Data Warehouse security using Oracle Profiles

Has anyone used Oracle Profiles to secure their data warehouse.  I have the requirement for conditional column and row viewing based on the login user.  We could do this with Business Objects Enterprise security, however there are other applications that have access to the DW tables.
I was wondering if this has been successful out in the field and the overhead it could cause on the DB.
Thanks for any feedback,    -rs-

You need to be creating your "business groups" as a group in the RPD, init blocks to retrieve the user business group at login. Filters in the Logical table sources to restrict data to relevant business groups only.
Presentation 'Web Cat' groups with the same name as the RPD groups so a user inherits membership automatically.
I'd suggest sourcing a vanilla OBIA rpd to see how it is implemented out of the box.

Similar Messages

  • Load data warehouse from non-Oracle database

    Hi
    I need to load a data warehouse (in a Oracle database 8.1.6) using Post Gree database tables.
    The question is: Oracle Warehouse Builder can identify this database like a source module?
    Or is better I generate txt files from Post Gree tables, load a staging database (in Oracle) with the same structure of POst Gree tables and after that, load my data warehouse?
    Best Regards
    Honorio Cardozo Jr

    You can identify Oracle sources from Oracle 7.3 and up. I.e. yes, you can directly go against the database and you do not need to extract into flat files.
    Mark.

  • Problem with getting current date and time using oracle.jbo.domain.Date

    I`d like to get current date and time using oracle.jbo.domain.Date method getCurrentDate(), but it always return current date and 12:00:00. I also need to get the current time.

    I think you should use java.sql.Timestamp domain.
    (And set database type to TIME or DATETIME.)
    Jan

  • Oracle Retail Data Warehouse (RDW) Vs Oracle Retail Data Model??

    Oracle Retail suite of applications include Oracle Retail Data Warehouse (RDW) application. It is integrated with Point of Sale via TLOG and other applications. Is Oracle Retail Data Model leveraging the existing data in RDW? If we use Oracle Retail Data Model, RDW becomes redundant?

    Oracle Retail Data Model is independent of RDW and RGBU applications. It can be used with RMS and Point of Sale, but there is no pre-built ETL to load the data included with the product, although there are some options available thru partners.

  • Data level Security for Oracle Apps as Source

    Hi all
    I need to implement Data level Security on Apps Users in OBIA
    We are using Apps as source with Single sign On. I need to apply Data level security on Business Group Field.
    We dont have users in OBI, we need to register apps users in OBI.
    Could anybody tell me how to register Apps users in OBI???
    OR tell me if you know some other way to implement D L Sec on Single sing On and Apps as source.
    Thanks in avd
    V P

    You need to be creating your "business groups" as a group in the RPD, init blocks to retrieve the user business group at login. Filters in the Logical table sources to restrict data to relevant business groups only.
    Presentation 'Web Cat' groups with the same name as the RPD groups so a user inherits membership automatically.
    I'd suggest sourcing a vanilla OBIA rpd to see how it is implemented out of the box.

  • Data level Security with Oracle Apps as Source

    Hi all
    I am implementing Data level Security with Apps as Source(OLTP) on Single Sign On.(Oracle has provided the Vanila rpd & we are working on that)
    I need to Filter data based on Business Group, Users are created in Apps and they are registered with some Responsibilities.
    (for eg, OBI User CHINA is a Responsibility; Now he will get only Business Group ID for China)
    I have created Groups in rpd with same name as the responsibility in Apps.
    I have created Initialization Blocks from which I m getting only 1 business group ID for every :USER.(I tried the code in TOAD & I m getting the correct BG ID)
    I have created Group in WEB with the same name as the Group name in rpd.
    If I say show all Users and Groups in WEB, I m getting the APPS Users.
    I hv Reloaded the server metadata files and restarted the BI Server/WEB Server also...
    But in the Report, I m getting all the Business Group Ids,
    Plz advice if I m doing something wrong.
    ThanQ
    Anand

    You need to be creating your "business groups" as a group in the RPD, init blocks to retrieve the user business group at login. Filters in the Logical table sources to restrict data to relevant business groups only.
    Presentation 'Web Cat' groups with the same name as the RPD groups so a user inherits membership automatically.
    I'd suggest sourcing a vanilla OBIA rpd to see how it is implemented out of the box.

  • What if I implement data level security using Selection formula?

    Hi All,
    I have a requirement to implement data level security for all the reports, the thing is, we donot have a front end application developed in java/.net or any other language, so we have only two options (as per me, if you think there are other alternatives then please share).
    1) Implement security at the database level (that is use user roles in where clause which will make the where clause really complicated and hence the performance of the query will eventually decrease).
    2) Retrieve the data with the flags of user role/permission on data. Use these flags in selection formula to select the needed records as per the user login.
    I have already in middle of implementing the second method, thought to take suggestion from you guys, I appreciate if you could tell me the drawbacks of the method I am using, and if there is an alternative method you could think of.
    Thanks,
    -Azhar

    Standaone Crystal Reports does not have any security option except to use Trusted Authentication when connecting to the DB. We use Microsofts NT or MS SQL Server Authentication only.
    Doing this in CR Designer using flags and formula will never be secure, the user could simply change the formula etc...
    Check with your DBA on how to configure AD authentication and then enable or add each user to SQL server. You may need to configure and mantain this manually depending on how you ahve your network configured.
    Thank you
    Don

  • Limiting user activity using Oracle Profiles

    I am hoping to reduce the impact of a certain group of users on system performance. I can allocate a separate Oracle profile to them but when I set limits, what happens?
    Composite Limits - I'll leave alone, too much math required!
    Sessions/User - I can't limit that, they may feasibly and reasonably have several sessions
    CPU/Session - Ok, it's not a % of the CPU available but CPU seconds/100. What happens when that number is reached - is the sessions killed or what?
    CPU/Call - See above
    Logical Reads/Session - What happens when this limit is reached? Does the session die?
    Logical Reads/Call - See above
    Idle Time - Set to 300
    Connect Time - I do not wish to restrict this
    Private SGA - I am not sure about this (I don't even know if we are using multi-threaded server architecture!)
    So it seems to me, that none of these will meet my needs and consumer resource groups would be the correct thing... but can anyone please confirm?
    Thanks

    I've used CPU_per_call and logical_reads_per_call for our dynamic search. If user happens to enter such criteria that he cannot get at least a row back within certain limits he gets back certain oracle error and on the screen he gets something like "your query used too much resources, enter better criteria" :)
    The overall impact of such queries was limited because of totla rows limit for search typically 100. So at most users could use 100 * almost resource limit per one search.
    If your users can issue whatever statements they like then this is not usable because for example for aggregate queries logical_reads_per_call will be reached quickly and user won't get back result of quite normal statement.
    So probably you have to use resource groups indeed.
    Gints Plivna
    http://www.gplivna.eu

  • Hibernet query returns null for XMLTYPE data when I use oracle type4 driver

    Hi,
    I am using Oracle type-4 driver, My hibernet query returns null for data type XMLTYPE. But when I use BEA type -4 driver its working fine. Please help me to retrive XMLTYPE data using oracle-4 driver through hibernet query.
    Thanks in advance.
    regards,
    Amaresh

    Hi,
    I am using Oracle type-4 driver, My hibernet query returns null for data type XMLTYPE. But when I use BEA type -4 driver its working fine. Please help me to retrive XMLTYPE data using oracle-4 driver through hibernet query.
    Thanks in advance.
    regards,
    Amaresh

  • Problem saving data model when using Oracle DB Pivot feature

    I have problem saving a data model - SQL Query that uses the Oracle DB PIVOT feature?
    When I hit save, nothing happends.... have also tried "save as" - nothing is saved
    No error message is shown.
    Is Oracle DB PIVOT not supported by OBIEE?
    The SQL that is causing the problem is this one:
    SELECT * FROM
    SELECT field_name as field,
    CASE
    WHEN col_1 = 'A' THEN 'Name 1'
    WHEN col_1 like 'B_%' THEN 'Name 2'
    END
    as gastype,
    energy
    FROM table_1
    WHERE code = 'K'
    AND trunc(DAYTIME,'YYYY') = trunc(to_date('2012-01-01 00:00:00','YYYY-MM-DD HH24:MI:SS'), 'YYYY')
    AND (col_1 in ('A') or col_1 like 'B_%')
    PIVOT (sum(energy) for (gastype) in ('Name 1' as Name1, 'Name 2' as Name2))
    order by field
    We are using OBIEE 11.1.1.6.7 (Win 2008R2) against Oracle DB 11.2.0.3

    Just a wild guess .. Have you done dbsetup after installing IAS and said you are going to said databases ?

  • To validate the date in Unix using Oracle

    sqlplus /nolog <<EOF > /dev/null
    CONNECT $ORAUID/$ORAPWD
    WHENEVER SQLERROR EXIT 1
    SELECT TO_DATE('$DATE_INPUT', '$DATE_FORMAT') FROM DUAL;
    EOF
    if [ $? -eq 1 ]; then
    echo "Error: Wrong Date Format - $DATE_INPUT"
    exit
    fi

    You can get the date from the first internal table along with the posnr and calculate date calculations u an use RP_CALC_DATE_IN_INTERVAL    or  RE_ADD_MONTH_TO_DATE and again read the data with posnr and calculated date in the loop.
    Reward points if helpful

  • Designer Vs. Oracle Data warehouse builder

    Dear all,
    Currently I'm responsible of building a Data warehousing project using Oracle database. I'm trying to decide on a tool for modelling my datawarehouse. I have two options:
    1) Designer: we have some experience with this tool and we are using it for our main OLTP application.
    2) Oracle Data Warehouse builder: we are using this to design our ETL processes.
    I want to get some advice on whether the OWB is capable of modelling my datawarehouse and of doing a retrofit action. also, I try to standardize on the tools that are using in the Data Warehouse department (currently we are using only OWB).
    I will appreciate for any other advice to help in my selection process.
    Best Regards,
    Bilal

    Hi,
    In my experience this choice depends on the implementation of the datawarehouse. If you are building a "pure" Kimball style dimensional data warehouse you should be able to do this using OWB. I have architected such a DW in the past using only OWB, so I am speaking from experience.
    If on the other hand you are planning to implement an Inmon style CIF, if your requirements includes an operational data store (ODS), or if you for any other reason anticipate that you are going to be doing a lot of ER modeling, then I would not recommend using the current release of OWB for modelling. (Note however that there are significant improvements to the modelling capabilities in the Paris release of OWB, so this may change in the future)
    The advantage of improved maintainability when using a single tools needs to be weighted against the improved functionality if you choose a combination of the two. In the "two tool" scenario strict development and deployment routines need to be enforced to avoid that the model in Designer comes out of sync with the metadata in OWB. (Consider the effect of a developer making a change to a table definition in OWB and deploying it directly to the database without updating the model in Designer.)
    Hope this helps.
    Regards,
    Roald

  • Can one build a data warehouse using SQL rather than Warehouse Builder?

    I would like to build a data warehouse purely using SQL statements. Where can I find the data warehouse extension of SQL statements?

    I am exploring the internal workings of Warehouse Builder.
    I have written a SQL script to generate sample data to be inserted into tables, then write SQL script to do Extraction, Transformation and Loading using MERGE,, GROUP BY CUBE, DECODE, etc.
    If anyone has any experience of just using SQL to perform ETL, would you share your expeience here? Thanks.

  • Data warehouse backups and read only tablespaces

    Hi all,
    I am working on a data warehouse database with following specs:
    Version: Oracle 10.2.0.3 Enterprise
    OS: Solaris
    App: Data warehouse
    We use RMAN to take 'level 0' & 'level 1' backups. We have block change tracking enabled and RMAN backups up data files and archive logs straight to tape.
    I am exploring ways of reducing the 'level 0' backups and was specifically focussing on using read-only tablespaces for this purpose.
    I have often seen it mentioned that a best practice in D/Ws is to store the old static partitions of fact tables in read only tablespaces so as to reduce the backup size.
    In case you have already implemented such a scheme, I would like to know how you have implemented it.
    I am thinking of the following mechanism:
    -- Start using backups at tablespace level rather than 'level 0' at database level.
    -- Record the latest SCNs of all datafiles prior to back up.
    -- If the latest SCN has not changed since last backup and the tablespace is in read only mode then
    -- Check if a backup copy of the tablespace has been done within the recovery window and is accessible.
    -- If the copy exists then don't backup that tablespace, else backup the tablespace.
    -- If the tablespace is read/write then back it up.
    I haven't delved into the low level details, but this seems to be lot of work. So just wanted to know from you if there's any ready made feature which makes all this easier.
    Many thanks in advance.

    Thank you so much for your help.
    Backup optimization was indeed the thing I was looking for. To be honest I had done a bit of RTFM, but I didn't check the advanced user guide.
    Although my specific question has been answered, it would be interesting to know what other things other people are implementing to reduce backups etc.
    I am also thinking of following options:
    -- Turn on index monitoring to get rid of unused indexes.
    -- Stop the backups of 'index' tablespaces.
    -- Archive off old data.
    Any other ideas for reducing DW backup size?
    Many thanks.

  • Data warehouse database

    <p>
    Today I came across one very interesting question
    </p>
    <p>
    "Data Warehouse can be only deployed in relation database."
    </p>
    <p>
    Above statement is true or false.
    </p>
    <p>
    If we see it simply without any complication or may be go back 7-8 years it's answer may be false as I find out after doing research on it
    </p>
    <p>
    "A data warehouse can be normalized or denormalized. It can be a relational database, multidimensional database, flat file, hierarchical database, object database, etc. Data warehouse data often gets changed. And data warehouses often focus on a specific activity or entity." Larry Greenfield
    </p>
    <p>
    The data warehouse is normally (but does not have to be) a relational database. It must be organized to hold information in a structure that best supports not only query and reporting, but also advanced analysis techniques, like data mining. Most data warehouses hold information for at least 1 year and sometimes can reach half century, depending on the business/operations data retention requirement. As a result these databases can become very large.en.wikipedia.org
    </p>
    <p>
    But I think when we look into the complication of designing and functionality which we are expecting from a data warehouse today and plus the concept which use when designing the data warehouse structure like star scheme, snow flake etc., I think it cannot be done in any other type of database which don't follow the relation database concept. We may call it multidimensional database or ORDBMS and we may talk about cubes, measures, dimension and so on but from the base it has to follows the relation database.
    </p>
    <p>
    Let me know if anybody has anything to say about it.
    </p>
    <br>
    Regards,
    <br><br>
    Raj<br>
    <b>www.oraclebrains.com<a>
    <br><font color="#FF0000">POWERED by the people, to the people and for the people WHERE ORACLE IS PASSION.</font></b>

    Thanks Justin!
    <br><br>
    I agree with you the concept exist before the relational database was invented. Last time I know they call it EIS then they name it MIS and now data warehouse. But what I am taking about is modern data warehouse technique, If you really think that any other type of database can support it without following relational database concept. Let me know which one?
    <br><br>
    I am still searching for my answers and have discuss with lot of people, but when I asked them have they seen any implementation of data warehouse without using relational database, the answer that I get is always negative.<br><br>
    Raj<br>
    <b>www.oraclebrains.com<a>
    <br><font color="#FF0000">POWERED by the people, to the people and for the people WHERE ORACLE IS PASSION.</font></b>

Maybe you are looking for