Notifications

208 views

Description

Recent Choices in the table drop-down does not honor ACLs. This enables users without report_on permission to run or create reports on tables.

Steps to Reproduce

  1. Open an instance with base system Fuji or Geneva installed.
  2. Impersonate an ITIL user.
  3. Create and save a report on the Incident table.
  4. Impersonate an Admin user.
  5. Create an ACL on all tables (*), report_on action, in advanced script type:
    false;
  6. Impersonate an ITIL user again.
  7. Create a new report. 
    The ITIL user should now see no table in the table drop-down with the exception on Recent choice Incident.
  8. Select Recent choice Incident.
    The User can Run and Save the report (as expected).

Workaround

There is no known workaround for this issue. If you are able to upgrade, review the Fixed In field below to determine the versions that have a permanent fix to this issue.


Related Problem: PRB647513

Seen In

Eureka Patch 11 Hot Fix 4
Fuji
Fuji Patch 6

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2017-04-19 11:28:40
Published:2015-12-23