Focal Point
PowerPainter bypassing object security in Dashboard

This topic can be found at:
https://forums.informationbuilders.com/eve/forums/a/tpc/f/7971057331/m/2301051232

June 12, 2007, 09:41 AM
Eric@Dallas
PowerPainter bypassing object security in Dashboard
In dashboard, a user can click on custom reports and **Report Assitant** and can
pick from a list of master files limited to his domain based on its app path.
This is good.

A user uses **Power Painter** from the same domain and can pick from ALL master
files on the app path of the server. This is bad.

The funny thing is, using Power Painter from the MRE Java Applet correctly limits the master file selections. It appears Dashboard is where the security isn't applied correctly.

I've found this problem in 7.6 and 7.6.1. Anyone seen it or have a fix?

--Eric Matthews
City of Richardson, TX
June 14, 2007, 03:50 PM
Kerry
Hi Eric,

This sounds like an issue to be addressed by Information Builders' Customer Support Services. Please submit a new case for further research/troubleshooting. You may either call at 1-800-736-6130, or access the online system InfoResponse. Here is a list of information to be ready when you call: http://techsupport.ibi.com/before_you_call.jsp.

Hope this helps. Big Grin

Cheers,

Kerry


Kerry Zhan
Focal Point Moderator
Information Builders, Inc.
June 18, 2007, 09:27 AM
Eric@Dallas
Thanks - I have an open issue already (been open for several months). Just thought I'd post here to see if anyone else had this experience.