NW IDM 7.0 SP2 Patch 6 Access Problem

[Former Member]

Working with a fresh copy of 7.0 SP2 Patch 6 and I'm having some trouble with setting access control.

It seems I can set a filter for the "Allow access for" part of the tab but not the "On behalf of" tab. I checked this out in a Patch 5 conifguration and I had no problems.

BTW running on SQL Server 2000 SP3, but I also had someone else check using MSSQL 2005. So it's smelling like a bug, but I like to check around a little before submitting.

UPDATE: I upgraded my p5 instance and it allows the access controls in p6. I'm guessing there's something missing in the SQL scripts that generate the database. I guess I'm off to open a case on this.

Edited by: Matthew Pollicove on May 1, 2009 8:34 PM

Edited by: Matthew Pollicove on May 1, 2009 8:42 PM

[Former Member]

With some assistance, I found the solution to the problem.

It seems I had the "Use simplified access control" option turned on, which was keeping this from being accessed.

Still trying to find out what this control is supposed to do.

[Former Member]

Hi Matt,

The simplified access control affects whether or not you can use SQL statements in ACLs. It is highly recommended to leave "use simplified access control" checked. SQL statements in ACLs degrade performance.

Best Regards,

Matt

[Former Member]

Yeah, I spoke to a few people and I was told that in a pure SAP environment, you'll use "relations" rather than roles/filters for access control.

However there was no mention in the help file about this. I'll have to do a review of the Roles/Privs document to see if it's covered there. It seems there are a lot of SAP resources that are familar with this change, but it's not been well documented outside. Hopefully it will be covered in the 7.1 class.

Thanks for the follow up.

[Former Member]

Hi Matt,

I don't think it's made it to the documentation yet since 7.1 is still in Ramp Up. More complete documentention is in progress and is scheduled with SP2 at the end of Ramp Up.

Best Regards,

Matt