I have created a Role for Dashboard Writer and applied Dashboard create/edit capability. However for users in this role it ignores all security.
I want to restrict access to certain packages. It just ignores access and gives them access to everything. Any ideas where I'm going wrong.
Gaynor
Quote from: Cheeks100 on 20 Jul 2023 09:10:07 AM
I have created a Role for Dashboard Writer and applied Dashboard create/edit capability. However for users in this role it ignores all security.
I want to restrict access to certain packages. It just ignores access and gives them access to everything. Any ideas where I'm going wrong.
Gaynor
You will need to define access permissions for the packages / folders the packages live within. Grant Read, Execute and Traverse permissions for the role on those packages you want them to have access to, and remove all permissions for the role on those packages you don't want them to have access to.
Cheers!
MF.
Thanks MF - but that's what I have done but it just completely ignore it. Even copied a package and taken all permissions off so only system admin can see and still ignores it.
They can't save anywhere but My Content . I have a Workday (HR) package that I don't want to give access to anyone. Argh.
G
Quote from: Cheeks100 on 20 Jul 2023 09:36:46 AM
Thanks MF - but that's what I have done but it just completely ignore it. Even copied a package and taken all permissions off so only system admin can see and still ignores it.
Are you sure there are no other groups or roles the users belong to that have access? Might be a stupid question, but have you made sure the 'Everyone' group isn't a member of the 'System Administrators' role?
Cheers!
MF.
Yes definitely not.
There's something not right with my security. Whenever I try and do anything with capabilities seems really illogical.
System admin all good. I'm using consumers for readers (don't have any writers in production) . Then all the others groups I've created based on my organisation and put them in consumers. No other groups have people in them.
Dashboard writer is standalone not in any group. Has Dashboard capability edit assigned. Can see everything. Add all packages to a dashboard.
Quote from: Cheeks100 on 21 Jul 2023 12:00:03 AM
Yes definitely not.
There's something not right with my security. Whenever I try and do anything with capabilities seems really illogical.
System admin all good. I'm using consumers for readers (don't have any writers in production) . Then all the others groups I've created based on my organisation and put them in consumers. No other groups have people in them.
Dashboard writer is standalone not in any group. Has Dashboard capability edit assigned. Can see everything. Add all packages to a dashboard.
Ok - sanity check. If you log in to the portal as one of the users who belongs to the Dashboard Writer role, can you see the packages/ package folders in the portal (in Team Content)? So don't go into the Dashboard tool, just browse Team Content.
Cheers!
MF.
They have run access to the package as they need to be able to run reports. See they do see it (in team content)
I did create a folder that Dashboard Writer does not have access to. They couldn't see it in Dashboard or Team content.
Quote from: Cheeks100 on 21 Jul 2023 08:11:30 AM
They have run access to the package as they need to be able to run reports. See they do see it (in team content)
I did create a folder that Dashboard Writer does not have access to. They couldn't see it in Dashboard or Team content.
So the users need access to the packages for running reports, but not be able to access them in Dashboards? That's a different proposition altogether, sadly. I hadn't realised there was the requirement to use the packages in reports. I'm not sure this is possible - the users will either have access to a package (across the board) or they won't. There isn't a more granular way to do this (at least that I'm aware of).
Cheers!
MF.