For example, consider a role hierarchy with a DataSteward_NY role that is a descendant of a DataSteward role. A user that belongs to the DataSteward_NY role also belongs to the DataSteward role.

You want to configure a data security filter that only affects the users who belong to the DataSteward_NY role. You want the users who belong to the DataSteward_NY role to see records that have a STATE_CD value of

NY

. You must set the affectFilter attribute to

false

to filter data for the DataSteward_NY role. When the affectFilter attribute is

false

, Informatica Data Director filters data for the DataSteward_NY role independently of the data security filters for the DataSteward role.

The following excerpt from the

BDDConfig.xml

file shows how to configure data security filters for this example:

<securityFilter columnUid="MATCH_PATH_COMPONENT.C_MT_ADDRESS|STATE_CD"> 
  <securityValue value="NY"> 
    <securityRole roleUid="DataSteward_NY"/> 
  </securityValue> 
  <securityValue affectFilter="false"> 
    <securityRole roleUid="DataSteward"/> 
  </securityValue> 
</securityFilter>