COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Cognos Administration => Topic started by: CharlesAZ on 30 Oct 2013 02:55:02 PM

Title: Capabilities- One user two Roles one has Query studio one does not
Post by: CharlesAZ on 30 Oct 2013 02:55:02 PM
Greetings!

If I had a User, we will call them "User A" - He Belongs to two Roles :  Role A , and Role B.  We have two Cognos Packages:  Package A and Package B

In the Background we are using Cognos Series 7 for our security on a Cognos 10.2.1 Plateform, just to make sure we are all on the same page.


Due to the Persons Role;  For Package A which is assocated to Role A , he has the Capabilites for Cognos Query(Power User Role)

Same User  which is also in Role B, is only a Report Consumer for Package B and should not be allowed to query the data with Query Studio.

I was a Cognos Admin in Cognos 8.2 days and in my new job I am not and do not recall how to make this happen.  I know I tested way back when and it worked but that was too many years ago and at a different job.    I need the information so I can explain to our Cognos Admin what we need to do, since he is not aware of how to do this requirement.  Any ideas?

Best Regards

Charlie Palmer
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: Grim on 31 Oct 2013 07:44:20 AM
Off the top of my head and not having something to actually test this...
Package B capabilities need to be modified:
- Group/Role A would need to have Capabilities overridden and set to explicit deny for QS
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: CharlesAZ on 04 Nov 2013 06:15:17 PM
Hi Grim,

Thank you for the reply.   So are you suggesting at the package level doing a "override the capablities acquired from the parent entry with:" 
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: CharlesAZ on 04 Nov 2013 08:07:46 PM
Nuttin for Nuttin, but I figured I get a lot more replies then this, I am really suprised more cognos Implementations have not run into this issue.    Seems like it would a common challenge.
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: Grim on 05 Nov 2013 08:23:39 AM
Your complaining on a free forum where people provide help on their own free time.  :o You realize that we all have lives outside this forum right? Sorry, you struck a nerve there this am.

That aside, to answer your question. Yes, I'm suggesting you try to modify the pkg capabilities and explicitly "Deny" QS access to the group/role that should not have access. Test, and reply if it worked or not.

I'd provide a screenshot of what I'm talking about but it seems that the upload of attachments is currently "borked".  :-\
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: MFGF on 11 Nov 2013 10:53:39 AM
Quote from: Grim on 05 Nov 2013 08:23:39 AMI'd provide a screenshot of what I'm talking about but it seems that the upload of attachments is currently "borked".  :-\

Upload the image to ibb and copy the IMG tags into your message on Cognoise. Works a treat!

MF.
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: Grim on 12 Nov 2013 01:08:19 PM
Quote from: MFGF on 11 Nov 2013 10:53:39 AM
Upload the image to Photobucket and copy the IMG tags into your message on Cognoise. Works a treat!

MF.

That means I need a photobucket account, not to mention that PB is blocked from work where I have the screenshot.  :-\
Title: Re: Capabilities- One user two Roles one has Query studio one does not
Post by: MFGF on 13 Nov 2013 05:53:47 AM
You could email it to me and I will put it up for you? If you need my address ping me a PM :)

MF.