I have a non-itil user who needs a report to analyze catalog requested items for her department. She wants to visualize the data in various ways and I've run into a security issue that doesn't make sense to me.
Using the Requested Item table, she wants to be able to analyze data using the Item and Item > Category fields. The Item > Category field is in the sc_category table, which has security rules preventing her from seeing the category field. I added a report_view ACL on category.title for her role to allow her to see the data in a report, but I'm getting unexpected results based on the report type and I don't know why.
If I create a list report with the category as one of the fields and share it with her - she can see the category. When I created a bar chart for her grouping on the category and share it with her, she gets a security constraint error. Would anyone know why the type of report produces security issues? Both reports have been shared with her role.
Here are the two reports (both using the table Requested Item):
Bar Chart:
List Report:
The user's view:
List report - she's able to see the Category data:
Bar Chart - she gets a security constraint, but it's the same data:
Hello @gjz ,
I see you are using item.category as your group by field, but you said you have given report_view ACL access for category.tiltle, so you need to user item.category.title as your group by field.
Please mark this Accepted and Helpful if this worked for you.
Thanks and Regards,
Kps Sumanth
Hello @gjz ,
I see you are using item.category as your group by field, but you said you have given report_view ACL access for category.tiltle, so you need to user item.category.title as your group by field.
Please mark this Accepted and Helpful if this worked for you.
Thanks and Regards,
Kps Sumanth
