Verifying LBI Maintain Rights

 2 Replies
 2 Subscribed to this topic
 23 Subscribed to this forum
Sort:
Author
Messages
ALB
Veteran Member
Posts: 132
Veteran Member
New Poster
New Poster
Congrats on posting!
Engaged Poster
Engaged Poster
Wow, you're on a roll!
Avid Poster
Avid Poster
Seriously, you're a posting maniac!
Engaged Reader
Engaged Reader
You are an engaged reader!
Avid Reader
Avid Reader
Avid Reader art thou!
We are moving from on-premise to the Cloud without realizing that we were expected to maintain LBI security from that initial cut. We have some reports which are bursted. It appears that some people were partially set up. Does anyone have any SQL they use to confirm LBI Rights match?
Dave Curtis
Veteran Member
Posts: 136
Veteran Member
New Poster
New Poster
Congrats on posting!
I suppose it would depend on what elements you have your rights built with but here is the start of what I think you are looking for.

I use this to compare the LBI rights to structure that the rights are built on (such as supervisor codes, department etc).

Might get you started at least...

SELECT rm.ruleid,
rm.rulename,
rm.ruledescription,
rm.ruleowner,
rm.startdate,
rm.enddate,
rm.status,
rv.rulegrouping,
rv.structureid,
st.structurename,
rd.elementorder,
rv.elementid,
el.elementname,
rd.operand,
rv.elementvalue1,
rd.elementvalue2
FROM rsuser.ers_rulemaster rm,
rsuser.ers_rulevalues rv,
rsuser.ers_elements el,
rsuser.ers_structure st,
rsuser.ers_ruledetail rd
WHERE rm.ruleid = rv.ruleid
AND rv.elementid = el.elementid
AND rv.structureid = st.structureid
AND ( rv.ruleid = rd.ruleid(+)
AND rv.elementid = rd.elementid(+)
AND rv.structureid = rd.structureid(+)
AND rv.rulegrouping = rd.rulegrouping(+))
ORDER BY rm.rulename,
st.structureid,
rv.rulegrouping,
rd.elementorder,
rv.elementid
Joan Herzfeldt
Veteran Member
Posts: 74
Veteran Member
Hi Angela - This is similar to Dave's but I found and linked the role and username as well.

select distinct
M.RULEID
, U.CONSUMERID AS USERORROLE
, ghs.GET_USERGROUP_NAME(u.CONSUMERID) as USERNAME
, M.RULENAME
, M.RULEOWNER
, M.STARTDATE --datetime field for CR
, M.ENDDATE --datetime field for CR
, D.STRUCTUREID, S.STRUCTURENAME
, D.ELEMENTID, E.ELEMENTNAME
, D.ELEMENTORDER
, V.SEQUENCEID
, D.OPERAND
, V.ELEMENTVALUE1
, D.ELEMENTVALUE2
, V.RULEGROUPING

FROM ERS_RULEMASTER M
JOIN ERS_RULEMAPPINGS U ON M.RULEID = U.RULEID
JOIN ERS_RULEDETAIL D ON M.RULEID = D.RULEID
JOIN ERS_RULEVALUES V ON D.RULEID = V.RULEID and D.STRUCTUREID = V.STRUCTUREID and D.ELEMENTID = V.ELEMENTID
JOIN ERS_STRUCTURE S ON D.STRUCTUREID = S.STRUCTUREID AND S.STATUS = 'A'
JOIN ERS_ELEMENTS E ON D.ELEMENTID = E.ELEMENTID

where M.STATUS = 'A'