Skip to content

Tenant user can see and run reports from another tenant #300

@konyashkina

Description

@konyashkina

From forum: https://forum.cuba-platform.com/t/sys-tenant-id-not-filled-in-report-report-en-report-group-tables/16294

Tenant user can see and run reports from another tenant.
E.g. in demo project multitenancy-addon-demo when adding a report as walmart_admin, the costco_admin has also access the report.
sys_tenant_id is not filled.

Tested on
demo project https://github.com/cuba-platform/multitenancy-addon-demo
CUBA Platform version: 7.2.4
CUBA Studio plugin version: 15.9-213

and updated:
CUBA Platform version: 7.2.19
CUBA Studio plugin version: 15.9-213

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions