Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.


Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [Solved / Work Around] Restricting access within a Domain.

Read-Only Read-Only Topic
Go
Search
Notify
Tools
[Solved / Work Around] Restricting access within a Domain.
 Login/Join
 
Doug
Expert
posted
I've been told that users cannot be retricted to specific reports (fexes) within a domain. Is that true?

Here's the scenerio: I have 99 reports (fexes) in a single specific domain and I want to restrict a user to being able to only see (see the report names not see the internal code) and execute reports "report01" through "report15". I do not want them to see or execute "report16" through "report99". Can we restrict users to specific fexes based on this scenario? Or, do I need to move my reports to separate domains and restrict access that way? I know that retricting reports by domain is an option. But, can I leave all my reports in the same domain?

This message has been edited. Last edited by: Doug,




   In FOCUS Since 1983 ~ from FOCUS to WebFOCUS.
   Current: WebFOCUS Administrator at FIS Worldpay | 8204, 8206
 
Posts: 3132 | Location: Tennessee, Nashville area | Registered: February 23, 2005Report This Post
Darin Lee
Virtuoso
posted Hide Post
Turn off "Show on User's List" option in the fex properties and they can't see or select them to be run. However, you can still use them in -INCLUDES, drill downs, etc.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Doug
Expert
posted Hide Post
That would hide the associated fexes from all users. I want to hide selected fexes from a selected user.
 
Posts: 3132 | Location: Tennessee, Nashville area | Registered: February 23, 2005Report This Post
Darin Lee
Virtuoso
posted Hide Post
The way MRE is set up is that all users who have acces to a domain can use everything within that domain. If you have some users who should not see something in a domain then either that user should not belong to that domain, or that object,fex, etc. should not be in that domain. We have a similar instance and manage it with two domains. One group ONLY has access to the shared domain, while the other group has access to the shared domain AND the domain with the additional "restricted" procedures. There isn't another way with the standard set-up to do what you want.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Dan Pinault
Guru
posted Hide Post
The WebFOCUS 7.7 Security Model will hopefully allow that type of access control.


7.7.05M/7.7.03 HF6 on Windows Server 2003 SP2 output to whatever is required.
 
Posts: 393 | Location: St. Paul, MN | Registered: November 06, 2007Report This Post
susannah
Expert
posted Hide Post
you do it by writing your own launch page for the domain... don't use List block or Domain Tree thing, use Launch block and have it read the domain's domainname.html file like a atext file and construct your own list of fexes as hyperlinks. Based on the userid, your list of availables is limited.
We do this alot.
We do this particularly for the Public View, with links to other views based on the username being in the MRE Repository for that Group...

and as Dan says, WF77 or 7610 (i saw that in print today!) will allow for SUBGROUPS of people within GROUPS. so for a subgroup you can have, say, another Tab.

This message has been edited. Last edited by: susannah,



In Focus since 1979///7706m/5 ;wintel 2008/64;OAM security; Oracle db, ///MRE/BID
 
Posts: 3811 | Location: Manhattan | Registered: October 28, 2003Report This Post
Doug
Expert
posted Hide Post
Thanks Everyone... I think that I'll take a mix of Susannah's and mine (from Chubb Insurance), and work with that... I did something similar to what Susannah mentioned fro a major self service application at Chubb... I'll go with wheat we have thus far...

The bottom line is that it is not a "normal" WebFOCUS function... But, I do like Launch Pages...




   In FOCUS Since 1983 ~ from FOCUS to WebFOCUS.
   Current: WebFOCUS Administrator at FIS Worldpay | 8204, 8206
 
Posts: 3132 | Location: Tennessee, Nashville area | Registered: February 23, 2005Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic

Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [Solved / Work Around] Restricting access within a Domain.

Copyright © 1996-2020 Information Builders