Cognos Analytics

 View Only
Expand all | Collapse all

Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

  • 1.  Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Mon February 19, 2024 03:07 AM

    we offer two " flavors" on our reporting portal : governed reports and managed end-user reports. Both flavors can be selected by an organizational unit. As both are created in the report module and look the same, we want to add a non-removable watermark signature to a template (governed reports can only be developed on a test platform) to distinguish these reports online and as saved output from normal reports. Most challenging is to create it in such a way that the watermark cannot be removed at a later stage or added to a normal report. 

    Does anyone had a similar demand and was able to solve it or do people have ideas how to configure the Cognos platform to enable this?



    ------------------------------
    Robert Peter den Heijer
    ING Nederland
    ------------------------------


  • 2.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Tue February 20, 2024 02:41 AM

    Hi, Interesting question. What are your (minimal) layout requirements for these watermarks (e.g. text, pictures, size, background-only, ...)?



    ------------------------------
    Philipp Hornung
    Business Intelligence Manager
    Techniker Krankenkasse
    Hamburg Germany
    #IBMChampion
    ------------------------------



  • 3.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Tue February 20, 2024 04:40 AM

    hi, thanks for your quick reply. In a way I was not really thinking of this yet, options could be a page footer or a background transparent watermark. The most important for me now is how we can guarantee that the watermarks are not removed or added to other reports. I already added a watermark (image) to a template but was able to remove it or add to another reports as well, that is the real challenge i think and the reason for my question in this forum. 



    ------------------------------
    Robert Peter den Heijer
    ING Nederland
    wageningen
    +31623417955
    ------------------------------



  • 4.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Tue February 20, 2024 05:41 AM
      |   view attached

    This is difficult. One way I can think of doing this is to add a conditional style that checks the report location and then adds the watermark if it's saved in a governed report location. 

    Take a look at the attached report. When it's saved in a folder called Governed at the root directory it will show the IBM logo as a watermark, but it will not show in any other folder.



    ------------------------------
    Paul Mendelson
    ------------------------------

    Attachment(s)

    txt
    watermarkreport.txt   2 KB 1 version


  • 5.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Tue February 20, 2024 06:15 AM

    hi Paul, thanks, I am going to play with this. Do you recommend to add this to a template and can we make the condititonal style immutable?



    ------------------------------
    Robert Peter den Heijer
    ING Nederland
    wageningen
    +31623417955
    ------------------------------



  • 6.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Tue February 20, 2024 07:19 AM

    You could add it to a template, but it wouldn't be immutable. I'm trying to find another way where it would be automatic. Do you need this in PDF/Excel or only HTML?



    ------------------------------
    Paul Mendelson
    ------------------------------



  • 7.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Tue February 20, 2024 10:46 AM

    basically it should be available for all three basic formats : html, xlsx and pdf.



    ------------------------------
    Robert Peter den Heijer

    ING Nederland
    ------------------------------



  • 8.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Tue February 20, 2024 07:59 AM

    Another thought - can you set up another Cognos instance specifically for governed reports? You could override the global css parameters to add a watermark. I'm not seeing a pure css solution. The path of the report isn't available from inside the report, if it was you could do some tricks with css selectors. 



    ------------------------------
    Paul Mendelson
    ------------------------------



  • 9.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Tue February 20, 2024 10:52 AM

    I have been thinking of that option as well, not only for the watermark reason. The inconvenience however is that we need to maintain two separate environments with all the additional maintenance and controls for us and confusion for the users. We had a look into setting up different tenants, but that would also not solve the issue. Still we keep it as an option in case no other options are available to differentiate the two. I first start with the example you send me, although not immutable, it can already offer a first way of showing the difference.  



    ------------------------------
    Robert Peter den Heijer

    ING Nederland
    ------------------------------



  • 10.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Tue February 20, 2024 12:48 PM

    Hi Robert, A colleague of mine once had the idea to add a custom control/HTML element as a badge to governed reports and remove the create custom control/HTML capability from a copy of the CA report author role for ordinary users. Maybe you can make something out of the idea to remove capabilities from end users. 



    ------------------------------
    Philipp Hornung
    Business Intelligence Manager
    Techniker Krankenkasse
    Hamburg Germany
    #IBMChampion
    ------------------------------



  • 11.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Wed February 21, 2024 03:02 AM

    What an interesting challenge. Given nothing can't be forged it really is a tricky problem! As you know, anything you put into a governed report could easily be replicated in a user report. For example, put something into a governed report that shows a trusted servers IP address, a managed report could just add a text box with a maually typed in replica. I think the potential to solve this comes down to who you are trying to show the evidence of a reports lineage to.

    Is it that someone running a report needs to know if it's a governed report?

    Or is it someone receiving an output who may not even log into Cognos, such as a scheduled emailed attachment, needs to know that it's a governed report?

    Even email from addresses can be easily spoofed so a second Cognos instance could be spoofed. 

    PDFs offer something called electronic seals that offer a genuine proof of authenticity, but that isn't available within Cognos.

    I suppose there is a question about would any of your users who are creating content ever want to try and forge these outputs to look like governed reports. In a public facing system I could understand this being a worry. But in an internal corporate system policies could dictate that users shouldn't do this. Which makes the challenge a little easier.



    ------------------------------
    Marc Reed
    ------------------------------



  • 12.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Wed February 21, 2024 09:23 AM

    Thanks for your lengthy reply. I agree with you that whatever solution we talk about, whether it will be watermarks, conditional formats, custom controls, different namespaces, etc., the problem remains that you can always "trick" in managed end-user reporting by adding simple texts etc. Governed reporting in this case means that the development process is according to a defined pipeline with data coming from governed sources only (with data lineage and controlled processing in reports). The challenge is that the same data can be used for managed end-user BI, but developed outside of the strict pipeline and also could be combined with data from non-governed sources (p.e. uploaded files). In the portal itself there is a clear distinction in folders between what is governed and managed end-user, but when people download or receive the output by mail, the difference is not immediately clear. What i want to achieve is that by default a governed report get some kind of a mark, that off course could be added manually but with quite some fuss. At least this gives already a mark that the reports differ for an end-user. We do have the policies in place, but as you know we technically mitigate for the potential villains.

    All the answers and suggestions gave me a lot of possible solutions to work on. I will let you know what we implemented in the end.



    ------------------------------
    Robert Peter den Heijer

    ING Nederland
    ------------------------------



  • 13.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    IBM Champion
    Posted Wed February 21, 2024 10:14 AM
    Edited by Marc Reed Wed February 21, 2024 10:48 AM

    It's only email recipients then who need to worry about authentic reports.

    After all if a person is going into Cognos, they know which folder they are going into, hence they know if it's a valid report or not.

    And it's only email recipients who receive an attachment.

    I wonder if the Cognos audit database could be used? It's been a while since I looked at the audit database schema. But I wonder if it holds a record of any reports that were emailed with the recipient. If so users could receive an additional report written against the audit database showing them a list of what they have received and if it should be trusted.



  • 14.  RE: Can you add a non-removable watermark like a picture / text to a report to distinguish it from "normal" reports

    Posted Wed March 06, 2024 10:45 AM
    Edited by Agnes Ostheimer Wed March 06, 2024 10:45 AM

    Hi Robert,

    we took another approach: Our governed reports reside in a folder hierarchy where users do not have write permission. All user created reports are stored in other locations. So we know which are governed and which are not. Also the footer in our template for user created reports is slightly different from what we do with governed reports. Theoretically it might be possible to mimick this in a user created report but I doubt they will even notice the difference ;-)



    ------------------------------
    Agnes Ostheimer
    Leiterin Informationssysteme
    ta.ts - Travel Agency Technologies & Services GmbH (Lufthansa Group)
    Frankfurt
    ------------------------------