Hi,
I have a package with several folders containing reports. One specific user should only be allowed access to one of these folders and not to the other folders.
I have granted the user traverse rights to the package and read, execute and traverse right to the mentioned folder. This does not work; the user sees the package and the folders, but cannot execute the reports in the folders (CM-REQ-4011 You do not have permission to access the object). I started adding permissions, but it seems that the user can only execute the reports in the folder if I allow read, execute and traverse on the package.
I'm not too happy with that, since all the other folders inherit the rights of the package and thus also allow access to the other folders.
What would be the best approach to handle this problem? I'd rather not deny access to individual folders because it will be a pain to manage.
It would be wise to move the folders, reports outside of the package and place them under a single main folder to which you can apply the execute permissions.
I like your approach to the problem. Unfortunately, we bought this package and most of its report folders from the developer of our ERP system. If I move the folders outside of the package, all the deeplinks stop working.
Hi,
You most likely also need to grant execute permission to the package folder, then remove it from all sub folders except the mentioned one.
MF.