Security Diff¶
Compare the security assigned to folders and objects in two places, in the same environment or across environments.
License and permission
The Security Diff tab appears when your license includes the BusinessObjects client features, at least one BusinessObjects environment is loaded, and your MetaMiner role grants the permission Tab: Security Diff on every loaded BusinessObjects environment. See Permissions Reference and Editions and Licensing.
How it works¶
You place one or more folders or objects in the Left Target and Right Target areas. MetaMiner reads the security of both sides from the BusinessObjects CMS and shows the two security trees one above the other (top and bottom), with differences highlighted.
Typical uses:
- Check that a promoted folder kept the same access rights in the target environment.
- Compare two folders in one environment that should be secured alike.
- Find principals that exist on one side only.
Image of the Security Diff tab with a folder in each target and the top and bottom security tables showing differences
../../images/client/security-diff-tab.png
Toolbar options¶
| Option | What it does |
|---|---|
| Include folder contents | Also compares the security of the objects inside the selected folders, not only the folders themselves. |
| Match principals by CUID | Matches users and groups by CUID. When cleared, principals are matched by name (use this across environments where CUIDs differ). |
| Match rows by CUID | Matches folders and documents by CUID. When cleared, they are matched by full path. |
| Compare another | Returns to the target areas to start a new comparison. |
Compare security¶
- Open the Security Diff tab.
- Drag a folder or object from the CMS Explorer onto Left Target.
- Drag the folder or object to compare onto Right Target.
- Set Include folder contents, Match principals by CUID and Match rows by CUID as needed.
- Start the comparison. MetaMiner shows "Loading security info..." while it reads both sides; large folders take a while.
- Review the top (left) and bottom (right) tables.
Note
Some actions in the result panes work on one table at a time. When you run one of them, MetaMiner asks whether to apply it to the Top or Bottom table.
TODO: confirm the exact control that starts the comparison and the meaning of each highlight colour
Source to check: run a Security Diff in the current MMC build and capture the legend.
Troubleshooting¶
No Security Data
"No security data found for rows on the left/right" means MetaMiner returned no security entries for that side. Check that the environment is loaded, that the objects still exist, and that your MetaMiner role grants Explore Security for that environment.
Every principal shows as different across environments
CUIDs of users and groups usually differ between environments. Clear Match principals by CUID to match by name.