How to restrict views?

I double checked with Dev and we do have access control on nodes, but not on views at this time.

Brandon

Ugg, this represents a HUGE security problem for us.  If we want to use custom maps for our different customers via background images this information would potentially be accessible by other customers.

It would be VERY VERY nice if the dev team could consider restricting this.  I am thinking something like if the user does not have Admin privileges they they should only be able to access the views that are given to them.

So noted, will make sure this gets logged appropriately 

Thanks for logging this concern... and thanks for your prompt responses!

I'll add my voice to this as well Brandon.  This is a very desirable feature.

Thanks.

To me this type of security hole has me questioning the viability of using Orion as a multi-tenant application which until this I had always perceived it as.

Well, I guess I will have to put faith in the development team!  = )

Hi Byrona--

Understand what you are saying here. I'll make sure Brandon sees it and he will likely have some helpful comments.

M

Hi Byrona-- Understand what you are saying here. I'll make sure Brandon sees it and he will likely have some helpful comments. M

Actually, if you guys have any tips or workarounds that you could suggest for this that could be very helpful.  That could get me by for the time being.

I understand  that it is what it is and don't expect yo to have an immediate fix.  Software development takes time and I know that I am not the only one requesting things.  This particular one just kind of caught me off guard is all.

We are at a point where this security vulnerability is keeping us from providing maps to our customers and therefore restricting potential revenue opportunities.

I realize that there don't seem to be many customers expressing concerns about this; however, I would hope that this issue is classified appropriately as a product Security Vulnerability and having it's priority set appropriately for such an issue.

Hey Byron--

I'll ping Brandon on this and get you an answer.

M