Thank you Karen. One of my other concerns related to access controls is that so far my understanding is that a CPD Database Connection is only limited by the privileges of the Oracle userid used to create it and there is no other ability to restrict that connection to a given schema. Here's the situation I'm facing
SCHEMA A has sensitive_rtab
SCHEMA B has secret_rtab
we plan to have a LOT of schemas in Cloud Pak, so we really want to have one database userid which has readonly access to all schemas to minimize work for the DBAs, lets call that R_CPD.
Then in CPD we have
Data Quality Project A which ONLY has access to SCHEMA A
Data Quality Project B which ONLY has access to SCHEMA B
Apparently if we could use the Database Connections screens we could create a "private" database connection for each project, but that doesn't actually solve the problem and here's why:
In Data Quality Project A we create a private database connection using Oracle user R_CPD.
In Data Quality Project B we create a private database connection using Oracle user R_CPD.
But that's still a problem because the private database connection in project A is still unrestricted from adding a table from project B to project A, so project A members can see drill down data for that table.
Now what we really want is for the following:
In Data Quality Project A we create a private database connection using Oracle user R_CPD which is restricted to SCHEMA A.
In Data Quality Project B we create a private database connection using Oracle user R_CPD which is restricted to SCHEMA B.
Then we'd have actual security, but I'm told you can't do that with a database connection, and in our case we can't even use the new style database connection at all.
------------------------------
Steve Prior
Data Governance Technology Manager
Interactive Brokers Group
------------------------------
Original Message:
Sent: Thu June 23, 2022 01:21 PM
From: Karen Gonzalez
Subject: 🎟 1. Do you struggle with deciding which connection type is needed in Cloud Pak for Data?
Hi Steve.
I don't have and suggestion/answer for you at the moment on this, but I have shared your comment with several stakeholders on our team to try and get you more info. I will get back to you.
Thanks for bringing this issue to this forum!
Karen
UX Design - CPD Connections
------------------------------
Karen Gonzalez
Original Message:
Sent: Thu June 23, 2022 01:10 PM
From: Steve Prior
Subject: 🎟 1. Do you struggle with deciding which connection type is needed in Cloud Pak for Data?
My major concern is that due to the need to use long URLs for our Oracle connections due to the use of Oracle Connection Manager we are unable to use the Database Connection screens - the only workaround we currently know is to configure via Metadata Import. This works but apparently doesn't allow us to use access controls on the database connection once it has been configured, and I'm also concerned whether this will continue to work as CPD evolves to the new implementation of Data Enrichment. Working with IBM contacts now to try to get some answers on that.
------------------------------
Steve Prior
Original Message:
Sent: Thu June 23, 2022 01:01 PM
From: Brett Witteck
Subject: 🎟 1. Do you struggle with deciding which connection type is needed in Cloud Pak for Data?
In the previous Innovation Jams, we have asked about your process to set up connections in Cloud Pak for Data. Check posts #3 and #4 here. We wanted to learn about your experience choosing a connection type and getting started to create the connection. We learned that some might make educated guesses or are uncertain of the connection type needed in the moment. 🎟 You can create a new connection, found in the menu under Platform Connections. You can find a Video library demo here (start @ 2:06). To create a new connection, you'll use one of the preconfigured connection types seen below. How do you decide which connection type you need? and, why?
​​​​​
------------------------------
Brett Witteck
------------------------------
#CloudPakforDataGroup
#connections
#InnovationJam
#innovationjamjune2022