Adding data security

You can restrict the data represented by query subjects in a project by creating a security filter. The security filter controls the data that is shown to your users when they set up their reports.

For example, your Sales team consists of a Sales Director, and four Sales Managers. You create a security filter that includes a group for the Sales Director and a group for Sales Managers, and apply the filter to the Salary query subject. When the package is available for your users, and a report is generated for the Sales Managers and the Sales Director, only the Sales Director can see the salary information for the Sales Managers. For more information about groups, see Users, groups, and roles.

If a user has multiple roles, the security filters belonging to these roles are joined together with ORs. If a role is based on another role, the security filters are joined together with ANDs.

You can base the security filter on an existing security filter. If you choose this option, the security filter inherits the filter and all the filter properties.

When you create a security filter, you can also use existing project filters, or create new filters using the expression editor. For more information, see Creating filters.

Procedure

  1. Click the required query subject.
  2. Click Actions, Specify Data Security.
  3. To add new users, groups, or roles, do the following:
    • Click Add Groups.
    • In the Select Users and Groups window, add users, groups, or roles. For information about how to do this, see the Administration and Security Guide.
    • In the Select Users and Groups window, click OK.
  4. If you want to base the group on an existing group, click a group in the Based On column.

    Tip: If you do not see the group you want in the list, you must add the group to the security filter.

  5. If you want to add a filter to a group, in the Filter column, click either Create/Edit Embedded Filter or Insert from Model.