Access permissions problem
Hi,
I've recently connected my Insight installation up to my companies Active Directory server, and am currently trying to set access permissions for folders/reports within Insight.
In order to test that the settings are correct, I have given one of the AD groups I am a member of DENY (all) permissions on a folder. Despite this, I am still able to see the folder and add/remove/view any content within it.
What am I missing?
Just in case anyone asks, I am not the owner of the folder I am testing against and there are no other AD or Cognos groups configured against the folder.
Thanks
I've recently connected my Insight installation up to my companies Active Directory server, and am currently trying to set access permissions for folders/reports within Insight.
In order to test that the settings are correct, I have given one of the AD groups I am a member of DENY (all) permissions on a folder. Despite this, I am still able to see the folder and add/remove/view any content within it.
What am I missing?
Just in case anyone asks, I am not the owner of the folder I am testing against and there are no other AD or Cognos groups configured against the folder.
Thanks
One answer
Raised a PMR and have got a solution, will post it in case its helpful for anyone else.
By default the "Everyone" group is a member of the build-in Cognos system administrators group. This explains why I was able to view reports even if I had denied myself permissions to view them.
The solution is to add another user or group to the system administrators group, and then remove "Everyone".Note that its important to add someone else before removing everyone, otherwise you could lock yourself out.
By default the "Everyone" group is a member of the build-in Cognos system administrators group. This explains why I was able to view reports even if I had denied myself permissions to view them.
The solution is to add another user or group to the system administrators group, and then remove "Everyone".