Question
Citizens Bank
US
Last activity: 12 Sep 2016 11:55 EDT
Security around reports in Report Browser
Hi,
I have below requirement and need your expert help on this.
Requirement:
We have couple of report categories and each category would contain some "X" number of reports.
User will choose the required category and he will search for the required reports.
- UserA is only allowed to search ReportA
- UserB is only allowed to search ReportB.
We would like to define the security around reports such that when UserA searches for ReportB he should not get that in report browser and viceversa when UserB searches ReportA that should not be visible in the report browser.
Tried approach:
- Created different access roles for both users (AR1 and AR2)
- Created different privileges (PR1 and PR2)
- Added privileges to Reports Definitions ( ReportA--> PR1 and ReportB--> PR2)
- Created Access of Role to an object and added privileges accordingly matching the Access Roles( ARO1--> PR1(5) and AR02--> PR2(5))
UserA is still able to search the ReportB though he can't execute it.
Hi,
I have below requirement and need your expert help on this.
Requirement:
We have couple of report categories and each category would contain some "X" number of reports.
User will choose the required category and he will search for the required reports.
- UserA is only allowed to search ReportA
- UserB is only allowed to search ReportB.
We would like to define the security around reports such that when UserA searches for ReportB he should not get that in report browser and viceversa when UserB searches ReportA that should not be visible in the report browser.
Tried approach:
- Created different access roles for both users (AR1 and AR2)
- Created different privileges (PR1 and PR2)
- Added privileges to Reports Definitions ( ReportA--> PR1 and ReportB--> PR2)
- Created Access of Role to an object and added privileges accordingly matching the Access Roles( ARO1--> PR1(5) and AR02--> PR2(5))
UserA is still able to search the ReportB though he can't execute it.
Am I missing something? Can we achieve the requirement through this approach?
Thanks in Advance.
Bharani
***Updated by moderator: Lochan - User still needing assistance. Adding #helpme tag***
Pegasystems Inc.
US
I know that you can get the desired behavior of having reports, for which a user is not authorized, not show up in search when using attribute based access control (ABAC) to determine authorization to rules and work objects. ABAC is a new feature in 7.2.1 and thus would not be available if you are using an earlier version.
Pegasystems Inc.
IN
Can we process the search results and check whether he has permission to execute it or not? If he doesn't have permission, can we delete it from search results?
Citizens Bank
US
Hi,
As UserA doesn't have privileges he will not not able to execute the reports.. Deleting the results would reqiure customization and the rules involved are all Final rules
Pegasystems Inc.
IN
Your basic requirement is this :
UserA is only allowed to search ReportA
UserB is only allowed to search ReportB
The key rule involved here thru which one can search report in report browser is pzRBShortCuts7 which has a cell mapped to pySearchText property
This in turn calling the data transform pzRBSetFilters and refreshing the section and display the desired result.
Since both are final rules, it is not possible to customize these. However, this data transform has a call to pyRBUpdateWhiteList7 in the very first step which is an available data transform. You can modify this data transform to impose your restriction on search.