In this exercise, you will apply four different ACL to Reports. Take the following steps:
- In MicroStrategy Developer, log in as administrator to the MicroStrategy Analytics Modules Project Source. First, we need to make sure our test subject, the User smith is not omnipotent within the MicroStrategy Tutorial Project. Therefore, it is necessary to make sure the Bypass all object security access checks privilege is not granted.
- Edit the User smith | Change the MicroStrategy Tutorial Security Role to Basic Access (if you completed the previous exercise, it had Admin Access Security Role assigned) or, if you don't have this Security Role, select Normal Users | OK.
- Browse to the My Exercises folder | Copy My First Report and paste it four times | Name each instance as follows:
- My First Report (View)
- My First Report (Modify)
- My First Report (Full Control)
- My First Report (Denied All)
- Right-click on My First Report (View) | Properties | Security | select Everyone ACL entry and Remove | select Public / Guest ACL entry and Remove.
- Click Add | Select the Everyone Group in the first dropdown | Donald (make sure the Show users check box is enabled) | Click on the funnel to reveal the User smith | Set Access Permission as View.
- Repeat the process for the other three Reports by adding the smith ACL accordingly (Modify, Full Control, and so on). Make sure that both the Everyone and the Public/Guest ACL entries are removed on every Report.
The Denied All permission set is not available in the Access Permission dropdown when the User is added. Select any other permission set, such as View, and then change it on the Object's ACL, as follows:
- Log out from the Administrator session | Log in as the User smith | Browse to the My Exercises folder within the MicroStrategy Tutorial. Check that the following scenarios are true:
- My First Report (View): Can be executed and opened in the Editor but not saved. It is also not possible to set the Object's ACL (Properties | Security).
- My First Report (Modify): Can be executed and opened in the Editor, and saved, but it is not possible to set the Object's ACL (Properties | Security).
- My First Report (Full Control): You can do all of the above plus set its ACL (Properties | Security).
- My First Report (Denied All): The Report is not even visible.
- This finalizes the exercise.