Datastage Admin

anil411 · Post by **anil411** » Wed Oct 07, 2009 8:55 pm

Hi All,

Right now I am having permissions to view logs using Datastage Director and the developers do not have access to view the log. I have permissions to execute the jobs in production.

I want to provide all the developers to view the log using their indidual id but should not modify/run the jobs in production.

Please advice me what changes i need make in order to provide permissions to view only log using Datastage Director in Production without allowing changes to modify the jobs and also not to run the jobs by the developers.

Thanks for your Help.

Regards,
Anil

ray.wurlod · Post by **ray.wurlod** » Wed Oct 07, 2009 10:20 pm

Not possible unless you get very creative with permissions on the individual logs. When you upgrade to version 8 you get a "super operator" DataStage role that does what you require.

anil411 · Post by **anil411** » Thu Oct 08, 2009 7:54 am

Ray,

We want to view Production Log. The users should not execute/modify the Datastage Jobs but only view the log.

We have command center and they will schedule the jobs. The jobs are scheduled to run every day after 11:00 PM.

As an ETL Developer, I want to view the job log in production without having access to modify/run the jobs.

Appreciate your Help.

chulett · Post by **chulett** » Thu Oct 08, 2009 7:58 am

As noted, not easily possible in your version. What people typically do in your case is build a system to automatically farm the DataStage job logs out of the repository into another more open one, say like a database, after every run. Then people are giving access to that.

kduke · Post by **kduke** » Thu Oct 08, 2009 8:50 am

It may be possible. All the logs are in RT_LOG* directories. You would have to make these readable.

swades · Post by **swades** » Thu Oct 08, 2009 10:21 am

Or write your detail job log into different project directory where all ETL developer have "read" access.

Remember - Archive your log files regularly.

Use this command in your unix shell script.

Code: Select all

dsjob 
-logdetail [-useid] <project> <job | jobid> <first event id> [<last event id>]

As noted earlier, it is not possible to view log from DataStage director client without giving run/modify permission.

chulett · Post by **chulett** » Thu Oct 08, 2009 11:00 am

Well... the 'modify' part is simple enough with read only jobs or a protected project. It's the "and not run them" part that's the sticky in the wicket.