Controlling data access at universe level

[Former Member]

Hi,

I had a doubt in universe regarding the implementation of security.

Existing process: We had a portal called flex (intranet site)which the BO report has been integrated and for opening the report the name of report was clicked (hyperlink)

This report should show the data specific to the user profile logged into the portal.

Now if we want to restrict the data at universe level for each individual users accessing the report in portal our idea is to create a dervied table (which contains a list of userid's and project id's)in universe so that who ever logged into the portal and clicks on report he will see the data only related to profile

For example: The scenario would be a manager residing in a region need to see the list of projects which he is assigned to but not all of them.

Could you please let me know how can implement at universe. Kindly let me know if you need any futher information.

Thanks,

Eswar

[Former Member]

Another way to do this is: (a) in your universe create a table that has a list of user names a long with their BOUSER id; (b) associate that list with fact tables or d imensions in the database, either using joins or by using a where clause as a filter or in an object definition using the syntax @variable(bouser); below is an exerpt from BO Designer guide.

Example:

@Variable

In the universe for a human resources database, you have an object called

Employee name. You want to restrict the returned data for Employee name

to the values authorized in the database for each user. This would allow

you to control what employee information each user is allowed to see. This

information is defined by their database profile.

You insert the @Variable function in the WHERE clause as follows:

Employees.Employee_Name = @Variable('BOUSER')

When the object Employee name is used in a query, the data is returned

[Former Member]

Hi,

On the universe, do the following ->

Tools -> Manage Security -> Manage Access Restrictions

Here you can define the access restrictions (row level or object level) and assign different restrictions to different groups and users.

Regards

[Former Member]

Hi,

Try like this...

On the universe, do the following ->

Tools -> Manage Security -> Manage Access Restrictions -> here you can restrict users based on groups, row level restriction and column level is also possible.

Cheers,

Suresh Aluri.

[former_member793810]

Can't you control Data Level Security on Back End like in ECC if you are working in SAP enviroment because this is what preferred and best practice.

If not then use what Suresh has suggested.

Bashir Awan