Framework Manager and Data Security Testing of Data Security Group

[gosoccer]

Hi, ;D ;D

I have established the Data Security within FM by using the Add Groups and Filter Options as a part of FM Model - Actions - Specify Data Security. Below shows a sample Group that is based on our LDAP.

HR_DEPT_ANALYST[Directory>HRPortal>HR>groups>HR_DEPT
and the Filter is
HR_DEPT_CD = '1'.

The HR_DEPT is actually a Subject Query that is used within the Report developed using Report Studio.

My question is as following:
Is there anyway within FM or Report Studio to test the validity of the Filter and this security setting.
To bascially DEBUG and see if it's responding to HR_DEPT_CD = 1.

i.e., Is there way to run the Subject Query within the FM but add a filter to see if this security group
that is added to the Subject Query called "HR_DEPT" which includes the HR_DEPT_CD is working?

So, in this case, within this testing, only Departments with HR_DEPT_CD = 1 should show when we
test the Subject Query. That is if I login to the FM Model using a user that belongs only the HR_DEPT_CD=1

Let me know what you think at your convenience.

Thanks so much.

:) :)

[MFGF]

Hi, ;D ;D

I have established the Data Security within FM by using the Add Groups and Filter Options as a part of FM Model - Actions - Specify Data Security. Below shows a sample Group that is based on our LDAP.

HR_DEPT_ANALYST[Directory>HRPortal>HR>groups>HR_DEPT
and the Filter is
HR_DEPT_CD = '1'.

The HR_DEPT is actually a Subject Query that is used within the Report developed using Report Studio.

My question is as following:
Is there anyway within FM or Report Studio to test the validity of the Filter and this security setting.
To bascially DEBUG and see if it's responding to HR_DEPT_CD = 1.

i.e., Is there way to run the Subject Query within the FM but add a filter to see if this security group
that is added to the Subject Query called "HR_DEPT" which includes the HR_DEPT_CD is working?

So, in this case, within this testing, only Departments with HR_DEPT_CD = 1 should show when we
test the Subject Query. That is if I login to the FM Model using a user that belongs only the HR_DEPT_CD=1

Let me know what you think at your convenience.

Thanks so much.

:) :)

Hi,

Yes. Just log in as a user who is a member of the HR_DEPT group. Is this a trick question? :)

Cheers!

MF.

[gosoccer]

Actually, may be!  :)

So, if the user doesn't exist in the specified group, I'm curious if the access to the Report will not be even possible or
it'll show all Departments.

For right now, it's showing all Departments since the User doesn't exist in the LDAP group.

There are our Groups and Filters related to this same Subject Query as well.

That doesn't look right?

Thanks,
:D

[MFGF]

Actually, may be!  :)

So, if the user doesn't exist in the specified group, I'm curious if the access to the Report will not be even possible or
it'll show all Departments.

For right now, it's showing all Departments since the User doesn't exist in the LDAP group.

There are our Groups and Filters related to this same Subject Query as well.

That doesn't look right?

Thanks,
:D

Hi,

Your filter is based on a group, which means it is active for anyone who belongs to that group. For people not belonging to the group, it isn't active. That is how data security works.

If you want people not belonging to the group to see nothing, you could set up another security filter based on the Everyone group that returns no rows?

MF.

[gosoccer]

Got it! Makes sense. Thx