Is it Possible to restrict the list of tables that appear in the reporting tables in the Reporting Module

kagarwni · ‎05-04-2016

We are trying to restrict reporting for a user to limited tables .

The 2 solutions could be :

1. Hiding the tables to appear from the reporting list

2. Ensuring that no data appears eventhough the not-needed table is selected.

Also, am trying to understand difference between an ACL on sys_report and report_view.

Any leads regarding this will help a lot.

Release : Eureka

Regards

Nitin

robpickering · ‎05-11-2016

Just chiming in to help clarify. "report_on" isn't a role, it's an ACL operation (like create, read, write, delete).

You will only need an explicit report_on ACL for tables on which you wish to CREATE new reports.

You can modify an existing report, and users will be able to see all tables on which they have READ access.

Per the wiki:

Users can still run published (global) reports against tables for which they have read rights, even if they cannot create reports.
System tables are not reportable by default. To allow reporting against system tables, administrators can configure the glide.ui.permitted_tables property. To learn more, see Reporting on System Tables.
The default ACL report_on operation gives access to report on the target table, any associated database view, and archived version of the target table.

OOB ITIL users can create reports on an enormous number of tables. You can restrict these by adding a report_on ACL that provides a test condition (say a custom role) that fails. If there's a specific table that you're seeing that you don't think you should, let us know what it is and we should be able to help you figure out why it's showing up.

View solution in original post

Tom Alday · ‎05-04-2016

Users can only see tables that they have access to via the report_on ACL per table. So for example, if a user has the itil role and the itil role has an ACL on the Incident table that grants report_on, then they will see Incident in their list of available tables in the reporting app. They will see every table that they have report_on rights to.

kagarwni · ‎05-04-2016

Unfortunately it aint working for me that way Tom.

I have no "report_on" ACL defined on any table, still I see all tables in my reporting.

I am not an admin but a normal user but create ACL on sys_report.

Regards

Nitin

Tom Alday · ‎05-04-2016

There should definitely be some report_on ACLs out of the box for base tables like Incident and Knowledge, generally granting rights to the role "itil". Are you seeing all tables in the report builder? What roles do you have?

kagarwni · ‎05-04-2016

Yes I see all the tables.

I have a custom role assigned to my user and the system does not have an "report_on" operation role .

Weird ?