My parameters feature - improved security evaluation

Hello,

we are using the My parameters feature in cognos where from one place we can share the prompt selection cross many reports as default option.

We have a lot of security in our system including data source/package levels.

When using my parameters feature today there is actually security check on all my parameters imported under customization>parameters and accessible to users via roles even though some parameters are not visible in the list because the opened report does not use them (in such case cognos is not showing them).

That represents problem as some security roles have many parameters activated but users do not have access to all the data sources sourcing them and those users would have error in the portal my parameters section when opening it (which is trying to load all the activated parameters nto only the visible ones).

We would expect the validation for those parameters to be done only on those parameters visible (used in the opened report) not all of the ones in the imported list on the role. So no matter what is configured on roles for parameters only the ones visible should be check/loaded.

Configuring correctly/uniquely roles to cover all security profiles would be complicated as security roles in relation to customizations in cognos work only with priorities, so assignment to multiple security groups for users would be a problem as its not threated the standard way (grant on one role grant globally, deny on one role deny globally, the role with higher priority wins globally)