As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only. Moving forward, myibi is our community platform to learn, share, and collaborate. We have the same Focal Point forum categories in myibi, so you can continue to have all new conversations there. If you need access to myibi, contact us at myibi@ibi.com and provide your corporate email address, company, and name.
I have create a role called "App_Users" that allow all users within this role can access Adopter's to create synonyms. In this case I have Adopter for Oracle and MS SQL Server.
Is it possible for this "App_Users" role can access ONLY MS SQL Server adopter to create synonyms not from Oracle?This message has been edited. Last edited by: nox,
Thanks Chuck, so if I want to accomplish this goal do I need to split different Iway server or something? otherwise it make not much sense to have all user can access resources from adopters(the one configured) or inconvenience for admin to constantly remove adopter's connection after been use to avoid unnecessary usage for other users?
I talked to a person in NY and haven't had a chance to test this idea yet but wanted to pass it on. You could create a group profile for the SQL server admins and in that profile only have the SQL Server adapter connection in that profile and that should limit them to only be able to create synonyms for that data.
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2128 | Location: Customer Support | Registered: April 12, 2005
My PC with WebFOCUS on it is being repaired but I should have it back later today and I will provide the steps when I can get on my system. I don't know them off the top of my head
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2128 | Location: Customer Support | Registered: April 12, 2005
Are you using LDAP groups within your WebFOCUS security environment? If so on the reporting server console under the access control you can simply register that group that represents the application admins. Then under the Workspace / Configuration Files your can right mouse click on the User/Groups Profiles and create a new profile and copy and paste the SQL Server onnection info from the edasprof.prf file and save it with the name of the LDAP group. If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.
I was also just thinking the down side to this is that they won't have any access to the Oracle data because that adapter is not defined in this profile. Not sure if that is an issue for you...
Let me know if you have questions...This message has been edited. Last edited by: FP Mod Chuck,
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2128 | Location: Customer Support | Registered: April 12, 2005
sorry for late reply, Chuck, I'm not using LDAP, just regular PTH in security providers, can you elaborate more on security group as you mention?
quote:
If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.
With PTH you need to still define the WebFOCUS security group these people are assigned to on the client side. (ie DomainDeveloper) under the Reporting Server access control group for the application adminstrators and then create a group profile based on that name as described above.
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2128 | Location: Customer Support | Registered: April 12, 2005