17 Replies Latest reply: Apr 17, 2012 3:37 PM by fcaron RSS

Limit account view access

ecarter

One of our NPM 9.5.1 installations is used to give our customers visibility to their own connections.  I create a summary view for each customer account which includes their network map and associated connections.  I will then create node and interface limitations for the account so the customer only has access to their own interfaces, then set the Home Page View and the Default Summary View to the view I just created.

The problem I am running into is that customer accounts are able to access other customer summary views by simply changing the viewID number in their home page URL:

http://......./Orion/SummaryView.aspx?viewid=120

For example, the customer who's viewid number is 120 can simply change that number to 60 and view a different customers home page view.

Is there something I am overlooking that will limit an account to only one view?

Thanks,

Eric