Verifying LBI Maintain Rights

 2 Replies
 2 Subscribed to this topic
 22 Subscribed to this forum
Sort:
Author
Messages
ALB
Veteran Member Send Private Message
Posts: 130
Veteran Member
We are moving from on-premise to the Cloud without realizing that we were expected to maintain LBI security from that initial cut. We have some reports which are bursted. It appears that some people were partially set up. Does anyone have any SQL they use to confirm LBI Rights match?
Dave Curtis
Veteran Member Send Private Message
Posts: 136
Veteran Member
I suppose it would depend on what elements you have your rights built with but here is the start of what I think you are looking for.

I use this to compare the LBI rights to structure that the rights are built on (such as supervisor codes, department etc).

Might get you started at least...

SELECT rm.ruleid,
rm.rulename,
rm.ruledescription,
rm.ruleowner,
rm.startdate,
rm.enddate,
rm.status,
rv.rulegrouping,
rv.structureid,
st.structurename,
rd.elementorder,
rv.elementid,
el.elementname,
rd.operand,
rv.elementvalue1,
rd.elementvalue2
FROM rsuser.ers_rulemaster rm,
rsuser.ers_rulevalues rv,
rsuser.ers_elements el,
rsuser.ers_structure st,
rsuser.ers_ruledetail rd
WHERE rm.ruleid = rv.ruleid
AND rv.elementid = el.elementid
AND rv.structureid = st.structureid
AND ( rv.ruleid = rd.ruleid(+)
AND rv.elementid = rd.elementid(+)
AND rv.structureid = rd.structureid(+)
AND rv.rulegrouping = rd.rulegrouping(+))
ORDER BY rm.rulename,
st.structureid,
rv.rulegrouping,
rd.elementorder,
rv.elementid
Joan Herzfeldt
Veteran Member Send Private Message
Posts: 74
Veteran Member
Hi Angela - This is similar to Dave's but I found and linked the role and username as well.

select distinct
M.RULEID
, U.CONSUMERID AS USERORROLE
, ghs.GET_USERGROUP_NAME(u.CONSUMERID) as USERNAME
, M.RULENAME
, M.RULEOWNER
, M.STARTDATE --datetime field for CR
, M.ENDDATE --datetime field for CR
, D.STRUCTUREID, S.STRUCTURENAME
, D.ELEMENTID, E.ELEMENTNAME
, D.ELEMENTORDER
, V.SEQUENCEID
, D.OPERAND
, V.ELEMENTVALUE1
, D.ELEMENTVALUE2
, V.RULEGROUPING

FROM ERS_RULEMASTER M
JOIN ERS_RULEMAPPINGS U ON M.RULEID = U.RULEID
JOIN ERS_RULEDETAIL D ON M.RULEID = D.RULEID
JOIN ERS_RULEVALUES V ON D.RULEID = V.RULEID and D.STRUCTUREID = V.STRUCTUREID and D.ELEMENTID = V.ELEMENTID
JOIN ERS_STRUCTURE S ON D.STRUCTUREID = S.STRUCTUREID AND S.STATUS = 'A'
JOIN ERS_ELEMENTS E ON D.ELEMENTID = E.ELEMENTID

where M.STATUS = 'A'