Focal Point
[CLOSED] InfoAssist shortcuts and security

This topic can be found at:
https://forums.informationbuilders.com/eve/forums/a/tpc/f/7971057331/m/7537029096

November 13, 2018, 10:49 AM
Gail North
[CLOSED] InfoAssist shortcuts and security
I was happy to see the Shortcut feature introduced in version 8.2 of InfoAssist. I believed that it would help us to address a situation we were running into more and more: multiple groups need access to a report, but we really only want to maintain a single version of the report.



In theory, the Shortcut takes care of this. You can create a domain to store all of your shared reports. You then create a shortcut that you copy to multiple folders, which creates a link back to the single report. You have to grant access to the shared report folder and publish it so people can run reports, but you can hide it so they can't see it. That way, they can only see and run the link where it's been granted.



The shortcoming is that there's still a security hole, via the domain with the shared reports. Even though it's hidden, a savvy user who knows a report name could easily piece together a URL to run something they shouldn't.



I feel like this is so close to doing what we need, but haven't found any way yet to fix the security gap.



Has anybody else successfully overcome this? Or have any suggestions?

This message has been edited. Last edited by: FP Mod Chuck,


WebFocus 8.2.02M
Windows 64-bit
November 13, 2018, 10:58 AM
BabakNYC
Have you shared this with IB Tech Support? I haven't tested it but I'd be curious to hear what they say.


WebFOCUS 8206, Unix, Windows