Troubleshooting
Problem
When both CLM and non-CLM product data is loaded into IBM Rational Insight with security enabled, a user is authorized to access CLM producs data but not the non-CLM data. Therefore, by default, a CLM user won't be able to see non-CLM data that is linked to data from CLM products.
Cause
The access control is implemented as a project user mapping. CLM integration loads user and CLM project relationships into the mapping table by default. Therefore, none of the CLM users and non-CLM project relationships are recorded in the mapping table. CLM users can not see non-CLM data linked with data from CLM products.
Resolving The Problem
Note: You will not encounter this issue if security is not enabled.
If you require security, you can enable security for report server and data warehouse. For more information about enabling security for your reporting server, refer to Specify Security Settings After Installation in the Cognos Administration and Security Guide. For more information about enabling security for the data warehouse, refer to Enabling security for the data warehouse.
Once you've enabled security for the report server and the data warehouse, a CLM user can access CLM product data.
If the CLM user also requires access to non-CLM product data, enable access to non-CLM projects:
- Start Data Manager and open the catalog.
- Under Builds and JobStreams > Others > Security create a fact build, for example
ProjectUsers_default - Insert a Data Source selecting Rational Data Warehouse as the Database.
- For the Query, enter the following SQL statement:
SELECT P."PROJECT_ID", R."RESOURCE_ID"
FROM "{$ODS}"."PROJECT" P
JOIN "{$ODS}"."RESOURCE" R ON 1=1
WHERE PROJECT_CLASS_ID NOT IN (4, 7, 10)
AND P.ISSOFTDELETED=0 AND R.ISSOFTDELETED=0
- In the Result columns tab, click Refresh. In the variable ODS field, enter
RIODSas value and then click OK. The Data Source Properties dialog closes. - Double click Data Stream to open the Data Stream Properties dialog.
- Click Auto Map and then click OK to close the dialog.
- Right click Transformation Model and then select Mapping. Click Auto Map, then click OK to close the dialog.
- In the Table Properties tab, insert a Relational Table Delivery. Select Rational Data Warehouse in the Connection drop down list.
- For the Table name, enter
"{$ODS}"."PROJECT_RESOURCE_LOOKUP" - In Columns, select PROJECT_ID, RESOURCE_ID and then select Key for each of the columns. Click OK to close the dialog.
- Right click JobStreams > Others > Security > ProjectUsers_default and then click the Variables tab.
- Add the new variable:
- Name =
ODS - Type =
CHAR(10) - Value =
RIODS
- Name =
- Click Save.
- Ensure that the login name entered in reporting server is consistent with the value in
RIODS.RESOURCE.REFERENCE_ID.
If there is requirement to control CLM user access in non-CLM projects, customize the SQL in step 4 according to specific requirement.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21500640