Restrict access to view folder and enable access to object

server administration XI Server Discussion
1

I’ve been working on this problem for a few days now. I create an analytic and want users to be able to view that analytic when linked to it. However, I do not want them to be able to view/search for that analytic through the folder structure. Essentially, I want to deny access to my top level folders but grant access to view those objects. Can this be done?

Jamolie (BOB member since 2005-09-07)

2

Can anyone help me out?

Jamolie (BOB member since 2005-09-07)

3

The answer is yes. Chapter 13 of the XI Administrator’s Guide describes two “philosophies” for structuring security:

  • Open system of decreasing rights
  • Closed system of increasing rights

Option 2 is exactly what you are describing. You remove access to the top-level folder, and grant access to the specific folders that are needed. This option is not very friendly to InfoView users, since they have no way of navigating folders to find anything. In your case though, it’s exactly what you want.

Dwayne Hoffpauir :us: (BOB member since 2002-09-19)

4

Dwayne, thanks for the response. I have tried Option 2 and denying access to the top level folders and granting access to the specific folders needed. However, when this is done, the user will have access to view the analytic within the folder as well as the analytic when linked to it.

Essentially what I am trying to do is to link to an analytic (granting user access to view the object itself), but not to the folder itself. So as a user, I would be able to link to a particular analytic but will not see the folder in which it is stored nor its contents where the analytic resides. How can this be done?

Jamolie (BOB member since 2005-09-07)

5

You can take it one step further. Remove rights to all folders, but add rights to the specific object. I assume an analytic is similar to a document, and I just tried it and it seemed to work. I didn’t use a link, but I did search for the document name. It displayed the document, but nothing else from the folder. Even the folder column said “Insufficient privileges” so I think that would work for you.

Dwayne Hoffpauir :us: (BOB member since 2002-09-19)

6

I’m going to move this to the XI Administration forum.

Dwayne Hoffpauir :us: (BOB member since 2002-09-19)

7

Dwayne, I did exactly what you described and it worked… the catch is that it only works with Webi’s and not analytics. It seems like analytics are treated differently from Webi documents. I was not able to restrict access to the folder while showing the analytic itself when linked to it. Any ideas?

Jamolie (BOB member since 2005-09-07)

8

I’m afraid I don’t. I have no experience with the performance management functionality.

Dwayne Hoffpauir :us: (BOB member since 2002-09-19)

9

Dwayne, it’s ok. Thanks for trying. Anyone else have any ideas?

Jamolie (BOB member since 2005-09-07)

10

Have you thought about using categories (you could use folders in this process as well)? Here is what I did and I was able to access the object.

  1. At the application level, gave “Everyone” no access.
  2. Created a “test” folder and added a text document to the folder
  3. Created a “User Objects” category and added the text document to that category
  4. Created a user
  5. Explicitly granted the new user rights to view the text document in the test folder.
  6. Explicity granted the new user view rights to the “User Objects” category
  7. Logged on to InfoView with the test user and verified I could not see the folder or it’s contents but could see the category and the text document.

Not sure if you want to go down the category road, but this seems to address your issue.

Kind regards,

Keith

boneclub (BOB member since 2005-03-07)