Description

Currently, any user who has access to reporting in BI Publisher, can set up a schedule, then email the report out.

We require the ability to restrict whether the user can use the email functionality, either via a role set up or new parameter functionality - Oracle to advise on the simplest and easiest/fastest to market solution.

Use Case and Business Need

Required urgently due to potential data leakage.

Users can email the results output to any email address - there are no restrictions, and hence sensitive financial/user data could potentially be sent outside of the company, via scheduling a report.

Was raised as an ER originally 6 months ago, and need to provide management with a timeline to remediation.

More details

With current set up - not able to restrict external email addresses/who sent to.  

Original Idea Number: d05940ed3c