Previous Page | Next Page

Security Report Macros

Authorization Data Sets

work.mdsecds_join (the Primary Table for Reporting; Combines objs, permsw, pconds)
Column Name Column Contents
IdentityDispName The display name of this user or group (for example, SAS Demo User). If there is no display name, this column contains the same value as the IdentityName column.
IdentityName The name of this user or group (for example, sasdemo).
IdentityType Person, IdentityGroup, or Role.
Location A container path for this object (for example, \Shared Data\Sales). The path usually consists of folder names but can also include names of other containers.
MetadataCreated The date when this object was created.
MetadataType The internal metadata type for this object.
MetadataUpdated The most recent date that this object was updated.
ObjId The metadata ID for this object (for example, A5HDAJSI.B900066J).
ObjName The name of this object (for example, Shoe Sales by Region).
ObjUri The uniform resource identifier for this object (for example, omsobj:PhysicalTable/A5XT9KUX.B80000001).
ParentObjId The metadata ID for this object's immediate parent. See Inheritance Paths.
Permissions A list of the permissions to inspect for this object. If the list is blank, then all permissions that are applicable to this type of object are inspected.
(permissions) A separate column for each permission. Each cell in these columns contains a value that indicates whether this permission is effectively granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated. For example, Granted by ACT or Denied Explicitly or Granted Indirectly. See Significance of Color in the Effective Permissions List.
PublicType The public metadata type for this object.

work.mdsecds_objs (Contains Folder and Member Information)
Column Name Column Contents
Desc Description information for this object. For most objects, this information comes from the Description field on the General tab in the object's properties dialog box.
Location A container path for this object. The path usually consists of folder names but can also include names of other containers.
MetadataCreated The date when this object was created.
MetadataType The internal metadata type for this object.
MetadataUpdated The most recent date that this object was updated.
ObjId The metadata ID for this object.
ObjName The name of this object.
ObjUri The uniform resource identifier for this object.
ParentObjId The metadata ID for this object's immediate parent.
Permissions A list of the permissions to inspect for this object. If the list is blank, then all permissions that are applicable to this type of object are inspected.
PublicType The public metadata type for this object.

work.mdsecds _pconds (Contains Permission Condition Expressions)
Column Name Column Contents
Condition The expression that limits this grant.
IdentityName The name of this user or group.
IdentityType Person, IdentityGroup, or Role.
ObjUri The uniform resource identifier for this object.
Permission The name of this permission (for example, Read).

work.mdsecds_permsw (Contains Permissions Data Transformed to Wide Format)
Column Name Column Contents
IdentityDispName The display name of this user or group (or the name if there is no display name).
IdentityName The name of this user or group.
IdentityType Person, IdentityGroup, or Role.
ObjName The name of this object.
ObjUri The uniform resource identifier for this object.
(permissions) A separate column for each permission. Each cell in these columns contains a value that indicates whether this permission is effectively granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated.

work.mdsecds _permsl (Contains Permissions Data in Original Long Format)
Column Name Column Contents
Authorization A value that indicates where this permission is granted or denied for this identity. The type of setting (explicit, ACT, or indirect) is also indicated.
Conditionflg A value that indicates whether this permission setting is conditional. The value is either blank (no condition) or * (condition applies and is written to the pconds table).
IdentityDispName The display name of this user or group (or the name if there is no display name).
IdentityName The name of this user or group.
IdentityType Person, IdentityGroup, or Role.
ObjName The name of this object.
ObjUri The uniform resource identifier for this object.
Permission The name of this permission.

Previous Page | Next Page | Top of Page