Drill modification possible?

Drill panels are defined in the .or file for each system code as part of the way the Environment is architected, They are not specified separately in .htm/.js files in Portal. To remove them, you would need to remove access to the underlying database tables, as you specified. Which means that--if they are removed--you need to give the user TWO userids--one to use as a manager so they can't see their employee's personal data, and the second to use as an employee, so that they CAN their own data. I can't verify it, but my understanding is that individual drill panels are securable in the 8.1/9.0 security setup, as well as the long-awaited ability to use a single userid properly for employee and manager.

Thanks, John. Not exactly what we wanted... but at least it is what we expected.

There is another option for removing the MSS drill options, although it requires a fair amount of modification. You could define database views that duplicate the underlying tables, define them in dbdef, and dbreorg as views. You can now create new key numbers and rules, and modify the IDA calls so that they use the new key numbers. This allows you to remove drill around access for the new rules, without affecting the originals.

Thanks Phil. Just keep in mind that technically this would be a modification to the .or files, which will get overwritten by MSPs, etc. So, depending on your customization policies, and resources, etc. could a bit of a maintenance issue.