9

Background

We need to configure a folder "Company X Reports" which has to:

  1. Everybody can view
  2. One profile called Supervisor can clone reports from there and save only in "My Personal Custom Reports"
  3. Finally, other profile called Manager that have to edit the reports on Company X Reports

Current Approach

  1. I've created the folder and set the Share permission to: Group All internal Users > Viewer
  2. I've created the Supervisor profile and set enabled: Create and Customize Reports, Edit My Reports, Report Builder, Run Reports. All other permission related to reports or folder are disabled.
  3. I've created the Manager profile with the same previous permissions plus "Manage Reports in Public Folders".

enter image description here

Result

Other users have readonly permission on the folder reports which is ok. The manager is working fine, But the Supervisor can view, can clone reports on that folder, and that is ok. But it can create new reports and save in that folder.

Question

I cant figure out why the Supervisor user is able to save new reports in the "Company X Reports" folder. When he only has viewer permission.
Is this a SFDC bug?

  • You would think that the Supervisor profile only having the Create and Customize Reports permission would have granted create permissions to My Personal Custom Reports and shared folders if the sharing rights allow it. What happens if you temporarily remove that permission? – Daniel Ballinger Aug 13 '14 at 0:25
  • First thank you for your interest on this question. If I remove Create and Customize Reports then the new report or the button save as are not shown any more. It is any way to grant writing (create/edit reports) permissions only for one folder ? – Martin Borthiry Aug 13 '14 at 6:52
  • I think that I'm going to open a case. 110 Views and not comments is quite estrange for this forum. – Martin Borthiry Aug 19 '14 at 16:46
  • It's a tough one. It seems like how you've set it up should work as you expect. Since it isn't there is probably either a bug or some other subtlety (undocumented?) in play here. – Daniel Ballinger Aug 19 '14 at 21:15
3
+50

It looks like that is actually by design, "Change/move/delete your own reports or dashboards in the folder" for "Viewers", according to the help and training article "Comparing Access Levels for Report and Dashboard Folders".
enter image description here

  • Seems odd that Viewer can write in the folder- But SFDC always surprise me . – Martin Borthiry Aug 21 '14 at 6:21
  • If you turn off the "Enable access levels for sharing report and dashboard folders" in Setup -> Reports and Dashboards -> Folder sharing, then I believe it will behave the way you want. – Jenny B Aug 21 '14 at 14:24
  • I've tried but doesn't work by disabling Folder Sharing. Instead of fix, now the user with that profile now can't see the custom new folder but they now can see all other folders. – Martin Borthiry Aug 22 '14 at 10:41
  • It looks like you'd have to redo the sharing on the folders after you disable it and possibly create any folders that were created after it was enabled. According to note on help.salesforce.com/… – Jenny B Aug 22 '14 at 11:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.