Non-admins to view objects?

[hanchilicious]

Hi,

Is it not possible to establish rights to a non admin account to enable them to view (not just schedule) objects in Infoview XI R2?

I specifically want to create a user who can view objects by clicking on the object title, but NOT have the option to enter a FROM value if they choose to schedule to email.

Can anyone shine a torch on this?

 

[synapsevampire]

Yes, I think that it is not possible, at least not without custom code.

-k

 

[KingfisherINC]

Give the group Advanced rights then:
Explicitly Deny "Schedule to Destinations" (or you can be even more strict and deny "Schedule the document to run").

Kingfisher

 

[hanchilicious]

Haha. I wish I lived in a world where I would be able to get away with that. But, now the users know it's possible to schedule to destinations, they'll revolt if they're denied the right altogether.

It's just that I think that they have a point when they say that there are some obvious security issues that come from having an insecure 'FROM:' field in the email destination.

I'd settle for just not allowing them to override the Job / Destination Job Server defaults.

Seems odd that the security here would be so open...

 

[KingfisherINC]

OIC - I did not read your question properly.

Yep you are right, you'd either need to modify the Destination page to remove that feature, or the Javascript that validates/submits the form to force the From.

I think that once the object is sent (or being sent) out of Enterprise, Business Objects conveniently wash their hands of it.


Kingfisher

 

[hanchilicious]

By 'modify the Destination page', I take it you mean 'write some asp'.

I wouldn't really know where to start with what to change and what with. Guess I'll have to start boning up on it.