SYMPTOM:
When users are searching for a personal report within their My Reports folder the user may find the same report in some other Profiles folder and can execute them.
CAUSE:
Most likely the Profiles folder Access Control Lists (ACL) are set incorrect. Everyone or Public/Guest Group may be on the ACL of the profile folder as shown in the image below:
ACTION:
User should check that for the user Profile folder, the 'Administrator' and himself are the only users with access to this folder as shown in the image below:
Users may also create a new Procedure in Command Manager that goes to all Profile folders and checks to see if the Everyone group or the Public/Gust group are not presented in the ACL of those folders. Below is the code to create this procedure, but may need to be modified according to a user's needs:
Sample Code/Error
/* ==================================
This procedure will scan 'folder' for "Everyone" and "Public / Guest" groups within the 'project'
================================== */
Find_ACL_Profile_Folder (String FOLDER, String PROJECT);
Java
ResultSet allProfileFolders = executeCapture( " LIST ALL FOLDERS IN ' " + folder + " ' FOR PROJECT ' " + project + " ';");
String folderName = "";
String trusteeName = "";
String trusteeType = "";
allProfileFolders.moveFirst();
while ( !allProfileFolders.isEof()) {
folderName = allProfileFolders.getFieldValueString(NAME);
printOut("Scanning " + folderName + "...");
ResultSet allProperties = executeCapture( " LIST ALL PROPERTIES FOR ACL FROM FOLDER \" " + folderName + " \" IN FOLDER \" " +folder+ " \" FOR PROJECT \" " + project + " \";");
allProperties.moveFirst();
while ( !allProperties.isEof()) {
trusteeName = allProperties.getFieldValueString(TRUSTEE_NAME);
trusteeType = allProperties.getFieldValueString(TRUSTEE_TYPE);
if( trusteeType.equals("User Group") && ( trusteeName.equals("Everyone") || trusteeName.equals("Public / Guest") )){
printOut("<< FOUND GROUP \"" + trusteeName +"\">>");
//Uncomment the following two lines in order to remove the Everyone and/or Public / Guest group within the specified folder.
//printOut("<< Deleting it from the ACL....");
//execute (" REMOVE ACE FROM FOLDER \" " + folderName + " \" IN FOLDER \" " + folder + " \" GROUP \" "+ trusteeName + " \" FROM PROJECT \" " + project + " \";");
}
allProperties.moveNext();
}
allProfileFolders.moveNext();
}
