livereports parameters

there is a sql query in livereportsselect dt.name, dn.auditstr, dt.createdate, dt.modifydate from dtree dt, dauditnew dn where dt.dataid = dn.dataid and dn.performerid = 11111 and dn.auditdate between %1 and %2 and dn.subtype in (144) order by dt.modifydate, dt.namehere 11111 is the userid. as we have entered the userid hardcoded in the query. If this live report is executed by some another user who has the permission to this report he can view the data related to user 11111.How we can dynamically pass the userid so that the the person who is running the report his OBJECT_DATAID or user id automatically used in the query instead of value 11111

Find more posts tagged with

Comments

Marko_Genzel

Message from Genzel, Marko (VCI) <Marko.Genzel@vwcredit.com> via eLink

eLink

Change the dn.performerid clause in your SQL to “dn.performerid= %3” and in the dropdown for “Param %3” choose “UserId”

Best Regards,

Marko

From: eLink Discussion:Open Text Live Reports Discussion[mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Thursday, September 16, 2010 4:36 PM
To: eLink Recipient
Subject: livereports parameters

livereports parameters

Posted by sandesh.s.nair@accenture.com (Nair, Sandesh) on 2010/09/16 17:31

there is a sql query in livereports

select dt.name, dn.auditstr, dt.createdate, dt.modifydate from dtree dt, dauditnew dn where dt.dataid = dn.dataid and dn.performerid = 11111 and dn.auditdate between %1 and %2 and dn.subtype in (144) order by dt.modifydate, dt.name

here 11111 is the userid. as we have entered the userid hardcoded in the query. If this live report is executed by some another user who has the permission to this report he can view the data related to user 11111.

How we can dynamically pass the userid so that the the person who is running the report his OBJECT_DATAID or user id automatically used in the query instead of value 11111

[To reply to this thread, use your normal E-mail reply function.]
Discussion:	Open Text Live Reports Discussion
Livelink Server:	knowledge-wlweb01

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Lindsay_Davies

Message from Lindsay Davies <ldavies@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

Livereports are direct queries against the database.

As such, unless you code it there is no restriction on what the user running the report will see.

So if you are writing Livereports for end users to run and you are concerned that they may get to see data they should not, then add the

filter - 'Filter Permissions' to your input parameters then simply add

AND %4

to your SQL statement (or which ever user input parameter this filter is assigned to).

Livelink will then check permissions and restrict the rows that are returned according to who is running the Livereport.

Check out some of the standard delivered reports in the Livereports volume to see what they do - 'My Late Tasks' is a good example.

Lindsay Davies

EU Escalations Team

Open Text UK

From: eLink Discussion: Open Text Live Reports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: 2010 September 16, Thu 23:23
To: eLink Recipient
Subject: RE livereports parameters

RE livereports parameters		Posted by marko.genzel@vwcredit.com (Genzel, Marko ) on 2010/09/16 18:22
In reply to: livereports parameters		Posted by sandesh.s.nair@accenture.com (Nair, Sandesh) on 2010/09/16 17:31

Message from Genzel, Marko (VCI) <Marko.Genzel@vwcredit.com> via eLink

Change the dn.performerid clause in your SQL to “dn.performerid = %3” and in the dropdown for “Param %3” choose “User Id” Best Regards, Marko From: eLink Discussion: Open Text Live Reports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Thursday, September 16, 2010 4:36 PM
To: eLink Recipient
Subject: livereports parameters livereports parameters

Posted by sandesh.s.nair@accenture.com (Nair, Sandesh) on 2010/09/16 17:31

there is a sql query in livereports

select dt.name, dn.auditstr, dt.createdate, dt.modifydate from dtree dt, dauditnew dn where dt.dataid = dn.dataid and dn.performerid = 11111 and dn.auditdate between %1 and %2 and dn.subtype in (144) order by dt.modifydate, dt.name

here 11111 is the userid. as we have entered the userid hardcoded in the query. If this live report is executed by some another user who has the permission to this report he can view the data related to user 11111.

How we can dynamically pass the userid so that the the person who is running the report his OBJECT_DATAID or user id automatically used in the query instead of value 11111

[To reply to this thread, use your normal E-mail reply function.]
Discussion:	Open Text Live Reports Discussion
Livelink Server:	knowledge-wlweb01

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.

sandeshn

Thanks All