It has been discovered that if a link is shared with a Standard Gansight User that links to the Report Builder Visual Force page this allows that user Admin access to create/edit/delete items the GS system as well as underlying data.
I was shocked to receive a user request today on help with "this report builder thing in Gainsight" and immediately scheduled a screenshare to review. A work-around has been provided by your awesome tech support team but I believe this should be removed from Standard permission set.
Please advise.
Best answer by sai_ram
View original