First of all here are my system specs:
Mango Core: 3.5.6
Mango API: 3.5.2
Mango UI: 3.5.5
Platform: Centos 7.4.1708
Java Version: 1.8.0_161
One of our users have pointed out an issue with the file store for the Excel Report Templates. When one user is logged in and creates an excel report they can see everyone's templates in the folder. This is a data protection issue since the templates usually have the users name and site name in the title of the template.
For example a user is logged in and would like to set up a new Excel report:
The reports from other users are not visible and that is great. but when they go to choose a file:
All the other user files are visible.
I can't see anywhere in the system that allows me to put passwords on the templates to prevent this from happening.
Is there anywhere in the background that I could add permissions to stop users from seeing other templates that do not belong to them?
p.s. I just checked the way the reports worked in mango 2.8. This is not an issue because the choose file button only gives the user the ability to browse their own local drives.