Report Filter Values Display All Investment Names Regardless of User Security Rights

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

When security is applied to a data provider, unauthorized data is restricted correctly in the report body itself, which shows "None". However, the data provider security is not reflected in the report filters. The filter dropdown displays all system-wide investment names, regardless of user privileges.

Steps to Reproduce:

1. Create a user and grant the following global access rights:
   • Project Management - Tiles Navigate
   • Project Management - Navigate
   • Projects - Navigate
   • Reporting - Available Reports - Navigate
   • Reporting - Navigate
   • Reporting - Report Viewer - View - All
   • Reporting - Reports - Navigate
2. Add the resource as a Manager or grant project view access to the above user
3. Login/Impersonate as the user and navigate to the reporting module.
4. Access the out-of-the-box (OOTB) report: Project Status Report (Sample).
5. Open the Investment Name filter options and review the list of available filter values.

Expected Results:

The values displayed within the filter dropdown should be filtered dynamically to show only the specific investment names the active user has security rights to view. 

Actual Results:

The user is able to see the names of all investments across the entire system within the filter menu dropdown. 

Environment

Clarity 16.4.2

Cause

Due to DE208298

Resolution

Engineering is reviewing DE208298