Report downloading security & authentication

[sakkask]

As far as I can tell, anyone that has or can guess a link to a report can just get it.

Is there a way to either make the report download password protected or actually attach the reports to the notification email (and again if they can also be downloaded, do so from an authenticated scope).



thanks all.

 

[JohnS_3CX]

Hi,

Guessing it would be pretty hard, but if that is still not acceptable then you can download them and email them to the individuals, and then delete them (hence invalidating the link).

Alternatively, you can give access to some people to generate and download reports, but they also need to be responsible for deleting them after downloading.

 

[sakkask]

I don't have enough point to post this in the features request forum, but for me this is definitely something worthy of consideration - properly securing report access.