Restrict the readonly user to edit administrator in prod

virtusadsuser · Post by **virtusadsuser** » Tue Feb 21, 2012 1:02 am

How to restrict the read-only user to edit/manipulate Datastage administrator variable in production, even though access grant has read-only, they able to edit the variable. Please suggest.
Regards,
Jay

kandyshandy · Post by **kandyshandy** » Tue Feb 21, 2012 1:28 am

What do you mean by read-only user in the context of DataStage?

virtusadsuser · Post by **virtusadsuser** » Tue Feb 21, 2012 3:13 am

it's an type of access. Datastage user will not allowed to edit the job in designer.

qt_ky · Post by **qt_ky** » Tue Feb 21, 2012 2:11 pm

Which security role(s) have you granted to the user in question?

What is your version?

Which user regististry is being used on your server?

kandyshandy · Post by **kandyshandy** » Tue Feb 21, 2012 8:31 pm

virtusadsuser wrote:it's an type of access. Datastage user will not allowed to edit the job in designer.

That is called as "DataStage Operator" role. Can you respond to Eric's questions?

virtusadsuser · Post by **virtusadsuser** » Tue Feb 28, 2012 4:19 am

Version: 8.1

I did not understand the question on user registry. How can I find out this out? Are you referring to linking user ids through windows active directory or through Linux OS? Can you please elaborate?

This is to find out if there is any way we can customize(add/delete) the existing privileges for a DataStage operator role. Because when i set the roles for a user, we have options only to select a role. What privileges are available to that role is not displayed in management console. Any thoughts around this would help us?

qt_ky · Post by **qt_ky** » Wed Feb 29, 2012 6:49 pm

Yes, you got my question right. I have seen some issues with using the local operating system (unix) as an external user registry.

For DataStage users, you do have to choose from the existing security roles in DataStage Administrator, per user, per project.

Please describe again what it is you are trying to restrict access to and keep access to for a given user.