dependency-track icon indicating copy to clipboard operation
dependency-track copied to clipboard

metrics not updated when enabling portfolio access control

Open redaabdellah21 opened this issue 2 years ago • 1 comments

The defect may already be reported! Please search for the defect before creating one.

Current Behavior:

image

When enabling the portfolio access controle, metrics are not updated based on the team's projects only. Meaning: if a team can access only 2 out of 10 projects, they will see metrics for all the 10 projects rather than only the 2 they are allowed to. i am talking about dashboard metrics

Steps to Reproduce:

-create multiple projects -Add a team with managed users, and limit it to one or two projects

  • enable portfolio access control
  • login as one of the team's users

you should only see the teams projects, but you will see metrics for all the projects

Expected Behavior:

if a team can access one project, it should only see metrics of that project.

Environment:

  • Dependency-Track Version: 4.4.2
  • Distribution: Docker
  • BOM Format & Version:
  • Database Server: H2
  • Browser: egde

Additional Details:

I know this is on beta version, but it is a really good feature to control the access (e.g. detailed explanation, stacktraces, related issues, suggestions how to fix, links for us to have context, eg. stackoverflow, gitter, etc)

redaabdellah21 avatar Jun 03 '22 07:06 redaabdellah21