Viewer Access

Hi,

If you're using CMS Builder v 2.05, you can set a user's permission to "Viewer" either for individual sections, or all sections. If the report your referring to is the CSV Export plugin, they should still be able to run that.

If you run into any issues, let me know.

Hope this helps.

Hi,

It turns out that if you only have viewer permissions, CMS Builder doesn't allow them to run this plugin.

If this is critical, we can get around it, but it could potentially allow them to do other things that a view only user usually can't do. It would remove a piece of that error checking.

Let me know.

I think that should be fine

Hi jtedescojam,

I have a solution for you which won't cause any security issues, but it'll require editing a CMS Builder source code file:

Open up cmsAdmin/lib/menus/default/actionHandler.php in a text editor and find the following line of code, which should be on line 172:

if (userHasSectionViewerAccessOnly( $tableName ) && !in_array($action, array('list','view','uploadList'))) { $noAccess = 1; }

...add the code in red to it:

if (userHasSectionViewerAccessOnly( $tableName ) && !in_array($action, array('list','view','uploadList','exportAllCSV','exportSearchCSV','exportCheckedCSV'))) { $noAccess = 1; }

This solution should work fine for you, but won't survive an upgrade.

I'm going to figure out a better solution for this, which I'm hoping I'll be able to get into the next version of CMS Builder and the CSV Export plugin. Please note that you'll need to upgrade both to get this working again.

I hope this helps! Please let me know if you have any questions.