As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.
Join the TIBCO Community TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.
From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
Request access to the private WebFOCUS User Group (login required) to network with fellow members.
Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.
I have create a role called "App_Users" that allow all users within this role can access Adopter's to create synonyms. In this case I have Adopter for Oracle and MS SQL Server.
Is it possible for this "App_Users" role can access ONLY MS SQL Server adopter to create synonyms not from Oracle?This message has been edited. Last edited by: nox,
Thanks Chuck, so if I want to accomplish this goal do I need to split different Iway server or something? otherwise it make not much sense to have all user can access resources from adopters(the one configured) or inconvenience for admin to constantly remove adopter's connection after been use to avoid unnecessary usage for other users?
I talked to a person in NY and haven't had a chance to test this idea yet but wanted to pass it on. You could create a group profile for the SQL server admins and in that profile only have the SQL Server adapter connection in that profile and that should limit them to only be able to create synonyms for that data.
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2127 | Location: Customer Support | Registered: April 12, 2005
My PC with WebFOCUS on it is being repaired but I should have it back later today and I will provide the steps when I can get on my system. I don't know them off the top of my head
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2127 | Location: Customer Support | Registered: April 12, 2005
Are you using LDAP groups within your WebFOCUS security environment? If so on the reporting server console under the access control you can simply register that group that represents the application admins. Then under the Workspace / Configuration Files your can right mouse click on the User/Groups Profiles and create a new profile and copy and paste the SQL Server onnection info from the edasprof.prf file and save it with the name of the LDAP group. If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.
I was also just thinking the down side to this is that they won't have any access to the Oracle data because that adapter is not defined in this profile. Not sure if that is an issue for you...
Let me know if you have questions...This message has been edited. Last edited by: FP Mod Chuck,
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2127 | Location: Customer Support | Registered: April 12, 2005
sorry for late reply, Chuck, I'm not using LDAP, just regular PTH in security providers, can you elaborate more on security group as you mention?
quote:
If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.
With PTH you need to still define the WebFOCUS security group these people are assigned to on the client side. (ie DomainDeveloper) under the Reporting Server access control group for the application adminstrators and then create a group profile based on that name as described above.
Thank you for using Focal Point!
Chuck Wolff - Focal Point Moderator WebFOCUS 7x and 8x, Windows, Linux All output Formats
Posts: 2127 | Location: Customer Support | Registered: April 12, 2005