Incident Metric Report: "Security constraints prevent access to requested page" for Metric Admin, ITIL, and ITIL Admin role users

jhill1
Kilo Expert

When running an Incident Metric Report that shows re-resolved incidents (Resolved_By has been updated) in a bar graph, grouped by user, users are getting:

"Security constraints prevent access to requested page"

but only when they try to double-click the bar graph on the report, to drill-down to the list of incidents. They can run the report, but trying to see the details of the results get this warning.

I've opened up all the ACLs for read access for the roles, and I am not showing any Red "X"es in the Security Debugger.

Is there any way to see what exactly is restricted?

Admin, of course, works.

Thanks to all!

J

1 ACCEPTED SOLUTION

jhill1
Kilo Expert

I figured it out... after a lot of "fun" ACL shenanigans:



I created twelve seperate create, read, write, and report_on ACLs for:



incident_metric_list (ui_page)
incident_metric.* (record)
incident_metric (record)



while with each one, putting the roles that I want to have access in "the Requires role" list inside each ACL.



Works like a charm.



Thanks to everyone's input and for encouraging me to stick with the ACLs as the issue, even though I was getting all Green Xes in the security debug.



J


View solution in original post

14 REPLIES 14

jhill1
Kilo Expert

I figured it out... after a lot of "fun" ACL shenanigans:



I created twelve seperate create, read, write, and report_on ACLs for:



incident_metric_list (ui_page)
incident_metric.* (record)
incident_metric (record)



while with each one, putting the roles that I want to have access in "the Requires role" list inside each ACL.



Works like a charm.



Thanks to everyone's input and for encouraging me to stick with the ACLs as the issue, even though I was getting all Green Xes in the security debug.



J


And, oh yeah... I removed the ITIL role from them all, just to tighten up security around it.


i gave 12 acl (create, read and write) but while trying to use fields i am getting this  





find_real_file.png




please help


Community Alums
Not applicable

May be it is too late, but you will also need to provide proper ACLs on the metric definition and metric instance tables as well

VShine
Mega Guru

I have created a database view & metric definition. Using that (duration to assignment group) for reporting. Everyone other than Admins getting "Security Concern" error while trying to access the report.

All database view ,Report & metric  is in HR scope.

In Security debugger, I see this error:

find_real_file.png

 

Can someone help me please!