LDAP Server Security Elements

16-16 Oracle Fusion Middleware Integrators Guide for Oracle Business Intelligence Enterprise Edition hiddenParam= cacheEntries= CustomAuthenticator Example CustomAuthenticator name=Authenticator id=3047:1210 uid=1148510121 cacheExpiry =1000 path=authenticate.dll DescriptionDescription CustomAuthenticator

16.2.5 Privilege Package

The privilege package element is a container for other privileges. It corresponds to a set of permissions that applies to a particular user or application role object in the repository metadata. The privilege package element contains the information available on the Object Permissions, Data Filters, and Query Limits tabs of the UserApplication Role Permissions dialog in the Administration Tool. Because privilege packages can be associated with more than one user or application role, the total number of privilege packages may not equal the total number of users and application roles. The privilege package tag includes the following child elements: Table 16–17 Privilege Package Child Elements Element Name Description QueryPrivileges References any query privileges that belong to this privilege package, along with the corresponding database. Each pair of query privileges and database name is contained in a sub-element called Mapping. Each Mapping sub-element contains two additional sub-elements: RefDatabase, which references the database name, and RefQueryPrivilege, which references the query privilege. See the syntax for the privilege package element to see the complete hierarchy for the QueryPrivileges child element. Filters References any data filters that belong to this privilege package by mapping an object name with the filter expression. Each pair of object name and filter expression is contained in a sub-element called Mapping. This sub-element has one attribute called Status. Valid values are Enabled, Disabled, and Ignored. Each Mapping sub-element contains two additional sub-elements: RefObject, which references the metadata object name, and Expr, which contains the filter expression. See the syntax for the privilege package element to see the complete hierarchy for the Filters child element. ObjectPrivileges References any object privileges that belong to this privilege package. Each object privilege is contained in a sub-element called RefObjectPrivilege. Marketing, Security, and Other Elements 16-17 The privilege package tag does not include any attributes. Note that the schema lists attributes for none, read, write, readwrite, delete, grant, and all, but these attributes are not used. Instead, these permissions are exposed as part of the child element definitions. Syntax PrivilegePackage … QueryPrivileges Mapping RefDatabase … RefQueryPrivilege … Mapping QueryPrivileges RefTypePrivilege .. Filters Mapping status= RefObject … Expr … Mapping Filters ObjectPrivileges RefObjectPrivilege … ObjectPrivileges PrivilegePackage Example PrivilegePackage name=PrivPack_4209:16704985826474 id=4209:469 uid=425 Description Filters Mapping status=enable RefObject id=4008:459 qualifiedName=quot;Paintquot;.. quot;Marketsquot; Expr [CDATA[ Paint.Markets.Region = Eastern Region ]] Expr Mapping Mapping status=enable RefObject id=4008:462 qualifiedName=quot;Paintquot;..quot;Sales Measuresquot; Expr [CDATA[ Paint.Markets.Region = Eastern Region ]] Expr Mapping Mapping status=enable RefObject id=4008:463 qualifiedName=quot;Paintquot;..quot;Share Measuresquot; Expr [CDATA[ Paint.Markets.Region = Eastern Region ]] Expr Mapping Mapping status=enable RefObject id=4008:464 qualifiedName=quot;Paintquot;..quot;Forecast Measuresquot; Expr [CDATA[ Paint.Markets.Region = Eastern Region ]] Expr Mapping Mapping status=enable RefObject id=4008:465 qualifiedName=quot;Paint Execquot;