Package Security

[buffynut25]

Is it possible to set security on a Package such that a user can execute a report that was built from the package, but they cannot create their own reports (via Query or Report Studio) against that package. 

[cognosjon]

Just set them up as a consumer, that should do the trick.

[buffynut25]

Yes, but I would like for them to be able to use Query Studio and Report Studio against other packages. 

[sKumar]

You can't achieve it. It's a limitation.  The user with report studio access can easily build new reports with the package, if he has read, execute permission for that package.

[cognosjon]

You could still do it but it depends on how messy you want to get with permissisons.


You could create a new role, add your user to it, then apply this role to the package and then ensure that the role only has read execute and traverse.

As long as your user is not defined within any role that has a higher level of permission against the package they will only be able to run reports.

Do any other users have permissions to write reports against this package?

[sKumar]

Sorry to mention but this can't be done, the above recommendation is invalid. Even after creating a new role with the permission to read,execute, traverse on the package, the users in the role can start creating new reports as they will be having access to report studio..




----------------------------------------------------------------------------------------------------------
You could still do it but it depends on how messy you want to get with permissisons.


You could create a new role, add your user to it, then apply this role to the package and then ensure that the role only has read execute and traverse.

As long as your user is not defined within any role that has a higher level of permission against the package they will only be able to run reports.

Do any other users have permissions to write reports against this

[cognosjon]

Apologies sKumar your right, not sure what I was thinking about, maybe a lack of caffeine, maybe in need of a holiday maybe all of them.

[LeightonWhite]

In 8.4 you can set object capabilities on a package.  This will allow you to define which tools a group of users can use against a package.  Here is the relevant IBM documentation: http://publib.boulder.ibm.com/infocenter/c8bi/v8r4m0/topic/com.ibm.swg.im.cognos.ug_cra.8.4.0.doc/ug_cra_id12320Package_Capabilities.html#Package_Capabilities