Select Manage, then select Identity. In the Identity Manager dialog, in the tree pane, select BI Repository. In the Application Role dialog, click Permissions. In the Max Rows column, type the maximum number of rows for users to retrieve In the Status Max

13-12 Metadata Repository Builders Guide for Oracle Business Intelligence Enterprise Edition Setting Query Limits You can manage the query environment by setting query limits governors in the repository for particular application roles. You can limit queries by the number of rows received, by maximum run time, and by restricting to particular time periods. You can also allow or disallow direct database requests or the Populate privilege. You should always set query limits for particular application roles rather than for individual users. This section contains the following topics: ■ Accessing the Query Limits Functionality in the Administration Tool ■ Limiting Queries By the Number of Rows Received ■ Limiting Queries By Maximum Run Time and Restricting to Particular Time Periods ■ Allowing or Disallowing Direct Database Requests ■ Allowing or Disallowing the Populate Privilege Accessing the Query Limits Functionality in the Administration Tool Follow the steps in this section to access the Query Limits tab of the UserApplication Role Permissions dialog. To access the query limits functionality in the Administration Tool for a particular application role: 1. Open your repository in the Administration Tool.

2. Select Manage, then select Identity.

3. In the Identity Manager dialog, in the tree pane, select BI Repository.

4. In the right pane, select the Application Roles tab, then double-click the application role for which you want to set query limits. Note that if you are in offline mode, no application roles appear in the list unless you have first modified them in online mode. See About Applying Data Access Security in Offline Mode for more information.

5. In the Application Role dialog, click Permissions.

6. In the UserApplication Role Permissions dialog, click the Query Limits tab. Limiting Queries By the Number of Rows Received You can control runaway queries by limiting queries to a specific number of rows. To limit queries by the number of rows received: 1. Follow the steps in Accessing the Query Limits Functionality in the Administration Tool to access the Query Limits tab.

2. In the Max Rows column, type the maximum number of rows for users to retrieve

from each source database object.

3. In the Status Max Rows field, select one of the following options for each

database: ■ Enable: This limits the number of rows to the value specified. If the number of rows exceeds the Max Rows value, the query is terminated. Applying Data Access Security to Repository Objects 13-13 ■ Disable: Disables any limits set in the Max Rows field. ■ Warn: Does not enforce limits, but logs queries that exceed the set limit in the Query log. ■ Ignore: Limits are inherited from the parent application role. If there is no row limit to inherit, no limit is enforced.

4. Click OK, then click OK again to return to the Identity Manager.

Limiting Queries By Maximum Run Time and Restricting to Particular Time Periods You can forbid queries during certain time periods, or you can specify the maximum time a query can run on a database. If you do not select a particular time period, access rights remain unchanged. If you allow or disallow access explicitly in one or more application roles, users are granted the least restrictive access for the defined time periods. For example, if a user is a member of an application role that is explicitly allowed access all day on Mondays, but that user also belongs to another application role that is disallowed access during all hours of every day, then the user has access on Mondays only. To limit queries by maximum run time, or restrict queries to particular time periods: 1. Follow the steps in Accessing the Query Limits Functionality in the Administration Tool to access the Query Limits tab.

2. To specify the maximum time a query can run on a database, in the Max Time