3561936 - A story is accessible without being explicitly shared with the user in SAP Analytics Cloud

Access is possible to a Story that was not explicitly shared. However, when navigating to the folder where the Story resides, a 404 error is returned indicating that the resource cannot be accessed.

SAP Analytics Cloud Enterprise 2024.21.11

1. Log in to the tenant using the affected user’s credentials.
2. Open a Story that the user is not supposed to have access to.
3. Confirm access by verifying that the story opens and is viewable.
4. In the top navigation bar, click on the story name to navigate to the folder where the Story is saved. Go to the folder.
5. Observe that a 404 error appears, indicating that the user does not have permission to view the resource.

The affected user was assigned a role with Manage rights for both Public and Private files, allowing them to open and view stories that were not explicitly shared with them. However, when attempting to navigate to the folder from within the story, they encountered a 404 error because the folder itself was not shared with them, restricting their access.

Remove the Manage permission from the role assigned to the user. You can refer to:

• Security Administration
• Managing teams
• Managing user authorizations using roles

It is also important to consider the permissions granted to a user when sharing a resource. Further details can be found here: How to Share Content

• Security Administration
• Managing teams
• Managing user authorizations using roles
• How to Share Content
• 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
• 2487011 - What information do I need to provide when opening a case for SAP Analytics Cloud?
• 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
• SAP Analytics Cloud Connection Guide
• SAP Analytics Cloud Get More Help and SAP Support
• Need More Help? Contact Support 

Your feedback is important to help us improve our knowledge base.

SAP Analytics Cloud, story, access, folder, 404, error, permission, resource, share, link, hyperlink, issue, administration, catalog, manage, rights, Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud, SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics. , KBA , LOD-ANA-ADM , SAC Administration , Problem