Copying universe restrictions

building semantic layer
1

Hello all,

I know it’s not a good thing to send questions twice, but I didn’t got an answer on this one and wonder if it went out to the list (I got a strange error message back).
So if anyone has a hint to solve the problem I would be very happy. Thanks, Mathias

Hello,
does anyone know a way to copy object restrictions from one universe to another, or from one usergroup to another. The problem is that our universe is so large, that the restriction of the objects the normal user should not see takes about an hour. We have two universes (Prod and Beta) and 20 usergroups, so I want to copy the restrictions and than do small changes to it for the different groups. I guess it’s only possible to script this directly into the repository, but
I don’t know where and how.
Any ideas?
Thanks for your help,
Mathias

Listserv Archives (BOB member since 2002-06-25)

2

Mathias,

You will find the universe restrictions in table OBJ_M_UNIVDBCST. I have not figured out the key structure; there are probably some other tables you will need to insert or update as well.

Steven Jones
Consultant to BT Office Products International sjones@btopi.com

Listserv Archives (BOB member since 2002-06-25)

3

Mathias,

There is no direct way to migrate object and row security from one universe/domain to another universe/domain. You must manually recreate them. I firmly believe that Business Objects should add this functionality to thier Supervisor Module since the lack of this functionality, in my opinion, shows a lack of product maturity.

The area this limitation is most pronounced is in maintaining security on the same universe in different domains (e.g., Development, Test, and Production). What ever object or row level security that is defined in Development must then be manually redefined in Test and Prodcution. The product needs to support a type of synchronization feature that allows a target and destination universe to have thier security be made equivalent. This would allow a more true development to production type of promotion strategy.

I hope that helps.

If others agree, I believe our only course is to join forces and all make product enhancement requests to Business Objects. I know its a pain, but that is the process. So, I will commit to doing so; hopefully others will as well.

For the record, there have been some posts describing a method to manually migrate security from one universe to another by means of SQL DML against the BO repository. There are some obvious drawbacks and dangers of such a scheme that I will leave as an exercise for the reader.

Donald May
maydp@pweh.com

From: Heinemann, Mathias[SMTP:HeinemM@BP.COM]
Sent: Monday, November 23, 1998 10:18 AM

Hello all,

I know it’s not a good thing to send questions twice, but I didn’t got an answer on this one and wonder if it went out to the list (I got a strange error message back).
So if anyone has a hint to solve the problem I would be very happy. Thanks, Mathias

Hello,
does anyone know a way to copy object restrictions from one universe to another, or from one usergroup to another. The problem is that our universe is so large, that the restriction of the objects the normal user should not see takes about an hour. We have two universes (Prod and Beta) and 20 usergroups, so I want to copy the restrictions and than do small changes to it for the different groups. I guess it’s only possible to script this directly into the repository, but
I don’t know where and how.
Any ideas?
Thanks for your help,
Mathias

OR search: Mail to listserv@listserv.aol.com, ‘search a_phrase in BUSOB-L’ Unsubscribe: Mail to listserv@listserv.aol.com, ‘unsubscribe BUSOB-L’

Listserv Archives (BOB member since 2002-06-25)

4

Mathias wrote,

Hello,
does anyone know a way to copy object restrictions from one universe
to
another, or from one usergroup to another.

Just a work-around idea for your 20 usergroups, till you figure out how to actually copy it over: You could export the universe to a higher level which contains all 20 groups and restrict it there. (and disable the universe for groups not allowed to the universe).

Good luck,
Marianne Wagt
IDETA
The Netherlands

B.t.w. We never use two different universes for the prod/beta versions. But users that are in either a prod or beta group (and have access to the corresponding domains). We found having different universes created trouble for all existing reports when beta went prod (users have to manually hook them up to the new universe).

Listserv Archives (BOB member since 2002-06-25)