If one sends out a mailing using CiviCRM, one can access an overview of the mailing's result from the mailings menu (see screenshot). From this summary you will also be able to access more detailed information, including the unique opens (see screenshot).
As this information can be considered quite sensitive in regard to data protection, I would like to restrict access to it to certain users/roles. I tried editing the permissions of all relevant mailing reports I could find.
However, it turns out that this information does not seem to be based on CiviCRM'S report function. Even If restrict user's access to any report functions, the detailed mailing information can still be viewed.
Hence my questions are:
- Which permission is actually relevant for opening pages such as civicrm/mailing/report/event?reset=1&event=opened&mid=XYZ&distinct=1 ?
- Is there any way to restrict access to this information without denying users to use CiviMail at all?
Tested on CiviCRM 4.7.18 and Drupal 7.54.