cognos security presentation
TRANSCRIPT
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 1/19
Evan RossPrincipal
AutomatingSecurity in
IBMCognos 8
Transformer
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 2/19
IBM Services Partner Expertise in the BI platform for more
than 12 years
Cognos BI
Dashboarding
Reporting
Analysis
Scorecarding
Data Manager
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 3/19
Some of our CognosClients
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 4/19
Cognos securityGreat Active Directory integration for
Framework Manager
Functionality added in Transformer 8.3
for Custom Views
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 5/19
The problem:
Hospital ERP system
Complex security by department
Security table available in SQL
Framework Manager can easily connectto the SQL table
Hard to maintain in Transformer Security Concerns
Timeliness
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 6/19
Standard hierarchies areeasy…
Corporate
Canada
East West
USA
South
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 7/19
…Complex Hierarchies are
not!
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 8/19
Transformer views Exclude
Not in cube
Cloak In totals, not visible
Suppress
Hide level
Summarize Hide lower levels
Apex
Hide upper levels
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 9/19
The manual method
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 10/19
What does the user see?
Two options:
Supress all categories at the lowest level
and then unsuppress applicablecategories
Apex on applicable categories
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 11/19
What is the difference?
Location
BusinessUnit
Division
Location
BusinessUnit
Division [Text]
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 12/19
The solution
Cognos 8.3 and higher allows for OLEautomation of Transformer Model
Read SQL database and create UserViews for each class
Tools needed:
Transformer
Visual Studio – free Express version isfine
Does NOT need Cognos SDK!
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 13/19
The next problem – ActiveDirectory names!
Security tables uses loginname
RossE
Cognos expects full name
Ross, Evan
The answer – link directlyto Active Directory
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 14/19
Connecting to ActiveDirectory
SQL Server supports linking directly toAD
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 15/19
Once connected, it’s asimple query…
Insert Into L_activedirectory
Select Cn, Samaccountname From
Openquery(adsi, 'Select Cn,Samaccountname From ''Ldap://
Dc1'' Where Objectclass =
''User'' And Objectcategory =
''Person'‘ Order By Givenname')
End
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 16/19
Process model to updatesecurity
Clear• Deletes all existing user views
Add
• Reads database
• Creates new views
Build• Build cubes from batch file• Copy and deploy cubes
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 17/19
VB.NET code – what doesit do?For intX = 1 To dimension.DrillDowns.Item(1).
Categories.Count
Dim category As Category =
dimension.DrillDowns.Item(1).Categories(intX)
If category.Name = deptName Then
view.SetViewStatus(category,xtrViewStatus.t
rViewStatusApexAncestor )
End If
Next intX
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 18/19
The end result
No manual maintenance of Transformersecurity
Security preserved in all Cognos tools – relational, dimensionally modeledrelational (DRM), and cubes
No more headaches for BI team!
7/14/2019 Cognos Security Presentation
http://slidepdf.com/reader/full/cognos-security-presentation 19/19
Questions?
Evan Ross
416-987-5793