#758 Disable Reports for Guest (Unregistered) Users

[Robert]

Running Version 4.0.3 stable, I am able to get on to the home (Welcome) page of my site as an Unregistered Users and click on the top menu Reports Icon and download all the reports I want (maybe not all as I only tried the Ahnentafel). It only shows people according to my privacy settings but I would prefer that Unregistered Users not even see the Reports Icon. The same holds true for items like the Options for Family or Options for Individual submenus not showing the Reports Icon.
It could be included in the Edit Gedcom privacy section the same as "Enable Clippings Cart".

I also noticed that after the PDF file was downloaded there was not even a log entry in the log file so the administrator would not even know if some downloaded the file.

Robert Snyder

[John Finlay]

Logged In: YES
user_id=300048
Originator: NO

You can control the access level of the reports individually by editing the reports XML files. Set the "access" attribute of the <PGVReport> root tag to "PRIV_USER" to require that users be authenticated before running that report. The other values you can put in that attribute match the corresponding variables in the privacy.php file (PRIV_PUBLIC, PRIV_USER, PRIV_ADMIN, PRIV_NONE).

--John

[Robert]

Logged In: YES
user_id=1431334
Originator: YES

I have tried as you suggested and set every xml report file similar to
<PGVReport access="PRIV_ADMIN" icon="ancestry" language="english">
<!-- $Id: ahnentafel.xml,v 1.1.2.19 2006/04/13 17:01:09 canajun2eh Exp $ -->
and
<PGVReport access="PGV_ADMIN" icon="ancestry" language="english">
<!-- $Id: ahnentafel.xml,v 1.1.2.20 2006/09/29 16:52:15 yalnifj Exp $ -->
with the same result. A non-registered user can still produce and
download the ahnentafel report according to the Limit Privacy by
age of event setting/age at which to assume person is dead (100).

Perhaps I have something else set wrong??

I would prefer to not even show the Report item on the Menus
for non-registered users the same as "Enable Clippings Card" item.

Regards,
Robert Snyder

[nimebe]

Logged In: YES
user_id=1637981
Originator: NO

Perhaps PGV could move into the realm of being even more module based by having each "feature" be its own module. That is, by having the welcome page be an independent module, each site administrator could decide whether to turn it on/off or even delete it without collapsing the core code. This same modulization could be done with charts, lists, reports, clippings cart, etc.

[dirsh]

Logged In: YES
user_id=1709164
Originator: NO

A zip file will be saved on the index folder. You can check that to see who downloaded the file,and when.

thanks.