What's the easiest way to lock down all the tables user's can create a report on?

[e_wilber]

I have an ask that we simply remove all the tables from the table picker when users create a report except for about a dozen or so unless they have the admin role. The business reason for this is to make reporting easier since we don't have a lot of applications in use at the moment so when our report users go in to create reports, they would only see a handful of tables to choose from rather than hundreds of tables they have no idea what they are.

I am thinking maybe creating a property with the "allowed" tables for now might be the easiest approach to define the ones they need access to, but how would you make the configuration so that all the other tables can't be reported on unless you have admin or another specific role?

[Dr Atul G- LNG]

Hi @e_wilber 

You can add in property or create ACL on report view. 

[e_wilber]

What would the ACL look like?

I tried creating one for report_on *.* and in the script I added 

answer = current.sys_class_name === 'incident'; 

Thinking maybe this would only allow the incident table to be selected from the table picker on the report form but it actually didn't make any changes (I did turn off admin overrides).

[Dr Atul G- LNG]

Sorry mate, I am weak in scripting.