Hi all,

I have a customer, who redacts the BU reports on a business level and the Product reports on a product level.

I have the case that a user can have both roles.

BU role and Product role.

The for BU allows the user to the specific BU data, but the product redaction works on cost center level.

Problem: There is a tab in the product report that shows a table which is based on the BU model object, so the BU redaction is valid.

What the user should get displayed: As a product user he should be able to see all data - data without redaction, therefore with AdminView=Yes.

To get this configured, I tried to override the AdminView column in a formula step in the product redaction table:

 if("={$CurrentUser}:{Users.Role}"="Product Owner","Yes",AdminView)

But I receive an error: Cannot find table named $CurrentUser.

Does anyone know if the formula in the  security project can work at all?

Or does someone have another idea how to solve this requirement?

Many thanks from Germany, Fabian

Fabian,

Row Level Security should be able to support this requirement as you'd have to just setup the rules in the BU Object within the model.  The redaction table loaded into the Users project (i.e. Row Level Security would have two lines):

1. BU

2. Products

Then you'd just have to configure the intersections on the BU object within the model.  You can then test with that user in the model to see the rows that they would be able to see.  I had a situation before that the rules we're not ordered correctly and we had to move the more generic to the bottom with the more granular rule moving up to the top.

Cheers,

Ryan

Ryan, thanks for your answer. I had to change the formula above again, because the last change was not correctly changed.
I want to user this formula:  if("={$CurrentUser}:{Users.Role}"="Product Owner","Yes",AdminView)

If I understand you correct, I can also use an additional OR "Product Owner-intersects" for the Business Services object to the Products redaction table?

Correct, you can use the AND\OR within the rules

Have you tested, if only the first applicable intersection is evaluated with the "OR" combination? Or all, even if one of the above already applies?