Folder & User Rights

[saw15]

Good day ..

Working as the admin, I would like for users to be able to design reports on their own (using the designer button on the Info Desktop), BUT I do not want them to be able to right click on the actual report object on the desktop and go to designer (modify and design objects already on desktop). Currently they can do this.

Can anyone tell me what rights I need to change to prevent users from modifying the exsting objects on the desktop but still have the designer icon enabled and available for them to use on their own custom reports?

Thanks

 

[Nuffsaid]

Hi,

I'm not 100% sure of this but from my experience if you give your user "Designer" rights, which they need to access the designer on the desktop, you can't restrict their access to any reports.

My suggestion would be to get the designers to design outside Info, (may not be cost effective), then move their reports to the desktop.

Just a thought....

Nuffsaid.

 

[RoughingIT]

I concurr

 

[rhinok]

I agree, you can't limit their access to the reports. I assume that you don't want users modifying live 'production' reports erroneously? I would handle this in the following manner:
[ol][li]Make all report objects (and their directories) read only - Developers may be able to copy reports, but they won't be able to change the original object. [/li]
[li]Put development rules in place that govern report creation and/or modification[/li]
[li]User version management software such as Visual Source Safe or PVCS[/li][/ol]

 

[Tinad]

You can stop designers, right clicking on the report.
This can be done by changing the folder security. In our env, we have development folders in these folder designers and designed delete and modify reports.
Once the report has been moved into production they can only schedule it.

To match the Development folder on the desktop, we have a development folder at the directory level under input, all the reports that appear in the Development folder on the desktop point to the development folder at the directory level. Once the report is moved into production the report is copied out of the development folder at the directory level and at the desktop level.
Something like this input\production reports and input\development

 

[Nuffsaid]

Hi,

Inherited rights, my perspective....

As a USER I'm granted designer rights.

As a member of the DESIGNER group I am also granted this right.

As a member of the SCHEDULING group I am denied this right.

Therefore, if I'm granted rights to a folder as part of the scheduling group but denied as part of the designer group, I still have design access based on my USER rights.

So, to restrict access, no USER may have designer rights. These rights must be obtained by being a member of the DESIGNER group. But, in doing so, how do your designers modify or "tweak" reports on the fly? Do they have to pull them from the production enviroment, modify them, and then republish them to the desktop? If so, what happens to the existing report instances? Lost?.....

Give the "True Designers" USER Rights, leave the rest within the "Designer Group".

Just more thoughts.....

Nuffsaid.

 

[AndrewBaines]

Instead of just placing the reports into user folders, store them in a folder to which no users have access. Then place shortcuts in the folders where users need to schedule them. You can't design a report via a shortcut.
Users will then be able to create new reports on the desktop. Only allow them to place these reports in their own private folders until they are check by admin to be distributed via shortcuts.