LOGS PORTION NOT ALLOWING USERS TO VIEW INFO

[bgraves49]

When attempting to view a log (under 'Logs') added by an admin on a standard user account, you get directed to a blank page of https://app.resgrid.com/Public/Unauthorized

When the user adds the log, both them and the admin can view it.

When an admin adds a log, it can only be viewed by them.

Do I have an incorrect security setting somewhere or is this a bug? Is it also possible to make a log editable or copyable so if you need to make an edit you can make it quick by transferring the existing info within it to a new log?

[ucswift]

What are your settings for the following security permissions?

[bgraves49]

Users = all
Units = department admins only

I switched both to all, I don't know if it will retroactively apply to already done logs but the same error comes up.

[ucswift]

It is retroactive, but those 2 settings need to populate a pretty heavy 'security matrix' for each user under the hood and cache it. Because it's such a heavy operation, those only happen nightly. I'm seeing an issue with those settings and users under them which is causing the error. Basically, the report hits a unit/user that the user can't see, and it errors out.

[ucswift]

@bgraves49 The user trying to view the log, are they attached to the log anywhere? I.e. on a unit or at a station?

[bgraves49]

@bgraves49 The user trying to view the log, are they attached to the log anywhere? I.e. on a unit or at a station?

Not in that particular instance they weren't.

[ucswift]

Ok, so I checked the code, default behavior is that if your not an admin, the one creating the report or on the report you can't view it. Would you want that to behave differently?

[bgraves49]

So if they were part of the log then they can view it is my understanding? That seems fine. I was looking for maybe everyone can view posted logs but it's not a requirement (unless maybe a checkbox on log creation was done like 'private' or 'involved parties only' or something. maybe in the future another security permission can be added more specific to logs.

[ucswift]

Yes, just did some testing, note the 2 above settings posted above "Who can view units" and "Who can view users" will also play a factor. I.e. if a user is in a log say added by an admin but can't view users outside of their group it'll remove those other users from the log when they view it.

I think a setting per log would be easy. A department wide setting would be a bit more difficult as I would have to change default log behavior to get that to conform to all the other department wide settings. I'll make a development task to add a option on the logs to change the visibility and will close this issue.