------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

​@pradeep sahay - I do not have a solution, but do wish Cognos had this feature (like report studio) to only allow a user to execute the dashboard without having to given them execute on the data source.
​​
what we have done for a few work arounds are:
- in 11.1.5, I believe the pencil icon doesn't appear now for a user if they do not have Write access on a Dashboard, which will deter them from editing
- when sending links out to users to view dashboards, we would render the dashboard chromeless (so the nav bar and app bar are not showing).  this will also give the user a sense of not being able to edit the dashboard

I hope that Cognos does add this much needed feature or correct this fix.  but in short, a user needs Read/Execute/Traverse on a query package (or data source) in order to execute a dashboard, which different in Report where a user only needs Execute/Traverse on a query package to execute a Report.

------------------------------
Peter Chan
------------------------------

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Thank you so much Peter for looking into it and responding to me. Thanks.

Regards,
Pradeep Sahay

------------------------------
pradeep sahay
------------------------------

Original Message:
Sent: Wed July 15, 2020 06:26 AM
From: Peter Chan
Subject: How to Restrict Editing to Specific Dashboards

​@pradeep sahay - I do not have a solution, but do wish Cognos had this feature (like report studio) to only allow a user to execute the dashboard without having to given them execute on the data source.
​​
what we have done for a few work arounds are:
- in 11.1.5, I believe the pencil icon doesn't appear now for a user if they do not have Write access on a Dashboard, which will deter them from editing
- when sending links out to users to view dashboards, we would render the dashboard chromeless (so the nav bar and app bar are not showing).  this will also give the user a sense of not being able to edit the dashboard

I hope that Cognos does add this much needed feature or correct this fix.  but in short, a user needs Read/Execute/Traverse on a query package (or data source) in order to execute a dashboard, which different in Report where a user only needs Execute/Traverse on a query package to execute a Report.

------------------------------
Peter Chan

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Hi Pradeep, Peter,

Yes this issue is a major problem for us as well. Users are accessing datasources/packages (meant for developers) that they are not familiar with and building runaway queries because of this backdoor access. What's more is we intend to have packages/data modules specifically designed for dashboarding (less data volumes). However because many of these dashboard users are also reporting users that can build operational reports, they can use the dashboarding tool against packages designed for reporting. this is a major problem as the user experience is slow and horrible and they end up complaining. 

We need abiliity to restrict dashbaording to a specific folder of packages/data modules.

Rich

------------------------------
Rich Babicz
------------------------------

Original Message:
Sent: Wed July 15, 2020 06:26 AM
From: Peter Chan
Subject: How to Restrict Editing to Specific Dashboards

​@pradeep sahay - I do not have a solution, but do wish Cognos had this feature (like report studio) to only allow a user to execute the dashboard without having to given them execute on the data source.
​​
what we have done for a few work arounds are:
- in 11.1.5, I believe the pencil icon doesn't appear now for a user if they do not have Write access on a Dashboard, which will deter them from editing
- when sending links out to users to view dashboards, we would render the dashboard chromeless (so the nav bar and app bar are not showing).  this will also give the user a sense of not being able to edit the dashboard

I hope that Cognos does add this much needed feature or correct this fix.  but in short, a user needs Read/Execute/Traverse on a query package (or data source) in order to execute a dashboard, which different in Report where a user only needs Execute/Traverse on a query package to execute a Report.

------------------------------
Peter Chan

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Hi Pradeep, 

What version of Cognos are you using? I found the following link on the IBM site pertaining to the issues you mentioned for versions 11.1 and up:

https://www.ibm.com/support/pages/how-do-you-restrict-users-based-their-license-roles-cognos-analytics-version-1111

I hope that helps. 

Dave

------------------------------
Dave Chirayath
------------------------------

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Dave, Peter,

That link does not address this issue. And we just found its even worse than we thought. Same thing happens on a Data Module. If we build a data module and place in a restricted folder (no edit). If that user copies data module to My content, they can edit it because the have full capabilities on Data module.  And for power users (authors) who build reports they need this capability to be able to load a spreadsheet and report off it. 

This is a major issue that hundreds of clients will be complaing about when they realize it. IBM must expand/improve the 'Capabilities Tab" on a folder level to include Dashboarding, data module, etc capabilities. this would fix it. 

Please advise.

------------------------------
Rich Babicz
------------------------------

Original Message:
Sent: Thu July 16, 2020 09:05 AM
From: Dave Chirayath
Subject: How to Restrict Editing to Specific Dashboards

Hi Pradeep, 

What version of Cognos are you using? I found the following link on the IBM site pertaining to the issues you mentioned for versions 11.1 and up:

https://www.ibm.com/support/pages/how-do-you-restrict-users-based-their-license-roles-cognos-analytics-version-1111

I hope that helps. 

Dave

------------------------------
Dave Chirayath

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Original Message:
Sent: 7/29/2020 12:09:00 PM
From: Rich Babicz
Subject: RE: How to Restrict Editing to Specific Dashboards

Dave, Peter,

That link does not address this issue. And we just found its even worse than we thought. Same thing happens on a Data Module. If we build a data module and place in a restricted folder (no edit). If that user copies data module to My content, they can edit it because the have full capabilities on Data module.  And for power users (authors) who build reports they need this capability to be able to load a spreadsheet and report off it. 

This is a major issue that hundreds of clients will be complaing about when they realize it. IBM must expand/improve the 'Capabilities Tab" on a folder level to include Dashboarding, data module, etc capabilities. this would fix it. 

Please advise.

------------------------------
Rich Babicz
------------------------------

Original Message:
Sent: Thu July 16, 2020 09:05 AM
From: Dave Chirayath
Subject: How to Restrict Editing to Specific Dashboards

Hi Pradeep, 

What version of Cognos are you using? I found the following link on the IBM site pertaining to the issues you mentioned for versions 11.1 and up:

https://www.ibm.com/support/pages/how-do-you-restrict-users-based-their-license-roles-cognos-analytics-version-1111

I hope that helps. 

Dave

------------------------------
Dave Chirayath

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

I think this enhancement request covers the scenario you are laying out.
https://ibm-data-and-ai.ideas.aha.io/ideas/CA-I-2648

There is only 1 vote for it so definitely add your +1s to it to give it more visibility.

------------------------------
TREVOR COMEAU
------------------------------

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson

Hi,

You can set "default" do read permission.

Users will run dashboard, but can't edit or copy to other folders.

------------------------------
JEAM COELHO
Cognos Solution Architect

Linkedin: https://www.linkedin.com/in/jeamcoelho/
------------------------------

Original Message:
Sent: Tue July 14, 2020 09:05 AM
From: pradeep sahay
Subject: How to Restrict Editing to Specific Dashboards

We want to restrict users from editing dashboards that they did not create.  For example, I as a Admin create a dashboard for users to interact with as consumers only (no editing).  We can prevent other users from editing by changing their permissions on specific folders  (i.e. remove write permission).  However, a user with "create/edit dashboard" capability can now copy a restricted dashboard to My Content (or another folder that they have write permission to) and see "under the hood" and gain access to the data source.  How can we restrict these users to editing only certain dashboards?

------------------------------
pradeep sahay
------------------------------

#CognosAnalyticswithWatson