Business Objects XI security Concepts

Xir2 security concepts and migration Key benefits in using Easier, faster, cheaper and safer migration to Xir2

SYNOPSIS BO5 or BO6 security concepts 1 BOE Xir2 new security concepts 2 Comparison. Examples 3 Migration: A double challenge 4 Our approach: 360view toolset 5

BO5 or BO6 security concepts 1 BOE Xir2 new security concepts 2 Comparison. Examples 3 Migration: A double challenge 4 Our approach: 360view toolset 5

BO5 or BO6 security: Concepts ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

BO5 or BO6 security: Effective rights ,[object Object],[object Object],[object Object],[object Object],[object Object],(*) Rights depend also with domains rights. Nota: “NS” means “Not Specified” OK KO OK KO OK KO Universes (*) OK KO OK KO OK KO Documents (*) OK KO OK KO OK KO Domains OK KO OK KO OK KO Stored procedures KO KO OK KO OK OK Security commands OK OK + NS OK KO + NS OK KO OK OK Applications OK + KO KO OK NS

BOE Xir2 security concepts: Folders ,[object Object],[object Object],Objects folders tree (documents & universes)

[object Object],[object Object],BOE Xir2 security concepts: Groups - Users Sales Sales USA Purchasing George George Deski group Sales USA Purchasing

BOE Xir2 security concepts: Concepts ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Double inheritance example ,[object Object],[object Object],Worldwide sales US Sales George Worldwide sales group has an explicit right on Sales folder

Double inheritance implementation « Sales » folder « Worldwide sales » group Right assignment

BOE Xir2 security concepts: Rights ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

BOE Xir2 security concepts: Effective rights ,[object Object],OK OK + NS KO KO + NS KO KO OK KO Xir2 Objects OK + KO KO OK NS ,[object Object],[object Object],[object Object],[object Object],Nota: “NS” means “Not Specified”

BOE Xir2 security concepts: Granularity 1/2 ,[object Object],[object Object],[object Object],[object Object]

BOE Xir2 security concepts: Granularity 2/2

Example 1/3: Rights comparison ,[object Object],OK OK + NS KO KO + NS KO KO OK KO Xir2 Objects OK + KO KO OK NS Nota: “NS” means “Not Specified” OK OK + NS KO KO + NS OK KO OK KO Universes OK + KO KO OK NS BO5 or BO6 effective rights (user real rights): In Version 5.x or 6.x you could denied access to a universe to a user in one group and allow him/her in another group. In Xi, not even an “Explicitly granted” OK will over rule an “Explicitly denied” KO . Morale: Use the “Explicitly denied” right wisely !

Example 2/3: Current BO vision ,[object Object],[object Object]

Example 3/3: BOE Xir2 vision ,[object Object],[object Object],[object Object],Audit group (maybe a new group) Georges Cedric form3 Rights

BO and BOE security comparison 1/2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

BO and BOE security comparison 2/2 ,[object Object],[object Object],[object Object],[object Object],[object Object]

BOE Xir2 security migration: Double challenge ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Challenge 1: Define a security model ,[object Object],[object Object],[object Object],[object Object]

Challenge 2: Things to do pre-migration ,[object Object],[object Object],[object Object],[object Object]

Migration objectives: Recalls ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Challenge 2: Security migration - Alternatives - Risks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Our Solution for security migration ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Key benefits in using 360view ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Approach and requirements ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Contact Sebastien Goiffon +33 660 822 440 [email_address] Christophe Mallet +61 424 961 998 [email_address] www . goiffon . biz www .360view.info

Business Objects XI security Concepts

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Empfohlen

Empfohlen (20)

Business Objects XI security Concepts