Row Level Security in OBIEE 12C not working

Question

Hi,

I am implementing row level security in OBIEE 12c.I have created as new connection pool that has two tables staff_login and staff_cc.

staff_ login has user_name,user_desc

staf_cc has user_name and cost_center

I have created a session variable costcenter and it has a initialization block getting cost center data for the logged user.After this i did TABLE_NAME.COSTCENTER=VALUEOF(NQ_SESSION.COSTCENTER).

Inspite of  making all the set up steps.the data is not getting filtered(cost center) when the user in logged in

I checked in Manage Sessions in RPD the user has been initialized with his cost center(Information Technology in this case).However data is not getting filtered when i run a report in OBIEE Answers.

Can anybody shed some light on what i am missing here.How to troubleshoot to make this work?

Thanks in Advance...

Regards,

Yaseen

Joel Acha · Answer

As @Gianni Ceresa pointed out, there are a number of steps you need to go through to set up row level security on objects in the repository and your description/s only has some of those steps. Take a look at this document and confirm that you have followed all of the steps.

yaseennawaz · Answer

Thanks Gianni for the reply.

I defined the variable and did the necessary set in identity manager like choosing a role (BI Consumer) and then the permissions->data filters and assigning the session variable to the cost center column in the presentation table. I know I can't expect obiee to do magic without doing all of these steps.

My issue  is despite this steps been set up data is not getting filtered in the report.

As I said in my first post the session variable is assigned the value as per the initialization block query and it is fetching the value.

I am working on OBIEE 12.2.1.2 version.

Regards,

Yaseen

Gianni Ceresa · Answer

Hi,

What exact version of OBIEE?

And you did only what you described in your post?

Because what you say is that you defined a variable, nothing else. OBIEE isn't going to magically use a variable for a filter or something if you don't tell it what to do, how and where.