on attachment deploy mode, idempiere download jasper material to /tmpso in case multi report have save name one will override
Yes, your suggestion sounds better
prefix will break link to resource of report. put all attachment to folder with name = AD_Process_ID is ok.
This bug sounds bad as a person can end reporting something they don't have access to.
Workaround would be to avoid using duplicated names on jasper attachments.
As a proper solution maybe we can add a prefix to the attachment downloaded with the AD_Process_ID?
on attachment deploy mode, idempiere download jasper material to /tmp
so in case multi report have save name one will override