Configure Record View Permissions

The Record View feature allows users of the clients (such as SuperWEB2 and SuperCROSS) to view the individual unit record data that contributes to a cell.

Use the cat command to control which users and groups have access to the Record View feature. You can set permissions at the dataset level, and override this for specific users or groups.

The best approach will depend on your requirements. For example you can either:

Deny permission to everyone at the dataset level, and then explicitly allow specific users or groups access.
Set the dataset to allow everyone access to Record View and then explicitly override this to prevent specific users or groups from accessing it.

Access to Record View is automatically blocked by SuperSERVER for any datasets with confidentiality modules configured and the ConfidentialityModule property set to true. It is also possibly to fully disable Record View by following the steps under Disable Record View below.

Dataset Level Setting

To set Record View permissions at the dataset level, use the following command:

CODE

cat <dataset_id> recordview {true|false}

Please note that you cannot set Record View permissions for administrator users. These users will always have access to the Record View feature. If you wish to globally disable Record View you may wish to consider turning off the feature completely in SuperWEB2 using the global.enableRecordView setting in the configuration.properties file (this hides the RecordVIEW button in SuperWEB2) and the global SuperSERVER setting described in Disable Record View below (this blocks access to unit records at the SuperSERVER level).

You should also note that running the command cat <dataset_id> recordview will display the record view setting for the user currently logged in to SuperADMIN. As you will be logged in to SuperADMIN as an administrator user, this command will continue to display true even after running the command cat <dataset_id> recordview false.

User or Group Override

To override the dataset permission for a specific user or group, use the following command:

CODE

cat <dataset_id> recordview value {<user>|<group>} {true|false}

Review Overrides

To see which users or groups have specific Record View settings applied, use the following command:

CODE

cat <dataset_id> recordview value

Clear a User or Group Override

To clear a user or group override and revert to the dataset setting for that user or group, use the following command:

CODE

cat <dataset_id> recordview value {<user>|<group>} reset

To clear all user or group overrides for a specific dataset, use the following command:

CODE

cat <dataset_id> recordview value reset

Example 1: Deny All Except Specific Group

To prevent all users from accessing Record View for the Retail Banking dataset (ID: bank), except for those that are members of a group called RVUsers, use the following commands:

CODE

> cat bank recordview false
> cat bank recordview value RVUsers true

You can use the command cat <dataset_id> recordview value to review the current user and group overrides:

CODE

> cat bank recordview value
[Value Settings : RVUsers]
    Value : true

Example 2: Allow All Except Guest Users

To allow all users to access Record View for the Retail Banking dataset except SuperWEB2 guest users, use the following commands:

CODE

> cat bank recordview true
> cat bank recordview value guest false

Disable Record View

If you do not want to use the Record View feature at all, you can disable it completely by changing a setting in the SuperSERVER configuration:

Open the configuration file tablemanager.config.xml in a text editor. This file is located in the SuperSERVER program data directory (if you installed to the default location it will be located in C:\ProgramData\STR\SuperSERVER SA).

Locate the following section:

XML

<KEY name="RecordView">
    <BOOL name="Allow" value="true"/>
</KEY>

Change the value to false:

XML

<KEY name="RecordView">
    <BOOL name="Allow" value="false"/>
</KEY>

Restart the SuperSTAR service.

The above configuration blocks access to unit records at the SuperSERVER level. If you are using the SuperWEB2 client, you should additionally use the global.enableRecordView setting in the configuration.properties file to hide the RecordVIEW button in SuperWEB2.