Project level Acess restriction

vintipa · Post by **vintipa** » Wed Nov 05, 2008 4:43 am

hi,

please let me know how i can restrict a user/group from accessing some projects in a server. in one of my server i have to add all the users to group dstage to gain access. but once the user is added to this group he has access to all the projects in that server. how can i resolve this.

Vinay.

ray.wurlod · Post by **ray.wurlod** » Wed Nov 05, 2008 7:24 am

Have a different group associated with each project. The general group (dstage) controls access the the DataStage software, not to projects.

vintipa · Post by **vintipa** » Wed Nov 05, 2008 7:32 am

hi,

how can i achieve this [Have a different group associated with each project]? should the permissions to a group on a project be set at unix level, or it can be done in administrator?

aakashahuja · Post by **aakashahuja** » Wed Nov 05, 2008 8:37 am

Or you can set a project as protected as well (downside is that then it will become read-only for every one)

vintipa · Post by **vintipa** » Wed Nov 05, 2008 8:44 am

hi,

i don't want to make it protected. In my case i created a user in a new group dstage1 and then assigned this group to the new project. but user was not able to access the software as he was not member of dstage group. then when i added user to dstage group he got access to software as well as all other projects.

ray.wurlod · Post by **ray.wurlod** » Wed Nov 05, 2008 8:51 am

Add the user to dstage1 AND dstage groups.

vintipa · Post by **vintipa** » Wed Nov 05, 2008 8:57 am

ya now the user belongs to both dstage and dstage1 groups, that is why he is able to access not only his project but also other unnecessary projects in the server.

ray.wurlod · Post by **ray.wurlod** » Wed Nov 05, 2008 12:24 pm

You need to be more selective about which groups are associated with which projects, and make sure that "other" is suitable restricted in each process.

In particular, the dstage group is not associated with any project.

In addition, you need to tighten the relationship between DataStage roles and group in each project - only members of the project's own group should be given Developer role.