This topic summarizes frequently asked questions about DataWorks Security Center.
-
Why can I select fields for some permission requests but not others?
-
Why do two requests appear in My Requests after I submit one request?
-
Why does a field permission requested for one month become permanent after approval?
-
Why do I have access to tables and fields for which I did not request permission?
-
Why has a request disappeared from Pending My Approval even though I did not approve it?
-
Why does returning or revoking permission on a field have no effect?
-
Can I revoke permissions by using request records in Security Center?
What permissions can I request in Security Center?
You can use the Security Center page to request permissions on tables in a DataWorks workspace, including in the development and production environments.
How are Data Management and Security Center related?
Security Center is the upgraded replacement for the permission and security features in Data Management. Permissions previously requested in the Data Management module and permissions granted by using the odpscmd grant command are still displayed in .
To submit and approve new permission requests through the visual interface, go to Security Center. The Data Management module will no longer support permission requests and approvals.
Why can I select fields for some permission requests but not others?
If LabelSecurity is enabled for the workspace, you can select fields when requesting permissions. Otherwise, you can request permissions only on entire tables.
Who approves a permission request after I submit it?
A project administrator or the table owner must approve the request. The approval is complete as soon as either party approves or rejects it.
Why do two requests appear in My Requests after I submit one request?
The tables in your request have different table owners, so Security Center automatically splits the request by table owner.
Why does a field permission requested for one month become permanent after approval?
The field's security level is 0 or is less than or equal to your account's security level.
Why do I have access to tables and fields for which I did not request permission?
This may happen for either of the following reasons:
-
An administrator granted you access through the console command line instead of Security Center.
-
If you requested access through Security Center, the field's security level is 0 or is less than or equal to your account's security level.
Why has a request disappeared from Pending My Approval even though I did not approve it?
Another project administrator or the table owner completed the approval before you did. The request is now closed and no longer appears in your Requests To Be Processed list.
What should I do if a MaxCompute project error prevents me from querying a workspace and environment?
Send the message in the prompt and its error code to the project administrator for investigation and resolution.
Why does returning or revoking permission on a field have no effect?
You can return or revoke permission only on fields whose security level is higher than your account's security level. You cannot return or revoke permission on a field whose security level is 0 or is less than or equal to your account's security level.
Why can't the Alibaba Cloud account request permissions?
The Alibaba Cloud account has all permissions by default and does not need to request them separately. Permission request actions are therefore hidden for this account, which does not affect its normal use.
Can I view requests and approval records previously submitted in Data Management from Security Center?
Request and approval records in Security Center are not linked to those in Data Management. To view historical requests or approvals made in Data Management, go to the Data Management page.
Can I revoke permissions by using request records in Security Center?
Security Center is not the only channel for granting access. To support permission revocation as broadly as possible, Permission Audit lists all users' ACL permissions regardless of how they were granted. You can revoke permissions based on the current permission state without using request records.
Do I need to resubmit a permission request that I submitted in Data Management but that is still pending approval?
Security Center request and approval records are not linked to those in Data Management. You must submit a new request.
How do I set LabelSecurity for fields?
Go to Data Map to set LabelSecurity for fields.