Catalog reporting: hide some variables values based on your group Memember

[ImedCG]

Hello Experts,

We have a requirement to hide some catalog item variables on the reporting.

We are trying the Role on variable but seems not work because is applied only on variable editor.

For example we have "Test" variable should be not visible on the reporting when user is not in the group "Variable group"

Any expert can advise?

Thanks in advance.

[OlaN]

Hi,

Never encountered this type of requirement before, so I took a look at it.

It looks like it's doable, but requires some ACL configuration.. and I haven't looked around if there will be any additional consequences by implementing this, so I urge you to test this thoroughly, before implementing.

The way I got it working was to create a Deny unless ACL on the [sc_item_option] table, and added a data condition that the question should be the variable you want to remove from the reports, and added the roles needed to view the data.

This implementation would require that you implement an ACL for every single variable you want to hide, not a very administratively friendly way if you end up with many variables you want to hide.

In that case I could suggest that you add a field to the variable table, something like a boolean "Available in reports", and use that as a qualifier on the ACL instead of selecting each and every Question by themselves.

[ImedCG]

Hello, 

Thanks for your reply.

With ACL on the  [sc_item_option] yes we can hide the variable based on the question but we can't  know the variable value because is dynamic.

Also if we will use only ACL in this table we can succussed to do it from sc_req_item with dotwalking on variables fields.

Best regards/

[OlaN]

There's no need to know the variable value, you will hide it always, based on the Question. Not the Value.

Not sure how you mean by dotwalking.

When I tested it, it didn't give me any results if I tried showing the values by doing a report on the sc_req_item table and trying to show the variables by dot-walking to the variable data.

[ImedCG]

There's no need to know the variable value, you will hide it always, based on the Question. Not the Value==>ok so sorry is my bad

Not sure how you mean by dotwalking.==>the user can't see the variable and his value in the sc_item_option table but by report using sc_req_item and choose column "variables" and select your variable the user to see the variable