Forum Discussion

AdamKeever1's avatar
AdamKeever1
Qrew Commander
7 years ago

Report Access

In our reviews app there are three roles Reviewer, Manager, and HR Administrator.

We have three reports, one for Reviewer, One for Manager, and one for HR Administrator.

The Reviewer report is filtered to show only reviews in which the current user is in the Reviewer field. This functions as expected when testing as another role and another user.

The Manager report is filtered to show only reviews in which the current user is in the Manager and/or Reviewer field. This functions as expected when testing as another role and another user.

Since there is no user field for HR, the 'May be viewed by' setting for the HR view report was set to 'Specific roles' and only the HR Administrator role is checked. However, when testing as another role and user, the report shows all records.

What am I doing wrong?! One would think that when only one role is selected for 'May be viewed by...Specific roles' that only that role would be able to view that report.
  • The specific roles portion of the report only implies that it may be viewed the the Reports & Charts drop down for that role. It has nothing to do with report filters or other roles. Any role can view the report, but it will not appear in their Report & Charts drop down.
  • ChrisChris's avatar
    ChrisChris
    Qrew Assistant Captain

    Hi,

    I believe "May be viewed by" is to keep that report from showing in that role's queue of reports. It has no impact on the permissions for that role -- what that role can see and do with regard to records.

  • I worked around this by creating a page for the HR Administrator role and only showing this report on that page, but it still bothers me that setting the access limit in the report settings appears to be useless.
  • Thanks for the feedback. That was not the behavior I expected from the naming of the functions.

    'May be viewed by...Specific role' in my opinion implies exactly that the report would then only be viewed by that specific role.
    • ChrisChris's avatar
      ChrisChris
      Qrew Assistant Captain
      It is under normal circumstances. for example, if you mimic a certain other role that should not see that report, then in the role's reports list, that report will not show. But if you provide a member of that role the URL of the report, they will see it. It's just not listed in their queue of reports.
    • AdamKeever1's avatar
      AdamKeever1
      Qrew Commander
      And that is what happens. However, I expected when I tested as a specific Reviewer, the HR View report would only show reviews in which the user being tested was the Reviewer, but that was not the case. All records were showing and had I not tested it I would not have known this to be the case based on expected behavior given the selected settings.

      Segregating that report to an HR home page is working for what we need.
  • Do you want Reviewers to only see their records regardless of the report? If so, then go to their role and limit visibility at the role level for both Reviewer and Manager. Then you'll achieve what you want.
    • AdamKeever1's avatar
      AdamKeever1
      Qrew Commander
      I already have that functioning because there is a Reviewer field and so the report is filtered where current user equals Reviewer.
    • GilbertSpigelm2's avatar
      GilbertSpigelm2
      Qrew Cadet
      I'm not saying to do it at the report level filter. Do it at the Role level, where they can view or modify only records where they are the Reviewer.
    • AdamKeever1's avatar
      AdamKeever1
      Qrew Commander
      Understood. I have that selected as well (and for the manager role), but they can still view the records in the HR View report that is set to 'May be viewed by...Specific role'. That is another reason why it is confusing.