Hello everyone, I have performed data modeling using IBM Cognos 11.0.13 with data modules. Now, I would like to restrict the data that a user views when querying data modules based on the group they belong to, using a 'security filter' feature. For example, if group A is allowed to see the contents of a table with types X and Y, and a user is a part of this group, they should only see data of types X and Y (and not Z and W). Is it possible to achieve such a result using the data modules in Cognos 11.0.13? Is there a workaround? Thank you

------------------------------
Francesco Lastrino
------------------------------

Hi,

You may achieve this using Cognos macros and filtering data in data modules.

Security filter provided by data source connections is not to easy to set for dozens of groups and can be missed if clean and reload metadata of data source.

------------------------------
JEAM COELHO
Cognos Solution Architect

LinkedIn: https://www.linkedin.com/in/jeamcoelho/
------------------------------

Hi,

Thank you for the response. The macros you're talking about, should they be applied to individual reports that query that source, or is there a way for me to write the macro within a data module?

------------------------------
Francesco Lastrino
------------------------------

Original Message:
Sent: Fri October 27, 2023 02:14 PM
From: JEAM COELHO
Subject: IBM Cognos 11.0.13 Security Groups on Data module

Hi,

You may achieve this using Cognos macros and filtering data in data modules.

Security filter provided by data source connections is not to easy to set for dozens of groups and can be missed if clean and reload metadata of data source.

------------------------------
JEAM COELHO
Cognos Solution Architect

LinkedIn: https://www.linkedin.com/in/jeamcoelho/
------------------------------

Hi,

Thank you for the response. The macros you're talking about, should they be applied to individual reports that query that source, or is there a way for me to write the macro within a data module?

------------------------------
Francesco Lastrino
------------------------------

Original Message:
Sent: Fri October 27, 2023 02:14 PM
From: JEAM COELHO
Subject: IBM Cognos 11.0.13 Security Groups on Data module

Hi,

You may achieve this using Cognos macros and filtering data in data modules.

Security filter provided by data source connections is not to easy to set for dozens of groups and can be missed if clean and reload metadata of data source.

------------------------------
JEAM COELHO
Cognos Solution Architect

LinkedIn: https://www.linkedin.com/in/jeamcoelho/
------------------------------

You're on quite an old version of Cognos Analytics - I think data module based security came in version 11.1. Which means your security options are very limited. 

As mentioned you could try and create filters on your queries within the data module using Cognos Macros.

However, if you go down this road then beware! You are securing the data within that data module - not the underlying source. You have a security hole that anyone who has access to the data module tool could just create their own data module on the source tables. This would bypass all the security you have put within your DM.

You would need to limit access to the Data Module tool to prevent this. Which may have a bigger impact on users as they can no longer create their own data modules.

------------------------------
Marc Reed
------------------------------

If you have security based on single tables inside a data module, you could also think of separating the tables in different data modules, put your security on those and collect these (base) data modules in a second level of a (report) data module. That could make your setup more transparent, depending on your use case.

------------------------------
Philipp Hornung
Business Intelligence Manager
Techniker Krankenkasse
Hamburg Germany
#IBMChampion
------------------------------

Original Message:
Sent: Tue October 31, 2023 04:16 AM
From: Marc Reed
Subject: IBM Cognos 11.0.13 Security Groups on Data module

You're on quite an old version of Cognos Analytics - I think data module based security came in version 11.1. Which means your security options are very limited. 

As mentioned you could try and create filters on your queries within the data module using Cognos Macros.

However, if you go down this road then beware! You are securing the data within that data module - not the underlying source. You have a security hole that anyone who has access to the data module tool could just create their own data module on the source tables. This would bypass all the security you have put within your DM.

You would need to limit access to the Data Module tool to prevent this. Which may have a bigger impact on users as they can no longer create their own data modules.

------------------------------
Marc Reed
------------------------------