User Defined Reports

ab042

So I would need to limit it by division and by salesperson so it would be impossible for sales #101 to create a report for salesperson #222 etc

Thanks

aware_support

I haven't spent much time researching this one but felt I should ask to make sure. On the User-defined reports and Querys, I understand this is a feature that the developer can give the user access to or not.
Yes, that's right. This feature lets you control whether the end users will be able to create THEIR OWN REPORTS.

But if we give access can the developer LIMIT the fields available and can they limit the data available. For example: It would be great if sales people could create the reports they need but I would not want them creating reports for other sales people.
Yes, you can do this - use access levels to control access to data (see the User Guide for more info on access levels). For example, if you define that the attribute is not visible to a particular access level Aware IM will automatically hide it from all forms, query results and documents/reports. You can also specify that a certain report/document should not be available to a particular access level.

ab042

Good news!

Now just a few more questions on this please.

Does the ability to define a VALUE for a hidden field also exist in a report.

And can this VALUE be used in the search selection and not removed by the user?

Example: By doing this one sales person couldn't create a report on another. And it would limit the report to just them, with the ability to change it.

aware_support2

Reports do not support hidden fields. If you allow users to define their own reports they can print any data they allowed to access in the system. So, data access should be controlled on the system level, not in reports. For this purpose you can use access level options like "Creator Only" or, for more flexibility, rules with READ PROTECT action. For example, to ensure that a sales person can see his own sales data but not that of other sales people, you can add the following rule to object Sale:

If LoggedInSystemUser <> Sale.SalesPerson Then READ PROTECT Sale FROM SalesPerson

Aware IM automatically applies protection rules to all user queries so that even if the user runs a query like "FIND ALL Sale" he would see only his sales, not those or others.

The benefit of this approach is that you control data access in one place. Users can create they own reports or run their own queries, if you allow them. Also, in your configuration you do not have to create separate queries for different access levels just to filter out restricted data. Aware IM will do it automatically based on defined protection rules.

ab042

Very Helpful:

And if the sales person is a member of a GROUP. For example, if the sales member belongs to the East Coast sales group. Can we allow this?

Can we assign other fields to the User table so we can restrict based on these fields just like user?

aware_support2

Absolutely. You can either add more attributes to RegularUser object, or create your own object representing the user, like SalesPerson, and make it a member of SystemUser group (in which case the system will automatically add login- and access-related attributes). You can then use any of your attributes in protection rules.