COGNOiSe.com - The IBM Cognos Community

IBM Cognos 8 Platform => COGNOS 8 => Report Studio => Topic started by: saumil287 on 12 Jan 2012 07:16:28 AM

Title: Setting Report level Security for users
Post by: saumil287 on 12 Jan 2012 07:16:28 AM
Hi All,
I am having a folder named Reports under a package which stored in public folder containing 10 reports say A, B,C and so on created in report studio.
I want say E, F, G reports to be not shown to particular users.
How should I accomplish the same.
Its urgent your guidance is required.


Thanks in Advance
Title: Re: Setting Report level Security for users
Post by: charon on 12 Jan 2012 07:47:58 AM
that sounds like an administration issue to me.
there are two ways i know about how to hide/ show and more content to different user...
1) in framework manager (check out FM user guide), but i thinks thats more suitable for content (rights on/off on package level)
2) administration & security, take the rights for some users to read/ write ...and so on on these reports.
sry i can not be more accurtate, just geting into this myself and installed ldap 1 day ago.

but i would highly recommend to read the administration & security guide, there you will find anything you need  :P
Title: Re: Setting Report level Security for users
Post by: tjohnson3050 on 12 Jan 2012 03:03:21 PM
You can set the permissions on each report, but that isn't a best practice because it is manually intensive.

The process I would recommend is:

Create a separate folder for reports E,F,G - move the reports into that folder, then set permissions (read and execute at a minimum) on that folder.

The permissions available (and how they relate to reports) are:

read - view the properties of the report
write - make changes to the report
execute - run the report
traverse - n/a to reports
set policy - ability to change the security of the report

Deselect the inherited permissions and set the permissions to just the groups / users that you want to have access to the reports.

--

Another option would be to deny access to the specific report:

http://www-01.ibm.com/support/docview.wss?uid=swg21343262

I avoid the use of denying rights just because I think it makes the maintenance of security overly complex.
Title: Re: Setting Report level Security for users
Post by: saumil287 on 12 Jan 2012 08:43:50 PM
Thank you very much for your replies,
I set a dashboard portlet multipage containing all 10 reports .
My requirements is all upper manager level should see all the reports but only some users will have restrict to 3 or 4 reports.
Can the same be set from framework manager itself.

Thanks again
Title: Re: Setting Report level Security for users
Post by: tjohnson3050 on 13 Jan 2012 09:22:34 AM
When setting up security:

Data level security is in framework manager (what data appears in a given report based on the user).

Content security (who can see and use reports) is set in administration in Cognos Connection.

The read permission on the folder decides who can 'see' all of the reports in a folder, the read permission on the report controls the ability to view the properties of the report, but it does not control if the report is visible in the folder.

To meet this requirement, you will probably need to create two versions of the dashboard, one for the upper management that points to a folder with all the reports, and a second dashboard that has a portlet pointing to a different folder for the restricted users.

You can manually add the different portal tabs to the different groups of users.
Title: Re: Setting Report level Security for users
Post by: saumil287 on 14 Jan 2012 10:21:45 AM
Thanks Tjohnson
What I did is,  I changed the permssion for each report  access to particular users.
And achieved the same


Thanks again.