title: PeopleSoft XML Publisher - Query Security
body: <p>We have an XML Publisher template that uses a query (built in query manager) as a data source.  The query uses a custom view containing confidential data.  The report is to be used by managers to view information on their direct reports - this is accomplished by setting parameters on the page.  Since we have to make the record available to Query, any manager that also has permission to write queries can also see the record, and thus data on employees other than the ones that report to them.  The Query also has to be public, so it too will be available to anyone that has access to run queries.  We'd like to be able to:</p>
  
  <ol>
  <li><p>Make the query available only via the page (I think I've got this one - the page will pass an additional parameter which will be compared to in the WHERE clause of the query)</p></li>
  <li><p>Hide the custom record from anyone but the query/report</p></li>
  </ol>
  
  <p>We cannot use typical row-level security as a general manager should only be able to see the people that report up to them.</p>
  
  <p>Thanks</p>