Business Unit Security

[jgold]

Hi all...i know this has been posted about before, but i have read through the posts and have not been able to find a solution for my problem.
I am trying to implement business unit security for 5 business units. We have them well organized into ranges which should in theory simplify things.
One ofthe business units is range 1000-1999 with a warehouse 'WH07'. the second is 3000-3999 with a warehouse 'WHSD03' am using inclusive security as follows

*PUBLIC *ALL 4 Row Security CostCenter 1 ZZZZZZZZZZZZ MCU N N N N
GROUP1 *ALL 4 Row Security CostCenter 1000 1999 MCU Y Y Y Y

yet a user in Group1 can query a record that belongs to the company 2. I believe it might have something to do with the warehouse cost center, but im not sure.

any suggestions?

thanks

Joe

 

[shearerj]

The joys of row security...

Unfortuantely it does not work as you have defined. You cannot remove and grant back as you would with objects. Your security would need to look like:

GROUP1 *ALL 4 Row Security CostCenter 1 999 MCU N N N N
GROUP1 *ALL 4 Row Security CostCenter 2000 ZZZZZZZZZZZZ MCU N N N N

It sounds like you may be in a situation where Exclusive row security would be helpful.