Modules:Analytics Security

Security and Access

Security and authorized access to relevant data is of prime importance for any analytics application. Openbravo Analytics makes use of the same security concepts as core Openbravo. Each user has access to a set of entities. When generating the Mondrian mapping the following precautions are taken:

• cubes are only generated/mapped for main entities to which the user has access taking into account his/her current role. So changing role can result in different cubes to be available.
• within the cube mapping organization filters are added to prevent information of other organizations to show up.

See for example a snippet of generated Mondrian mapping, as you can see organization filtering is present.

<View alias="alias1_1">
<SQL>
select * from c_orderlinetax alias1_2 where alias1_2.ad_org_id in ('E443A31992CB4635AFCAEABE7183CE85','0','DC206C91AA6A4897B44DA897936E0EC3',
'7BABA5FF80494CAFA54DEBD22EC46F01','BAE22373FEBE4CCCA24517E23F0C8A48','19404EAD144C49A0AF37D54377CF452D','B843C30461EA4501935CB1D125C9C25A',
'2E60544D37534C0B89E765FE29BC0B43') and (1 = (select 1 from c_tax as t where t.sopotype='S' and alias1_2.c_tax_id=t.c_tax_id))
</SQL>
</View>
<Dimension name="salesOrderLine-productCategory" foreignKey="c_orderline_id" caption="Sales Order Line - Product Category">
<Hierarchy hasAll="true" primaryKey="c_orderline_id" primaryKeyTable="c_orderline">
<Join leftKey="m_product_id" rightKey="m_product_id">
<Table name="c_orderline" alias="alias1_3">
<SQL>
alias1_3.ad_org_id in ('E443A31992CB4635AFCAEABE7183CE85','0','DC206C91AA6A4897B44DA897936E0EC3','7BABA5FF80494CAFA54DEBD22EC46F01',
'BAE22373FEBE4CCCA24517E23F0C8A48','19404EAD144C49A0AF37D54377CF452D','B843C30461EA4501935CB1D125C9C25A','2E60544D37534C0B89E765FE29BC0B43')
</SQL>