Reports Not Honoring ACL

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Sloff
    Member
    • Feb 2018
    • 47

    #1

    Reports Not Honoring ACL

    Hi

    I've created a report groups assigned users and statuses of Cases. The report works fine, but a user in one team can view the stats of users in another team. He can even view the data of a case even though the system says access denied. I'll include screenshots below to illustrate:

    Note that on the last screen an Access Denied error is shown, but some of the information is still shown
  • yuri
    EspoCRM product developer
    • Mar 2014
    • 9639

    #2
    Hi,

    ACL is not applied to Grid reports. You can create multiple reports with different teams filters.

    Comment

    • Sloff
      Member
      • Feb 2018
      • 47

      #3
      I'm using version 1.30.7

      Comment

      • Sloff
        Member
        • Feb 2018
        • 47

        #4
        Hi Yuri

        I'll implement it like that then, any plans to support ACL in grid reports? Because any report I add will have to be added 10x at the moment

        Kind regards

        Comment

        • yuri
          EspoCRM product developer
          • Mar 2014
          • 9639

          #5
          Hi,

          Yes, we do plan. The problem we see that the same report will show different result for users that can confuse. We need to make it to be explicit.

          Comment

          • yuri
            EspoCRM product developer
            • Mar 2014
            • 9639

            #6
            It will be done in the next release as an additional parameter 'Apply ACL'.

            Comment

            • Sloff
              Member
              • Feb 2018
              • 47

              #7
              That would be awesome!! Thanks Yuri

              Comment

              Working...