Question:
Hello All,
I have an interesting requirement from my current customer. They want to restrict a group of users (in a role) to be able to do the following:
1. Execute queries from one InfoArea only (no problem in PFCG) OR only execute queries from a certain role (I think assigning a user to a role doesn't automatically give them the right to execute it so I'm guessing I'll need to use naming conventions).
2. Only change those queries with the local defintion function NOT global (how do you do this in 3.0b?)
3. Save those changed queries (as new queries) to their favourites only, NOT back to the original cubes or roles.
Any help greatly appreciated.
Cheers
BW_UK_IM
Answer:
1) You can restrict by InofArea and by naming convention if you want, but that is your call.
2)To allow them to change the local view and not the global, just do not give them change access, but you will need to give them authorizations in order to change the view and save them as workbooks. These are s_bds_ds auth object with the actvities of 01,02,03,06,30 for class name BW_CATELOG, BW_META_OBJECTS, and class type is OT. Make sure you look at the s_gui object, you will need 60and 61.
3)if you do not give them the s_user_agr and s_user_tcd, they cannot save to roles, just their favorites. The only problem with what you are wanting to do is that in 3.0 when you save it to your favorites, it automatically saves it to the cube. This is how it is supposed to work. The way around that is to use the s_rs_fold object and suppress the InfoAreas tab in BEx. This will allow them to only see their history, favorites, and reports on their role(s).
Hope this helps,
jlaruss