Due to performance problem with the admin views prior to r12.5 workarounds were available which involved building RLS table for all groups. The workaround involved the following:
The original workaround required writing the search or report not using the top level view but the _RLS view which sits directly below the top view. For example. Instead of using WGN_V_EVENTPARTPNTUSER_1 use WGN_V_EVENTPARTPNTUSER_RLS_1. As the search user also has SELECT privileges granted on this view, it is possible to still for non-admin user to run the search. However if the search is written like this, when an admin user tries to run the search it will return no rows as the underlying RLS tables will not have been populated. Therefore before the searches can be run the stored procedure (SQL Server) or function (Oracle) must manually apply RLS for the admin user. This is achieved by a call to the procedure WGN_POPULATE_GROUP_HIER_RLS. The procedure requires three parameters: IDM, ID and Group Filter flag. The values of the first two parameters are dependent on the third parameter. If the Group Filter flag is set to 0, then the other two parameters should be UserIDM and UserID for the admin user and the users management groups will be returned. If the Group filter flag is set to 1, then the other two parameters should be GroupIDM and GroupID for the management group to which RLS will be applied. SQL Server also requires an extra step to clean up the database once the search as completed as the tables here are permanent. The search stored procedure should call WGN_REMOVE_GROUP_HIER_RLS to delete all rows from the RLS tables associated with the admin user.
However the admin views have now been fixed to perform much better so this workaround is no longer need. Additionally if this workaround as been implemented it is strongly recommend that you now remove this and use the normal admin views. The work around will not work if the customers decide to implement additional RLS model, plus as already stated in Primary Views Definitions these views are being deprecated.
|
Copyright © 2014 CA.
All rights reserved.
|
|