Hello everybody,
I’m looking for a best practice to handle the following permission request in application studio (V12, 2022-07).
The following permissions on data level are set:
All users have read-access to all departments, but write-access is limited to one’s own department. So everybody can read every department, but write only on his own. Controlling is allowed to write on all departments. I think this scenario is very common.
Permissions on the department dimension are set in a DAC with Read/Write assigned to the __GRP__ as usual.
In AppStudio I have planning reports in which the user selects the department and then enters planning data.
Of course the database will handle the permissions correctly and prevent users writing to departments he is not allowed to, but in the ListView of the report the user can select all departments (may be even nodes) because he has read access on all dimension elements. Only when he enters data the permission error message raises if no write access is given.
So the challenge is: how can I easily define a ListView in AppStudio that contains only departments to which the user has write access?
I have some ideas with redundant dimensions or cubes that are created based on the DAC-Cube of the original dimension using an Importmaster Job or an APE-Process, no matter what. But I think this is too much overhead, there should be an easier way to do this, right?
Any ideas on this are appreciated.
Thanks,
Ralf
