Multiple choice technology databases

Which of the following statements is correct regarding the implementation of object security in Framework Manager?

  1. Groups and roles can be createdin the Cognos namespace when specifying access to objects.

  2. Even when object security is applied, if anonymous access is configured, every objectin a Framework Manager project is visible toeveryone.

  3. A user belongs to two groups. One of the groups isdenied access to an object. The other group is grantedaccess to the object.The result is that user has access to the object.

  4. Grantingaccess toan object for one user, group orrole(except theEveryone and All Authenticated Users groups), implicitlydenies access to that object for all other users, groups or roles.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Groups and roles are created in authentication providers (LDAP, Active Directory), not the Cognos namespace during object security specification. Anonymous access does override object security when configured, making everything visible. When a user belongs to multiple groups, Deny always takes precedence over Grant, so the user would be denied access. The security model is explicit: granting to one implicitly denies all others, which is why the 'Everyone' and 'All Authenticated Users' groups exist as convenient catch-alls.

Keep practicing — related questions