When navigating from a SAS BI Dashboard indicator to a prompted SAS Web Report Studio report, users who are not granted the capability to navigate to other reports or to open the Manage Files page might be able to perform those tasks. This problem occurs for only reports that have prompts.

For example, users who have implicit view-only capabilities for SAS Web Report Studio should see only the Properties option on the File menu when they navigate to the report from the indicator.

However, if the report is prompted, those same users see the following options on the File menu.

As a workaround, make sure that you deny ReadMetadata to reports that your users should not be able to open. The ability to browse does not enable the users to open reports to which they have been denied access.

Note: By default, the PUBLIC group has the Promote Web Report Viewer to Web Report Studio capability through membership in the Web Report Studio: Report Creation role. If users still have access to more capabilities than expected, then ensure that you have removed PUBLIC from the Report Creation role. Also ensure that PUBLIC and SASUSERS are not in any other role that grants more advanced capabilities.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

A fix for this issue for SAS Web Report Studio 4.4_M4 is available at:

A fix for this issue for SAS Web Report Viewer 4.4_M4 is available at:

A fix for this issue for SAS Web Report Studio 4.4_M3 is available at:

A fix for this issue for SAS Web Report Viewer 4.4_M3 is available at: