To specify the maximum time a query can run on a database, in the Max Time Click OK, then click OK again to return to the Identity Manager.

Applying Data Access Security to Repository Objects 13-13 ■ Disable: Disables any limits set in the Max Rows field. ■ Warn: Does not enforce limits, but logs queries that exceed the set limit in the Query log. ■ Ignore: Limits are inherited from the parent application role. If there is no row limit to inherit, no limit is enforced.

4. Click OK, then click OK again to return to the Identity Manager.

Limiting Queries By Maximum Run Time and Restricting to Particular Time Periods You can forbid queries during certain time periods, or you can specify the maximum time a query can run on a database. If you do not select a particular time period, access rights remain unchanged. If you allow or disallow access explicitly in one or more application roles, users are granted the least restrictive access for the defined time periods. For example, if a user is a member of an application role that is explicitly allowed access all day on Mondays, but that user also belongs to another application role that is disallowed access during all hours of every day, then the user has access on Mondays only. To limit queries by maximum run time, or restrict queries to particular time periods: 1. Follow the steps in Accessing the Query Limits Functionality in the Administration Tool to access the Query Limits tab.

2. To specify the maximum time a query can run on a database, in the Max Time

Minutes column, enter the maximum number of minutes you want queries to run on each database object. Then, in the Status Max Time field, select one of the following options for each database: ■ Enable: This limits the time to the value specified. ■ Disable: Disables any limits set in the Max Time field. ■ Warn: Does not enforce limits, but logs queries that exceed the set time limit in the Query log. ■ Ignore: Limits are inherited from the parent application role. If there is no time limit to inherit, no limit is enforced.

3. To restrict access to a database during particular time periods, in the Restrict

column, click the Ellipsis button. Then, in the Restrictions dialog, perform the following steps: a. To select a time period, click the start time and drag to the end time.

b. To explicitly grant access, click Allow.

c. To explicitly deny access, click Disallow.

d. Click OK.

4. Click OK, then click OK again to return to the Identity Manager.

Allowing or Disallowing Direct Database Requests You can allow or disallow the ability to execute direct database requests for a particular application role. For the selected role, this privilege overrides the property Allow direct database requests by default for the database object in the Physical layer. To set the ability to execute direct database requests: 13-14 Metadata Repository Builders Guide for Oracle Business Intelligence Enterprise Edition 1. Follow the steps in Accessing the Query Limits Functionality in the Administration Tool to access the Query Limits tab.

2. For each database object, in the Execute Direct Database Requests field, select one