Planning and Shared Services security disconnect.

Question

Hi,
We have an intermittent problem. We are running 9.3.1 of Planning, Essbase, and Shared Services, etc. We have 6 planning applications on the same server. We use oracle as the database. The problem is at some point in time Planning stops getting updates made in Shared Services. When it happens you can go into the planning application, view the security on any object, and click "Add Access". The "Users and Groups" select box get's populated with "<None Available>". If you bounce the planning service and come back in the "Users and Groups" is populated as expected. It also dosen't affect all of the application or the same applications.
We have an admin group that makes security updates. Mainly just adding users to native groups. When things are working the changes/additions flow through to the planning tables. (HSP_USERSINGROUP,HSP_OBJECT). We gave this group a query to run that shows the access a specific user has in planning. If a user is added to a group in SS they then run the query to make sure the access is granted in planning. When the query doesn't bring back the information they think should be there we know we have the issue and start scheduling an outage to bounce planning.
Anyone else seen this behavior and is there another way to fix this besides bouncing planning?
Thanks for any responses.
Keith

Answer 1

This show multiple apps but you could knock it down.
select
user_name,
group_name,
mart,
object_name,
object_type,
access_mode,
flag
from (
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP1' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP1.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP1.HSP_OBJECT U,
HYP_PLAN_APP1.HSP_OBJECT O,
HYP_PLAN_APP1.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP1.HSP_OBJECT G,
HYP_PLAN_APP1.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP1' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP1.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP1.HSP_OBJECT U,
HYP_PLAN_APP1.HSP_OBJECT O,
HYP_PLAN_APP1.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP1.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
Union
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP2' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP2.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP2.HSP_OBJECT U,
HYP_PLAN_APP2.HSP_OBJECT O,
HYP_PLAN_APP2.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP2.HSP_OBJECT G,
HYP_PLAN_APP2.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP2' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP2.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP2.HSP_OBJECT U,
HYP_PLAN_APP2.HSP_OBJECT O,
HYP_PLAN_APP2.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP2.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
Union
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP3' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP3.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP3.HSP_OBJECT U,
HYP_PLAN_APP3.HSP_OBJECT O,
HYP_PLAN_APP3.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP3.HSP_OBJECT G,
HYP_PLAN_APP3.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP3' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP3.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP3.HSP_OBJECT U,
HYP_PLAN_APP3.HSP_OBJECT O,
HYP_PLAN_APP3.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP3.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP4' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP4.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP4.HSP_OBJECT U,
HYP_PLAN_APP4.HSP_OBJECT O,
HYP_PLAN_APP4.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP4.HSP_OBJECT G,
HYP_PLAN_APP4.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP4' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP4.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP4.HSP_OBJECT U,
HYP_PLAN_APP4.HSP_OBJECT O,
HYP_PLAN_APP4.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP4.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
Union
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP5' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP5.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP5.HSP_OBJECT U,
HYP_PLAN_APP5.HSP_OBJECT O,
HYP_PLAN_APP5.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP5.HSP_OBJECT G,
HYP_PLAN_APP5.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP5' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP5.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP5.HSP_OBJECT U,
HYP_PLAN_APP5.HSP_OBJECT O,
HYP_PLAN_APP5.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP5.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
Union
select
U.Object_Name as User_Name,
G.Object_Name as Group_Name,
'PLAN_APP6' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP6.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP6.HSP_OBJECT U,
HYP_PLAN_APP6.HSP_OBJECT O,
HYP_PLAN_APP6.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP6.HSP_OBJECT G,
HYP_PLAN_APP6.HSP_USERSINGROUP UG
where
AC.user_id = UG.group_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and UG.group_id = G.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
union
select
U.Object_Name as User_Name,
'' as Group_Name,
'PLAN_APP6' as mart,
O.Object_Name as Object_Name,
OT.Type_Name as Object_Type,
Case AC.Access_Mode
when 3 then 'ReadWrite'
when 2 then 'Write'
when 1 then 'Read'
when -1 then 'None'
else 'Unknown'
end as access_mode,
Case AC.Flags
when 0 then 'Member'
when 5 then 'Children'
when 6 then 'IChildren'
when 8 then 'Descendants'
when 9 then 'IDescendants'
else 'Unknown'
end as flag
from
HYP_PLAN_APP6.HSP_ACCESS_CONTROL AC,
HYP_PLAN_APP6.HSP_OBJECT U,
HYP_PLAN_APP6.HSP_OBJECT O,
HYP_PLAN_APP6.HSP_OBJECT_TYPE OT,
HYP_PLAN_APP6.HSP_USERS UG
where
AC.user_id = UG.user_id
and UG.USER_ID = U.object_id
and AC.object_id = O.object_id
and O.object_type = OT.object_type
and O.object_type <> 7
Where user_name in ('Obama','McCain')