Skip to content

platformadmin.com

Paul Homes blogging on SASĀ® platform administration topics

  • Home
  • Reading List
  • About / Contact
  • RSS Feed
  • Twitter
  • LinkedIn
  • GitHub
  • Twitter (Metacoda)
  • LinkedIn (Metacoda)
  • YouTube (Metacoda)
platformadmin.com

Tag: SAS Metadata Security

Metacoda Plug-ins Tip: Compare Metadata Objects

One of the new additions in the recently released Metacoda Plug-ins 6.1 R2 is a Compare Metadata Objects feature. This is a something that several customers have requested, particularly for the comparison of SAS metadata security objects like ACTs, Users, Groups, and Roles. One of the most common requests was to be able to compare users, who are supposed to be almost identical, but are found to have different access. Being able to compare the two users to see which groups they have, or don’t have, in common helps to speed up troubleshooting.

With the new Compare Metadata Objects dialog, you can compare any two metadata objects to show similarities and differences. Whilst it can be used to do a basic comparison of any 2 metadata objects, specific attention has been given to aid in the comparison of security objects, including ACT Permission Patterns, ACT and ACE participation, applied ACTs and ACEs, user/group membership of groups and roles, and members of groups and roles.

There are several ways to access this feature. The first is to use SAS Management Console Tools menu:

Metacoda Security Plug-ins Compare Metadata Objects in SAS Management Console Tools menu

… this opens the comparison dialog where you can proceed to search for, and select, the two objects you want to compare. Continue reading “Metacoda Plug-ins Tip: Compare Metadata Objects”

Author Paul HomesPosted on 21 April 2019Categories Metacoda Security Plug-insTags ACT Reviewer, Compare Metadata Objects, Metacoda Plug-ins, Metacoda Plug-ins Tip, Metacoda Security Plug-ins, SAS, SAS 9.2, SAS 9.3, SAS 9.4, SAS Metadata Security, User ReviewerLeave a comment on Metacoda Plug-ins Tip: Compare Metadata Objects

Metacoda Plug-ins Tip: User’s Group Content Admin Permissions (Identity Permissions Explorer)

This tip was prompted by a SAS Communities question which I hear from time to time, essentially “How do I find out which groups a SAS user is a Portal Group Content Administrator for?” It can be answered using the Metacoda Identity Permissions Explorer but involves a few steps so I will outline them here.

To quote the SASĀ® 9.4 Intelligence Platform: Web Application Administration Guide, Group Content Administrator section:

A group content administrator is a user who has WriteMetadata permission for the respective group, and the group’s Portal permission tree. A group content administrator can share personal content with the group, and can edit or remove content that has been shared with the group. (Portal administrators have WriteMetadata permission for all group permission trees that are defined in metadata.)

So, to find out which groups a user is group content admin for, we need to look for all of the group portal permission trees where the user has a grant of the WM permission. This can be done quickly and easily using the Metacoda Identity Permissions Explorer. Below is a screenshot with numbered steps where we find out which groups Aaron Atkins (demoaaron), a fictitious Business Analyst, is a Portal Group Content Administrator for. Continue reading “Metacoda Plug-ins Tip: User’s Group Content Admin Permissions (Identity Permissions Explorer)”

Author Paul HomesPosted on 13 September 2018Categories Metacoda Security Plug-insTags Identity Permissions Explorer, Metacoda Plug-ins, Metacoda Plug-ins Tip, Metacoda Security Plug-ins, SAS, SAS 9.2, SAS 9.3, SAS 9.4, SAS Information Delivery Portal, SAS Metadata SecurityLeave a comment on Metacoda Plug-ins Tip: User’s Group Content Admin Permissions (Identity Permissions Explorer)

Metacoda Plug-ins Tip: Advanced Expression-Based Filters (Protected Object Reviewer)

This post continues a series of examples on Advanced Expression-Based Filters for Metacoda Plug-ins, in this case for the Protected Object Reviewer.

Here are some expressions that you may find useful to copy and paste into the filter bar of the Metacoda Protected Object Reviewer as a starting point for finding interesting sets of SAS metadata objects that have had access controls, Access Control Templates (or ACTs) and/or Access Control Entries (ACEs or explicit permissions), applied to them:

Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have had any ACTs or ACEs applied to them.

#@ path.startsWith("/Vegas Enterprises")

ACT Protected Tree Branch Objects: show folders and objects, underneath the /Vegas Enterprises metadata tree branch, that have had ACTs applied (and optionally ACEs). Continue reading “Metacoda Plug-ins Tip: Advanced Expression-Based Filters (Protected Object Reviewer)”

Author Paul HomesPosted on 16 May 201816 May 2018Categories Metacoda Security Plug-insTags ACE, ACT, Advanced Expression-Based Filters, BeanShell, Filter Bar, Member Level Security, Metacoda Plug-ins, Metacoda Plug-ins Tip, Metacoda Security Plug-ins, Protected Object Reviewer, Row Level Security, SAS Metadata SecurityLeave a comment on Metacoda Plug-ins Tip: Advanced Expression-Based Filters (Protected Object Reviewer)

Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACE Reviewer)

This post continues a series of examples on Advanced Expression-Based Filters for Metacoda Plug-ins, in this case for the ACE Reviewer.

Here are some expressions that you may find useful to copy and paste into the filter bar of the Metacoda ACE Reviewer as a starting point for finding interesting sets of SAS Access Control Entries (ACEs or explicit permissions):

Tree Branch ACEs: show explicit permissions on folders and objects underneath the /Vegas Enterprises/HR metadata tree branch.

#@ protectedObjectPath.startsWith("/Vegas Enterprises/HR")

Object Type ACEs: show explicit permissions on folders (excluding the root folder) Continue reading “Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACE Reviewer)”

Author Paul HomesPosted on 16 May 201816 May 2018Categories Metacoda Security Plug-insTags ACE, ACE Reviewer, Advanced Expression-Based Filters, BeanShell, Filter Bar, Member Level Security, Metacoda Plug-ins, Metacoda Plug-ins Tip, Metacoda Security Plug-ins, Row Level Security, SAS Metadata SecurityLeave a comment on Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACE Reviewer)

Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACT Reviewer)

Many of the Metacoda Plug-ins have Filter Bars which provide a way to filter the contents displayed and show an interesting subset. Normally they do simple case-insensitive “contains” filtering on key attributes like name and description (the filter bar label indicates which attributes are used).

Metacoda Plug-ins Filter Bar

Simple text filtering, as described above, is sufficient for many needs. However, for more advanced requirements there is the ability to switch to expression-based filters which are much more flexible. To use expression-based filtering you add a #@ prefix at the beginning of the filter bar field. What follows is then an expression that can use many of the other attributes/columns available in the tables. This expression is written as a Java like expression (BeanShell to be precise) and must resolve to a boolean true/false to determine whether a row should be shown in the table. Any errors in the expression will be shown in a popup error dialog.

This will allow you to do complex expressions like this in the User Reviewer: Continue reading “Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACT Reviewer)”

Author Paul HomesPosted on 16 May 201816 May 2018Categories Metacoda Security Plug-insTags ACT, ACT Reviewer, Advanced Expression-Based Filters, BeanShell, Filter Bar, Metacoda Plug-ins, Metacoda Plug-ins Tip, Metacoda Security Plug-ins, SAS Metadata SecurityLeave a comment on Metacoda Plug-ins Tip: Advanced Expression-Based Filters (ACT Reviewer)

Posts navigation

Previous page Page 1 Page 2 Page 3 … Page 10 Next page
RSS Feed Follow me on Twitter View my LinkedIn® profile Send me a message   Vertical separator   Visit the Metacoda web site Follow Metacoda on Twitter

Metacoda - productivity through metadata visibility

Horizontal separator

Tags

  • Accounts/Logins
  • ACT
  • Active Directory
  • Base SAS
  • Best Practices
  • Blogging
  • Identity Sync
  • IWA
  • Kerberos
  • Linux
  • Logging
  • Metacoda Plug-ins
  • Metacoda Plug-ins Tip
  • Metacoda Security Plug-ins
  • Metadata API
  • Metadata Migration
  • Metadata Promotion
  • Metadata Security Testing
  • Mid-Tier
  • PAM
  • platformadmin.com
  • Roles & Capabilities
  • SAS
  • SAS 9.1
  • SAS 9.2
  • SAS 9.3
  • SAS 9.4
  • SAS Add-In for Microsoft Office
  • SAS Architecture
  • SAS Configuration
  • SAS Enterprise Guide
  • SAS Global Forum
  • SAS Information Delivery Portal
  • SAS Installation
  • SAS Management Console
  • SAS Metadata
  • SAS Metadata Security
  • SAS Papers
  • SAS Training
  • SAS Usage Notes
  • SPN
  • Ubuntu
  • UNIX
  • Windows
  • Windows 2008 R2

Blog Roll [ ... and links to blog rolls]

  • [ … blogs.sas.com]
  • [ … PROC-X.com]
  • [ … SAS RSS Feeds]
  • [ … sasCommunity.org Planet]
  • Business Intelligence Notes
  • NOTE: The blog of RTSL.eu
  • The SAS Dummy

Metacoda Links

  • Metacoda
  • Metacoda Security Plug-ins
  • Metacoda Support

SAS Communities

  • SAS Communities
  • Stack Overflow / SAS tag
  • Super User / SAS tag

SAS Institute Links

  • SAS
  • SAS Australia
  • SAS Customer Support

SAS User Groups

  • [ … other SAS user groups]
  • SAS Global Forum
  • SUGA

Categories

  • General
  • Guest Posts
  • Interesting SAS Usage Notes
  • Linux
  • Metacoda
  • Metacoda Custom Tasks
  • Metacoda Plug-ins
  • Metacoda Security Plug-ins
  • SAS Architecture
  • SAS Books
  • SAS Configuration
  • SAS Documentation
  • SAS Enterprise Guide
  • SAS Environment Manager
  • SAS Installation
  • SAS Management Console
  • SAS Metadata
  • SAS Metadata Security
  • SAS Open Metadata API
  • SAS Software
  • SAS Support Resources
  • SAS Training
  • SAS User Groups
  • SAS Viya
  • Solaris
  • VirtualBox
  • Windows

Archives

  • October 2020
  • March 2020
  • June 2019
  • April 2019
  • March 2019
  • February 2019
  • October 2018
  • September 2018
  • August 2018
  • May 2018
  • February 2018
  • September 2017
  • August 2017
  • June 2017
  • April 2017
  • January 2017
  • July 2016
  • April 2016
  • March 2016
  • November 2015
  • September 2015
  • July 2015
  • June 2015
  • March 2015
  • February 2015
  • January 2015
  • October 2014
  • May 2014
  • March 2014
  • February 2014
  • December 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • February 2012
  • January 2012
  • December 2011
  • November 2011
  • October 2011
  • September 2011
  • August 2011
  • July 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • September 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • Home
  • Reading List
  • About / Contact
  • RSS Feed
  • Twitter
  • LinkedIn
  • GitHub
  • Twitter (Metacoda)
  • LinkedIn (Metacoda)
  • YouTube (Metacoda)

Copyright © 2010-2021 Paul Homes. All rights reserved. | Legal Notices | Admin