ReportPortal
ReportPortal
Home | Profile | Register | Active Topics | Members | Search | FAQ
 All Forums
 ReportPortal General Forum
 Report Portal General Issues
 Folders Security Issues

Note: You must be registered in order to post a reply.
To register, click here. Registration is FREE!

Screensize:
UserName:
Password:
Anti-Spam Code:
Message:

* HTML is ON
* Forum Code is OFF
Smilies
Smile [:)] Big Smile [:D] Cool [8D] Blush [:I]
Tongue [:P] Evil [):] Wink [;)] Clown [:o)]
Black Eye [B)] Eight Ball [8] Frown [:(] Shy [8)]
Shocked [:0] Angry [:(!] Dead [xx(] Sleepy [|)]
Kisses [:X] Approve [^] Disapprove [V] Question [?]

 
Check here to subscribe to this topic.
   

T O P I C    R E V I E W
Adrian Posted - 05/11/2006 : 21:41:47
Hi
I have a couple of security issues relating to locking down folders to Report Writers.

1. I am having trouble with Stopping users creating reports in a folder. I set up a user as a Writer with Read Access to a folder but no other access to the folder. They can still create a report in this folder.

2. With an existing report in a folder the user can Open it and amend it. They then can't see this report in the tree view to save it - which should prevent the report being overwritten. However if they open the report, amend it click save and save again, without touching the tree view the prompt comes up with 'There is already a report with this name do you want to continue'. If you click yes the report is overwritten and the new user takes ownership of it.

Cheers
4   L A T E S T    R E P L I E S    (Newest First)
Adrian Posted - 05/17/2006 : 21:40:23
They have permissions to view in that folder and publish in that folder. When they go to save, only the reports owned by them are available to be selected, this is good as it prevents them writing over someone elses report.

If they don't click any report and just click save, they overwrite and take ownership of a report they had view access to.
admin Posted - 05/17/2006 : 20:13:27
2) How can you modify the report in design mode if you can’t see it?
Adrian Posted - 05/14/2006 : 20:56:25
HI
Thanks for that
1) This is a much better way than what I was doing
2) I still think there is a problem here, even as publisher without reader writes: If you go to Design, open another users report and modify it. Then click the 'Save' and 'Save Report' (without touching the report tree or altering the Report Name) the existing report gets overwritten and you take ownership of it.

Cheers
admin Posted - 05/12/2006 : 21:30:43
1) Writer is a global role that allows a user to create reports of any type to any folder. This is not what you need.

a) Uncheck the Writer checkbox.
b) Add report types (olap report) the user should see
c) Open Folder security page (Design > Security) and select your user to be publisher to folders you want.

2) Selecting file with the same name does not replace an existing report. This allows for two files with the same name to exist. You can change this by going to Admin> Site Settings > Report names must be unique


ReportPortal © 2000-2002 Snitz Communications Go To Top Of Page