Comment 7 for bug 704394

well - IMHO the dashboards in web client should (and can ) be disabled - these are visual gimmicks of no real use in day2day work - at least I know nobody who wants to see these statistics evertime he/she changes form accounting to sales and back.

All these boards seem not to take into account company_id. Hence these reports show data of ALL companies even if the users has no access rigths to these companies (hopefully I am wrong, but I do not see any domain restriction)
BTW the most efficient way to restrict the access is to rewrite/extend the underlying views and NOT using (unnecessary) domains
I must admit, that I didn't examine how to pass uid and/or company_id to these queries.

If someone wants to open dashboards he will do it.