COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: asmfloyd on 06 May 2020 03:38:38 PM

Title: Using user as author and consumer across folders
Post by: asmfloyd on 06 May 2020 03:38:38 PM
Hi,
  I have a folder "DEV" where I have a role "AUTH_ROL" with the privileges as author and have users 1,2,3,4.

I have another folder "PROD" where I want few of those users 2 & 3  having permission to only run & view the report (No edits). To achieve this, I created another role called "CONS_ROLE" with role of consumer and added the users 2,3 and a new user 7.

    When I test, it looks like user 2 & 3 has edit access to PROD folder while 7 (new user) has only run permission.
Am I doing anything wrong or is there another way to handle this?

Thanks,
Title: Re: Using user as author and consumer across folders
Post by: MFGF on 07 May 2020 07:11:10 AM
Quote from: asmfloyd on 06 May 2020 03:38:38 PM
Hi,
  I have a folder "DEV" where I have a role "AUTH_ROL" with the privileges as author and have users 1,2,3,4.

I have another folder "PROD" where I want few of those users 2 & 3  having permission to only run & view the report (No edits). To achieve this, I created another role called "CONS_ROLE" with role of consumer and added the users 2,3 and a new user 7.

    When I test, it looks like user 2 & 3 has edit access to PROD folder while 7 (new user) has only run permission.
Am I doing anything wrong or is there another way to handle this?

Thanks,

What privileges does the AUTH_ROL role have for the PROD folder? Are there any other groups or roles that users 2 and 3 belong to that have have edit access to the PROD folder?

MF.
Title: Re: Using user as author and consumer across folders
Post by: asmfloyd on 07 May 2020 07:29:57 AM
Hi MF,

       The "AUTH_ROL" is not given any privileges to the PROD folder.

Are there any other groups or roles that users 2 and 3 belong to that have have edit access to the PROD folder?--NO.

Thanks,
Title: Re: Using user as author and consumer across folders
Post by: sdf on 07 May 2020 10:10:23 AM
can you specify the permission of "CONS_ROLE" to the PROD folder to be "execute and traverse".
make sure that only CONS_ROLE has permission on the PROD folder and test.