Uploaded image for project: 'Camunda Optimize'
  1. Camunda Optimize
  2. OPT-1652

Cannot handle Combined Reports with Access Restrictions

    Details

      Description

      Reproduce:

      • Have two Optimize Users A and B, as well as a process definition P. User A has access to P, User B does not
      • Login with user A
      • Create a Bar Chart Report for P
      • Create a Combined Report that contains the Bar Chart Report
      • Logout
      • Login with user B

      Expected:

      • List of Reports is displayed with the combined report (accessing the combined report would not return any results as user B does not have permissions to access P)

      Observed:

      • Optimize crashes with error message "Cannot read property 'data' of undefined"

      Background:
      To determine which Icon to display for a combined report, we evaluate the visualization of the first report in the combined report. If that first report is not available for a user, this visualization cannot be determined, causing the crash.

      This specific issue can be solved in the frontend by trying to find any report that is accessible to get the visualization info. It can also be solved in the backend by not returning inaccessible reports in the reportIds field. With both solutions however, we need to discuss how to deal with combined reports which already contain reports, but none of them is accessible to the currently logged in user.

        Activity

        There are no comments yet on this issue.

          People

          • Assignee:
            Unassigned
            Reporter:
            sebastian.stamm Sebastian Stamm
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: