Hi all,
I am looking for a solution, Please advise.
I have a security table and planning to implement row level security. Userid = @variable('BOUSER') . I am successful in this scenario.
----
What if a developer or back office user is not in the security table and he/she should see everything.
got some code from sybase folks
select * from dimproduct p,dimuser ur
where p.userid = ur.userid or ur.userid not in (select ur.userid from dimuser )
how to implement in Universe with BOUser ???
Help to improve this question by adding a comment
If you have an answer for this question, then please use the Your Answer form at the bottom of the page instead.
You already have an active moderator alert for this content.
there might be two solutions:
1.
Instead of "Use mandatory in Query you can open Security Editor and create a Data Security Profile. There you can add the filter in the filters tab and apply this Profile to the groups that should only see their own values. Make shure that your developers are not members of that group. By that the defined row level restriction will not be applied to them.
2.
Another solution could be to create a user in the CMC "%". And instead of
Userid = @variable('BOUSER') use
Userid LIKE @variable('BOUSER')
Not that elegant, but worked back in XIR2 times,I don't know if this can be done nowadays and if it is acceptable for you to let your developers share a single account for testing scenarios.
Help to improve this answer by adding a comment
If you have a different answer for this question, then please use the Your Answer form at the bottom of the page instead.
You already have an active moderator alert for this content.
Ajay, thanks but it doesn't help.
I tried many but seems not working.
select * from dimproduct p,dimuser ur
where p.userid = ur.userid or ur.userid not in (select ur.userid from dimuser )
RUC,
The best to do is create a Pre-Defined Filter OBJECT in the UNX - BusinessLayer and then go to the Properties tab and set the security as required, see attached screen-shot.
You can now also ONLY apply to certain classes, just the Pre-Defined Condition within the folder.
Regards,
Ajay
Help to improve this answer by adding a comment
If you have a different answer for this question, then please use the Your Answer form at the bottom of the page instead.
You already have an active moderator alert for this content.