10

Background

We need to configure a folder "Company X Reports" which has to:

  1. Everybody can view
  2. One profile called Supervisor can clone reports from there and save only in "My Personal Custom Reports"
  3. Finally, other profile called Manager that have to edit the reports on Company X Reports

Current Approach

  1. I've created the folder and set the Share permission to: Group All internal Users > Viewer
  2. I've created the Supervisor profile and set enabled: Create and Customize Reports, Edit My Reports, Report Builder, Run Reports. All other permission related to reports or folder are disabled.
  3. I've created the Manager profile with the same previous permissions plus "Manage Reports in Public Folders".

enter image description here

Result

Other users have readonly permission on the folder reports which is ok. The manager is working fine, But the Supervisor can view, can clone reports on that folder, and that is ok. But it can create new reports and save in that folder.

Question

I cant figure out why the Supervisor user is able to save new reports in the "Company X Reports" folder. When he only has viewer permission.
Is this a SFDC bug?

4
  • You would think that the Supervisor profile only having the Create and Customize Reports permission would have granted create permissions to My Personal Custom Reports and shared folders if the sharing rights allow it. What happens if you temporarily remove that permission? Aug 13, 2014 at 0:25
  • First thank you for your interest on this question. If I remove Create and Customize Reports then the new report or the button save as are not shown any more. It is any way to grant writing (create/edit reports) permissions only for one folder ? Aug 13, 2014 at 6:52
  • I think that I'm going to open a case. 110 Views and not comments is quite estrange for this forum. Aug 19, 2014 at 16:46
  • It's a tough one. It seems like how you've set it up should work as you expect. Since it isn't there is probably either a bug or some other subtlety (undocumented?) in play here. Aug 19, 2014 at 21:15

1 Answer 1

4
+50

It looks like that is actually by design, "Change/move/delete your own reports or dashboards in the folder" for "Viewers", according to the help and training article "Comparing Access Levels for Report and Dashboard Folders".
enter image description here

4
  • Seems odd that Viewer can write in the folder- But SFDC always surprise me . Aug 21, 2014 at 6:21
  • If you turn off the "Enable access levels for sharing report and dashboard folders" in Setup -> Reports and Dashboards -> Folder sharing, then I believe it will behave the way you want.
    – Jenny B
    Aug 21, 2014 at 14:24
  • I've tried but doesn't work by disabling Folder Sharing. Instead of fix, now the user with that profile now can't see the custom new folder but they now can see all other folders. Aug 22, 2014 at 10:41
  • It looks like you'd have to redo the sharing on the folders after you disable it and possibly create any folders that were created after it was enabled. According to note on help.salesforce.com/…
    – Jenny B
    Aug 22, 2014 at 11:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .