Data Level Security in COGNOS 8.2 FM

[cognos8.2]

Hi All,

I need to implement data level security in my FM Project (DMR modeled). My FM Project has 6 dimensions and 2 measures.

There are about 500 users for the application. Each user has an User ID.

I have 4 Divisions, under each divisions (say, D1, d2, D3,D4) , I have Business units (bu1, bu2, bu3 etc), Users are tagged to these business units, like:::::Division -> Business Unit -> Users. An user can belong to one or more Business units (or Divisions).  SSO has been implemented in the system. So Whenever an USer (USER1) logs on to the system, he should see data only to which he is belonging to. I store this association between user and Business Unit, in  a table say TABLE_1. I have following tables:

TABLE_1
...USER_ID
...BUSINESS_UNIT_ID


TABLE_2
..BUSINESS_UNIT_ID
..BUSINESS_UNIT_DESC
...DIVISION

1) To apply data level security we create security filters in Query subject. Will it be fine to apply security filters only to Database Layer, rather than to Regular Dimensions, as these dimensions fetch data from the Database layer dim/fact tables.

2) Please guide me on how to proceed further with this dynamic security implementation. User's ID should be tracked dynamically, it should be matched with the User IDs in table  TABLE_USER_BU.

Any help in this regard would be highly appreciated....

Thanks in advance!

[almeids]

I don't know the answer to (1) as I am on ReportNet with no DMR.

To implement the dynamic user association, use a macro based security filter like:

[table_USER_BU].[USER_ID] =#sq($account.personalInfo.userName)#

Note that this requires that your Cognos user IDs are the same as those in your database, or you will need to add a column to the table containing the Cognos ID.
This query subject should be joined to your fact query subject(s), and the security filter applied to the fact query subject(s).