Permissions on shared folder sub-directories

Charles M

Hi All,

We have just created a few sub-folders under the shared folder. There are several "high-level" folders for the business users, based on team/functional area.Each is currently set to read, traverse, and write.

My question is: I'd like to provide 'delete' & 'change permission' to users, for them to be able to use as appropriate. But, I only want to provide on everything below the top-level directories. How can I do this without having to change the top-level directories themselves? In other words, we don't mind if they would like to delete or assign permissions on things they begin to create, just not the entire functional area folder(s) itself.

Regards,

Charles

OBIA 11.1.1.10.1 / OBIEE 11.1.1.9.3

[Deleted User]

Charles M wrote: How can I do this without having to change the top-level directories themselves?

You can't? It's like a chmod or Windows folder permissions. If you want full control inside, that's one set of permissions. But the parent folder needs another one.

So basically just go to /shared/somefolder and set "Full Control" to "MyBusinessUsers" approle and then cascade down to all subfolders and items.

And then set the permission to "Read, Write, Traverse" on /shared/somefolder for the same approle without cascading down things.

Done.

Charles M

Hi Christian. Thanks for the reply.

It doesn't look like that change is having the intended effects (possibly I am not doing it correctly ... but I tried a few times to test with some folders and analyses). Has anyone been able to do this with the sample app? I don't have one installed yet ...

Also, I can see that that I may not have the correct privileges for the role for the 'change permission' operation anyway. I found two related privileges -> Admin: Catalog: Change Permissions and Admin: Security: Access to Permissions Dialog. It's hard to tell if I need both of these or just one. I looked over the documentation, but still am a little unclear. Any thoughts on that (I know not directly related to the OP, but kind of a sidebar)?

https://docs.oracle.com/middleware/1221/biee/BIESC/mgrgrpsusers.htm#BIESC1585

Charles

[Deleted User]

You need both privileges.

Can you screenshot the permissions of he main folder in questions and a subfolder and/or item?

Charles M

Hi Christian.

Let me see if I can re-create this in Dev. That way, I can use folders with different names. Some folder names are sensitive to the public forum.

Not sure I can do it today ... but, I'll get it going in the next day or so.

Thanks again. Any thoughts of the privileges?

[Deleted User]

As I said they need both. Otherwise they would be able to see (review) the permissions but not change them.

Charles M

Ok, thanks Christian (sorry I see that now ... I missed it before). I'll get back on the rest ...

[Deleted User]

It's Friday night. Don't sweat it.