Superuser (read-only) (administer/view 'Everything') is unable to view reports

[bbsoc]

Superuser with read-only rights are unable to view reports on Monitor tab --> PDF Reports. Any thoughts to why this is and how to fix it?

This installation is running 4.1.10.

Thank you.

[Jamiefitzgerald · Accepted solution]

You can create a custom admin role that only allows custom report and everything else is either read-only or disabled. 

[emr_1]

The following logs are output of debug related to the operation which read-only superuser is trying to view the report. (NOTE: this is in v5.0.3)

<request cmd="op" complete="/operations/download/report/predefined/scope/entry[@name='shared']/report-name/entry[@name='top-url-categories']/file-name" cookie="0890887635970713"/>

<response status="error"><msg><line>Not authorized for scope shared</line></msg></response>

It looks like you have no permission.

Because you can't select read-only rights in admin role editor for each report, I might able to guess two thoughts.

One is that this result is expected behavior and better result should be not showing report name as 'disable' rights does, another is a bug.

For workaround, I agree with jfitz-gerald, you should use admin role with 'enable' rights for reports.

Regards,

[bbsoc]

Palo Alto confirmed that this is a bug and that it will be with fixed in release 5.1. Until then, the workaround to create a custom admin role will work just fine.