COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Security => Topic started by: craigalaniz on 05 Aug 2014 08:06:05 AM

Title: Public Folders / Portal Pages
Post by: craigalaniz on 05 Aug 2014 08:06:05 AM
Hello

We are in the process of upgrading from Cognos 8.4 to 10.2. We are using portal tabs to filter reports for certain groups of users. My question is, do all users have to have permissions to Public Folders in order to access the folders that the portal tab points to? It appears to me that this is true. If it is,  how do we keep users from accessing "everything". I was thinking of taking away the ability to even see the Public Folder. Is this a good solution?

Thanks

Craig



Title: Re: Public Folders / Portal Pages
Post by: bdbits on 05 Aug 2014 09:55:24 AM
Normally, yes Public Folders is viewable by everyone. What we do (and I think this is typical) is set folder permissions on the root public folders. If a user does not have permissions to the folder, they will not ever see it no matter what the interface.

Using portal tabs to restrict views is security by obscurity, which is essentially no security at all.  :D
Title: Re: Public Folders / Portal Pages
Post by: craigalaniz on 05 Aug 2014 10:05:05 AM
Hello

Thanks for your reply. I attempted to restrict permissions to Public Folders so users could not see it at all. They then also could not see the portal tabs.

What is a better way to set up security?

Thanks

Craig
Title: Re: Public Folders / Portal Pages
Post by: AussiePete2011 on 04 Nov 2014 04:27:10 PM
Hi there

Think of it this way
You are driving along a road with different side streets with different houses that you may or may not be able to access.
To be able to drive down the main road you need traverse rights.
TO be able to access a particular side street you need traverse rights.  If you want to access a house on this side street then you need the combination of Traverse and read.

So you need traverse on Public Folders to be able to navigate down the folders from Public folders
Any folders that you have traverse rights on you can see and then navigate.
If you want to be able to see what's on the path you also need read.

Let me know if that makes sense.
Cheers
AussiePete