cognos security presentation

19
Evan Ross Principal Automating Security in IBM Cognos 8 Transformer

Upload: nagendra-kumar

Post on 29-Oct-2015

17 views

Category:

Documents


1 download

TRANSCRIPT

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 1/19

Evan RossPrincipal

AutomatingSecurity in

IBMCognos 8

Transformer

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 2/19

IBM Services Partner Expertise in the BI platform for more

than 12 years

Cognos BI

Dashboarding

Reporting

Analysis

Scorecarding

Data Manager

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 4/19

Cognos securityGreat Active Directory integration for

Framework Manager

Functionality added in Transformer 8.3

for Custom Views

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 5/19

The problem:

Hospital ERP system

Complex security by department

Security table available in SQL

Framework Manager can easily connectto the SQL table

Hard to maintain in Transformer Security Concerns

Timeliness

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 6/19

Standard hierarchies areeasy… 

Corporate

Canada

East West

USA

South

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 7/19

…Complex Hierarchies are

not!

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 8/19

Transformer views Exclude

Not in cube

Cloak In totals, not visible

Suppress

Hide level

Summarize Hide lower levels

Apex

Hide upper levels

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 9/19

The manual method

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 10/19

What does the user see?

Two options:

Supress all categories at the lowest level

and then unsuppress applicablecategories

Apex on applicable categories

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 11/19

What is the difference?

Location

BusinessUnit

Division

Location

BusinessUnit

Division [Text]

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 12/19

The solution

Cognos 8.3 and higher allows for OLEautomation of Transformer Model

Read SQL database and create UserViews for each class

Tools needed:

Transformer

Visual Studio – free Express version isfine

Does NOT need Cognos SDK!

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 13/19

The next problem – ActiveDirectory names!

Security tables uses loginname

RossE

Cognos expects full name

Ross, Evan

The answer – link directlyto Active Directory

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 14/19

Connecting to ActiveDirectory

SQL Server supports linking directly toAD

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 15/19

Once connected, it’s asimple query… 

Insert Into L_activedirectory 

Select Cn, Samaccountname From

Openquery(adsi, 'Select Cn,Samaccountname From ''Ldap:// 

Dc1'' Where Objectclass = 

''User'' And Objectcategory = 

''Person'‘ Order By Givenname')

End 

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 16/19

Process model to updatesecurity

Clear• Deletes all existing user views

Add

• Reads database

• Creates new views

Build• Build cubes from batch file• Copy and deploy cubes

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 17/19

VB.NET code – what doesit do?For intX = 1 To dimension.DrillDowns.Item(1).

Categories.Count

Dim category As Category =

dimension.DrillDowns.Item(1).Categories(intX)

If category.Name = deptName Then

view.SetViewStatus(category,xtrViewStatus.t

rViewStatusApexAncestor )

End If

Next intX

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 18/19

The end result

No manual maintenance of Transformersecurity

Security preserved in all Cognos tools – relational, dimensionally modeledrelational (DRM), and cubes

No more headaches for BI team!

7/14/2019 Cognos Security Presentation

http://slidepdf.com/reader/full/cognos-security-presentation 19/19

Questions?

Evan Ross

[email protected] 

416-987-5793