Data Director Implementation Guide

10.4

Back Next

Data Security Grandchild Object Configuration Example

You want the data stewards in France to view child records and grandchild records when the 'Country' column of the C_MT_ADDRESS grandchild record has a value of 'FR'.

To filter based on the location of a data steward, create a role in the MDM Hub for data stewards in France. In this example, you assign the data stewards in France the 'DSFrance' role. Use the match path component for the grandchild object when you specify the 'columnUid' value.

The following excerpt from the

BDDConfig.xml

file shows how to configure data security for this example:

<subjectArea name=”Organization”>
  <one2ManyChild name="Employee">
    <dataSecurity>
      <securityFilter columnUid="MATCH_PATH_COMPONENT.C_MT_ADDRESS|COUNTRY">
        <securityValue value="RUS">
          <securityRole roleUid="DSFrance"/>
        </securityValue>
      </securityFilter>
    </dataSecurity>
    <one2ManyChild name="Address" mpcUid="C_MT_ADDRESS">
    </one2ManyChild>
  </one2ManyChild>
</subjectArea>

By default, users cannot view the child record if you configure a filter for a grandchild column, but the child record does not have grandchild records. To allow users to view child records with no grandchild records, set the 'allowDsEmptyChildren' global property to

Rename Saved Search

Table of Contents

Data Director Implementation Guide

Data Director Implementation Guide

Data Security Grandchild Object Configuration Example

Data Security Grandchild Object Configuration Example