cancel
Showing results for 
Search instead for 
Did you mean: 

Row level access at the Group level assignments

Former Member
0 Kudos

I know the concept ROW LEVEL security or "Access Restrictions" but I haven't really implemented it before.

1. Create a Row level security from the BO -UNIVERSE designer from the TOOLS> MANAGE SECURITY>MANAGER ACCESS RESTRICTIONS.

RESTRICTION-EMPLOYEE ( If user is available in the table then only display the results)

In the where clause Employees.Employee_Name = @Variable('BOUSER') here the BO user always at the user level ID.

2. Then assign the above restriction to the USER or GROUP.

The question what I have.. if I assign the Restriction at the GROUP level, will this condition be applied for all users under that group. Do I need to do anything else.

Please confirm.

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi,

yes, once the restrictionis applied at Group level, the restiction will be inherited to all the users in that group, You don't need to do any other settings for users. The settings done for Group level works fine.

Answers (1)

Answers (1)

0 Kudos

THose are two different things you are talking about here:

1) @Variable('BOUSER') is a placeholder that is replaced during the runtime with the ID of the user who is running the report accessing your universe. Adding this expresson somewhere in your universe (does not have to be necessary the where clause of an access restriction) will mean that the generated SQL statement will contain the user ID at the related place.

2) Access restrictions: You can setup access restriction for users or even groups. If you set those for groups then the restriction will be applied to ALL users being members of this group, when they run a report that uses your universe. If a specific user belongs to 2 different groups for which universe restrictions are applied, then the conflict will be solved according to the settings in your universe. Access restrictions can be used to change the where clause of the generated statements but also for using different credentilas to connect to the database (based on the group) and/or a different set of parameters eg. the maximum bnumber of rows fetched by the universe can vary among different groups.

Hope this helps.

Regards,

Stratos