Authorization at data level

[Former Member]

We have 2 power users with access to a Infocube. One from USA (U1) and onother from Canada (U2). I want to restrict the US power user (U1) from accessing Canada data in the Infocube and see only US data.

We are aware that we can create an authorization object on info-object (Country) and create a seperate role for all the power users based on their country.

Is there any other proper approach you can suggest ? Appreciate your quick replies. Thanks.

Laxmikant

[edwin_harpino]

hi Laxmikant,

i think that's the proper way. at data level, we always go with that way. any consideration to not use that approach ?

hope this helps.

[Former Member]

These users are power users and they'll be creating their own ad-hoc queries. Thats the problem.

[Former Member]

Hi,

Generally it is done as you said. the other way I have experienced is creating another query where we restricted with country in the filter. I mean separate queries for separate countries. But this is not advisable now. Later we changed it as you said. So I believe the best method is doing as you said.