COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Security => Topic started by: nagoole on 11 Oct 2013 03:29:32 AM

Title: Secure public folder package from cognos connection
Post by: nagoole on 11 Oct 2013 03:29:32 AM
Hi All,

I have published 4 packages from FM to cognos BI server public folder, now i want to set author role member(user1) can use only first two packages and consumer role member to use only last two packages how to setup this. please provide steps in detail.

I have removed everyone option for all roles and i given access user1 to author role and user2 to consumer role.

Thanks,
Naga
 
Title: Re: Secure public folder package from cognos connection
Post by: MFGF on 17 Oct 2013 04:42:30 AM
Hi,

Go into the properties of each package folder and on the Permissions tab, grant Traverse, Read and Execute to the Authors role for the first two packages and Traverse, Read and Execute to the Consumers role for the second two packages.

Cheers!

MF.
Title: Re: Secure public folder package from cognos connection
Post by: nagoole on 18 Oct 2013 02:47:06 PM
Thanks MFGF it works, but if i give to author role  only execute permission i cannot go with that package please explain

And normally author role want to run report in that package so which permission i need to set its read, excute,travese ?

Thanks,
Naga
Title: Re: Secure public folder package from cognos connection
Post by: MFGF on 19 Oct 2013 09:43:11 AM
Quote from: nagoole on 18 Oct 2013 02:47:06 PM
Thanks MFGF it works, but if i give to author role  only execute permission i cannot go with that package please explain

And normally author role want to run report in that package so which permission i need to set its read, excute,travese ?

Thanks,
Naga

The pprivileges are (from lowest to highest):

Traverse
Read
Execute
Write
Set Policy

Traverse allows a user to see an object, and if it is a folder, to navigate into it
Read allows a user to view a saved output for a report (if one exists)
Execute allows a user to run a report
Write allows a user to modify the properties of a report, overwrite a report, delete a report etc
Set Policy allows a user to act as an administrator ie to set the privileges described here

If you grant only the Execute privilege, users have no visibility of the object because they don't have Traverse. For a package, this makes it unusable. I normally recommend you grant Traverse, Read and Execute to allow users to use the package and to view and run reports saved in the package folder.

Cheers!

MF.