Table of Contents

Search

  1. Preface
  2. Introduction
  3. IDD Concepts
  4. Implementation Process
  5. IDD Configuration Manager
  6. Manual IDD Configuration
  7. IDD Global Properties
  8. Sizing and Platform Requirements
  9. Application Components
  10. IDD Security Configuration
  11. Data Security
  12. Example Role-Based Security Configuration
  13. Data Masking
  14. Siperian BPM Workflow Engine
  15. Locale Codes
  16. Troubleshooting
  17. Glossary

Data Director Implementation Guide

Data Director Implementation Guide

Data Security Grandchild Object Configuration Example

Data Security Grandchild Object Configuration Example

You want the data stewards in France to view child records and grandchild records when the 'Country' column of the C_MT_ADDRESS grandchild record has a value of 'FR'.
To filter based on the location of a data steward, create a role in the MDM Hub for data stewards in France. In this example, you assign the data stewards in France the 'DSFrance' role. Use the match path component for the grandchild object when you specify the 'columnUid' value.
The following excerpt from the
BDDConfig.xml
file shows how to configure data security for this example:
<subjectArea name=”Organization”> <one2ManyChild name="Employee"> <dataSecurity> <securityFilter columnUid="MATCH_PATH_COMPONENT.C_MT_ADDRESS|COUNTRY"> <securityValue value="RUS"> <securityRole roleUid="DSFrance"/> </securityValue> </securityFilter> </dataSecurity> <one2ManyChild name="Address" mpcUid="C_MT_ADDRESS"> </one2ManyChild> </one2ManyChild> </subjectArea>
By default, users cannot view the child record if you configure a filter for a grandchild column, but the child record does not have grandchild records. To allow users to view child records with no grandchild records, set the 'allowDsEmptyChildren' global property to
true
.

0 COMMENTS

We’d like to hear from you!