I am quite new to security set up in Cognos and it doesn't seem to be working fully.
I am using cognos 10 and I have set up the user group 'sales' for testing and the test user has the role - consumer.
I've got most of the visbility function working, i.e. the test user can access only the Sales folder. The functions allowed seems ok until I tried running the report and I received the following error.
QE-DEF-0288 Unable to find the data source 'Reportsource' in the content store.
If I assign the test user as directory administrators, the report runs normally. I can also run the report as system administrator.
For the consumer role, the setting under permissions is 'directory administrators' with all permissions. Do I need to change this? I don't really understand this part since it's like a role within a role?
Hope someone can help!!
HOw did you setup the security for your datasource and its signon ?
Hi,
Sorry I'm very new to this, but do you mean the data source under Configuration -> 'Data Source Connections'?
There are consumers and directory Administrators under permissions.
Or is there another place to set up the security to data source?
I think sign-on should be everyone, where can I check this?
It looks like your data source permissions have been heavily customised. Unless it has been changed, when you add a new data source the built-in role "everyone" would have access to it. Do all your data sources behave as you have noted or just the one being discussed?
Basically this behaviour is across all data source when access with consumer role.
Actually I haven't customised the data source, I have only customised the user role permission/capabilities and reports folder access.
Is this the same as customising data source? And I still don't know where to check the data source permission, can anyone help with this?
Is it possible to reset the cognos defined role or at least back to default permissions?
The default settings for data sources, and the child data source connections and their child sign-ons, are:
"Everyone" group has read,execute,traverse
"Directory Administrator" has all 5 permissions
See if this is the setting for the permissions property of the top page which contains the data sources. If not set it to these and tell it to re-set all child settings when you apply the change. This should re-set all unless some or all child permissions have been unlinked from inheriting parent permissions. You'll need to reset them to inherit etc individually in such cases (I think).
Hi!
I think this is the setting I was missing and now it works!! :)
Thanks so much!
My pleasure :)