Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.


Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] Domain Security

Read-Only Read-Only Topic
Go
Search
Notify
Tools
[SOLVED] Domain Security
 Login/Join
 
CHERI
Gold member
posted
I am using WF 7.64. I develop in MRE. Currently, I'm the only developer. I have access to all domains. The company decided that I should NOT have access to one domain on our production box. It is the FINANCE domain. They don't want me to be able to change the source code within this one domain. Does anyone have any thought on how this can be accomplished ? I need to have access to all other domians, report caster, config files, etc ....

This message has been edited. Last edited by: Kerry,
 
Posts: 69 | Location: OH | Registered: November 09, 2004Report This Post
Sayed
Guru
posted Hide Post
Just remove that domain for your userid from MR Admin console. Your MR Administrator needs to do this because you will not have access to this with a developer role.

Thanks,
Sayed


WF 8.x and 7.7.x Win/UNIX/AS400, MRE/Portal/Self-Service, IIS/Tomcat, WebSphere, IWA, Realmdriver, Active Directory, Oracle, SQLServer, DB2, MySQL, JD Edwards, E-BIZ, SAP BW, R/3, ECC, ESSBASE
 
Posts: 285 | Location: Texas | Registered: June 27, 2006Report This Post
CHERI
Gold member
posted Hide Post
Currently, I sign into MRE via the admin id. Do a need to set up a new id ?
 
Posts: 69 | Location: OH | Registered: November 09, 2004Report This Post
nubi
Guru
posted Hide Post
source code? what teh fex code or the html for the domain page? either way can't your sysadmin just stop you from entering the folder via o/s security- just deny access to that entire folder and subfolder on the server- that way you will not be able to access and change the files outside of dev studio- i can only imagine those security rights are mirrored when you are in dev studio- someone else will have to verify this but i'd be surprised if it wasn't the case-

therefore its something the sysadmin needs to do at the first stage and this should cascade down into developer studio.


Developer Studio 7.64
Win XP
Output: mostly HTML, also Excel and PDF

"Never attribute to malice that which can be adequately explained by stupidity." - Heinlein's Razor
 
Posts: 285 | Location: UK | Registered: October 26, 2007Report This Post
Darin Lee
Virtuoso
posted Hide Post
The problem is that you need to have access to all of the administrative functions (RC, config files, etc) so you must be at an admin level, but that level has access to ALL domains and there isn't a way to change that.

There may be something you can do with os security as nubi suggests, but it isn't as straightforward as that. It uses your MRE role security to decide who sees what, not the os security, although those can be combined. Also, (at least in our Linux environment) when a user modifies code, that code does not bear the userid of the user that modified it. It still has the WF system id which controls it.

I'm not a security guru (and I'm not on the latest version), but I would be inclined to say that you won't be able to do what you want without restricting your ability to access some of the administrator functions.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
PBrightwell
Master
posted Hide Post
quote:
I'm the only developer



If you are also the WebFocus admin, your company needs to rethink this. If you don't have access to change this (as admin) then nobody will.


Pat
WF 7.6.8, AIX, AS400, NT
AS400 FOCUS, AIX FOCUS,
Oracle, DB2, JDE, Lotus Notes
 
Posts: 755 | Location: TX | Registered: September 25, 2007Report This Post
<JG>
posted
CHERI

You do not say what platform, but OS security is the only option.

As you are the "only developer" you must at least have read access to be able to copy
to a development area should there be an issue.

WebFOCUS CAN NOT override OS security. Make the directory read/execute or just read if
they do do want you to see how badly the company is doing, and there should not be an issue.

There is an old saying, God did not have a basis to work on, that's why he got it so wrong with mankind.
 
Report This Post
Waz
Expert
posted Hide Post
Sounds like you need a development and Production installation.


Waz...

Prod:WebFOCUS 7.6.10/8.1.04Upgrade:WebFOCUS 8.2.07OS:LinuxOutputs:HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!

 
Posts: 6347 | Location: 33°49'23.0"S, 151°11'41.0"E | Registered: October 31, 2006Report This Post
Darin Lee
Virtuoso
posted Hide Post
If you're the only developer, who develops the code for the Finance domain?


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic

Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] Domain Security

Copyright © 1996-2020 Information Builders