Informations Disclosure on Main Dashboard ?

[EvoXCX]

Describe the bug
Example Context:
I created a domain with name Domain1 and one user in this group as Domain Administrator.

I created a new domain with name Domain2 and one user in this group as Domain Administrator.

Then I created an Audit on theses 2 domains.

And when I connect with one of theses account I see on Analytics Dashboard certain informations that is not in actual domain.

Expected behavior
Admin from Domain2 can only see his assignment and same for the Admin from Domain1

Screenshots
Admin1 in group Domain1 with all audit and risk assessment

Admin2 in group Domain2 with only 1 audit created

Environment (please complete the following information):

• Device: Virtual Server
• OS: Debian 12
• Browser Edge, Firefox

Maybe it's normal that Dashboard use data from all domains, but it will be fine if we can separe into more little team that do not need to see certain parts.

[Mohamed-Hacene]

Hi @EvoXCX,

Thanks for this issue, we've noticed this too and are in the process of correcting it. I'll link the pull request to your issue when I push it so that you can follow its progress and test it for your specific application.

[ab-smith]

it's indeed not an information disclosure, but it can be confusing and overwhelming. we'll get it fixed. thank you