Problem Note 42382: Deny access not honored for composite models
 |  |  |  |
In SAS® Financial Management, if you explicitly deny a user access to a composite model, the user is still able to create a new report based on the composite model.
However, if you explicitly deny a user access to an individual results model, the security/permissions work as expected.
As a workaround, explicitly deny access to all the results models that are contained in the composite model. Then, not only is the access denied for that user to the individual results models, but also to the composite model.
This is marked as fixed in release 5.3 of SAS Financial Management.
To deny access to the model:
- Select the Models workspace in SAS Financial Management Studio.
- Select the specific model and select 'Show properties for this model'.
- In the Properties dialog, select 'Security' and select 'Add...'.
- In the 'Add Users and Groups' dialog, enter part or all of the username (the user's SAS Financial Management log on ID) and select 'Search'.
- When the list of user IDs and Names appears, select the appropriate user and then select 'Add'. If you need to set security for multiple users, you can either select multiple usernames in this window (if the appropriate names are listed) and select 'Add' or else repeat this process until the appropriate users are all added.
- When finished adding users, select 'Close'.
- In the 'Security' window, select the appropriate username(s) and ensure that 'Can access this model' in the Permissions field is NOT selected.
- Select 'OK'.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Financial Management | Microsoft® Windows® for x64 | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 for x64 | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Datacenter Edition | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Enterprise Edition | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2003 Standard Edition | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows Server 2008 for x64 | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Microsoft Windows XP Professional | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Windows Vista | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
| Windows Vista for x64 | 5.1 | 5.3 | 9.2 TS2M0 | 9.3 TS1M0 | ||
If you explicitly deny access to a composite model, the user is still able to create a new report based on the composite model. See the content of this note for a suggested workaround.
| Type: | Problem Note |
| Priority: | medium |
| Date Modified: | 2011-02-15 08:49:02 |
| Date Created: | 2011-02-14 11:09:03 |