nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Problem while implementing Data Model Security

raghavyadavm

Hi,
 We created a Report which uses a Data Model for which the security is applied for a particular column.When we are testing the Data Security by Running through the Designer, for the user who can access the Report is able to view but for the user's which aren't allowed it is generating an Error "Report render failed".
 
 We are using the Actuate BIRT Designer Professional Version: 4.4.0 and F-Type Ihub 3.1 (both are the trial version).
 
 Also we need to know whether Data Model Security and Page Level Security Works for the trial Version of IHub or not.
 
Thanks,
Mylagary Raghavender

Find more posts tagged with

Comments

JFreeman

As far as I know, Data Level Security and Page Level Security are both included in the trial releases.
 
Regarding the error, could you please provide your designers log file for analysis?
It should be located in the .metadata directory of your designers workspace and will be named .log.
 
Also, In the project you provided, I do not see an ACL defined on the Data Set in the .datadesign which leads me to believe it is also not applied to the data model in the generated .data.

raghavyadavm

Hi,
 I have applied ACL to the output column CreditLimit in the data set.
 
 Also i attached the .log file in metadata folder of the workspace.
 
Thanks,
Mylagary Raghavender

JFreeman

Can you attach a new version of the project where you have the ACL in place?
 
I cannot reproduce this issue with the ACL set properly.

raghavyadavm

I have attached my Project where i am applying ACL to data set for the Output Column "CreditLimit".I have generated 3 Reports in which i'm testing the Data Model Security,Data set Security and Page Level Security.
When i'm testing the Data Model and Page Level Security Reports for the users which it shouldn't display data it is generating "Report render failed error"
 
Also i have attached the Error log file of my designer.

JFreeman

The reason you are getting this error looks to be due to where you have the ACL defined.
 
In your data set, you need to move your ACL definition to the "Row Access Control List Expression".
I made this change to your sample project, after which I no longer get any errors with either data or page security.

raghavyadavm

Data security doesn't work for a specific column??
can you please upload the project which you changed!!

JFreeman

Yes, data security does work with a specific column, you just have to create the ACL that points to the desired column.
 
Take at look at the attached modified version of your example project.
I have configured the ACL for the country column which means valid entries will be matched to countries listed in the country column. Such as USA, France, UK, etc.

raghavyadavm

suppose i want to display a column country only to "administrator" then what should be the ACL statement and where i need to write it ?either in the Row Access Control list (or) in output Column acl

JFreeman

Gotcha, I had misunderstood previously what you were wanting to do.
 
You are correct in that you will want to apply the ACL to the output column in order to prevent data from the entire column based on the ACL. However, it is looking like there may be a bug happening with the ACL applied to the column in a data model.
I can replicate the error:
 
<blockquote class="ipsBlockquote">
 
The report document stream "QuRs0/TabularCursorData" is not exist. 
</blockquote>
 
Whereas, using the data set directly looks to limit the data properly without error.
I am doing some more testing/checking on the error but this may end up as a bug report to be resolved in a future release.
 
I did find what looks to be a potential workaround for the time being (albeit not as elegant as an ACL on the column itself).
You can read in the ACL supplied at runtime in the visibility expression for the column of the table in the report. Then determine if the column should be hidden or not depending on the values within the ACL.
For example:
<pre class="_prettyXprint _lang-js">
var aclArray = reportContext.getAppContext().get("USER_ACL");
for(var x=0; x<aclArray.length; x++){
if(aclArray[x] == "administrator"){
false;
}else{
true;
}
}
</pre>