COGNOiSe.com - The IBM Cognos Community

Planning & Consolidation => COGNOS Planning => Topic started by: GEPlebe on 10 Nov 2008 08:38:00 PM

Title: Selective lock on Contributor
Post by: GEPlebe on 10 Nov 2008 08:38:00 PM
Does anyone know of a way to lock out only certain people from contributor?  Currently the practice is to 'lock' contributor via the GTP options during a planning setup.  This however is a universal lock - users can via contributor but not make any changes.

Any advise appreciated. 

Anthony
Title: Re: Selective lock on Contributor
Post by: StuartS on 11 Nov 2008 02:51:02 AM
Can you not control and get the behaviour you want through adding and removing people from groups set in the rights file?

For exmaple if you want someone to access but not edit then VIEW?

Not aware of any method to actually have elist items locked for only certain people.

I am using 8.1 so unless this has changed in any later releases?

Regards

Stuart
Title: Re: Selective lock on Contributor
Post by: sascha on 11 Nov 2008 03:19:42 AM
Try adding a new group like 'Planning disabled' and assign planning package security in Connection to 'deny'. AFAIK the most restrictive security should apply which makes the package unavailable to this group. Add/remove users as you like.

As I haven't done that before it would be nice to get a small feedback it this does work or not.
Title: Re: Selective lock on Contributor
Post by: adityashah27 on 11 Nov 2008 12:27:13 PM
The "Rights" set in CAC would override any changes in permission for contributor package on portal.
I would suggest to give VIEW rights to those users in CAC unless there is any creative ways to do this.

Title: Re: Selective lock on Contributor
Post by: GEPlebe on 12 Nov 2008 03:28:53 PM
Thanks for the feedback. 

We've got all groups set up in access manager with appropriate security settings.  But during setup for each planning session we like to lock everyone out so that they can't make changes and then make reconciliation difficult.

The issue is not day-to-day access, but rather being able to freeze most people out during a select period, and then letting them back in once setup is complete...
Title: Re: Selective lock on Contributor
Post by: StuartS on 13 Nov 2008 02:47:25 AM
Is the take application offline / on line in CAC on the toolbar not suitable for your needs?
Title: Re: Selective lock on Contributor
Post by: sascha on 13 Nov 2008 03:27:26 AM
Quote from: adityashah27 on 11 Nov 2008 12:27:13 PM
The "Rights" set in CAC would override any changes in permission for contributor package on portal.

a) Only if you do a GTP. In case you just want to lock users step by step in a running planning process I assume that there aren't any GTPs.
b) If there are you can prevent overwriting package security with the Rights in CAC development setting below 'Go To Production Options' by disabling 'Overwrite the package access rights at the next GTP'.
Title: Re: Selective lock on Contributor
Post by: adityashah27 on 13 Nov 2008 10:21:01 AM
Sacha,

I know its not related to this thread, but do you think it is recommendatory to disable override? when there is a new rights added in CAC, it wont take effect on portal.

Aditya
Title: Re: Selective lock on Contributor
Post by: sascha on 13 Nov 2008 10:40:27 AM
Quote from: adityashah27 on 13 Nov 2008 10:21:01 AM
I know its not related to this thread, but do you think it is recommendatory to disable override? when there is a new rights added in CAC, it wont take effect on portal.

Aditya, I totally agree with you and would only facilitate this option to temporarily change the package security. If there are frequent changes in the rights you would need to maintain security in two places which I don't like.

BTW I never used this functionality in practice but still think that it might be a nice way of temporarily lock users from the package without having lots of GTPs.
Title: Re: Selective lock on Contributor
Post by: GEPlebe on 24 Nov 2008 10:31:20 PM
Quote from: Fisherman on 13 Nov 2008 02:47:25 AM
Is the take application offline / on line in CAC on the toolbar not suitable for your needs?

I wasn't aware there was such an option in the CAC.  After a look I cannot see such an option either (only 'Remove Application') - is this available in 7.3 or only in later versions?
Title: Re: Selective lock on Contributor
Post by: adityashah27 on 24 Nov 2008 10:53:58 PM
its only available 8.2 onwards.
Title: Re: Selective lock on Contributor
Post by: StuartS on 25 Nov 2008 03:20:01 AM
You can do this in 8.1