If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

Dashboard Dataset Security

Started by Zimbo_African_1980, 07 May 2021 08:12:48 AM

Previous topic - Next topic

Zimbo_African_1980

Hi all,
I have created a dataset that is based on a package with set security and rules. The package security limits access to certain data values that contain sensitive information.
However, it seems like those security settings don't apply to the Dataset.

Am I correct to assume that once you create dataset, it would require its own security setup?
If so, is it possible to implement security in the dataset, and how do I do that?

I appreciate any detail explanation or reference to any article on how this works.

Thanks guys,

A

MFGF

Quote from: Zimbo_African_1980 on 07 May 2021 08:12:48 AM
Hi all,
I have created a dataset that is based on a package with set security and rules. The package security limits access to certain data values that contain sensitive information.
However, it seems like those security settings don't apply to the Dataset.

Am I correct to assume that once you create dataset, it would require its own security setup?
If so, is it possible to implement security in the dataset, and how do I do that?

I appreciate any detail explanation or reference to any article on how this works.

Thanks guys,

A

Hi,

When you create a data set you are pulling the data in to a columnar data file stored in the content store, so the package security rules in place for the user who creates the data set from the package apply at that single point. You can't apply security filters etc directly to a data set, but you could create a data module that references the data set and start applying security within the data module. I'm not clear on what exact security you need to apply, but be aware that currently data modules allow you to define security filters (filtering rows of data based on group/user etc) but they don't support object security (granting/denying access to columns based on group/user etc).

Cheers!

MF.
Meep!

bus_pass_man

Quote, is it possible to implement security in the dataset
No.

Data sets are essentially a single table and be thought of as a big rectangle of data.  It takes the data which has been put into it by the data set creator and stores it into a new object.

The data set will have that data and metadata which was available to the creator and which he had added to the data set. 

Because it is a new object, it does not inherit the object and data security of the original FM package or data module at run time.

This means that data and metadata, which is available to some set of users but ought not be available to another set, can be exposed to unauthorized users.



Zimbo_African_1980

Quote from: MFGF on 07 May 2021 10:13:58 AM
....You can't apply security filters etc directly to a data set, but you could create a data module that references the data set and start applying security within the data module. I'm not clear on what exact security you need to apply, but be aware that currently data modules allow you to define security filters (filtering rows of data based on group/user etc) but they don't support object security (granting/denying access to columns based on group/user etc)......

Thanks for the detailed explanation, I need exactly the row based data filtering in this case. We have specific records that are only visible to senior leadership.
Do you know how I can implement this security in the data module?
I am assuming I would need another table with security groups right,

thanks again,

A

MFGF

Quote from: Zimbo_African_1980 on 07 May 2021 11:20:12 AM
Thanks for the detailed explanation, I need exactly the row based data filtering in this case. We have specific records that are only visible to senior leadership.
Do you know how I can implement this security in the data module?
I am assuming I would need another table with security groups right,

thanks again,

A

Hi,

Sorry, looks like I was mistaken. You only appear to be able to define data security if the data module source is a data server, or another source that includes data server tables. I assumed you could do it using a data set as the source, but it appears that isn't possible currently.

Sorry for the misinformation.

Cheers!

MF.
Meep!

Zimbo_African_1980

Okay, thanks for clarifying.
Can you still let me know how you can apply the security on the Module?

Any links to document or video helps also.

thanks

A

MFGF

Quote from: Zimbo_African_1980 on 07 May 2021 12:05:10 PM
Okay, thanks for clarifying.
Can you still let me know how you can apply the security on the Module?

Any links to document or video helps also.

thanks

A

With pleasure! Here's the link to the docs for that:

https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=sources-securing-data

Cheers!

MF.
Meep!

Zimbo_African_1980

This is awesome, thank you much.