Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.



Read-Only Read-Only Topic
Go
Search
Notify
Tools
Obtaining MR Group
 Login/Join
 
ChannyS
Guru
posted
Is there a way to obtain the logged on user's MR group(s) in the same way that you can get the user's id from &IBIMR_user?


Release: WebFOCUS 7.6.8
OS: Windows
Output formats: HTML, PDF, Excel, csv
 
Posts: 256 | Registered: July 21, 2008Report This Post
Darin Lee
Virtuoso
posted Hide Post
Short answer is no. Those attributes are all stored in the user's .htm files and are not available as system variables. There have been posting on this forum about how to parse / read those files so you may be able to get that information another way and then read them in as local variables.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Francis Mariani
Expert
posted Hide Post
That's a good question. You can set up variables in WebFOCUS Administration Console > Custom Settings to give you the MRE program's domain and folder, but I haven't seen a variable for the MRE User's Group.

The Custom Settings look something like this:

<set> IBIC_server (pass)

<set> IBIMR_domain (pass)
<set> IBIMR_folder (pass)

<set> MR_BASE_DIR (pass)

WF_PROGRAM=&CGI_PROG
<set> WF_PROGRAM (pass)

CURMRDOM=&IBIMR_domain
<set> CURMRDOM (pass)

This document, Manipulating WebFOCUS Variables describes how to set up Custom Settings (WebFOCUS Variables in this sense are not Dialogue Manager variables, but end up becoming them because of the command described therein).

Look in the "WebFOCUS Security and Administration" manual for chapter "Managed Reporting Internal Variables" for an example of what I've shown above. I can't seem to find a document that lists ALL the MRE variables that can be created.


Francis


Give me code, or give me retirement. In FOCUS since 1991

Production: WF 7.7.05M, Dev Studio, BID, MRE, WebSphere, DB2 / Test: WF 8.1.05M, App Studio, BI Portal, Report Caster, jQuery, HighCharts, Apache Tomcat, MS SQL Server
 
Posts: 10577 | Location: Toronto, Ontario, Canada | Registered: April 27, 2005Report This Post
j.gross
Virtuoso
posted Hide Post
In principle you could (periodically) extract user and group data from the repository (see MR Admin Manual), load a Focus file with the group membership data based on the IBIMRUSR and IBIMRGRP extract files, query that at run time for rows with USER_ID EQ '&IBIMR_user', and transfer the result to dialog manager variable(s).

But there are obvious security, latency, and delivery issues:

You would be exposing the users' group memberships.

When the admin makes changes, the extract becomes out-of-date and needs to be refreshed.

You need to decide how to represent the list of group_ids in a single &var (or a set of them) so that you can make use of them. (What use do you have in mind?)


- Jack Gross
WF through 8.1.05
 
Posts: 1925 | Location: NYC | In FOCUS since 1983 | Registered: January 11, 2005Report This Post
ChannyS
Guru
posted Hide Post
I was actually testing a similar solution to what you suggested. The idea is to put a check on each report to make sure that unauthorized users aren't getting to them (since they may reside on the data server and aren't governed by MR at that point).


Release: WebFOCUS 7.6.8
OS: Windows
Output formats: HTML, PDF, Excel, csv
 
Posts: 256 | Registered: July 21, 2008Report This Post
Darin Lee
Virtuoso
posted Hide Post
If the procedures reside on the data server, they are completely outside the realm of Managed Reporting so how would you associate a user's MR groups with them? And if a user's MR groups CAN bee associated with them, they should probably be IN the MRE.

If you're concerned about unauthorized users accessing server procedures, you've got several additional things to do to secure them, or they shouldn't be there at all.

One additional item, which Jack mentions, is that a user could belong to SEVERAL groups, which would somehow have to be handled as either a a single concatenated string, or an indexed local variable.


Regards,

Darin


In FOCUS since 1991
WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex
Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex
WF Client: 77 on Linux w/Tomcat
 
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007Report This Post
Waz
Expert
posted Hide Post
You may be able to get the groups for a user from the MRE API.


Waz...

Prod:WebFOCUS 7.6.10/8.1.04Upgrade:WebFOCUS 8.2.07OS:LinuxOutputs:HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!

 
Posts: 6347 | Location: 33°49'23.0"S, 151°11'41.0"E | Registered: October 31, 2006Report This Post
ChannyS
Guru
posted Hide Post
Darin,

I was wondering if just like IBIMR_user can be passed to the server if the group could be passed. You mention some other possibilities to secure the procedures. Are you referring to being able to lock down the server to only be accessible via MR?


Release: WebFOCUS 7.6.8
OS: Windows
Output formats: HTML, PDF, Excel, csv
 
Posts: 256 | Registered: July 21, 2008Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic


Copyright © 1996-2020 Information Builders