Text only | Text with Images

COGNOiSe.com - The IBM Cognos Community

IBM Cognos 8 Platform => COGNOS 8 => Framework Manager => Topic started by: Eromac on 13 Nov 2007 04:27:26 PM

Poll
Question: How can I add environment session parameters using the Access Manager properties
Option 1: ?? votes: 0
Option 2: ?? votes: 0
Title: New session parameters
Post by: Eromac on 13 Nov 2007 04:27:26 PM
I changed the authentication namespace from AD to Series 7. In AD had configured some items to get AD info as session parameter. Example: the city field - the value is l; now want to extract the description field from Access Manager, but need the value or the exact name of this property to use it as session parameter in FM  ???
Title: Re: New session parameters
Post by: MFGF on 13 Nov 2007 04:58:29 PM
Hi,

I'm not sure that this is possible if you are using a native Access Manager authentication source.  However, Access Manager uses a modified LDAP namespace, so you might have more success if you use the C8 native LDAP authentication provider type to point to the Access Manager namespace.

Just a thought,

MF.
Title: Re: New session parameters
Post by: Eromac on 13 Nov 2007 05:13:58 PM
The problem is that we dont use LDAP. I found another way, that is creating user classes and then using the CAMIDList macro, but don't like it
Title: Re: New session parameters
Post by: MFGF on 13 Nov 2007 05:19:44 PM
Hi,

Where does your Access Manager namespace reside?  By default Cognos used to ship Sun One Directory Server with Access Manager, which is an LDAP environment.  The only other options I can think of are that your AM namespace is held within AD, or else you are using an LAE file to host your AM namespace, which is not a robust or secure authentication source.

MF.
Title: Re: New session parameters
Post by: jwilliamstd on 24 Sep 2009 12:30:49 PM
I need to write a filter based on a user role.

Say for example

If ( users is a member of accessX ) then 1st filter condition
else 2nd filter condition.

Can I use CAMIDList for that. I'm using the group name from LDAP server in our server.

Thanks.
                   
Title: Re: New session parameters
Post by: dionpaul on 10 Nov 2009 04:43:33 PM
I need to perform a similar function as jwilliamstd.

We use the user classes for data level security and without completely chaning our security structure which we are planning in the next year or so, I need to be able to provide certain users with full access to all data and other users with access based on the user classes in Access Manager #CSVIdentityNameList()#

Example:  If currently logged on user is a member of a specific user class, say 'Report Administrators' then SQL to produce all records, else filter data by user class list.

Thanks in advance for any assistance.
Text only | Text with Images