Hiding measures from specific groups

[Francis aka khayman]

We need to hide a measure, say gross profit, from a specific group (weird user requirement
:( :( :( :(

Any ideas?

[MFGF]

We need to hide a measure, say gross profit, from a specific group (weird user requirement
:( :( :( :(

Any ideas?

Yes. Use object security. :)

http://public.dhe.ibm.com/software/data/cognos/documentation/docs/en/10.2.1/ug_fm.pdf

Look at Chapter 7 - Publishing Packages and the subsection on Security, specifically Object Security.

Don't forget that as soon as you add the first object security definition to the model, the default changes from everyone having access to everthing to everyone having no access to anything unless granted. You can use inheritance to do this - ie go to the top level namespace and define another object security rule here that grants access to the everyone role.

Cheers!

MF.

[Francis aka khayman]

awesome!

[bdbits]

MFGF gets that a lot.   8)

[Francis aka khayman]

Follow up question. How are reports with object security handled properly? If the user without access to an object opens the report, an error message will be generated.

Is there a more graceful way to handle this?

[MFGF]

Follow up question. How are reports with object security handled properly? If the user without access to an object opens the report, an error message will be generated.

Is there a more graceful way to handle this?

Hi,

Yep - if a user tries to open a report featuring data they are not permitted access to (using object security), the report will not open - they see a message telling them they don't have access to the data.

A more graceful approach might be to use calculations in a query subject in FM that use a CASE or if-then-else to either display an underlying value or a series of hashes ############ based on the user's id, group or role. This would obviously not be object security, though :)

Cheers!

MF.