COGNOiSe.com - The IBM Cognos Community

IBM Cognos 8 Platform => COGNOS 8 => Framework Manager => Topic started by: timgil on 03 Dec 2009 06:19:13 PM

Title: Masking Sensitive Columns
Post by: timgil on 03 Dec 2009 06:19:13 PM
Anyone know a solution within FM to mask data from sensitive columns like SSN so that Group A can see the data but Group B sees a mask, or nothing at all for that column?

Title: Re: Masking Sensitive Columns
Post by: cognostechie on 03 Dec 2009 07:07:30 PM
You can set Data Level security which would prevent Group B from seeing that data at all.
Title: Re: Masking Sensitive Columns
Post by: timgil on 07 Dec 2009 12:37:21 PM
Yes, but that will remove rows from the resultset.  I want to be able to show the row but just mask the SSN column for a particular set of users.
Title: Re: Masking Sensitive Columns
Post by: Mpotla on 30 Dec 2009 12:50:30 PM
Can we put some default value if that SSO is not falls under group A  Using Case stmt.
Title: Re: Masking Sensitive Columns
Post by: Naven on 08 Jan 2010 08:22:25 AM
Hi,

You can create one more column of SSO which contains null\default value.

Then dynamically substitute columns based on the user groups.

This could be achieved through parameter maps in FM if I am not wrong.

Regards,
Naveen
Title: Re: Masking Sensitive Columns
Post by: mgibson on 12 Jan 2010 11:06:35 PM
Isn't that what 'Object Security' is for?  See the Security chapter of the FM guide.

But you've probably already solved your problem by now.

Mick