search

cuba-platform / reports

CUBA Reports Addon
https://www.cuba-platform.com/
Apache License 2.0
9 stars 4 forks source link

Tenant user can see and run reports from another tenant #300

Open konyashkina opened 2 years ago

konyashkina commented 2 years ago

From forum: https://forum.cuba-platform.com/t/sys-tenant-id-not-filled-in-report-report-en-report-group-tables/16294

Tenant user can see and run reports from another tenant. E.g. in demo project multitenancy-addon-demo when adding a report as walmart_admin, the costco_admin has also access the report. sys_tenant_id is not filled.

Tested on demo project https://github.com/cuba-platform/multitenancy-addon-demo CUBA Platform version: 7.2.4 CUBA Studio plugin version: 15.9-213

and updated: CUBA Platform version: 7.2.19 CUBA Studio plugin version: 15.9-213