The typical default settings for Constraints are listed as follows:
Constraint Settings for Customer (like) and Employee (like) Data Partitions should be the following:
View constraint as:
'SKELETONS READ_PGROUP in @root.pgroups or READ_PGROUP.[pgroup] contained_roles.role in @root.id) and ACTIVE_STATE = 0'
Pre-update and Delete constraint:
'id = 0' (id=0 indicates no access)
View constraint as:
READ_PGROUP in @root.pgroups or READ_PGROUP.[pgroup] contained_roles.role in @root.id
Pre-update and delete constraint:
WRITE_PGROUP in @root.pgroups OR WRITE_PGROUP.[pgroup] contained_roles.role IN @root.role
Constraint Settings for CA SDM Analyst (like), Knowledge Managers (like) and Knowledge Engineers (like) should be the following:
View constraint as:
(ACTIVE_STATE >=0 )and (READ_PGROUP in @root.pgroups or READ_PGROUP.[pgroup] contained_roles.role in @root.id) OR (ACTIVE_STATE > 0 AND ASSIGNEE_ID = @root.id) OR (ACTIVE_STATE = 0 AND OWNER_ID = @root.id)) Active
Pre-update and delete constraint:
(ACTIVE_STATE >= 0) AND (WRITE_PGROUP in @root.pgroups OR WRITE_PGROUP.[pgroup] contained_roles.role IN @root.role) OR (ACTIVE_STATE > 0 AND ASSIGNEE_ID = @root.id) OR (ACTIVE_STATE = 0 AND OWNER_ID= @root.id)) Active
View constraint as:
READ_PGROUP in @root.pgroups or READ_PGROUP.[pgroup] contained_roles.role in @root.id
Pre-update and delete constraint:
WRITE_PGROUP in @root.pgroups OR WRITE_PGROUP.[pgroup] contained_roles.role IN @root.role
| Copyright © 2012 CA. All rights reserved. | Tell Technical Publications how we can improve this information |