Read ACLs working on list reports but not on Single Score Reports

[Aditya Raute]

I have created two reports on a dashboard that is shared with a fulfiller. One report is a list, another is a single score report.

There are ACLs on the table on which both the reports are based on. The ACL determine that the user can only see the records where they are the assignee.

When I check the list report, it shows correctly the required records and hides other records saying 'Records hidden due to security constraints'

However, when I check the single score report, it shows the count of all records (including those where the user is not the assignee). When I click on the score, and am directed to the list I once again see the message 'Records hidden due to security constraints' and only see the necessary records.

Why is the user not seeing only their records even when read ACLs are working fine? Do I need a report_view ACL?

[CezaryBasta]

report_view ACL simply allows to view the report. I think your problem lies elsewhere.

With a list view, it's simple - it's all based on platform components, the list handles the ACLs out-of-the-box. However the single score report does not have to handle the ACLs.

If it's a PA reports, then the score is based on data from the PA tables, not the tables with your ACL. The data collection job gathers the data as a completely different user probably. ACL are taken into consideration at this stage, but for the user running the data collection job, not the end user viewing the report - which should be considered a result of data collection.

Maybe try redesigning your reports to include assignee as a breakdown?

[Aditya Raute]

You're right about the report_view ACL. 
The single score is not a Performance Analytics widget. It is a normal(?) report created on dashboard. As you know, those don't have breakdowns or collection jobs.

I was expecting ACLs to applied to those just like in the list reports. Is that not the case?

I can make new reports with filters as Assignee is(dynamic) Me. But there are tooooo many reports and that's why I was looking for some other alternative.

[CezaryBasta]

I would expect the single score reports to use GlideAggregate. Even when you see a list of a 100 records, you still see their full number with additional information about how many have been restricted from view.
I'm afraid the only way is to update the filters.