Privilege Package Security Elements

Marketing, Security, and Other Elements 16-21 QueryPrivilege

16.2.8 User

The user element corresponds to the user object in the repository. These objects represent the metadata repository copies or versions of externally managed user objects. The user tag includes the following attributes: The user tag includes the following child elements: Syntax User … fullName= loggingLevel= RefPrivilegePackage … Groups RefGroup … RefGroup … Groups DBSignOnList DBSignOnMap RefDBSignOn … Table 16–22 User Tag Attributes Attribute Name Description fullName The full name of this user. password This attribute is not used. periodicity This attribute is not used. loggingLevel The logging level for this user. logStatisticsStatus This attribute is not used. noExpiry This attribute is not used. Table 16–23 User Child Elements Element Name Description RefPrivilegePackage References the privilege package, or set of object privileges, data filters, and query privileges, that apply to this user. Groups References the application roles to which this user belongs. Each application role is contained in a sub-element called RefGroup. DBSignOnList References database login user names and passwords, along with the corresponding database, if this user has database-specific logins defined. Each pair of database credentials and database name is contained in a sub-element called DBSignOnMap. Each DBSignOnMap sub-element contains two additional sub-elements: RefDBSignOn, which references the database credentials, and RefDatabase, which references the database name. Note that passwords are encrypted. See the syntax for the user element to see the complete hierarchy for the DBSignOnList child element. 16-22 Oracle Fusion Middleware Integrators Guide for Oracle Business Intelligence Enterprise Edition RefDatabase … DBSignOnMap …… DBSignOnList User Example User name=mgr id=1501:7 uid=8 fullName=East Region Manager loggingLevel=0 Description [CDATA[ my_desc ]] Description Groups RefGroup id=4206:4 qualifiedName=quot;Region Managerquot; Groups User 16.2.9 Group The group element corresponds to the application role object in the repository metadata. The group tag includes the following child elements: The group tag does not include any attributes. Note that the schema lists attributes for logLevel and logStatisticsStatus, but these attributes are not used. Syntax Group … RefPrivilegePackage … ChildGroups RefGroup … ChildGroups Users RefUser … Users Group Example Group name=Region Manager id=4206:4 uid=5 Description RefPrivilegePackage id=4209:469 qualifiedName=quot; PrivPack_4209:16704985826474quot; Table 16–24 Group Child Elements Element Name Description RefPrivilegePackage References the privilege package, or set of object privileges, data filters, and query privileges, that apply to this application role. ChildGroups References the set of application roles that belong to this application role. Each child application role is contained in a sub-element called RefGroup. Users References the users that belong to this application role. Each user is contained in a sub-element called RefUser. Marketing, Security, and Other Elements 16-23 Group

16.2.10 DB Sign-On

The DB sign-on element corresponds to the information provided in the Logons tab of the user object. If the repository has been set up for database-specific login IDs and passwords, you can set up database-specific credentials to allow privileged users to connect to the underlying databases at the level of authority granted to those users in the databases. The DB sign-on tag includes the following attributes: The DB sign-on tag does not include any child elements. Syntax DBSignOn … user= password= DBSignOn Example DBSignOn name=LOGON_4211:205511263581806 id=4211:20551 uid=2160777097 user=my_db_user password=D7EDED84BC624A917F5B462A4DCA05CDCE256EEEEEDC97D51DC6FAD705A87E76AC4 D07C3A079829F Description DBSignOn

16.2.11 FMW Security

The FMW security element is not used.

16.3 Other Elements

The elements described in this section are miscellaneous elements that do not fit into any other category. These elements include: ■ Section 16.3.1, Project ■ Section 16.3.2, Query Object

16.3.1 Project

The project element corresponds to the project object in the repository metadata. Projects support multiuser development by enabling developers to work on projects in their area of responsibility. The project tag includes the following child elements: Table 16–25 DB Sign-on Tag Attributes Attribute Name Description user The user name for the underlying database. password The corresponding password for the underlying database. Note that passwords are encrypted.