachment gets saved in the temp folder inspite of the user not having authorisation to view the document. The system throws error message "Access is denied", but the copy is present in the temp folder, so anybody can access that.

I have checked BADI Document_files01 and the secuirty check is coded in method Before_start_appl (this is customised). Please let me know any suggestions to tackle this issue.

Thanks,

Avanti.