ACT Reviewer – platformadmin.com

Duplicating or Copying SAS Access Control Templates

When working with SAS® 9 metadata security, I often want to create an Access Control Template (ACT) which is very similar to an existing ACT. It may be that it will have a similar definition or permission pattern. It will usually have the same access controls applied to it for its own protection. It might occasionally be applied to protect the same set of objects as the original ACT.

Duplicating or copying SAS metadata security objects, such as ACTs, users, groups, and roles, has been a common request from Metacoda customers too. For this reason we added duplication support in Metacoda Plug-ins 6.1 R3. In the ACT, User, Group, and Role Reviewer plug-ins you will find a new Duplicate… action in the the context menu seen when right-mouse clicking over an object. A pop-up dialog then gives you some options to control what is duplicated.

The ability to duplicate objects via this facility is limited to SAS administrators via membership of one the standard SAS metadata server roles (i.e. “Metadata Server: Unrestricted“, “Metadata Server: User Administration“, or “Metadata Server: Operation“). Of course you also need permission to view the object you are duplicating. Continue reading “Duplicating or Copying SAS Access Control Templates”

Metacoda Plug-ins Tip: Compare Metadata Objects

One of the new additions in the recently released Metacoda Plug-ins 6.1 R2 is a Compare Metadata Objects feature. This is a something that several customers have requested, particularly for the comparison of SAS metadata security objects like ACTs, Users, Groups, and Roles. One of the most common requests was to be able to compare users, who are supposed to be almost identical, but are found to have different access. Being able to compare the two users to see which groups they have, or don’t have, in common helps to speed up troubleshooting.

With the new Compare Metadata Objects dialog, you can compare any two metadata objects to show similarities and differences. Whilst it can be used to do a basic comparison of any 2 metadata objects, specific attention has been given to aid in the comparison of security objects, including ACT Permission Patterns, ACT and ACE participation, applied ACTs and ACEs, user/group membership of groups and roles, and members of groups and roles.

There are several ways to access this feature. The first is to use SAS Management Console Tools menu:

… this opens the comparison dialog where you can proceed to search for, and select, the two objects you want to compare. Continue reading “Metacoda Plug-ins Tip: Compare Metadata Objects”

Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACT Reviewer)

Many of the Metacoda Plug-ins have Filter Bars which provide a way to filter the contents displayed and show an interesting subset. Normally they do simple case-insensitive “contains” filtering on key attributes like name and description (the filter bar label indicates which attributes are used).

Simple text filtering, as described above, is sufficient for many needs. However, for more advanced requirements there is the ability to switch to expression-based filters which are much more flexible. To use expression-based filtering you add a #@ prefix at the beginning of the filter bar field. What follows is then an expression that can use many of the other attributes/columns available in the tables. This expression is written as a Java like expression (BeanShell to be precise) and must resolve to a boolean true/false to determine whether a row should be shown in the table. Any errors in the expression will be shown in a popup error dialog.

This will allow you to do complex expressions like this in the User Reviewer: Continue reading “Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACT Reviewer)”