The stage policy file loads permissions associated with the IBM Cognos 8 security model.
When staging permissions using the Metrics Store staging tables, policies are inherited only until another policy is found. For example, if one user is granted permissions to a top level scorecard and a different user is granted permissions to a scorecard two levels down, you must also explicitly grant permissions to the scorecard two levels down.
The stage policy file loads the stage_policy table. The columns in the stage policy file are as follows.
| No. | Column | Description |
| 1 | object_id |
The unique identifier for the object. |
| 2 | object_type_cd |
The code indicating the type of object with which this parameter is associated. Values: KPI (metric), SC (scorecard), ASC (root of all scorecards), KPICL (metric type), AKC (root of all metric types), STELM (strategy element), AST (root of all strategy elements), STRAT (strategy) |
| 3 | kpi_indicator_type_id |
The metric type identifier for the first metric. This is the identifier that was staged for the metric type in the .cmm file or metric_type_stage table, or that was entered in the user interface. Value: metric type ID Required for a metric |
| 4 | kpi_home_sc_id |
The home scorecard identifier of the first metric. This is the identifier that was staged for the scorecard in the .cmo file or object_stage table, or that was entered in the user interface. Value: home scorecard ID Required for a metric |
| 5 | kpi_qualifier_id |
The unique identifier of the qualifier used to distinguish the first metric from other metrics of the same type on the same home scorecard. This is the identifier that was staged for the qualifier in the .cmo file or object_stage table, or that was entered in the user interface. Required if more than one type of this metric exists on the same home scorecard |
| 6 | security_namespace_id |
The identifier of a Cognos 8 authentication namespace used to resolve the reference in the security_reference_id column. Used to differentiate the value in the security_reference_id when more than one Cognos 8 authentication namespace is configured. This value can be blank if the security_reference_id is in the form of a CAMID. |
| 7 | security_reference_id |
The unique identifier of the security entity (user, group, or role) to which this policy applies. Values: The name of the security entity, identifier of the user, or the search-path field in IBM Cognos 8 |
| 8 | delete_policy |
The flag indicating whether or not to delete the corresponding policy from the database. If the security_reference_id is blank, all policies associated with the object are deleted. Values: Y (Yes), N (No) Default: N |
| 9 | read_perm |
The state of the Read permission. Values: D (deny), G (grant), U (unset) Default: U |
| 10 | write_perm |
The state of the Write permission. Values: D (deny), G (grant), U (unset) Default: U |
| 11 | setpolicy_perm |
The state of the Set policy permission. Values: D (deny), G (grant), U (unset) Default: U |
| 12 | readannotations_perm |
The state of the Read comments permission. Applies only to objects of type KPI, SC, ASC, and STELM. Values: D (deny), G (grant), U (unset) Default: U |
| 13 | annotate_perm |
The state of the Write comments permission. Applies only to objects of type KPI, SC, ASC, and STELM. Values: D (deny), G (grant), U (unset) Default: U |
| 14 | writeproject_perm |
The state of the Write project permission. Applies only to objects of type KPI, SC, ASC, and STELM. Values: D (deny), G (grant), U (unset) Default: U |
| 15 | writeactual_perm |
The state of the Write actual permission. Applies only to objects of type KPI, SC, and ASC. Values: D (deny), G (grant), U (unset) Default: U |
| 16 | writetarget_perm |
The state of the Write target permission. Applies only to objects of type KPI, SC, and ASC. Values: D (deny), G (grant), U (unset) Default: U |
| 17 | writetolerance_perm |
The state of the Write tolerance permission. Applies only to objects of type KPI, SC, and ASC. Values: D (deny), G (grant), U (unset) Default: U |
| 18 | writeudc_perm |
The state of the Write UDC permission. Applies only to objects of type KPI, SC, and ASC. Values: D (deny), G (grant), U (unset) Default: U |
| 19 | security_reference_type |
The type of security entity being referenced in the security_reference_id column. Optional: can be used to resolve ambiguities if the security reference resolves to more than one security entity of different types Values: A (account), G (group), R (role) Default: none |
Source: Metric Studio User Guide 8.4.1
www.cogknowhow.com