Example for using GUID or SSO user name to limit Discoverer data

13-22 Oracle Fusion Middleware Configuration Guide for Oracle Business Intelligence Discoverer the GUID or Oracle Single Sign-On user name to further control the data that is returned. You can use Discoverer triggers and the database separately or together.

13.9.2 Example for using GUID or SSO user name to limit Discoverer data

Note: To enable the Oracle Single Sign-On user name to limit Discoverer data, in Discoverer version 11.1.1 and later, SSO User Name must be selected in the User ID field on the Discoverer Administration page in Oracle Fusion Middleware Control. The Discoverer manager at Acme Corp. does the following: 1. Configures the Discoverer middle tier machines so that Oracle Single Sign-On authentication is necessary to access the Discoverer URLs. 2. Creates a Discoverer public connection called Analysis, that has access to a workbook called Sales. 3. Creates a VPD policy against the base tables of the workbooks. The VPD policy determines the data that is returned, based on the value of a variable called CONTEXT1. 4. Creates a database LOGON trigger that sets variable CONTEXT1 to the value of the GUID extracted from the application context information passed to the database by Discoverer. To enable the Oracle Single Sign-On user name to limit Discoverer data, in step 4 replace the GUID, with the Oracle Single Sign-On user name. The Sales workbook is used by two Discoverer users at ACME Corp., Fred Bloggs and Jane Smith. A typical workflow for these two users is shown below: 1. User Fred.Bloggs authenticates through Oracle Single Sign-On and accesses the top level Discoverer URL. 2. Fred selects the public connection Analysis, and opens the workbook Sales. 3. Fred views the data in the default worksheet, and then logs out. 4. User Jane.Smith authenticates through Oracle Single Sign-On and accesses the top level Discoverer URL. 5. Jane selects the public connection Analysis, and then opens workbook Sales. 6. Jane views the data in the default worksheet. Jane sees different data to Fred, despite the identical database connection, workbook, worksheet and database query. The difference is determined by the VPD policy being based on the GUID or Oracle Single-Sign-On user name.

13.9.3 About tasks for using SSO user names to limit Discoverer data