Verifying LBI Maintain Rights

 2 Replies
 2 Subscribed to this topic
 22 Subscribed to this forum
Sort:
Author
Messages
ALB
Veteran Member Send Private Message
Posts: 130
Veteran Member
We are moving from on-premise to the Cloud without realizing that we were expected to maintain LBI security from that initial cut. We have some reports which are bursted. It appears that some people were partially set up. Does anyone have any SQL they use to confirm LBI Rights match?
Dave Curtis
Veteran Member Send Private Message
Posts: 136
Veteran Member
I suppose it would depend on what elements you have your rights built with but here is the start of what I think you are looking for. I use this to compare the LBI rights to structure that the rights are built on (such as supervisor codes, department etc). Might get you started at least... SELECT rm.ruleid, rm.rulename, rm.ruledescription, rm.ruleowner, rm.startdate, rm.enddate, rm.status, rv.rulegrouping, rv.structureid, st.structurename, rd.elementorder, rv.elementid, el.elementname, rd.operand, rv.elementvalue1, rd.elementvalue2 FROM rsuser.ers_rulemaster rm, rsuser.ers_rulevalues rv, rsuser.ers_elements el, rsuser.ers_structure st, rsuser.ers_ruledetail rd WHERE rm.ruleid = rv.ruleid AND rv.elementid = el.elementid AND rv.structureid = st.structureid AND ( rv.ruleid = rd.ruleid(+) AND rv.elementid = rd.elementid(+) AND rv.structureid = rd.structureid(+) AND rv.rulegrouping = rd.rulegrouping(+)) ORDER BY rm.rulename, st.structureid, rv.rulegrouping, rd.elementorder, rv.elementid
Joan Herzfeldt
Veteran Member Send Private Message
Posts: 74
Veteran Member
Hi Angela - This is similar to Dave's but I found and linked the role and username as well. select distinct M.RULEID , U.CONSUMERID AS USERORROLE , ghs.GET_USERGROUP_NAME(u.CONSUMERID) as USERNAME , M.RULENAME , M.RULEOWNER , M.STARTDATE --datetime field for CR , M.ENDDATE --datetime field for CR , D.STRUCTUREID, S.STRUCTURENAME , D.ELEMENTID, E.ELEMENTNAME , D.ELEMENTORDER , V.SEQUENCEID , D.OPERAND , V.ELEMENTVALUE1 , D.ELEMENTVALUE2 , V.RULEGROUPING FROM ERS_RULEMASTER M JOIN ERS_RULEMAPPINGS U ON M.RULEID = U.RULEID JOIN ERS_RULEDETAIL D ON M.RULEID = D.RULEID JOIN ERS_RULEVALUES V ON D.RULEID = V.RULEID and D.STRUCTUREID = V.STRUCTUREID and D.ELEMENTID = V.ELEMENTID JOIN ERS_STRUCTURE S ON D.STRUCTUREID = S.STRUCTUREID AND S.STATUS = 'A' JOIN ERS_ELEMENTS E ON D.ELEMENTID = E.ELEMENTID where M.STATUS = 'A'