<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: Designer XI 3 New Feature: Class Restrictions</title>
	<atom:link href="http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/</link>
	<description>...you are in a twisty maze of passageways, all different...</description>
	<lastBuildDate>Fri, 30 Jul 2010 13:04:22 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Dave Rathbun</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1279</link>
		<dc:creator>Dave Rathbun</dc:creator>
		<pubDate>Fri, 23 Jul 2010 14:03:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-1279</guid>
		<description>Hi, I answered you on BOB, but since the question is relevant to this post I will answer it here as well. Class restrictions are not bound by group membership as they are simply part of the universe. That means if you create a class restriction, it will be applied to every user, no matter what their group membership or profile looks like. In other words, class restrictions are not intended to be used for &quot;variable&quot; security, but instead for permanent security.</description>
		<content:encoded><![CDATA[<p>Hi, I answered you on BOB, but since the question is relevant to this post I will answer it here as well. Class restrictions are not bound by group membership as they are simply part of the universe. That means if you create a class restriction, it will be applied to every user, no matter what their group membership or profile looks like. In other words, class restrictions are not intended to be used for &#8220;variable&#8221; security, but instead for permanent security.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Satish</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1277</link>
		<dc:creator>Satish</dc:creator>
		<pubDate>Fri, 23 Jul 2010 03:56:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-1277</guid>
		<description>Thanks Dave,Its a very nice and informative post.
I have question...when i apply class restrictions, Administrator group users are also got restricted which is contrary to restrictions applied through manage security aptions(Note : i haven&#039;t included Administrator group users in security table).
Is this something usuall or am i going wrong ?</description>
		<content:encoded><![CDATA[<p>Thanks Dave,Its a very nice and informative post.<br />
I have question&#8230;when i apply class restrictions, Administrator group users are also got restricted which is contrary to restrictions applied through manage security aptions(Note : i haven&#8217;t included Administrator group users in security table).<br />
Is this something usuall or am i going wrong ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nitin Kumar</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-1258</link>
		<dc:creator>Nitin Kumar</dc:creator>
		<pubDate>Fri, 09 Jul 2010 12:53:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-1258</guid>
		<description>there is one options (Apply on List of Values)near to medetory option.
What it generally does it is not in form of radio button.</description>
		<content:encoded><![CDATA[<p>there is one options (Apply on List of Values)near to medetory option.<br />
What it generally does it is not in form of radio button.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Siva</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-960</link>
		<dc:creator>Siva</dc:creator>
		<pubDate>Thu, 24 Dec 2009 12:45:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-960</guid>
		<description>Sounds good and interesting..!!! Both the features and your presentation on it..</description>
		<content:encoded><![CDATA[<p>Sounds good and interesting..!!! Both the features and your presentation on it..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mathi</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-500</link>
		<dc:creator>Mathi</dc:creator>
		<pubDate>Tue, 17 Feb 2009 23:46:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-500</guid>
		<description>Thanks Dave, nice summary, will love this feature in xi r3. i have so many universes using stub join to have security join. With this feature, the functionality now very simple.</description>
		<content:encoded><![CDATA[<p>Thanks Dave, nice summary, will love this feature in xi r3. i have so many universes using stub join to have security join. With this feature, the functionality now very simple.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kiruba</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-493</link>
		<dc:creator>Kiruba</dc:creator>
		<pubDate>Wed, 28 Jan 2009 13:14:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-493</guid>
		<description>sorry... mistakenly i typed as table instead of class. read those as classes.. ie event class, pmt class and tkt class. no tables.</description>
		<content:encoded><![CDATA[<p>sorry&#8230; mistakenly i typed as table instead of class. read those as classes.. ie event class, pmt class and tkt class. no tables.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kiruba</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-492</link>
		<dc:creator>Kiruba</dc:creator>
		<pubDate>Wed, 28 Jan 2009 13:13:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-492</guid>
		<description>hi dave,
i have a question:
I have three classes. â€˜Eventâ€™ class, â€˜Pmtâ€™ class, â€˜Tktâ€™ class. 
Event class has 
EventNo, EventName, EventID, VenueID. 

Rest of the classes, Pmt and Tkt classes having measure objects.

My qureyâ€™s are:
1) Select * 
    from event, tkt 
    where 
    event.ctseventid = tkt.ctseventid and venueid = 81

2) Select * 
    from event, pmt 
    where 
    event.ctseventid = pmt.ctseventid and venueid = 82

Note: Iâ€™ve joined this â€˜tktâ€™ table to some other tables also. If I am going to give the condition â€˜venueid = 81â€™ in the â€˜tktâ€™ table, that will restrict the result for some other reports. That I donâ€™t want. 

Same for â€˜Pmtâ€™ table also. 

If the only choice is â€˜eventâ€™ table, can you pls tell me how it is possible??</description>
		<content:encoded><![CDATA[<p>hi dave,<br />
i have a question:<br />
I have three classes. â€˜Eventâ€™ class, â€˜Pmtâ€™ class, â€˜Tktâ€™ class.<br />
Event class has<br />
EventNo, EventName, EventID, VenueID. </p>
<p>Rest of the classes, Pmt and Tkt classes having measure objects.</p>
<p>My qureyâ€™s are:<br />
1) Select *<br />
    from event, tkt<br />
    where<br />
    event.ctseventid = tkt.ctseventid and venueid = 81</p>
<p>2) Select *<br />
    from event, pmt<br />
    where<br />
    event.ctseventid = pmt.ctseventid and venueid = 82</p>
<p>Note: Iâ€™ve joined this â€˜tktâ€™ table to some other tables also. If I am going to give the condition â€˜venueid = 81â€™ in the â€˜tktâ€™ table, that will restrict the result for some other reports. That I donâ€™t want. </p>
<p>Same for â€˜Pmtâ€™ table also. </p>
<p>If the only choice is â€˜eventâ€™ table, can you pls tell me how it is possible??</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MKUMAR</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-490</link>
		<dc:creator>MKUMAR</dc:creator>
		<pubDate>Fri, 23 Jan 2009 21:20:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-490</guid>
		<description>Hi Dave, Thanks for the useful info. I have one question though.
Does the restriction automatically gets applied to the Sub Classes as well?</description>
		<content:encoded><![CDATA[<p>Hi Dave, Thanks for the useful info. I have one question though.<br />
Does the restriction automatically gets applied to the Sub Classes as well?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SBHUSAN</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-487</link>
		<dc:creator>SBHUSAN</dc:creator>
		<pubDate>Thu, 22 Jan 2009 19:42:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-487</guid>
		<description>I&#039;m wondering how different this newly introduced class restriction from the existing XIR2 security functionality.

Here is my illustration of a typical row level user restriction case .

Suppose we have 3 fact tables fct-1,fct-2,fct-3 and an user security table &quot;sec_tbl&quot; with two columns, country_cd and user_id

option-1: class restriction method

    1. sec_tbl need to be joined to all three fact tables in designer
    2. create filter with class restriction like sec_tbl.user_id = @Variable(â€™BOUSERâ€™) applied to only fct-1,fct-2,fct-3        class.

    now pull any object from fct class. the query will be like:

	select fct-1.xx
	       from fct-1
     	       ,sec_tbl
 	where fct-1.country_cd = sec_tbl.country_cd
              and sec_tbl.user_id = @Variable(â€™BOUSERâ€™)

    (The security table wont be that huge hence the extra join doesnt affect the performance of query.)


option-2: using BO designer&#039;s manage security option:

   1.Creat three restriction sets to the three fct tables like 
     fct-1.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))
     fct-2.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))
     fct-3.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))

   2. Assign the above restriction set to group(s) in designer.

   Now here is the query:

     select fct-1.xx
           from fct-1     
           where fct-1.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))
 
          (Here the subqury is also not that costly)

One advantage of option-1 is, filter is applied even the filter  table is not referenced, but to make the force join work the security table needs to be joined to required tables in universe.

Take an example of addition of new fact table..both the options need changes.option-1 add a new join and that of option-2 add a new restriction set.

2nd example: add a new object to the existing class, option-1 works great so as option-2.

Am i missing any advantage of the new feature over the existing one..</description>
		<content:encoded><![CDATA[<p>I&#8217;m wondering how different this newly introduced class restriction from the existing XIR2 security functionality.</p>
<p>Here is my illustration of a typical row level user restriction case .</p>
<p>Suppose we have 3 fact tables fct-1,fct-2,fct-3 and an user security table &#8220;sec_tbl&#8221; with two columns, country_cd and user_id</p>
<p>option-1: class restriction method</p>
<p>    1. sec_tbl need to be joined to all three fact tables in designer<br />
    2. create filter with class restriction like sec_tbl.user_id = @Variable(â€™BOUSERâ€™) applied to only fct-1,fct-2,fct-3        class.</p>
<p>    now pull any object from fct class. the query will be like:</p>
<p>	select fct-1.xx<br />
	       from fct-1<br />
     	       ,sec_tbl<br />
 	where fct-1.country_cd = sec_tbl.country_cd<br />
              and sec_tbl.user_id = @Variable(â€™BOUSERâ€™)</p>
<p>    (The security table wont be that huge hence the extra join doesnt affect the performance of query.)</p>
<p>option-2: using BO designer&#8217;s manage security option:</p>
<p>   1.Creat three restriction sets to the three fct tables like<br />
     fct-1.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))<br />
     fct-2.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))<br />
     fct-3.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))</p>
<p>   2. Assign the above restriction set to group(s) in designer.</p>
<p>   Now here is the query:</p>
<p>     select fct-1.xx<br />
           from fct-1<br />
           where fct-1.country_cd in (select distinct country_cd from sec_tbl where sec_tbl.user_id = @Variable(â€™BOUSERâ€™))</p>
<p>          (Here the subqury is also not that costly)</p>
<p>One advantage of option-1 is, filter is applied even the filter  table is not referenced, but to make the force join work the security table needs to be joined to required tables in universe.</p>
<p>Take an example of addition of new fact table..both the options need changes.option-1 add a new join and that of option-2 add a new restriction set.</p>
<p>2nd example: add a new object to the existing class, option-1 works great so as option-2.</p>
<p>Am i missing any advantage of the new feature over the existing one..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rizwan SM</title>
		<link>http://www.dagira.com/2008/11/05/designer-xi-3-new-feature-class-restrictions/comment-page-1/#comment-474</link>
		<dc:creator>Rizwan SM</dc:creator>
		<pubDate>Wed, 14 Jan 2009 17:41:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.dagira.com/?p=125#comment-474</guid>
		<description>This is a  good feature.. i worked a lot on stub joins ..but they were never helpful.
Now this is a good feature !</description>
		<content:encoded><![CDATA[<p>This is a  good feature.. i worked a lot on stub joins ..but they were never helpful.<br />
Now this is a good feature !</p>
]]></content:encoded>
	</item>
</channel>
</rss>
