Discussions

Expand all | Collapse all

Report Access

  • 1.  Report Access

    Posted 04-20-2018 13:12
    In our reviews app there are three roles Reviewer, Manager, and HR Administrator.

    We have three reports, one for Reviewer, One for Manager, and one for HR Administrator.

    The Reviewer report is filtered to show only reviews in which the current user is in the Reviewer field. This functions as expected when testing as another role and another user.

    The Manager report is filtered to show only reviews in which the current user is in the Manager and/or Reviewer field. This functions as expected when testing as another role and another user.

    Since there is no user field for HR, the 'May be viewed by' setting for the HR view report was set to 'Specific roles' and only the HR Administrator role is checked. However, when testing as another role and user, the report shows all records.

    What am I doing wrong?! One would think that when only one role is selected for 'May be viewed by...Specific roles' that only that role would be able to view that report.


  • 2.  RE: Report Access

    Posted 04-20-2018 13:16
    The specific roles portion of the report only implies that it may be viewed the the Reports & Charts drop down for that role. It has nothing to do with report filters or other roles. Any role can view the report, but it will not appear in their Report & Charts drop down.


  • 3.  RE: Report Access

    Posted 04-20-2018 13:19
    I worked around this by creating a page for the HR Administrator role and only showing this report on that page, but it still bothers me that setting the access limit in the report settings appears to be useless.


  • 4.  RE: Report Access

    Posted 04-20-2018 13:19

    Hi,

    I believe "May be viewed by" is to keep that report from showing in that role's queue of reports. It has no impact on the permissions for that role -- what that role can see and do with regard to records.



  • 5.  RE: Report Access

    Posted 04-20-2018 13:22
    Do you want Reviewers to only see their records regardless of the report? If so, then go to their role and limit visibility at the role level for both Reviewer and Manager. Then you'll achieve what you want.


  • 6.  RE: Report Access

    Posted 04-20-2018 13:23
    I already have that functioning because there is a Reviewer field and so the report is filtered where current user equals Reviewer.


  • 7.  RE: Report Access

    Posted 04-20-2018 13:29
    I'm not saying to do it at the report level filter. Do it at the Role level, where they can view or modify only records where they are the Reviewer.


  • 8.  RE: Report Access

    Posted 04-20-2018 13:38
    Understood. I have that selected as well (and for the manager role), but they can still view the records in the HR View report that is set to 'May be viewed by...Specific role'. That is another reason why it is confusing.


  • 9.  RE: Report Access

    Posted 04-20-2018 13:41
    If you have that report open and change to test a certain role, then you will see that report. The functionality is only meant to keep the report under the view of the roles you select, not the records.


  • 10.  RE: Report Access

    Posted 04-20-2018 13:55
    Regardless of the report, there's no way the Reviewer and the Manager can see ALL records in a report if you have it controlled at the role level. If that's the case, I would put in a support case.


  • 11.  RE: Report Access

    Posted 04-20-2018 13:57
    That's what I'm saying too, Gil Spigelman.


  • 12.  RE: Report Access

    Posted 04-20-2018 13:22
    Thanks for the feedback. That was not the behavior I expected from the naming of the functions.

    'May be viewed by...Specific role' in my opinion implies exactly that the report would then only be viewed by that specific role.


  • 13.  RE: Report Access

    Posted 04-20-2018 13:42
    It is under normal circumstances. for example, if you mimic a certain other role that should not see that report, then in the role's reports list, that report will not show. But if you provide a member of that role the URL of the report, they will see it. It's just not listed in their queue of reports.


  • 14.  RE: Report Access

    Posted 04-20-2018 14:22
    And that is what happens. However, I expected when I tested as a specific Reviewer, the HR View report would only show reviews in which the user being tested was the Reviewer, but that was not the case. All records were showing and had I not tested it I would not have known this to be the case based on expected behavior given the selected settings.

    Segregating that report to an HR home page is working for what we need.