Users can report on windows where they don't have access

Description

Testing just noticed that a user without access to a window can still get reports based on zoomable HTML zk reports.

i.e. GardenUser cannot access Document Type window, but if GardenUser generates a report of Sales Order the document type is shown as zoomable and a report can be generated.

IMHO this is a security related misbehavior.

Environment

None

Status

Assignee

Carlos Ruiz

Reporter

Carlos Ruiz

Labels

None

Tested By

None

Priority

Major
Configure