APPDEV-4303: Lock down the activity reports
- RSMs should only see data from salesmen in their own region.
- REPs should only see their own data.
Changes:
- All relevant parameters are now sent to the report controller. If the selec input is not created because the user is not allowed to set a particular parameter, it is sent as a hidden input instead.
- The parameters are locked down in the report controller. If the user is not allowed to set a particular parameter, the query string value for that parameter is ignored, and it is explicitly set to an allowed value before sending the query to the middle-tier API.