developer shold not run job in protected project

DSbox61 · Post by **DSbox61** » Thu Oct 30, 2008 4:16 pm

Hullo ppl, I know there is a lot of stuff related to the Proteced project but i need help with any workarounds on my requirements.

We want to have a read-only project where the development team can only
1) view the jobs(designs,stage properties, performance statistics,job properties) and not compile or run the jobs in the designer.
2) view the logs in director but not run and jobs.
3) export jobs and metadata but not import any.

The production team should have full access to add/edit the jobs,compile,run the jobs and all other access over the jobs

I know that the protected project is the closest solution for these. but, is ther a workaround to restrict the developer from running a job in designer and director.

Also, do the users under production manager role have the same level of permissions as admin?

Thank You for ur help.

ray.wurlod · Post by **ray.wurlod** » Fri Oct 31, 2008 8:54 am

Don't allow the developers to have any role at all in the protected project.

DSbox61 · Post by **DSbox61** » Fri Oct 31, 2008 9:05 am

Ray, if i move them under <None> user role then they wont even be able to login to the designer for the protected project. I would want them to be able to view the job designs but not make any changes to the job.

chulett · Post by **chulett** » Fri Oct 31, 2008 9:17 am

A Protected project will automatically accomplish that, as will 'read only' jobs. Your problem is the 'run' part - if you have access to the project, you can run jobs there. Unless there's some new magical 8.x role (existent or coming) that will enforce that...

ray.wurlod · Post by **ray.wurlod** » Fri Oct 31, 2008 9:20 am

NO such magic role in the roadmap. They can look at the designs in development environment, which is what they should be doing in a rigorous software development life cycle. Only executables should be promoted into production for maximum rigour.

vmcburney · Post by **vmcburney** » Fri Oct 31, 2008 12:57 pm

In version 8.1 they can view all the log messages in the web console instead of DataStage Director - so you can take Director rights away from them to prevent them from running jobs. The log view in the console in some ways will be better with cross job reporting and filtering. You can also generate HTML job documentation that comes with a bitmap and click through to html job properties. That might be good enough to debug job problems. Then there is the new Information Server Manager that lets you import components via a GUI or command line. Once again that's an interface that does not have access to running jobs or getting to data. So have a look at version 8.1.