You can translate the question and the replies:

Denodo export function in Data Catalog - Personalization

We have a question about the export function in Data Catalog. For privacy reasons, we don't want our Denodo users to have the grants to EXPORT all views in Data Catalog. In the export configuration section in Data Catalog we tuned on the function named "Only allow to export user with role "data_catalog_exporter" in VDP server." For test_user we added the role "data_catalog_exporter" but this means ALL views of test_user can be exported. We only want 1 of his 10 views to have the export grants. Could you please help and find a way to give grants on VIEW level so our Denodo users are not able to export all their views?
user
11-06-2024 09:43:11 -0400
code

3 Answers

Hello, My understanding is that you want to set export authorizations in Data Catalog. In Virtual DataPort you define which privileges a role has to access databases, views and web services. Data Catalog respects these privileges, so a user has the same access from Data Catalog as he/she has from every other Denodo product, like the Design Studio, the driver JDBC, etc. In order to limit which elements a user can access, you will need to create a export_user on Design Studio and under Administration -> User Management, edit privileges and give "Metadata" and "Execute" permissions only to the selected views this user will be allowed to export. Then in addition, edit roles for this user and add data_calatog_exporter For more information on Data Catalog Authorization, please refer to [Data Catalog Authorization](https://community.denodo.com/docs/html/browse/8.0/en/vdp/data_catalog/authorization/authorization). if you have a Denodo Support account, and you think this approach presents a challenge for scalability, please open an Enhancement Request. Hope this helps!
Denodo Team
 Edited on: 13-06-2024 14:05:02 -0400
code
Hello, we just want to know if there is a workaround. We have User_A: VDB test_vdb_1 he has access to 2 of the 10 views VDB test_vdb_2 he has access to 1 of the 3 views So 3 views in total in 2 VDBS. However, if we give him the role: data_calatog_exporter - he can export all his 3 views from the 2 VDBS. For privacy reasons, we only want him to export 1 of these 3 views. Can we make this possible for this User_A?
user
13-06-2024 03:32:42 -0400
Hello, The workaround is to create a new user just for the purpose of exporting views and giving that user access only to the desired views. So when User_A needs to export a view, he/she will logoff and login as User_exporter to perform that operation. If this workaround presents a challenge for scalability, please open an Enhancement Request. Hope this helps!
Denodo Team
13-06-2024 16:26:04 -0400
code
You must sign in to add an answer. If you do not have an account, you can register here