Table of Contents

Search

  1. Preface
  2. Introduction
  3. IDD Concepts
  4. Implementation Process
  5. IDD Configuration Manager
  6. Manual IDD Configuration
  7. IDD Global Properties
  8. Sizing and Platform Requirements
  9. Application Components
  10. IDD Security Configuration
  11. Data Security
  12. Example Role-Based Security Configuration
  13. Data Masking
  14. Siperian BPM Workflow Engine
  15. Locale Codes
  16. Troubleshooting
  17. Glossary

Data Director Implementation Guide

Data Director Implementation Guide

IDD Security Configuration Reference

IDD Security Configuration Reference

The following tables show the IDD security configuration settings. You set permissions in the Hub Console by using the Security Access Manager.
The Security Access Manager includes the following Resource Groups: ALL_GLOBAL_RESOURCES, ALL_XREF, and ALL_XREF_HISTORY. Use these groups when you want to assign the same permission to all the specified resources. For example, you can set the DELETE permission on all cross-references by selecting the DELETE check box in the ALL_XREF row.
General
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
Toolbar New Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
Y
Y
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
-
-
-
Y
-
Data View
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
Create Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones
Y
-
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
Y
-
-
-
-
Read Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
Update Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones
-
Y
Y
-
-
-
BASE_OBJECT
NAME
-
-
Y
Y
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
-
-
-
Y
-
Delete Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO, State management is enabled
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
-
-
Y
-
-
Copy Subject Area
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
Y
Y
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
-
-
-
Y
-
Show BO's System columns
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
BO is not new.
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
Create Child Object
BASE_OBJECT
NAME
-
For one-to-many children just BO itself, for many-to-many children both BO and its relation BO is checked.
Y
Y
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
-
-
-
Y
-
Read Child Object
BASE_OBJECT
NAME
-
-
-
Y
-
-
-
-
Update Child Object
BASE_OBJECT
NAME
-
For one-to-many children just BO itself, for many-to-many children both BO and its relation BO is checked.
-
-
Y
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
-
-
-
-
Y
-
Delete Child Object
BASE_OBJECT
NAME
-
State management enabled. For one-to-many children just BO itself, for many-to-many children both BO and its relation BO is checked.
-
-
-
Y
-
-
BASE_OBJECT
NAME
XREF
Cross-references for the child object must be selected.
-
-
-
Y
-
-
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Required setting when you use the Entity View.
-
Y
-
-
Y
-
CM
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
View Xref
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
BO is not new.
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
XREF
Primary BO and all Logical one-to-ones. For one-to-many children just child BO. For many-to-many children child BO and relation BO.
-
Y
-
-
-
-
Find duplicates
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
Merge
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
Y
BASE_OBJECT
NAME
-
-
-
-
-
-
Y
Unmerge
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
-
-
-
-
Y
View Raw Data
BASE_OBJECT
NAME
RAW
-
-
Y
-
-
-
-
Tasks
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
Send for approval (New Primary Object)
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones, State management is enabled
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
Y
Y
-
-
-
-
BASE_OBJECT
NAME
-
Many-to-many children, State management is enabled
Y
Y
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
Primary Object and all logical one-to-ones
-
-
-
-
Y
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
Default for approval
Y
-
-
-
-
-
Send for approval (Existing Primary Object)
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones, State management is enabled
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
Y
-
-
-
BASE_OBJECT
NAME
-
Many-to-many children, State management is enabled
-
Y
Y
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
Primary Object and all logical one-to-ones
-
-
-
-
Y
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
Default for approval
Y
-
-
-
-
-
Send for Approval Task
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Send for Approval and Edit buttons are enabled for a new created record. Save button is disabled.
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
Y
Y
Y
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA/ ReviewNoApprove
Y
-
-
-
-
-
Open task from
Start workspace
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
-
-
-
-
Y
-
Create Task
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones, State management is enabled
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
Many-to-many children, State management is enabled
-
-
-
-
-
-
CLEANSE_FUNCTION
LIB_NAME
FUNCTION_NAME
Primary Object and all logical one-to-ones
-
-
-
-
Y
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
Any creational task type
Y
-
-
-
-
-
View Task Details
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
-
-
-
-
-
Y
-
Merge Task
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA/Merge
Y
-
-
-
-
-
Unmerge Task
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA/Unmerge
Y
-
-
-
-
-
Queue for merge
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Queue for Merge button is enabled.
-
Y
Y
-
-
Y
BASE_OBJECT
NAME
-
-
Y
-
-
-
Y
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA/ Merge
-
-
-
-
Y
-
Execute Task's action
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
CUSTOM_RESOURCE
BDD_NAME
TASK_TYPE:SA
-
-
-
-
Y
-
History View
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
View Subject Area History
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO is persisted, history is enabled for primary BO.
-
Y
-
-
-
-
History View for Primary Object
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
Primary BO and all Logical one-to-ones.
-
Y
-
-
-
-
BASE_OBJECT
NAME
HISTORY
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
History should be enabled for BO.
-
Y
-
-
-
-
History View for Child BO
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
For many-to-many children relationship privileges are taken in account.
-
Y
-
-
-
-
BASE_OBJECT
NAME
HISTORY
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
History should be enabled for BO.
-
Y
-
-
-
-
View BO Xref History
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
History should be enabled for BO.
-
Y
-
-
-
-
BASE_OBJECT
NAME
XREF_HISTORY
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
View BO Merge History
CUSTOM_RESOURCE
BDD_NAME
SUBJECT_AREA
-
-
Y
-
-
-
-
BASE_OBJECT
NAME
-
-
Y
-
-
-
-
Charts
Use-case
Resource Group
Name
Sub-name
Special Requirements/ Comments
C
R
U
D
E
M
View Chart
CUSTOM_RESOURCE
BDD_NAME
CHART/View
-
-
Y
-
-
-
-

0 COMMENTS

We’d like to hear from you!