OAC remove 'Download File' from data sets on DV/BI Consumer role

Marc Rivera - Oracle

Organization Name

Oracle (GCO)

Description

The ability to upload external files to create data sets is an extremely useful function of OAC.  While only Analysts or BI/DV Authors and Administrators have the ability to upload these files it seems that BI/DV Consumers have the ability to download them.  While parts of the data set might be used by some projects, the data contained in a set may not be appropriate consumption in totality to the users allowed to consume parts of the information.  The functionality to download file should be removed from the BI/DV Consumers role to prevent any inadvertent sharing of data not relevant to a users job function. 

Use Case and Business Need

As loaded external data sources makes for great appended data , the ability to download it should only be allowed by the same roles that upload it.  In order to secure 1 global data set by perhaps a region we can build projects that only allow blending of specific rows associated with that region of the data set but exclude that which a regional user should not see or use.  If a file has global data but should only be consumed by regional specific users for their area of responsibility then allowing them to download the data set in full nullifies the ability to restrict the data outside of their job scope.  Removing the Download File function from the BI/DV Consumer role provides greater capability to secure the  uploading of external files. 

Original Idea Number: 53bc76fadb