User cannot view schedule report output

[dacchiz]

I'm using JasperServer 5.5 and configured a new role with read-only permission to a folder.  I then assigned that role to a new user.

The user is able to access the folder and execute reports stored in the folder.  However, the user is unable to view (open) the output of the same report that was generated from a schedule (the output file is not hyperlinked).  The output is a PDF file of type 'Content Resource'.  The properties of the output file shows Read-Only access for the user.

If I grant the role Read+Write permission on the folder, the user can open the file. However, they can also add new reports into the folder, and I don't want that.

A user should be able to view/open any file in a folder to which they have read-only access.  Is this a bug, a feature, or am I mis-configuring the permissions?

 

[bobtins]

I tried to duplicate your issue with the sample "joeuser" user.

I created a new role "testrole" with "joeuser" as a member, then I created a folder with read-only permissions for "testrole".

I copied a report into that folder, and joeuser could run it.

As jasperadmin, I scheduled the same report with PDF output into the read-only folder.

When I logged back in as joeuser, I could see and run the PDF output.

 

It looks like this works for me, so can you explain more about what happens? It sounds like you can see the PDF as a Content Resource, but what happens when you click on it?

[dacchiz]

Thanks for taking the time to recreate and test this issue.

 

I can see the PDF files, but they are not hyperlinked. They are only listed in the UI and the right-click menu for them only lists Copy and Properties actions. The PDF files are selectable, i.e. when I click on the row, it is highlighted.

 

I have tried with FF, Chrome and IE and gotten the same result in all three.

 

Other configurations:

 

* I scheduled the report using a different account that has ROLE_ADMINISTRATOR

* My test user can interactively run the report

* The test folder is an immediate child of the root

* Used the bundled Tomcat and Postgres

* Did not install the samples

* Permissions

** ROLE_USER has read-only on root

** ROLE_USER has no-access on the test folder

** ROLE_TEST has no-access on root

** ROLE_TEST has read-only on the test folder

** test user is a member of ROLE_USER and ROLE_TEST

 

The permission structure I want is to give a role access to one and only one top level folder. Thus I block access for the custom role at the root, and the ROLE_USER at each top level folder.

 

The HTML for the PDF file looks like:

 

MyReport-201401211125.pdf

 

And it does not contain an child element.

 

I don't see any errors in the logs.

 

 

 

[dacchiz]

I have another instance where I did install the samples and used the bundled apps. In this one, I simply: added a test user and test folder; copied and scheduled a report in the test folder; and then tried to view the results without setting up a custom role. It had the same issue. I tried with joeuser too and it had the same result.

[bobtins]

/scratches head

 

OK, that's weird...

I wish I could reproduce what you're seeing--thanks for trying this under a number of different circumstances.

The web page runs some code to getting info from the repository on what the current user can do with each resource, and this gets translated into parts of the UI, including menus and the around the resource name that lets you click and run it. So somewhere this is going wrong.

When you tried with joeuser, what were the perms for joeuser on the root folder and the test folder?