COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Cognos Administration => Topic started by: cognostechie on 10 Feb 2015 04:06:13 PM

Title: Assign permission to ALL folders
Post by: cognostechie on 10 Feb 2015 04:06:13 PM
I am wondering if there is any way to add a group to all folders in the portal and assign Read, Execute and Traverse permissions.
There are hundreds of folders and folders inside those folders so it will take a lot of time if I do it manually. Since the Content Store is encrypted , can there be a way or a utility that does it?
Title: Re: Assign permission to ALL folders
Post by: cognostechie on 10 Feb 2015 04:18:36 PM
Or is there a way to see which folders are not inheriting the security from it's parent folder? Some of the sub-folders are overriding the access permission from their parent folder so I have to check the property of each folder. If those folders can be identified then I would have to check only those. 
Title: Re: Assign permission to ALL folders
Post by: Andrew Weiss on 10 Feb 2015 07:11:18 PM
CognosTechie,

MetaManager's Security Painter module will do exactly this.  You can even Append the new group to the existing security so that if the security on all of the folders is different it will stay intact, except adding the new group.  There is a 3 minute video of the module here which demonstrates the module: http://www.bspsoftware.com/Products/MetaManager/Secure#SP

Also there's a podcast on our channel which shows off this exact use case:
Episode 2.4 http://www.bspsoftware.com/podcasts

If you're interested in the utility we can set yo up with a trial.

Thanks,
-Andy
Andrew.Weiss@Avnet.com
Title: Re: Assign permission to ALL folders
Post by: cognostechie on 11 Feb 2015 04:41:42 PM
Thanks Andrew but my company is looking for a freeware.

I saw the extended audit and it does what I need , it can show me the permissions assigned to each folder so if any folder is overriding the permission of the parent folder then those are the only ones I need to worry about.

I wonder if anybody has installed it. From what I saw on IBM site, it is not a supported product and it requires configuring a few things
via a WAR file . I wonder if that populates the tables in the audit database.

Not sure if anybody would respond to this but still asking - Has anybody installed it and knows what to expect?
Title: Re: Assign permission to ALL folders
Post by: MFGF on 12 Feb 2015 04:22:33 AM
Quote from: cognostechie on 11 Feb 2015 04:41:42 PM
Thanks Andrew but my company is looking for a freeware.

What this probably means to you is that you're going to spend hours and days (at the cost to your company of all the hours they are paying you for) trying to figure out how to do this. For probably less cost overall you can get a tool that gives you exactly what you need, right now. It would seem to make better business sense to do this than to fund a potentially lengthy investigation on your part, which might not end up giving you a complete answer anyway...

Just my tuppence :)

MF.
Title: Re: Assign permission to ALL folders
Post by: SomeClown on 12 Feb 2015 04:58:41 AM
Opportunity costs don't require a budget - doesn't matter how much it costs if you don't have the extra money for a purchase
Title: Re: Assign permission to ALL folders
Post by: cognostechie on 12 Feb 2015 07:52:05 AM
Quote from: MFGF on 12 Feb 2015 04:22:33 AM
What this probably means to you is that you're going to spend hours and days (at the cost to your company of all the hours they are paying you for) trying to figure out how to do this. For probably less cost overall you can get a tool that gives you exactly what you need, right now. It would seem to make better business sense to do this than to fund a potentially lengthy investigation on your part, which might not end up giving you a complete answer anyway...

Just my tuppence :)

MF.

I completely and super-completely  agree but that's how it is..

They would rather want to add that new user group to System Admin role so that it doesn't have to be given permission to each folder than to buy anything but I don't want to do it that way.
Title: Re: Assign permission to ALL folders
Post by: Andrew Weiss on 18 Feb 2015 10:19:10 AM
I hear you loud and clear CognosTechie.  We can and would be happy to help show the ROI and savings by using the tool vs. the manual method which can also be error prone.  But at the end of the day if there is no budget then than the options may just be limited.  Good luck and let me know if we can help.

Thanks!
-Andy