Hi Josef,
1.) This setting is in Manage -> Configuration -> System from the Cognos Portal.
2.) The user cannot see the folder called Module as they only have Traverse and Execute access. The Permission filter prevents anyone that doesn't have either Read, Write or Set Policy from seeing the folder.
This will allow users to use the data module metadata for reports and dashboards but not open the module. Or see it so it could be copied.
I am happy to be corrected but as of now I know of no way to open/copy the module as the User in this scenario.
------------------------------
TREVOR COMEAU
------------------------------
Original Message:
Sent: Mon January 09, 2023 02:27 PM
From: Josef Minarik
Subject: how to make Data module read/run only
Hello Trevor,
Many thanks for the guide. I would have a couple of questions:
- The „Permission filter" you are referring to, is this a part of the Administration interface? If so, where exactly should I look for?
- According to your guide, setting Traverse and Execute (and leaving Read on default) on the folder containing the data module will prevent user to see the folder, however that's not the case, the user can still see the folder. Has this something to do with the „permission filter" you mentioned?
As of now, the only way to prevent the user to get into the data module is to deny the Read right on it, however any dashboards using this data module as a source will not display (unable to load metadata…).
It does work for reports though.
We are still looking for a solution that prevents the user to get into the data module, but enables him to use this data module as a source for both dashboard and a report.
------------------------------
Josef Minarik
https://www.linkedin.com/in/josef-minarik/
Original Message:
Sent: Thu December 22, 2022 12:50 PM
From: TREVOR COMEAU
Subject: how to make Data module read/run only
Hi Josef,
Does the Permissions filter help with your scenario? I've created a document to show it in practice.
Not sure if you have considered this feature and previously dismissed it. I don't see any reference in the thread.
------------------------------
TREVOR COMEAU
Original Message:
Sent: Thu December 08, 2022 08:43 AM
From: Josef Minarik
Subject: how to make Data module read/run only
Hi Paul, we need exactly the same as Vijay. Why does not the READ permission for Data modules provide it? Or some other CUSTOM permission mixture? I did not find any difference between READ and RUN permissions for Data modules. The users would see it, could use it as a source, but could not copy it out and remove joins (security). This is really blocking point of using it as Self-Service source. Is there any APAR to vote for? Another point for end users to complain about rigidity of Cognos and moving to PowerBI :(
------------------------------
Josef Minarik
https://www.linkedin.com/in/josef-minarik/
Original Message:
Sent: Wed August 24, 2022 02:33 PM
From: Paul Mendelson
Subject: how to make Data module read/run only
They wouldn't be able to make new reports or dashboards, but they can take the existing ones that you've made as the base and go from there.
------------------------------
Paul Mendelson
Original Message:
Sent: Wed August 24, 2022 09:39 AM
From: Vijay V
Subject: how to make Data module read/run only
Thank you Paul, If i implement above solution will users still be able to create new dashboards/reports? based the hidden DM.
------------------------------
Vijay V
Original Message:
Sent: Wed August 24, 2022 07:20 AM
From: Paul Mendelson
Subject: how to make Data module read/run only
If the user has access to the Data Module object, and they have the capability to copy objects or make data modules I don't think there is a way to stop them from copying it to their My Folders. In situations like this I would recommend moving the data module to a hidden folder. Create a report and dashboard attached to the module and save them in an accessible location.
Finally you need to prevent users from viewing hidden objects - go to Hide Entries in capabilities under Security.
Set Execute and Traverse on the groups/roles you want to hide the module from.
The users will be able to use the report/dashboard as the basis for whatever analysis they need to do, but they won't be able to see or interact with the underlying data module any way.
------------------------------
Paul Mendelson
Original Message:
Sent: Tue August 23, 2022 01:50 PM
From: Vijay V
Subject: how to make Data module read/run only
We have a data module and i want to make it read and execute only it should be editable only by admins. Users who have Data module author access should not be able to copy to there mycontent or edit joins etc. How can we achieve this?
------------------------------
Vijay V
------------------------------
#CognosAnalyticswithWatson