Added security in Discoverer Admin

Hi
In addition to assigning specific Business Areas to responsibilities, we also want to use the custom Profile Options to restrict access to tables and views through Discoverer Admin.
Has anybody done this? I guess I would have to create conditions in Admin.
Thanks,

Hi,
Please refer to:
Oracle Discoverer Documentation
http://www.oracle.com/technology/documentation/discoverer.html
Oracle by Example - Oracle Business Intelligence Discoverer
http://www.oracle.com/technology/obe/obe_bi/discoverer/discoverer_1012/index.html
want to switch to Oracle Discoverer
Re: want to switch to Oracle Discoverer
Regards,
Hussein

Similar Messages

  • Not able to connect through Application user name in Discoverer Admin

    Hi,
    I created an EUL with all privileges it needed. I created a business area from that EUL and shared it to Application User name through giving access privileges (from Security and Privileges). When I am trying to login through the Application User name in Discoverer Admin it is giving the error like:
    Failed to connect to database - Unable to connect to Oracle Applcations database: invalid username/password.
    Earlier I did in another instance it worked fine but now itself I am facing the problem.
    Thanks & Regards,
    Arun Babu R.

    Hi,
    Please post the application release along with the database version and OS.
    What is the Discoverer version?
    Please see these docs.
    Connecting to an E-Business Suite EUL Using Any Discoverer Component Fails With "Authentication Failed" or "ORA-01017: invalid username/password;logon denied" [ID 364665.1]
    Discoverer 10g (10.1.2) Connections To Oracle E-Business Suite 12 Fails With 'Invalid Username/Password' [ID 443661.1]
    Discoverer 10g (10.1.2) Plus/Viewer Connection To E-Business Suite Database Fails With " invalid username/password" Error [ID 467919.1]
    Connecting to Oracle EBS 11.5.10 with Discoverer 4i/10g Fails with ORA-01017 Invalid Username/Password Error [ID 295037.1
    Discoverer Desktop/Administrator 10g (10.1.2.2) Fails To Connect With Error 'Unable to connect to Oracle Applications database: invalid username/password. ' Only Between Certain Hours [ID 757384.1]
    Connecting to Oracle EBS with Discoverer Fails with ORA-01017 Invalid Username/Password Error [ID 784358.1]
    Discoverer 4i Viewer/Plus Logon To Oracle Applications EUL Fails with "ORA-1017 Invalid Username/Password" Unless a Colon '' : '' is Entered After Username [ID 360314.1]
    Questions And Guidance For Troubleshooting Common Discoverer Desktop and Administrator Connection Issues [ID 415614.1]
    Thanks,
    Hussein

  • Discoverer Admin - Convert Db Object folders to custom SQL folders

    Hi,
    We are operating in a non-Apps EUL and have a large number of folders, with associated joins, reports etc, based directly on objects in the database (i.e. they were created using the 'new folder from database...' dialog).
    We'd now like to add some SQL logic into these EUL folders - is it possible to convert these folders to Custom folders within Discoverer Admin? or will I have to recreate the folders, joins, reports etc from scratch?
    Alternatively, is it possible to take an existing report and point it to the new Custom SQL folders without having to rebuild the report?
    Any help much appreciated,
    Ien Hien

    Hi
    Discoverer embeds the names of folders and joins into a workbook.
    If you want to change a workbook from one folder to another you would have to do the following:
    1. Examine the join names between the original folder and other folders
    2. Change the name and identifier of the old workbook - try adding old to the end
    3. Edit the joins and rename them and their identifiers too
    4. Rename the new folder and identifier to match the old folder - these have to be exactly the same
    5. Add joins between the new folder and the other folders, once again naming exactly the same as the old joins
    6. Make sure all of the item names exist in the new folder
    7. Hide the old folder so that the users see only one folder
    8. Open your workbooks - they now should run
    If workbooks still fail to run this means you have named a folder name or identifier wrong or named a join wrong.
    Hope this helps
    Regards
    Michael

  • I've had this iPad computer thing for a few months now. I used to just put in my password when I downloaded an app or such like. Now it wants me to set up 4 further questions and answers "for added security". How can I return to the old system?

    I've had this iPad thing for a few months. It used to just ask me for my password, but now it is demanding I set up four questions and answers for
    "added security". I don't want to do that, I just want to carry on as I was but the machine is preventing any app downloads etc.
    Seems the stupid machine is in control.
    How do I get it to listen when I threaten it with a good thrashing and a one way trip to the garbage unless it does what I say?
    Thanks

    Chick3597 wrote:
    Regardless of apple updating something or another. I have no need for the additional questions and really don't want to allow them to bully me into compliance.
    You may have no need for additional but Apple does. They don't want your iTunes account to be hacked and then go complaining to them that their security procedures are not up to standards.
    Chick3597 wrote:
    So how can I continue in the good old fashioned way?
    Its really absurd to even ask this in light of the information that you have been given already. The "old fashioned" way is gone. It's Apple's store, Apples's rules and IMO - its a wise decision on Apple's part.
    You do not have to comply at all, but you will not be able to purchase from iTunes anymore, but nobody is going to force you to do something that you do not want to do.

  • Hello, i have been sent the following email from apple: - You've taken the added security step and provided a rescue email address. Now all you need to do is verify that it belongs to you... and asks for apple login details, is this a genuine request?

    Hello, i have been sent the following email from apple, see below and asks for apple login details, is this a genuine request?
    Thank you.
    You’ve taken the added security step and provided a rescue email address. Now all you need to do is verify that it belongs to you.
    The rescue email address that you gave us is [email protected]
    Just click the link below to verify, sign in using your Apple ID and password, then follow the prompts.
    Verify Now >
    The rescue email address is dedicated to your security and allows Apple to get in touch if any account questions come up, such as the need to reset your password or change your security questions. As promised, Apple will never send any announcements or marketing messages to this address.
    When using Apple products and services, you’ll still sign in with your primary email address as your Apple ID.
    It’s about protecting your identity.
    Just so you know, Apple sends out an email whenever someone adds or changes a rescue email address associated with an existing Apple ID. If you received this email in error, don’t worry. It’s likely someone just mistyped their own email address when creating a new Apple ID.
    If you have questions or need help, visit the Apple ID Support site.
    Thanks again,
    Apple Support

    In that case, someone is trying to hi-jack your Apple ID.
    You should change your password immediately.

  • Importing PL/SQL function in Discoverer Admin

    Gents
    I'm trying to import a PL/SQL function. In fact this functions is in a package.
    When I try to import in Discoverer Admin, I'm not able to see this package and the function.
    It's possible import a function from a package in Discoverer?
    Must a grant some privilege in package or create a synonym?
    Regards
    Honorio

    Hey,
    I have a similar problem.
    I created a PL/SQL Function which i registered in my EUL. Bun when I'm using this function on an item in a custom folder, this custom folder disappeared from my Discoverer Plus list of folders? When I delete the item which uses this function the folder shows up in my Discoverer Plus list of folders.

  • Entry for host name is missing or empty (Secure Store key: admin/host/).

    Hi All,
    I am in the process of installing EP7 on SLES9 and MaxDB 7.6 on a clustered HA environment where the SCS, DB and JC components are installed under and referenced by their virtual hostname (eg. sapinst SAPINST_USE_HOSTNAME <virt name>).
    The SCS instance is installed, the Database Instance is installed and I'm currently in the process of Installing the JC and Deploying the EP packages. 
    During the installation, SDM is put into standalone mode and sapinst tries to deploy the package EPBC06_0.SCA where it fails and the sdm_server.err shows :
    "com.sap.sdm.serverext.servertype.inqmy.TargetEngineConfigurationException: Cannot retrieve Engine logon data from Secure Store: Entry for host name is missing or empty (Secure Store key: admin/host/).        at com.sap.sdm.serverext.servertype.inqmy.InQMyTargetSystemConfigurator.getLoginDataFromSecStoreInQMyTargetSystemConfigurator.java:286)        at com.sap.sdm.serverext.servertype.inqmy.InQMyTargetSystemConfigurator.getEngineLoginDataInQMyTargetSystemConfigurator.java:197)        at com.sap.sdm.serverext.servertype.inqmy.EngineStateServiceImpl.determineCurrentEngineStateEngineStateServiceImpl.java:53)        at com.sap.sdm.app.proc.deployment.states.State.determineJ2EEEngineState(State.java:97)        at com.sap.sdm.app.proc.deployment.states.StateBeforeFirstDeployment.getJ2EEEngineStateChangeDescriptionStateBeforeFirstDeployment.java:75)        at com.sap.sdm.app.view.proc.deployment.mapper.StateMapper.map(StateMapper.java:56)        at com.sap.sdm.app.view.proc.deployment.mapper.FlowMapper.map(FlowMapper.java:28)        at com.sap.sdm.app.view.session.AppViewUpdater.updateAppView(AppViewUpdater.java:22)        at com.sap.sdm.app.view.session.AppViewUpdater.sessionStateChanged(AppViewUpdater.java:18)        at com.sap.sdm.app.proc.deployment.impl.SessionStateObserversImpl.notifySessionStateChangedSessionStateObserversImpl.java:46)        at com.sap.sdm.app.proc.deployment.states.InstContext.processEventServerSide(InstContext.java:85)        at com.sap.sdm.app.proc.deployment.states.InstContext.processEvent(InstContext.java:59)        at com.sap.sdm.app.view.controllers.DeployEventProcessor.processEvent(DeployEventProcessor.java:11)        at com.sap.sdm.client_server.deployserver.DeployCmdProcessor.processEvent(DeployCmdProcessor.java:264)        at com.sap.sdm.client_server.deployserver.DeployCmdProcessor.process(DeployCmdProcessor.java:108)        at com.sap.sdm.gui.server.GuiAdminRoleCmdProcessor.processGuiAdminRoleCmdProcessor.java:72)        at com.sap.sdm.is.cs.session.server.SessionCmdProcessor.process(SessionCmdProcessor.java:67)        at com.sap.sdm.is.cs.cmd.server.CmdServer.execCommandCmdServer.java:76)        at com.sap.sdm.client_server.launch.ServerLauncher$ConnectionHandlerImpl.handle(ServerLauncher.java:286)        at com.sap.sdm.is.cs.ncserver.NetCommServer.serveNetCommServer.java:43)        at com.sap.sdm.is.cs.ncwrapper.impl.ServiceWrapper.serveServiceWrapper.java:39)        at com.sap.bc.cts.tp.net.Worker.run(Worker.java:50)       at java.lang.Thread.run(Thread.java:816)"
    The same problem occurs if I try to deploy this package or any other package using SDM in standalone or integrated mode. 
    configtool -> Secure Store -> admin/host/<SID> is the virtual hostname of the JC instance.
    I've tried the following to no avail:
    - Changed configtool -> Secure Store -> admin/host/<SID> to be the physical hostname of the box.
    - Changed configtool -> Server -> Dispatcher -> Service -> P4 -> bindhost (from 0.0.0.0 to JC virt IP).
    - Changed the <Host> entry in sdmrepository.sdc from <phys hostname> to <jc virt hostname>.
    The SAPLOCALHOST, SAPGLOBALHOST all seem to be set correctly in the SAP profiles.
    Has anyone had this issue?  If so, what do I need to check/change?  Any ideas?
    Notice the message does not reference the <SID> in "admin/host", could this be related to the issue?  If so, what can cause this?
    TIA
    Anthony

    Hi All,
    Just an update, I was able to get around my problems by patching the 2004s media from sp6 to sp8, uninstalling my scs, and database and re-installing from the patched media.

  • Unable to connect Oracle Application Database using Discoverer Admin 10g

    Hi,
    I have installed oracle Admin 10g on my machine and trying to connect oracle application database but every time i am getting error like "Unable to connect to: user@hostname Failed to connect to database Unable to connect to Oracle Application Database. Invalid username/password".
    Installed BI Discoverer Admin 10.1.2.1
    Discoverer Admin Client 10.1.2.48.18
    Database 9i
    I have done following steps:
    1. Selected radio button for Connect to Application EUL's.
    2.Gateway User ID (GWYUID)/Password :APPLSYSPUB/PUB
    3.FNDNAME:APPS
    I able to connect discoverer plus.
    Thanks
    Ravi

    Hi Ravi
    Glad to hear you solved this. It is very gratifying when one solves it alone, don't you think?
    Best wishes
    Michael

  • Cannot See Database Tables in BI Discoverer Admin

    Hello All -
    My organization recently upgraded to Discoverer 10g from Discoverer 4i. In 10g the EUL is called BIEUL and in 4i it was called V9EUL. During the upgrade, all the Business Areas belonging to V9EUL in 4i were assigned to BIEUL in 10g. I'm not sure how our DBA accomplished this part of the upgrade.
    When I'm logged into BI Discoverer Admin (version 10.1.2.00.00) I am unable to see the database tables in order to create folders from them. For instance, today I want to create a brand new Business Area so I click on File...New to start the Load Wizard then I click on "Create a new business area" then I specify to load the meta-data from the on-line dictionary and click the "Next"button. In the next window (Load Wizard: Step 2) I can see all the available users as I expect so I check the user I want and click 'Next".
    Here's the point where the problem arises. In the window "Load Wizard: Step 3" I see the user I chose in the "Available" list on the left, but when I click on + to see the tables owned by the user it does not expand and I cannot go any further.
    I experienced the same thing when I try to add a "New Folder from Database" to an already-existing Business Area.
    Many Thanks in Advance,
    Patrick

    At first it sounds like it's a simple matter as the EUL owner not having the rights to see the tables / views pointed to by the EUL (grants).
    However, the part about the DBA where you say all BAs belonging to V9EUL in 4i wre assigned to BIEUL in 10g, I hope the DBA didn't do anything fancy. All the EUL manager should have to do is fire up the new version of Disco Admin 10g and it will see that the existing EUL is a version 4 one and will ask if you want to upgrade. Saying yes, you will get an entirely new EUL, tables, etc. created pointing to the same database tables / views as your still existing v4 EUL is.
    So you'll have 2 EULs - a v4 one and a v10 one as it's not a destructive upgrade.
    Is it possible the DBA hacked something? - or just a grants problem to the new EUL owner?
    Russ

  • How to find out the updates using query which has done in Discoverer Admin

    Hi All,
    I have done some updates in Discoverer Admin like add field in some folders and rename...I want to know the updates which has been done in the front end using sql query.
    Could any one please tell me is there any query to find out the updates in Discoverer admin.
    Thanks,
    Kamal

    Hi Siddarth,
    Solution :
            1) Go to SE16 - Table Name : EKBE (PO History)
            2) Field - BUDAT (Posting Date)
            3) Transaction event Type:
                             - 1 (Only GR's )
                             - 2 (Both GR and IR)
            4) We can fetch both GR Numbers and also PO Numbers for which IR has not been done if transaction event - 1.
    In addition to MB5S, you can try this also...

  • Complexity of PL/SQL in Discoverer Admin

    Hi,
    Read you can register PL/SQL in Discoverer Admin - how complex can this be?
    Something comparable to the stored procedures in SQL Server?
    I guess it returns only one value as the output?
    Thanks!

    As Rod mentions, it's a question of if you want to or not.
    One method I have used with this idea in mind, is when wanting to set up a table to report against, dependent upon a worksheet that does nothing more than take a user's input and runs the process.
    For example, you may need to build a table - for whatever reason - at the point a user runs the worksheet. Then the process runs, table built and the user goes to another worksheet to see / query the results.
    I've always had the function call a pl/sql script (and make sure you have the autonomous transaction statement as specified by Rod), you just register the function in Disco and all works fine.
    Russ

  • Row level security in discoverer desktop

    currently, I have designed a business area on one of my star schema, and I created several other business area in order to allow different level of users to view the pre-defined reports on discoverer desktop. and I want different users to view different data from my star schema tables. So I created some criteria on those business area.
    e.g. condition on bus_area1 : sales_manager="man01",
    condition on bus_area2 : sales_manager="man02"
    in short, i want to enable record level security by using discoverer's conditions.
    but unfortunately, even I un-checked "Create/Edit Query" privileges on discoverer administrator for those users, they still can modify the worksheet. So they can just remove my condition and to view data that they shouldnot be able to see..
    can any one tell me how to solve this problem, or how to do row level security in discoverer?
    What can I do if I want to disable "edit worksheet" in discoverer desktop from users??
    thanks in advance..
    Marco

    Marco,
    Probably the best way to achieve row-level security is to upgrade to 9.0.4.1 and take advantage of the new functionality of Discoverer to pass the SSO user to the DB query. You would apply Oracle Fine Grained Security/VPD/striping on the DB tables using a policy based on SSO userid. Then using Disco 9.0.4.1 the user would see only the data they are privileged to see. However this works only in a web environment (Discoverer Plus, Viewer and Portlets) not for Desktop.
    Discoverer Product Management - mpd

  • Preventing Discoverer Admin replacing underscores with spaces on refresh

    Hello,
    On refreshing a Business Area, Discoverer Administrator will automatically replace underscores with spaces for any new items/folders to be incorporated. I would prefer this not to happen i.e. the names should retain the underscores. I haven't found any way to do this from within Discoverer Admin - are there some registry settings that I can tweak or is it just not possible,
    Thanks in anticipation,
    Kevin.

    Hi,
    Well, you could try using a eul_trigger$refresh_new_column trigger. I must admit I have never tried this, but the details are in the documentation (http://download.oracle.com/docs/html/B13916_04/appendix_b.htm#sthref2417).
    Rod West

  • Adding security to a web service then generating a proxy [SOLVED]

    Hi
    I generated a web service based on a very simple java program. I have deployed it to a local oc4j install and successfully called it from a proxy generated from jdev. I am using 10.1.3.3.0.
    I added security to the web service and regenerated the proxy. I wanted to see the difference in the SOAP messages sent to the web service. However the proxy does not seem to have changed to take account of the new security settings on the web service.
    The security options I set were:
    On main security dialog: Ticked the port and "Text Password"
    On Authentication: Ticked "Expect Username ti Authenticate"
    "Password Required"
    Password Type = "Plain Text"
    "Nonce Required in Token"
    "Creation Time Required in Token"
    I have 2 questions:
    1. How do I get the proxy to send SOAP messages that contain the security headers required to run the web service. Here is the main method from my proxy. I thought adding setUsername and setPassword would be the solution
        public static void main(String[] args) {
            try {
                gpn3.Getphonenum3SoapHttpPortClient myPort = new gpn3.Getphonenum3SoapHttpPortClient();
                System.out.println("calling " + myPort.getEndpoint());
                // Add your own code here
                myPort.setUsername("oc4jadmin");
                myPort.setPassword("welcome");           
                myPort.getNum("Lisa");
            } catch (Exception ex) {
                ex.printStackTrace();
    2. When the web service receives a user name and password what does it check them against? I assume the oc4jadmin user will be allowed access but how do I set up other users?
    many thanks
    paul schweiger
    Message was edited by:
    [email protected]

    I have figured this out now
    1. I needed to set the same security settings in my proxy as I did for my web service. I had assumed that the proxy would generate the necessary security settings from the web service.
    2. For some reason my web service application is using the system level jazn-data xml file
    oc4j_extended_101330/j2ee/home/config/system-jazn-data.xml
    This does include the oc4jadmin user and I am now able to use that account to call the web service. I also managed to add another user and use that account to call the web service successfully.
    Thanks for the help
    paul

  • Export workbooks in discoverer admin

    hello
    I am able to export workbooks from discoverer admin. in DEV env.
    The file is in '.eex' format.
    How can I import '.eex' file into Discoverer Desktop in Test env.
    If i import the same .eex file into Discv Admin @ Test..How can i open it in Desktop@Test.
    Appreciate any feedback
    thanks
    kp

    Hi Tamir,
    As i was having only discoverer plue in 11i i can only export using disc.admin.
    Disc plus dont have options for this
    THanks a lot for your tip..It worked
    I selected
    Refresh The Object
    and "By Identifier"
    I checked only take ownership if original owner can not be found
    and it worked fine
    I have few more clarifications
    1)
    When I click on =Refresh the object
    there is a check box at the bottom says: Preserve Display Related Properties
    Should I check it or not
    2)
    Also when I open the workbook under my name
    workbook was opening only with this option->
    Open the workbook in the current database account
    If the workbook is asking if i need to substitute a join, I may need to do that right?
    thanks
    kp

Maybe you are looking for