topic Re: SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/C in Fraud, AML and Security Intelligence

SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/Cases

Santt0sh — Fri, 22 Dec 2017 18:11:07 GMT

Hi,

While testing the application we developed we have found this:

We are using 9.4 SAS and working on ECM, and have created the dashboards.

If a user from one LOB has logged on to the ECM after he has viewed his Cases or the cases which he has access to and tries to change the Userid in the ECM link and is able to access cases or reports to which he is not authorized.

Could you please suggest to control this in XML ?

Regards,

Re: SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/C

Patrick — Sun, 24 Dec 2017 01:01:04 GMT

@Santt0sh

To get to the bottom of this you would likely have to provide information which you can't share publicly. I suggest you contact SAS Tech Support directly.

https://support.sas.com/techsup/contact/

Re: SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/C

Santt0sh — Fri, 06 Apr 2018 19:17:44 GMT

Thank you Patrick,

I have raised a track with SAS Support.

Regards.

Santosh

Re: SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/C

jatinsharma — Mon, 25 Feb 2019 13:38:26 GMT

Hi,

have you got response as i have same request to full fil

Re: SAS ECM : User able to change to change the user id on the link and access other LOB's Reports/C

Santt0sh — Sat, 09 Mar 2019 05:44:25 GMT

Hi Jatin,

I had received a response from tech support, but I don't remember the exact solution as I'm not allowed to send emails from my Client machines.

Regards,

Santosh