Data Director Implementation Guide

10.4

Back Next

Task Security Configuration

When an IDD application instance is deployed, or when the application server is restarted, the IDD application synchronizes a set of custom resources with Informatica MDM Hub.

This set of custom resources includes a custom resource for each subject area, and each task type per subject area (as configured in the IDD configuration file).

Use the Roles tool in the Hub Console to configure security for tasks by specifying privileges on the task type custom resources.

The following privileges for task types are applied in an IDD application:

Privilege	Description
Read	Unused.
Create	This privilege is required for an IDD application user to create new tasks. When the user chooses the Create Task command from the data view, the IDD application displays a dialog that contains a list of possible task types to create. This list contains only those task types for which the user has the create privilege. In addition, the tasks displayed in this list must also be configured properly in the IDD configuration file by setting the creationType attribute to "create".
Update	Unused.
Delete	Unused.
Merge	Unused.
Execute	This privilege is required for an IDD application user to view details about a task, and to make modifications to the task details (which includes adding comments, modifying the due date, and even reassigning the task). IDD application users who have execute privileges on a task type are allowed to execute all actions for that task type. This is true regardless of what the action does when it executes. For example, if there is an action that creates a new task, the user will be able to execute the action even if they do not have create privileges on the task type that is created by the action.

The privileges for tasks, subject areas, and base objects all work together in SAM. An incorrect SAM configuration can lead to unexpected behavior in an IDD application. Task assignment (described below and managed in the IDD Configuration Manager) is done by role or user. IDD does not verify that the role or user has the security configuration to allow operations on that task. It is up to the IDD application implementer to configure this correctly.

Also, for an IDD application user to be able to cancel a task, the user must have the DELETE privilege on the XREF for each base object in a subject area.

Rename Saved Search

Table of Contents

Data Director Implementation Guide

Data Director Implementation Guide

Task Security Configuration

Task Security Configuration