I am curious how Consortiums handle access to certain reports.
For example, I am a member of a 4 company consortium and 3 of the companies sell tickets out of their individual offices. When I am logged in under my user group and I run the GL Posting Summary Report By Day I can see all the posting numbers for all companies. My concern is a user is then able to run a Reprint Posting Report for any of the 3 companies just by knowing the posting number.
My question is: Is there a way to limit the access for each company to only be able to run their own Postings and not the entire consortiums?
Melanie,
Taking a quick look at the report, I don't think you should be able to see other organizations' postings. I believe that report is secured through the Batch Type Group unless it has been customized. You might check in the system table TR_BATCH_TYPE_GROUP to make sure the control groups are in place there and then in TR_BATCH_TYPE to make sure those groups are properly assigned to the various batch types.
I just verified this by running the report a few times logged into different user groups. Within our consortium, if you try to run the report with a posting number not belonging to your organization, you get a blank report with the error message "#### is an invalid posting number!"
Apologies. I was looking at the wrong report initially, but the same security methods apply to the GL Posting Summary Report.
I'm pretty sure you should be able to correct this with some setup in the system tables mentioned above.