TDQ - Role based report access

[Anonymous]

I have a requirement for a role based access to the reports in the talend data mart. The requirement states that the visibility to reports saved in the data mart should be controlled based on the business group that the logged in TDQ user belongs to.

Note that the business group is not among the fields being analyzed in the Talend Profiling perpective, but the reports (one per business group) are filtered by the business group.

In the TDQ portal I can

1. Create one role per business group
2. Create document template for each role and control access to the document

The "Data Filter" column in the data mart Analysis table has the filter expression such as "business_group = '12345'".

Can the data in the document be filtered using this field?

Is there a better approach towards satisfying this requirement?

[Sebastiao_Qlik]

Given that you are able to store the business group information in the datamart with the where clause, I think you could try to use this business group information in the list of values that let the user selects visible reports:

https://help.talend.com/reader/hAtXOOO5XruHpJ3b4mOhpQ/EQADyiYazyz1_STUDS0c_A

hope this helps.

[Anonymous]

Thanks!

I did some digging around and figured this out. I am able to get a filtered list for the various business groups.

However, when I chose an analysis and execute it I get the following error message....

An error occurred while executing report. Check log file for more information

The error seems to be with the permissions on sub report s01_column_subreport. Here's the error log....

To see the whole post, download it here
OriginalPost.pdf

[msjian]

hi  balramvv from the above error, it is clear that the report document you run can not find the sub report s01_column_subreport. for our provided report documents(under tdq_reports->column, we have CL01_column_basic and CL02_column_evolution), they depend on the sub report s01_column_subreport(you can see the details page of them, click the right top "Links" icon button to see). I am not sure whether you have created a new your own report document except the our provided, if that you need to add Link to the subreport(you can see the details page of them, click the right top "Links" icon button to add). else  you have done "The roles that I created have the Execution permission on the Subreports folder (in the functionalities management)", do you do the same for the  tdq_reports->column folder or you own created folder? hope this can help you. thanks Jian

[Anonymous · Accepted solution]

msjian, Thanks for your reply and suggestions!

I will try this out.

I figured out an alternate solution to the problem. Instead of creating a duplicate of the document   "CL01_column_basic", I added new “ANALYTICAL DRIVER USE MODE DETAILS” for each business unit. This solutions works fine since the association of the sub-report with the original document,  "CL01_column_basic",  is already setup correctly.

The new “ANALYTICAL DRIVER USE MODE DETAILS” for each business unit were defined with a) right roles association and b) the right selection of the LOV .

The LOVs for each business unit were created by duplicating the LOV that was associated with the "UUID REPORT_ANA BASI" (the ANALYTICAL DRIVER USE MODE that was already defined in TDQ portal) and modifying the SQL to add the right filter criteria.