Data Security on heirarchy based

[phani1979]

Hai

Here i have to implement Data security in framework manager. My question is  say if i have multiple columns to display  based on the user, do i have to apply security filter on all columns or doing security filter on query subject would be good.

When user runs reports, report should be displayed based on heirarchy and user

We have single sign-on implemented.

For example say i have 5 levels and 5 users, each level has individual user

Herirachy looks as
Developer
Sr. Developer
Tech lead
Project Manager
IT Director

Based on the heirarchy I should implement data security

Developer should have access to his level.

Sr.Developer should have access to his & Developer data

Tech Lead should have access to Sr.Developer,Developers  data

Prohject Manager should have access to Tech lead, Sr.Developer, Developers data.

IT Direcotr Should have access to Project manager,Tech Lead, Sr.Developer, Developes data.

[mrcool]

If you are having single sign on how will u apply security filters?Security filters are completly based on user groups.
U need to create user groups for dif level of users.
If all the level Users acc with single sign on how can cognos identify the level user belongs to....
One more thng do u hav any dimension with the hierarchy u mentioned?
we cant hide column using security filters...we can just filter the data

[phani1979]

I have two Groups created in ADS

My business logic will be..

In my company i have member and users.

When members login to cognos, they should have access to all the data.

when users login,heshould have access to users data, I have to set a filter that they cant view members data.

For that we have created two groups,,

Users as Customer group

Members as Executive Group.

1)Customer Group
2)Executive Group


I have product dimension and heirarchy  as Product Member, product type, product line, amount.

Now how do imeplement this logic in framework manager.

What kind of security we can apply in fm.

[mrcool]

Hi,

       Create security filters on ur dimension based upon the groups.
For Ex:Customer Group      Giv filter based on which column data he need to access.

Here is the scenario I implemented.

I have oraganisation hierarchy like Country,State,City
Dif user groups are created for users belongs to dif cities.

If the User User belongs to State level his user name will be added to the User groups of all the cities.
and so on for country level User.

So now In my organisation dimension I created security filters:
Add
1)User group and in filter City='Bangalore'
2)User Group2                  City='Hyderabad'
So on...
As this Dimension is joined with my fact table,When an User belongs to USer Group2 logs in he will be able 2 see just 'Hyderabad' data...

Hope This helps u...