Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.



Read-Only Read-Only Topic
Go
Search
Notify
Tools
[SOLVED] MR Admin
 Login/Join
 
Guru
posted
The manual states: The MR (Managed Reporting)
Administrator role has unrestricted
access to Managed Reporting.

Does this mean that an admin has access to all content in all domains?

This message has been edited. Last edited by: Kerry,


Release: WebFOCUS 7.6.8
OS: Windows
Output formats: HTML, PDF, Excel, csv
 
Posts: 256 | Registered: July 21, 2008Report This Post
Virtuoso
posted Hide Post
Yes. Although we don't use it, I believe there is also a domain admin - or at least there used to be somewhere back in time - that has full access to only specified domains.


Regards,

Darin



In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Guru
posted Hide Post
Does no one find this to be a problem with security?


Release: WebFOCUS 7.6.8
OS: Windows
Output formats: HTML, PDF, Excel, csv
 
Posts: 256 | Registered: July 21, 2008Report This Post
Expert
posted Hide Post
There has to be an overall admin to control everything, otherwise who will create a domain.

As for whether admin should be able to see/run domain reports, that is a sticky question.

I think it should be allowed, but must be restricted to certain individuals of good character.


Waz...

Prod:WebFOCUS 7.6.10/8.1.04Upgrade:WebFOCUS 8.2.07OS:LinuxOutputs:HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!

 
Posts: 6347 | Location: 33°49'23.0"S, 151°11'41.0"E | Registered: October 31, 2006Report This Post
Expert
posted Hide Post
You can also add a password to the 'admin' id to further secure it.


Ginny
---------------------------------
Prod: WF 7.7.01 Dev: WF 7.6.9-11
Admin, MRE,self-service; adapters: Teradata, DB2, Oracle, SQL Server, Essbase, ESRI, FlexEnable, Google
 
Posts: 2723 | Location: Ann Arbor, MI | Registered: April 05, 2006Report This Post
Virtuoso
posted Hide Post
We have an NFR for a Production Support Role for MRE...so you will be able to give certain access by Domain - rather than all access to everything...still waiting....


In Focus since 1993. WebFOCUS 7.7.03 Win 2003
 
Posts: 1903 | Location: San Antonio | Registered: February 28, 2005Report This Post
Virtuoso
posted Hide Post
Prarie, isn't that what the Content Manager Role is for?

As for the other question - what would be the definition of an admin? It's the person who has complete control over the system and can do whatever needs to be done.

If you have a mainframe, there's an admin who can control everything on the mainframe. If you have a Novell network, there's an admin who can access and control anything on the network. Someone has to have that role, but as Waz says, that person or person(s) should be selected carefully.

Some functions like making shared reports into standard reports, creating domains, moving reports between users, have to be done by someone who can see everything (users, reports, domains, etc.) and has rights to do everything.
I wouldn't consider that a security problem unless the admin personally is a security risk - then that's an HR problem, not a system problem.


Regards,

Darin



In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Virtuoso
posted Hide Post
Well Darin...I'm not sure...can they change code? I'm just learning to be a MR adminstrator. I've been a Developer and Production Support role where I'm working now.
 
Posts: 1903 | Location: San Antonio | Registered: February 28, 2005Report This Post
Expert
posted Hide Post
quote:
It's the person who has complete control over the system and can do whatever needs to be done.

That may be the case in some cases, but I would have thought a typical admin would have a role to administer the domains, i.e. create domains, create/change/delete users, deploying from "dev" to "Prod", etc.

As for access to reports, running, deleting, changing, I think would be on a site by site basis.

A more structured site would have specific roles, where a smaller or more general site would not.


Waz...

Prod:WebFOCUS 7.6.10/8.1.04Upgrade:WebFOCUS 8.2.07OS:LinuxOutputs:HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!

 
Posts: 6347 | Location: 33°49'23.0"S, 151°11'41.0"E | Registered: October 31, 2006Report This Post
Master
posted Hide Post
I think there is no way to secure the code from the administrator but you can control access to the data through your database security. Add a login routine requiring a password to your programs for restricted database access. You have to remember that if you do this you probably won't be able to run jobs through report caster.


Pat
WF 7.6.8, AIX, AS400, NT
AS400 FOCUS, AIX FOCUS,
Oracle, DB2, JDE, Lotus Notes
 
Posts: 755 | Location: TX | Registered: September 25, 2007Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic


Copyright © 1996-2020 Information Builders