BOB: Business Objects Board
Not endorsed by or affiliated with SAP

Register | Login 

Follow BOB on Twitter! 
Follow BOB on Twitter! (Opens a new window)  

General Notice: BOB is going to retire...please see details here.
General Notice: No events within the next 45 days.

Universe folder security


 
Search this topic... | Search CMC... | Search Box
Register or Login to Post    Forum Index -> Security and User Administration -> CMC  Previous TopicPrint TopicNext Topic
Author Message
madhum1078
Principal Member
Principal Member



Joined: 20 Jul 2007

Posts: 291



PostPosted: Fri Nov 06, 2009 4:58 pm 
Post subject: Universe folder security

Hi BO Gurus,

We are trying to set up universe folder security. As of now all the universes are in Universe main folder.

Is it mandatory to have all the universes in sub-folders under universe main folder.

for example: Under Univ main folder
sub-folder1: Finance, under this all the FI universes will be saved
sub-folder2: SD, under this all the SD universes will be saved.

What are the benefilts of doing this way. Is it advisable to do like this as I need to assign the security to each folder/ sub-folder.

Can any please help me on this.

Thanks in advance
Madhuri
Back to top
Arjun
Forum Enthusiast
Forum Enthusiast



Joined: 27 Jul 2008
ASUG Icon
Posts: 1288



PostPosted: Fri Nov 06, 2009 5:07 pm 
Post subject: Re: Universe folder security

I did not understand what you mean of Universe main folder.
Is it root folder(Universes)? or folder you created?

_________________
కృషితో నాస్తి దుర్భిక్షం
Back to top
madhum1078
Principal Member
Principal Member



Joined: 20 Jul 2007

Posts: 291



PostPosted: Fri Nov 06, 2009 6:53 pm 
Post subject: Re: Universe folder security

Hi, Yes.. Sorry for confusion. It is Root folder of Universes. Is it mandatory to create sub folders (FI, SD, ..) under root folder.

Please tell me pros & cons of setting up sub-folders under root universe folder. We are using XI 3.0

Thanks again
Madhuri
Back to top
Arjun
Forum Enthusiast
Forum Enthusiast



Joined: 27 Jul 2008
ASUG Icon
Posts: 1288



PostPosted: Fri Nov 06, 2009 7:02 pm 
Post subject: Re: Universe folder security

It is better to give the security as mentioned below:
On Root folder : Administrators: Full Control, Everyone : No Access
Now you need to add the required users/user groups for the sub folders and give the required access for those folders.

_________________
కృషితో నాస్తి దుర్భిక్షం
Back to top
Dwayne Hoffpauir
Forum Groupie
Forum Groupie



Joined: 19 Sep 2002
ASUG Icon
medal_gold.gif*2speaker.gif*5medal_bronze.gif
Posts: 8644
Location: Plano, TX USA


flag
PostPosted: Sat Nov 07, 2009 12:01 pm 
Post subject: Re: Universe folder security

Generally, best practice would be to use folders. Give groups rights to the folders as needed, similar to public (document) folders. That said, if you end up with only one universe per folder, there is little value.

Again, a general rule is to give rights to folders, not individual objects (documents, universes, etc.). Of courser, connections don't give you a choice ... there is no folder structure. And connections are often one-to-one with universes.

I haven't been much help here. Personally, I use universe folders, but can easily make the argument that they are not necessary.

_________________
Dwayne Hoffpauir
Image link
Back to top
malteser
Principal Member
Principal Member



Joined: 21 Feb 2006

Posts: 125
Location: Manchester, UK



PostPosted: Mon Nov 09, 2009 9:21 am 
Post subject: Re: Universe folder security

I don't use folders for my universes so the way I've done it is as follows. It's a little tricky setting it up but seems to work fine!

1. Grant Everyone View access on the root folder of Universes.
2. For each universe, firstly grant Everyone No Access. This makes sure that users can't see the universes they're not supposed to see when creating new reports
3. Then for each universe, grant View on Demand for the groups that specifically need to use that universe (assuming you're allowing refreshing of reports on demand).
4. For the universe connections, I simply grant View on Demand to Everyone for every connection because they can't do anything with the connection itself unless they have access to the universe

Hope this helps.
Best regards icon_smile.gif
Back to top
Dwayne Hoffpauir
Forum Groupie
Forum Groupie



Joined: 19 Sep 2002
ASUG Icon
medal_gold.gif*2speaker.gif*5medal_bronze.gif
Posts: 8644
Location: Plano, TX USA


flag
PostPosted: Mon Nov 09, 2009 11:57 am 
Post subject: Re: Universe folder security

malteser wrote:
1. Grant Everyone View access on the root folder of Universes.
2. For each universe, firstly grant Everyone No Access. This makes sure that users can't see the universes they're not supposed to see when creating new reports

If you are using XI 3.x, you can change the approach to your point 1, so that point 2 is not necessary!

Create a custom access level that has ONE AND ONLY ONE right:
- Under the Content collection, and Folder type (do not use General, General) ...
- Grant the View Objects right ...
- On the far right, select to apply to Object only (not sub-objects)

Now give this custom access level to the Everyone group on the universe root folder. This allows the user to see the root folder, but nothing in it. That way, by default when a new universe (or folder) is added to the root, the user will NOT see it ... unless they are later given specific rights to do so.

_________________
Dwayne Hoffpauir
Image link
Back to top
Chris Pohl
Forum Addict
Forum Addict



Joined: 18 Jun 2002
ASUG Icon
speaker.gif
Posts: 2885
Location: da' burg


flag
PostPosted: Fri Nov 13, 2009 11:11 am 
Post subject: Re: Universe folder security

malteser wrote:
4. For the universe connections, I simply grant View on Demand to Everyone for every connection because they can't do anything with the connection itself unless they have access to the universe

In theory, if you have security across different universes ... a developer could change the connection and get access to something they shouldn't ... a small hole, but i'd still lock down connections

_________________
Chris Pohl
Follow me on Twitter
Search is Your Friendô
Back to top
Display posts from previous:   
Register or Login to Post    Forum Index -> Security and User Administration -> CMC  Previous TopicPrint TopicNext Topic
Page 1 of 1 All times are GMT - 5 Hours
 
Jump to:  

Index | About | FAQ | RAG | Privacy | Search |  Register |  Login 

Get community updates via Twitter:

Not endorsed by or affiliated with SAP
Powered by phpBB © phpBB Group
Generated in 0.0289 seconds using 17 queries. (SQL 0.0027 Parse 0.0009 Other 0.0254)
CCBot/2.0 (https://commoncrawl.org/faq/)
Hosted by ForumTopics.com | Terms of Service
phpBB Customizations by the phpBBDoctor.com
Shameless plug for MomentsOfLight.com Moments of Light Logo