This discussion is archived
11 Replies Latest reply: Dec 6, 2012 3:07 AM by 893781 RSS

Reg : Security in ODI

893781 Newbie
Currently Being Moderated
Hi All,

I have two interfaces in the same project and same work repository.

I want to create a security access as follows :

User A can view only Interface A and not Interface B.
Similarly, User B can view only Interface B and not interface A.

Can this be achieved? I was looking at the ODI document, am not sure if this could be done.

Any inputs would be appreciated

Thanks,
Shyam
  • 1. Re: Reg : Security in ODI
    A. Drieux Pro
    Currently Being Moderated
    Hi

    Try the following thing :
    On the Security module, you must create profils with non-generic privileges. Non Generic privileges allow you to set security on ODI objects (= instances).

    There are some prebuilt non-generic profils. Example : "NG Designer" ; "NG Metadata"
  • 2. Re: Reg : Security in ODI
    Bhabani Ranjan Guru
    Currently Being Moderated
    Create two user with CONNECT profile. Then drag the two interface to corresponding user.

    It must be Non Generic.
  • 3. Re: Reg : Security in ODI
    893781 Newbie
    Currently Being Moderated
    How do I drag the interface to the user? am not sure.
    I just created two users currently and have assigned CONNECT Profile.
  • 4. Re: Reg : Security in ODI
    JeromeFr Expert
    Currently Being Moderated
    The easiest way to do that is to change the position of the security tab. I usually set it on right of the ODI Studio window (While keeping Designer, Topology and Executor on the left side).

    Then on the designer tab, you can just expand your project, and drag your interface onto one user in the security tab. If you then expand this user, you can see the interface. If you double click on it, you can choose what the user can/cannot do on this interface (View only ? View/Edit ? ...).
  • 5. Re: Reg : Security in ODI
    A. Drieux Pro
    Currently Being Moderated
    If I remember, you can also click on the "privileges" tab of your object in DESIGNER.
    In this tab, you can see all the users/groups with their privileges, and you can change privileges.

    Of course, you have to do that with an administrator user.
  • 6. Re: Reg : Security in ODI
    940688 Newbie
    Currently Being Moderated
    You have to create new profiles first, that are non-generic.(For example, non-generic metadata designer etc). Then, drag these profiles to the user(s) you have created. Then, you can drag the respective interfaces to the user profiles. This is not explained very well in the ODI Oracle documentation.
    Hope this helps:
    http://thetravelingconsultant2.files.wordpress.com/2011/03/odi-security-101-scenario-execution.pdf

    Edited by: 937685 on Dec 4, 2012 8:09 AM
  • 7. Re: Reg : Security in ODI
    893781 Newbie
    Currently Being Moderated
    Hi Guys,

    Thanks for all the posts.
    I was able to do it successfully :)

    Also the document attached helped ,which is really exhaustive enough :)

    Thanks,
    Shyam
  • 8. Re: Reg : Security in ODI
    893781 Newbie
    Currently Being Moderated
    Hi All,

    I'm trying the following approaches discussed.
    I've a few observations.

    Below are the steps am trying.
    1.i create two users
    2. Assign the CONNECT profiles and uncheck the 'generic privilege' check box for the object 'View'under Object.
    3. Assign NG_DESIGNER profile and drag drop the interfaces check the View and Execute check boxes.

    When i log into as the newly created user, I do not see any projects at all!!
    I did something on trail and error and was able to see the interface but it gave access denied error when i tried executing it.

    Am I missing anything obvious??

    Regards,
    Shyam
  • 9. Re: Reg : Security in ODI
    893781 Newbie
    Currently Being Moderated
    I did not get the expected results
  • 10. Re: Reg : Security in ODI
    A. Drieux Pro
    Currently Being Moderated
    Can you provide a screenshot of your user, with profiles and instances nodes expanded ?

    Did you drag only interface, or interface and project ?
  • 11. Re: Reg : Security in ODI
    893781 Newbie
    Currently Being Moderated
    I've dragged only Interfaces.

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points