Comments on: Designer XI 3 New Feature: Class Restrictions http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/ ...you are in a twisty maze of passageways, all different... Tue, 07 Feb 2012 17:17:49 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: Dave Rathbun http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-2131 Dave Rathbun Tue, 24 Jan 2012 19:25:30 +0000 http://www.dagira.com/?p=125#comment-2131 The security setting does not resolve content, it resolves object use only. Meaning if you publish a report with a restricted column, only people with the proper security clearance will be able to run that report. If they do not have clearance, what you would like to happen is the report would run without the offending object, but that's not the way it works. We have accomplished this in the past by creating a view in the database that is smart enough to know who I am (via the @Variable('BOUSER') technique) and applies a case statement to the column in question (account number in your case) so that the object works for everyone, but only shows data for those that are allowed to see it. The security setting does not resolve content, it resolves object use only. Meaning if you publish a report with a restricted column, only people with the proper security clearance will be able to run that report. If they do not have clearance, what you would like to happen is the report would run without the offending object, but that’s not the way it works. We have accomplished this in the past by creating a view in the database that is smart enough to know who I am (via the @Variable(’BOUSER’) technique) and applies a case statement to the column in question (account number in your case) so that the object works for everyone, but only shows data for those that are allowed to see it.

]]> By: padawangirl http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-2127 padawangirl Wed, 18 Jan 2012 17:01:13 +0000 http://www.dagira.com/?p=125#comment-2127 Hi Dave could you help me please? I have a webi report with this information: accountnumber storename amount User A should have rights to see alll of the three columns when he access the report to refresh it. User B should not be allowed to see the account number when he access the report to refresh it. I guessed that in Universe Designer the option that would allow me to do that was Manage security, in the tab of object restrictions. However when user B tries to refresh the report it doesn't refresh anythin it only throws an error message like: you do not have permissions to all the objects or one of the objects, or something like that. is there any other option to achieve what i want? or is it that I'm thinking that object tab is for something else it's not supposed to be for? Hi Dave could you help me please? I have a webi report with this information:
accountnumber storename amount

User A should have rights to see alll of the three columns when he access the report to refresh it.

User B should not be allowed to see the account number when he access the report to refresh it.

I guessed that in Universe Designer the option that would allow me to do that was Manage security, in the tab of object restrictions.

However when user B tries to refresh the report it doesn’t refresh anythin it only throws an error message like: you do not have permissions to all the objects or one of the objects, or something like that.

is there any other option to achieve what i want? or is it that I’m thinking that object tab is for something else it’s not supposed to be for?

]]> By: Dave Rathbun http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1279 Dave Rathbun Fri, 23 Jul 2010 14:03:37 +0000 http://www.dagira.com/?p=125#comment-1279 Hi, I answered you on BOB, but since the question is relevant to this post I will answer it here as well. Class restrictions are not bound by group membership as they are simply part of the universe. That means if you create a class restriction, it will be applied to every user, no matter what their group membership or profile looks like. In other words, class restrictions are not intended to be used for "variable" security, but instead for permanent security. Hi, I answered you on BOB, but since the question is relevant to this post I will answer it here as well. Class restrictions are not bound by group membership as they are simply part of the universe. That means if you create a class restriction, it will be applied to every user, no matter what their group membership or profile looks like. In other words, class restrictions are not intended to be used for “variable” security, but instead for permanent security.

]]> By: Satish http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1277 Satish Fri, 23 Jul 2010 03:56:09 +0000 http://www.dagira.com/?p=125#comment-1277 Thanks Dave,Its a very nice and informative post. I have question...when i apply class restrictions, Administrator group users are also got restricted which is contrary to restrictions applied through manage security aptions(Note : i haven't included Administrator group users in security table). Is this something usuall or am i going wrong ? Thanks Dave,Its a very nice and informative post.
I have question…when i apply class restrictions, Administrator group users are also got restricted which is contrary to restrictions applied through manage security aptions(Note : i haven’t included Administrator group users in security table).
Is this something usuall or am i going wrong ?

]]> By: Nitin Kumar http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1258 Nitin Kumar Fri, 09 Jul 2010 12:53:42 +0000 http://www.dagira.com/?p=125#comment-1258 there is one options (Apply on List of Values)near to medetory option. What it generally does it is not in form of radio button. there is one options (Apply on List of Values)near to medetory option.
What it generally does it is not in form of radio button.

]]> By: Siva http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-960 Siva Thu, 24 Dec 2009 12:45:17 +0000 http://www.dagira.com/?p=125#comment-960 Sounds good and interesting..!!! Both the features and your presentation on it.. Sounds good and interesting..!!! Both the features and your presentation on it..

]]> By: Mathi http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-500 Mathi Tue, 17 Feb 2009 23:46:34 +0000 http://www.dagira.com/?p=125#comment-500 Thanks Dave, nice summary, will love this feature in xi r3. i have so many universes using stub join to have security join. With this feature, the functionality now very simple. Thanks Dave, nice summary, will love this feature in xi r3. i have so many universes using stub join to have security join. With this feature, the functionality now very simple.

]]> By: Kiruba http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-493 Kiruba Wed, 28 Jan 2009 13:14:52 +0000 http://www.dagira.com/?p=125#comment-493 sorry... mistakenly i typed as table instead of class. read those as classes.. ie event class, pmt class and tkt class. no tables. sorry… mistakenly i typed as table instead of class. read those as classes.. ie event class, pmt class and tkt class. no tables.

]]> By: Kiruba http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-492 Kiruba Wed, 28 Jan 2009 13:13:05 +0000 http://www.dagira.com/?p=125#comment-492 hi dave, i have a question: I have three classes. ‘Event’ class, ‘Pmt’ class, ‘Tkt’ class. Event class has EventNo, EventName, EventID, VenueID. Rest of the classes, Pmt and Tkt classes having measure objects. My qurey’s are: 1) Select * from event, tkt where event.ctseventid = tkt.ctseventid and venueid = 81 2) Select * from event, pmt where event.ctseventid = pmt.ctseventid and venueid = 82 Note: I’ve joined this ‘tkt’ table to some other tables also. If I am going to give the condition ‘venueid = 81’ in the ‘tkt’ table, that will restrict the result for some other reports. That I don’t want. Same for ‘Pmt’ table also. If the only choice is ‘event’ table, can you pls tell me how it is possible?? hi dave,
i have a question:
I have three classes. ‘Event’ class, ‘Pmt’ class, ‘Tkt’ class.
Event class has
EventNo, EventName, EventID, VenueID.

Rest of the classes, Pmt and Tkt classes having measure objects.

My qurey’s are:
1) Select *
from event, tkt
where
event.ctseventid = tkt.ctseventid and venueid = 81

2) Select *
from event, pmt
where
event.ctseventid = pmt.ctseventid and venueid = 82

Note: I’ve joined this ‘tkt’ table to some other tables also. If I am going to give the condition ‘venueid = 81’ in the ‘tkt’ table, that will restrict the result for some other reports. That I don’t want.

Same for ‘Pmt’ table also.

If the only choice is ‘event’ table, can you pls tell me how it is possible??

]]> By: MKUMAR http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-490 MKUMAR Fri, 23 Jan 2009 21:20:21 +0000 http://www.dagira.com/?p=125#comment-490 Hi Dave, Thanks for the useful info. I have one question though. Does the restriction automatically gets applied to the Sub Classes as well? Hi Dave, Thanks for the useful info. I have one question though.
Does the restriction automatically gets applied to the Sub Classes as well?

]]>