OBIEE11g PROJECT_INACCESSIBLE_COLUMN_AS_NULL

The PROJECT_INACCESSIBLE_COLUMN_AS_NULL in the NQSConfig.ini file controls how security-sensitive columns are displayed to unauthorized users.

If this parameter is set to YES, then a NULL expression replaces the original column expression in the query and secured columns are hidden from unauthorized users in analyses.

If this parameter is set to NO, then when a user attempts to run a report that contains a secured column the user is not authorized to see, an unresolved column error occurs.

Till Next Time

OBIEE11g DEFAULT_PRIVILEGES

By default every group or user defined in the RPD has read rights to each new element you add. This can be a bit of a pain in the a$$$ if you have a lot elements which each try own security group. Better to develop the RPD so that you have to grant each group access to a element.

This can be set in the NQSconfig.ini file:

Till Next Time

OBIEE PROJECT INACCESSIBLE COLUMN

Kumar gave a great alternative for the choose statement by using the PROJECT_INACCESSIBLE_COLUMN_AS_NULL parameter

http://obieeblog.wordpress.com/2009/01/15/obiee-data-security-column-level-security/

Till Next Time

OBIEE Optimizing NQQuery.log for debugging

When building and debugging OBIEE repository’s and reports you will often go back to the NQQuery.log. Depending on the security setting of the user the actual query send to the database will be logged here.

Because the log can grow very quickly over time it often means having to scroll to the end of the log to find the information needed.

By default the maximum size for the NQQuery.log is 10MB. This setting is found in the NQSConfig.ini under USER_LOG_FILE_SIZE:

If the log goes beyond this size OBIEE will rename it as “NQQuery.log.old” after it has finished the last request.

In a development environment you might consider setting this value to 50KB (or even as low as 10KB).
That way the log only contains the very last actions you are interested in.
Be aware that if the new log goes beyond the USER_LOG_FILE_SIZE the old “NQQuery.log.old” will be overwritten.

Till Next Time