Capabilities- One user two Roles one has Query studio one does not

[CharlesAZ]

Greetings!

If I had a User, we will call them "User A" - He Belongs to two Roles :  Role A , and Role B.  We have two Cognos Packages:  Package A and Package B

In the Background we are using Cognos Series 7 for our security on a Cognos 10.2.1 Plateform, just to make sure we are all on the same page.


Due to the Persons Role;  For Package A which is assocated to Role A , he has the Capabilites for Cognos Query(Power User Role)

Same User  which is also in Role B, is only a Report Consumer for Package B and should not be allowed to query the data with Query Studio.

I was a Cognos Admin in Cognos 8.2 days and in my new job I am not and do not recall how to make this happen.  I know I tested way back when and it worked but that was too many years ago and at a different job.    I need the information so I can explain to our Cognos Admin what we need to do, since he is not aware of how to do this requirement.  Any ideas?

Best Regards

Charlie Palmer

[Grim]

Off the top of my head and not having something to actually test this...
Package B capabilities need to be modified:
- Group/Role A would need to have Capabilities overridden and set to explicit deny for QS

[CharlesAZ]

Hi Grim,

Thank you for the reply.   So are you suggesting at the package level doing a "override the capablities acquired from the parent entry with:" 

[CharlesAZ]

Nuttin for Nuttin, but I figured I get a lot more replies then this, I am really suprised more cognos Implementations have not run into this issue.    Seems like it would a common challenge.

[Grim]

Your complaining on a free forum where people provide help on their own free time.  :o You realize that we all have lives outside this forum right? Sorry, you struck a nerve there this am.

That aside, to answer your question. Yes, I'm suggesting you try to modify the pkg capabilities and explicitly "Deny" QS access to the group/role that should not have access. Test, and reply if it worked or not.

I'd provide a screenshot of what I'm talking about but it seems that the upload of attachments is currently "borked".  :-\

[MFGF]

I'd provide a screenshot of what I'm talking about but it seems that the upload of attachments is currently "borked".  :-\

Upload the image to ibb and copy the IMG tags into your message on Cognoise. Works a treat!

MF.

[Grim]

Upload the image to Photobucket and copy the IMG tags into your message on Cognoise. Works a treat!

MF.

That means I need a photobucket account, not to mention that PB is blocked from work where I have the screenshot.  :-\

[MFGF]

You could email it to me and I will put it up for you? If you need my address ping me a PM :)

MF.