matomo-org / matomo

Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!
https://matomo.org/
GNU General Public License v3.0
19.67k stars 2.62k forks source link

Let Super Users view and manage other users' Email reports and Custom alerts #15164

Open mattab opened 4 years ago

mattab commented 4 years ago

Sometimes it'd be valuable to be able to view and/or edit an email report, or a custom alert, created by another user, for example when they're on holiday or left the company. Or to quickly remove an email recipient that shouldn't be getting the report anymore.

Proposed:

Refs https://github.com/matomo-org/matomo/issues/7076

tsteur commented 3 years ago

also requested in https://github.com/matomo-org/matomo/issues/17450

aspflopper commented 3 years ago

As manager of an rather lage installation with multiple sites - this is highly needed feature.... any news on the progress of this issue? @mattab

mattab commented 3 years ago

no news @aspflopper - this is likely not going to be done soon, unless someone from the community opens a pull request for this improvement

MatomoForumNotifications commented 2 years ago

This issue has been mentioned on Matomo forums. There might be relevant details there:

https://forum.matomo.org/t/superadmin-can-not-manage-all-e-mail-reports/45104/2

Starker3 commented 1 year ago

We have another request for this feature from a Matomo user today.

aspflopper commented 1 year ago

Hi
This sadly came up again for us yesterday. An employee has left or agency and that person was the creator of several email reports. As part of company policy and access regulations, the user has been deleted from the Matomo installation. therefore the user is no longer in the database, - and all the reports are gone. In the short turn - we will inactivate useres for a short time, to prevent this from happening again, but with this feature or lives would have been easier - and my role as an admin less painful.

mattab commented 1 year ago

@aspflopper thanks for your comment. After reading it i created another issue slightly different use case: https://github.com/matomo-org/matomo/issues/20452

Starker3 commented 1 year ago

We have another request for this from a user. They have some Matomo users where their accounts are still active, but their actual emails no longer exist (I.e. they left the company but their account has been kept for reasons).

emernual commented 1 year ago

A customer is requesting for this feature. For example, an employee created 100 reports with all information available, they would like to have the possibility to delete some of these reports.

goochj03 commented 1 year ago

Another customer wanting this feature - "Unfortunately, our admin user cannot view the mail reports I've created, so I guess it isn't because of missing rights. Would be great if I could edit all the mail reports of my colleagues."

MatomoForumNotifications commented 1 year ago

This issue has been mentioned on Matomo forums. There might be relevant details there:

https://forum.matomo.org/t/comment-visualiser-lensemble-des-rapports-envoyes-par-e-mail-sur-matomo/53025/2

atom-box commented 1 year ago

We have another request for this from a user:

EMAIL REPORTS No global reports management (I am not aware of reports created by other users, even as super user, I cannot transfer, share, update or delete reports from other users)

Stan-vw commented 1 year ago

The idea to add some logic that superusers could access custom reports and alerts by normal users sounds pretty straightforward. However, we’d likely not want it to “always show” since that would clutter the interface of the superusers, so perhaps it should be a toggle (or similar) somewhere.

I had a quick look and see the following places this would potentially be applied to: Screen Shot 2023-09-18 at 3 43 08 PM

Screen Shot 2023-09-18 at 3 39 07 PM 4b0c8)

Screen Shot 2023-09-18 at 3 39 37 PM

Are there any other places where one would expect to have such a toggle (or similar) feature?

tassoman commented 1 year ago

As administrator, I would expect to see an administration page (CoreAdminHome) called Manage Reports, who lists all reports from users, listing also the user who created it.

As user, when I delete my account (or gets deleted), I expect also my reports and segments are deleted.

When administrator finds orphaned reports, they have two choices, adopt or delete. Or maybe only one, edit, so they can change the author/recipient.

heurteph-ei commented 1 year ago

Maybe this can also be available at site (measurable) administrator, not only to super user... I disagree:

As user, when I delete my account (or gets deleted), I expect also my reports and segments are deleted.

If I am disabled or deleted, the site owner (administrator) should always access such reports. Maybe a new right type could be created, at site level: reports manager...?

tassoman commented 11 months ago

The meaning is to avoid having "orphaned" reports, who belongs, for example, to not existent recipients.
So, also the idea you suggested before:
as website administrator I want to manage everyone's reports for this website it's ok.

I was saying for a clean-up, because in our situation, the number of orphaned report is constantly growing.

goochj03 commented 2 months ago

Another cloud customer has requested this feature. For security reasons they would prefer not to share login credentials to edit other email reports.

Stan-vw commented 2 months ago

Since we don't have this "manage your own reports"-logic for things like goals and funnels (they are all managed across all users with certain rights), I'm wondering: do you feel we should simply de-personalise Email Reports and Custom Alerts?

If we're going to allow superusers to see all of them, why not simply change their functionality to be similar to things like goals & funnels, perhaps with an extra config to choose who can edit these specifically (to lock down the spam risk).