on ‎2023 Mar 17 12:05 PM
Hi Team
we wanted to have an employee with permissions to see all the employee profile of the employees from a certain company, except compensation portlet.
We achieved this creating a group for this person, and a role that points only to that company, then successfully in the people profile, this person can see the portlets except Compensation.
The problem is that this same employee, if does a compensation report, can see the compensation because is appearing in the report.
Nonetheless, i have observed that restricting access to all the whole people profile, it does not appear in the reports, but if you can see some portlets, then everything appears in the reports.
In case this information is important for you to know: This same person has access to Compensation fields thanks to another role group, but the target of that group has excluded the company from which we do not want to see Compensation. So maybe reporting does not understand about targets populations and just reads that this person has permissions for Compensation fields no matter which role is applying.
Is this a system limitation?
Regards
Request clarification before answering.
That could be a limitation, but it also depends a bit on the type of report you use (as stories have some other behaviour things, i.e. you need access to user data: access, need to have access to view mdf entities in the background, whereas for instance canvas or table reports won't require that off you). By the sound of it, it could be either certain roles conflicting with each other or indeed a system limitation (if stories, most definitely a limitation).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
| User | Count |
|---|---|
| 7 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.