Unable To Restrict Users from Viewing ODI Datastore Data in the ODI Interface (Doc ID 1055432.1)

Last updated on JUNE 16, 2022

Applies to:

Symptoms

The issue is raised from the ability to revoke viewing or displaying privileges of data in the Source or Target Datastores from the Oracle Data Integrator (ODI) User using ODI Security Manager.

When the data is in the Datastore of the Model, the view data or data privileges can be revoked from the ODI User by using ODI Security Manager. 

The problem is, this privilege does not remove the access to the data when the Datastore is present in an ODI Integraton Interface as a Source or Target in the Diagram tab.   The user can right clickand view data and/or edit the data when present as such. 

If there is sensitive data which needs to be hidden from the view of the users there is no obvious way of revoking privileges to the ODI User or Profile for viewing or displaying the data from the Interface source and target Datastores.

This can be observed by performing the following steps: 

1. Create a new user in the ODI Security Manager.
2. Grant Connect profile to the user.
3. Right Click and duplicate the NG Designer profile and call it NG View Designer.
4. Expand the new NG View Designer profile, find Datastore and make sure the View Data and Data methods generic privileges boxes are unchecked.
5. Grant the NG View Designer profile to the user (created in step 1).
6. Login to Designer with this user and check that the user is not able to view data from the ODI Model tree.
7. Create an ODI Interface using these Datastores.
8. Right click on the source/target Datastores in the ODI Interface Diagram tab to check that the options should be disabled.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.