User Rights

User Rights Applied to UNV Universes

User rights that applied to UNV universes fall into three categories:

  • Security rights

    Security rights can be set at universe design tool, universe and relational connection level.

  • Universe overloads

    The rights defined on universes are Connections, Controls, SQL, Objects, Rows, and Table Mapping.

  • Object access level

    The object access level defines a restriction level for users (Private, Public, Confidential…) A user who does not have the required access level cannot view the objects beyond his scope.

These user rights are applied before an application user makes use of the REST APIs and therefore are transparent to the REST API user. For example, objects denied by the access level are not returned in the universe outline, when getting it through GET .../universes/<universeID>. Connections, Objects, Rows, and Table Mapping rights are applied when getting the query results through the OData service or when getting the list of values through GET .../queries/<queryID>/parameters.

Only a few security rights can have an impact on the use of the REST APIs. The following table presents them.

Right Description
"View objects" at relational connection level If this right is disabled, the user cannot see the connection and the query cannot be run.
"View objects" at universe level If this right is disabled, the universe is not displayed in the universe list and any call with the universe ID returns an error.
"Data access" This custom security right is defined at universe level or relational connection level. If this right is disabled, any call to the OData service returns an error.
User Rights Applied to UNX Universes

The same user rights apply to UNX universes. Universe overloads are managed through business and data security profiles. Business security profiles manage rights on metadata at the business layer level. Data security profiles manage rights at the data foundation level. These profiles are attached to users or groups of users. The same security rights can have an impact on the use of the REST APIs.