COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Framework Manager => Topic started by: toto on 27 Feb 2018 02:07:43 AM

Title: Datasource Layer always adressable?
Post by: toto on 27 Feb 2018 02:07:43 AM
Hello, I am working with three layers, Datasource-Layer, Logical- and Presentation Layer. The Datasource- and Logical-Layer is hidden for the user. But that means, if the user knows the Name of the table of the database and is aware of our naming conventions he could always query directly the datasource layer, correct?
is there any way to avoid this?

Thanks a lot,

Toto
Title: Re: Datasource Layer always adressable?
Post by: Kiran P on 27 Feb 2018 09:59:58 PM
Yes, if the table and column names are known one can write an expression in report directly. But they need to know the namespace as well.

There is no way to avoid it unless the user is getting these details from Lineage in which case the capability can be restricted.

Moreover, if table and and column names are known anyone can write direct SQL and build report queries.

Thanks
Kiran

Sent from my ZUK Z2132 using Tapatalk

Title: Re: Datasource Layer always adressable?
Post by: Lynn on 28 Feb 2018 02:11:23 AM
Quote from: Kiran P on 27 Feb 2018 09:59:58 PM

Moreover, if table and and column names are known anyone can write direct SQL and build report queries.


This can only be done if the "User Defined SQL" capability is granted to the user.