Description
Currently, any user who has access to reporting in BI Publisher, can set up a schedule, then email the report out.
We require the ability to restrict whether the user can use the email functionality, either via a role set up or new parameter functionality - Oracle to advise on the simplest and easiest/fastest to market solution.
Use Case and Business Need
Required urgently due to potential data leakage.
Users can email the results output to any email address - there are no restrictions, and hence sensitive financial/user data could potentially be sent outside of the company, via scheduling a report.
Was raised as an ER originally 6 months ago, and need to provide management with a timeline to remediation.
More details
With current set up - not able to restrict external email addresses/who sent to.
Original Idea Number: d05940ed3c
