Folks

Under each environment in ds there are 3 areas displayed

1. Data servers (apps on wf server)
2. Managed Reporting (basedir on wf client)
3. Web Applications (apps on wf client)

We can restrict

1. Using APPLOCK
2. Using the MRE permissions this is not openable for anyone with less privilege than DEVELOPER.

However I dont see a way of restricting access to the Web Applications and currently ds gives them unrestricted access regardless of the settings for 1. and 2.

Does anyone know of a way of restricting or stopping access to web applications?

The only thing I could find in help was that APPROOT in CGIVARS.WFS needs to point to the application directory so would it be possible to disable ds access that way? I would think this a risky strategy since it might affect those users when doing non ds stuff.

Any suggestions gratefully accepted.

This message has been edited. Last edited by: Kerry,

Hey John,

From a DS standpoint, USER PROFILES on the reporting server , overriding EDASPRF with
APP PATH restricting DOMAINS is the only way I know.
So at 1 site, I only had access to FINANCIAL Domain, another only had HUMAN RESOURCES, etc.

Maybe others have another route/process/idea, look forward to their contribution...


EDIT: I put this here, don't know WHY???, but was referring to John's earlier post on DS...OOOPPPSSS!!!

This message has been edited. Last edited by: Tom Flynn,

John,

Purely off the top of the head - the Web Applications is the ibi/app folder on the Client Server, so what about looking at restricting access to user groups via group policy on Win 2003? Might not be workable but it's a thought....

T

Hello hammo1j,

- Have you been able to figure out a way of restricting access to the Web Applications ?

This message has been edited. Last edited by: Castillo Pierre,

Pierre,

Bonjour de Toronto!

We have a three-tier environment and I have found that with using APPLOCK, the Web Applications folders do get restricted if the folder names ARE THE SAME as the App folders on the reporting server.

We use MRE authentication in Dev Studio with User Profiles on the WebFOCUS (reporting) server. This scheme barely hold together.