🎴 Flashcard Mode
PL/SQL Database Programming
Card1 / 9
Mastered0
Review0
QuestionClick to flip
Which of the following statements is correct regarding the implementation of object security in Framework Manager?
AnswerClick to flip back
A
Grantingaccess toan object for one user, group orrole(except theEveryone and All Authenticated Users groups), implicitlydenies access to that object for all other users, groups or roles.
💡 Explanation:
Groups and roles are created in authentication providers (LDAP, Active Directory), not the Cognos namespace during object security specification. Anonymous access does override object security when configured, making everything visible. When a user belongs to multiple groups, Deny always takes precedence over Grant, so the user would be denied access. The security model is explicit: granting to one implicitly denies all others, which is why the 'Everyone' and 'All Authenticated Users' groups exist as convenient catch-alls.