COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Report Studio => Topic started by: erics on 04 Mar 2015 08:56:29 AM

Title: Filtering based on LDAP permissions
Post by: erics on 04 Mar 2015 08:56:29 AM
Hi guys,
I've inherited a set of reports with zero documentation. One of the things that it does is that based on the LDAP group that the user belongs to, it will filter the drop down lists to allow them to only see the data for their group.
I've taken a look at the report itself, and there doesn't seem to be any filters on the query that would filter on the team. Took a look on the framework manager, and there are no filters there at all.
Any idea how Cognos is getting the value from the LDAP and creating the filtering? I'm completely stumped.

Thanks,
Eric
Title: Re: Filtering based on LDAP permissions
Post by: MFGF on 04 Mar 2015 09:11:57 AM
Quote from: erics on 04 Mar 2015 08:56:29 AM
Hi guys,
I've inherited a set of reports with zero documentation. One of the things that it does is that based on the LDAP group that the user belongs to, it will filter the drop down lists to allow them to only see the data for their group.
I've taken a look at the report itself, and there doesn't seem to be any filters on the query that would filter on the team. Took a look on the framework manager, and there are no filters there at all.
Any idea how Cognos is getting the value from the LDAP and creating the filtering? I'm completely stumped.

Thanks,
Eric

My guess is either:

1. In Framework Manager there are Security Filters defined for the query subject providing the prompt values. Select the Query Subject and choose Actions > Specify Data Security to see if any exist.
2. There are multiple signons for the data source, each secured for a different group, and the database is doing the filtering based on the user ID being passed to it in the database signon.

My money is on the former :)

MF.