Row-level Security for LASR Tables

About Row-level Security

Row-level permission conditions are specified in the New Permission Condition window for LASR tables. Here is a display of the New Permission Condition window where you can specify the syntax for row-level permissions that apply to a LASR table:
New Permission Condition Window
New Permission Condition Window
CAUTION:
The syntax that you enter and save in the New Permission Condition is not checked for validity. Make sure that the syntax that you enter is correct.

Syntax Rules for Row-level Permissions

The following table provides syntax guidelines and examples for row-level permissions that can be applied to a LASR table. These are typically the most commonly used expressions. However, note that this is not an exhaustive list of all possible expressions.
Syntax Guidelines and Examples for Row-Level Permission Conditions
Syntax Guidelines
Examples
Do not include WHERE for numeric values or text variables.
Correct: 
Toy_Type="dolls"
Year=2012
Toy_Price=20
Incorrect: 
WHERE Year="2012"
WHERE Toy_Price="20"
Non-numerical character values must be embedded within double quotation marks. 
Customer_Country="US"
Toy_Type="animals"
Specify OR as a logical operator. 
Customer_Country="US" OR Customer_Country="UK"
Toy_Type="cars" NOT Toy_Type="dolls"
Specify AND as a logical operator. 
Customer_Country="US" AND Customer_Country="UK" 
AND Customer_Country="FR"
Specify NOT as a logical operator. 
Toy_Type="animals" NOT Toy_Type=dolls NOT Toy_Type=cars
Specify IN for groups of values that need to be checked. 
Toy_Type=("dolls" "cars" "animals")
Specify CONTAINS to include a value. 
Toy_Type CONTAINS "cars"
Specify BETWEEN to include a range of values. 
Toy_Price BETWEEN 10 and 20
Specify LIKE 
Toy_Type LIKE "dolls"
Specify = 
Toy_Price=25
Specify > 
Toy_Price>25
Specify < 
Toy_Price<25
Specify >= 
Toy_Price>=25
Specify <= 
Toy_Price<=25
Specify <> 
Toy_Price<>25
Specify NE 
Toy_Price NE 30
Specify NOT 
Toy_Price NOT=30
Specify NOTIN 
Toy_Price NOTIN (3,600)
Specify IN 
Toy_Price IN (30)
Specify BETWEEN 
Toy_Price BETWEEN 20 AND 30
Specify NOT BETWEEN 
Toy_Price NOT BETWEEN 20 AND 30
Specify ^ 
Toy_Price^=30
Specify DESCRIP CONTAINS 
DESCRIP CONTAINS "Doll"
Specify DESCRIP NOT CONTAINS 
DESCRIP NOT CONTAINS "Animal"
Specify DESCRIP ? 
DESCRIP ? "Animal"
Specify DESCRIP ? 
DESCRIP ? "Animal"
Specify DESCRIP LIKE 
DESCRIP LIKE "Car"
Specify DESCRIP NOT LIKE 
DESCRIP NOT LIKE "Doll"
Note the following exceptions:
  • Use of | | for an expression with OR cannot be used.
  • Expressions with months or dates cannot be used.

Set Permission Conditions for a LASR Table

From the LASR Tables tab, you can select Conditional Grant only for LASR tables. You cannot select Conditional Grant for all tables in the metadata.
To set a permission condition for a LASR table:
  1. Log on to SAS Visual Analytics Administrator, and expand the navigation pane for folders.
  2. In the navigation pane, locate the LASR table whose row-level security you want to define.
  3. Right-click the table and select Authorization. The table’s authorization properties are displayed.
  4. In the Read column, click the cell for the identity that you want to assign the condition to.
    Note: If the user or group is not listed, click the plus icon (on the right edge of the table) to open the Add Identities window.
    Note: An explicit grant of the ReadMetadata permission is automatically set for each identity that you add.
  5. From the cell’s drop-down list, select Conditional grant.
    Note: If Conditional grant is already selected, a condition already exists. Selecting Conditional grant enables you to view or update the condition.
  6. In the New Permission Condition window, enter and save the condition.
    Note: When you click outside the cell on the Authorization page, a conditional grant icon conditional grant icon is displayed in the cell that you updated.
    CAUTION:
    The syntax that you enter and save in the New Permission Condition is not checked for validity. Make sure that the syntax that you have entered is correct.
  7. Save the table object.

See Also

SAS Visual Analytics: Administration Guide
Copyright © SAS Institute Inc. All rights reserved.