Hiding Access Restrictions in Webi Docs SQL

security CMC
1

I have noticed that if a user is a member of a group that has Access Restrictions such as Row Restrictions applied to it in the universe they are reporting from the Access Restrictions appear in the SQL code of the Webi documents using that universe. Unfortunately, many of our users have the ability to EDIT SQL and therefore can bypass the Row Restrictions inserted into the SQL by simply deleting them from the SQL. Is there a way to hide these restrictions so the users do not know about them or at least prevent the users from removing them from the SQL even though they have the EDIT SQL right? :crazy_face:

mgrackin :us: (BOB member since 2002-08-29)

2

A) In my world users should not have access to Edit SQL, period.
B) Explore Virtual Private Database (VPD) option in Oracle for example, this will be transparent to any frontend.

Andreas :de: (BOB member since 2002-06-20)