No edit rights, but still able to create a report

[P3]

I don't know all the technical details, but as far as I understand the users have certain roles on OS-level. Those roles have certain authorisations in VIYA. There are users who can create and edit reports, and other users may only view reports. Those are are divided into folders, so security wise user A can only see reports A1, A2 etc. and user B is only allowed to view reports B1, B2 etc. Data is available to everyone buit data security is managed by only using the data in the reports the user is allowed to see.

But the users that may only view reports, can still choose to create a report, which they can save in their own local folder. But in their own reports they can select a datasource, and since they are allowed to see all data, they can still see data which shouldn't be visible to them.

For a quick solve of the problem: Is it possible to have users that can't create a new report?

Or should this be solved with table or maybe even row authorisation in VIYA?

[Sam_SAS]

Hello,

Configuring the /SASVisualAnalytics_capabilities/edit URI should enable you to prevent users from editing a copy of the report:

https://go.documentation.sas.com/doc/en/vacdc/v_035/varef/n0gvj6tc7l72t8n1e625v04x4vfb.htm#n1hl8pn62...

I can't speak to whether it is better practice to manage this with table authorization instead.

Let us know if that helps,

Sam

[P3]

It is already set up the way users can't edit reports.

I want to know if it is possible to disable the option to create a new report. Because they can still do.

[TSBruce · Accepted solution]

The /SASVisualAnalytics_capabilities/edit rule is the only thing you should need to allow/disallow users to edit/create reports.  If you have users who should not have this ability but are still able to edit, you may review your rules to ensure these users are not granting this capability through any kind of group association (i.e. Authenticated Users or some other group association).  

If this is not helpful, you may want to open a case with Technical Support.