Configure Record View Permissions
The Record View feature allows users of the clients (such as SuperWEB2 and SuperCROSS) to view the individual unit record data that contributes to a cell.
Use the cat
command to control which users and groups have access to the Record View feature. You can set permissions at the dataset level, and override this for specific users or groups.
The best approach will depend on your requirements. For example you can either:
- Deny permission to everyone at the dataset level, and then explicitly allow specific users or groups access.
- Set the dataset to allow everyone access to Record View and then explicitly override this to prevent specific users or groups from accessing it.
Access to Record View is automatically blocked by SuperSERVER for any datasets with confidentiality modules configured and the ConfidentialityModule
property set to true
.
Dataset Level Setting
To set Record View permissions at the dataset level, use the following command:
cat <dataset_id> recordview {true|false}
Please note that you cannot set Record View permissions for administrator users. These users will always have access to the Record View feature. If you wish to globally disable Record View you may wish to consider turning off the feature completely in SuperWEB2 using the global.enableRecordView
setting in the configuration.properties file.
You should also note that running the command cat <dataset_id> recordview
will display the record view setting for the user currently logged in to SuperADMIN. As you will be logged in to SuperADMIN as an administrator user, this command will continue to display true
even after running the command cat <dataset_id> recordview false
.
User or Group Override
To override the dataset permission for a specific user or group, use the following command:
cat <dataset_id> recordview value {<user>|<group>} {true|false}
Review Overrides
To see which users or groups have specific Record View settings applied, use the following command:
cat <dataset_id> recordview value
Clear a User or Group Override
To clear a user or group override and revert to the dataset setting for that user or group, use the following command:
cat <dataset_id> recordview value {<user>|<group>} reset
To clear all user or group overrides for a specific dataset, use the following command:
cat <dataset_id> recordview value reset
Example 1: Deny All Except Specific Group
To prevent all users from accessing Record View for the Retail Banking dataset (ID: bank
), except for those that are members of a group called RVUsers
, use the following commands:
> cat bank recordview false
> cat bank recordview value RVUsers true
You can use the command cat <dataset_id> recordview value
to review the current user and group overrides:
> cat bank recordview value
[Value Settings : RVUsers]
Value : true
Example 2: Allow All Except Guest Users
To allow all users to access Record View for the Retail Banking dataset except SuperWEB2 guest users, use the following commands:
> cat bank recordview true
> cat bank recordview value guest false