Applying Row level restrictions on a Table and Contexts

Hi Techies,
Here I have a question in applying the row level restrictions on a columns.
Let me explain some more about the same,....
I am working on Designer ( SAP BO XI3.1)
In my universe, I have 6 Contexts , I have one main table in each context and I want to apply row level restriction on a column from each table involved in the context.
When I am doing this only I am able to add the restriction on only one table from a context. and the rest other contexts are missing.
here I want to apply the restrictions on all 6 tables in a single restriction to the group.
Please help me on this....

I think if you are applying row level restrictions on each tables that are being used in universe then u must be adding all the context in your webi reports.
So I think you need to add tables and apply where condition on each tables and your restriction will work.
I will create one demo universe and try to apply the same and revert you asap.

Similar Messages

How to Apply Row level restrictions On objects

Hi All,
I am working on universe designer(BO 3.1) .....
I would like to apply row level restrictions on a cloumn of table based on the user who is running the report .
can any one please help me on this..
Thanks in Advance.............

Hi
Universe access and row-level security can also be managed at the group or individual user level from within the design environment.
Find the below video row level restrictions
http://www.youtube.com/watch?v=6yM0OLK6QlI
Create a data security profile that restricts access to specific rows: Information design tool 4.x - YouTube
Implementing row level security in IDT using Data Security Profile
And You cannot set row-level security authorizations in an OLAP universe.
User security can be defined at the most granular level for the following content objects.
Folders and sub-folders
Reports
Categories
Events
Program Files
Publications

Row Level Restrictions on DeskI Report not working under InfoView

When running/refreshing DesktopIntelligence XI r3 (Full Client) reports under InfoView, the row-level restrictions applied in the universe are not being included in the SQL (additional filtering is NOT happening). However, if a user creates a report using the same universe in WebIntelligence or if the user runs the same report in DesktopIntelligence, the row-level restrictions are working.
It strikes me that the problem has to do with security rights granted (or not granted), but I can't figure out which settings would allow the proper running of a DeskI report under InfoView.
Thanks for any assistance rendered!

Mike,
Do people connect to Infoview and Deski using the same authentication method and the same username?
How does this compare to how your data restrictions are configured?
Are you using @Variable('BOUSER') restrictions? Have you taken domain into account e.g. "Domain\UserName" vs "UserName"?

How to make Management of row level restrictions easy for webi reports?

Hi all
Our BO Product version is 12.3.0.601 (BO 3.1)
We are applying row level security for webi reports at universe level...
Since Universes are more in Number we have to create same restrictions and apply it to the users lets take a restrictions on region....which is common across all universes.
So the problem lies with the management of restrictions created at universe level.
Can we have a setup in where we can centralized the restirctions at a place so that management would be easy ......???
Shall we have to import the roles(restrictions) from R/3 or BW or Database level...?
Then how we will restrict our report (webi) to a region?????
So basically webi reports should run with the restrictions lets say region....How we will achieve this?/
Thanks and Regards
Ritu Raj

Hi,
what is your Datasource?
If its SAP BW i would highly recommend you use the SAP Authentication in your BOE XI 3.1 So the users log into BOE with their SAP Username and Password and than the Data restriction of your BW takes place when the users run their Reports.
Informations on how to confiure the SAP Authentication you will find in the installation Guide of the SAP ITK.
Regards
-Seb.

How to apply row level security against the database administrator

I would like an advice in applying row level security against the database administrator. We need to prevent DBA from editing data in some table rows or have any indication that data was corrupted.
There is no problem in viewing the data so we considered one way hash function or digital signature which will be stored in the same table, but we see following disadvantages:
HASH - DBA may use the same hash function to update the stored data after he changes the sensitive row.
Digital signature - the is a need to manage and keep the private key in a safe place outside of DB
Is there additional ways to achieve the aim?

Does VPD helps to prevent from DBA to edit/view a data in specific rows?Yes.
If I correctly understand, DBA has full access to security policy used by VPD to control the access and can grant himself privileges that I don't want.You can to define which users can be exempt of the politics, for the context or by Grant EXEMPT.
This includes DBAs.
The simple fact of being DBA doesn't guarantee the exemption.
Everything goes to depend of the VPD config.

How to implement row level security using external tables

Hi All Gurus/ Masters,
I want to implement row level security using external tables, as I'm not sure how to implement that. and I'm aware of using it by RPD level authentication.
I can use a filter condition in my user level so that he can access his data only.
But when i have 4 tables in external tables
users
groups
usergroups
webgrups
Then in which table I need to give the filter conditions..
Pl let me know this ...

You pull the Group into a repository variable using a session variable init block, then reference that variable in the data filters either in the LTS directly or in the security management as Filters. You reference it with the syntax VALUEOF("NQ_SESSION.Variable Name")
Hope this helps

How To Apply Row level security ??

Hi all,
I want to apply row level security on one of my custom objects created in PO schema in R12. How to do that??
Thanks and Regards
Raj

Thank You Gaurav
--Raj

Sort table columns in a table and context created dinamically

Hello all,
I have implemented the table sorting several times in another developments, but now I'm facing a problem.
I have created the table and context node that I need to sort dinamically (before somebody ask me why, I would say that it's the only way to do that for my current project, there was no possibility of doing that in dessign time). I have implemented the table sorting more or less the same way I would do with a table created in dessing time, but when I run my WD the sorting of columns doesn't work.
In the wdDoModifyView, I have put the following code:
if(firstTime){
IWDAction ordenacion     = wdThis.wdCreateAction(IPrivateResultDispGlobalView.WDActionEventHandler.ORDENACION, null);
IWDParameters param = ordenacion.getActionParameters();
param.addParameter("nombreNodo",nombreNodo);
and in the code of the action
    //@@begin onActionOrdenacion(ServerEvent)
     System.err.println("**** NOMBRE NODO **** "+nombreNodo);
     wdContext.currentContextElement().getTableSorter().sort(wdEvent, wdContext.getChildNode(nombreNodo, IWDNode.LEAD_SELECTION));
    //@@end
The name of the node ("nombreNodo) it's only correct the first time I click on a column.
Has anybody implemented the table sorting in a dinamically created table and context node? And how do you do to make it works.
Thank you very much

Here is the code
//Preparamos Navegaciones
IWDAction abrirProyecto = wdThis.wdCreateAction(IPrivateResultDispGlobalView.WDActionEventHandler.ABRIR_PROYECTO, null);
IWDAction abrirDisp     = wdThis.wdCreateAction(IPrivateResultDispGlobalView.WDActionEventHandler.ABRIR_DISPONIBLE, null);
//IWDAction ordenacion     = wdThis.wdCreateAction(IPrivateResultDispGlobalView.WDActionEventHandler.ORDENACION, null);
IWDAction ordenacion=wdThis.wdGetOrdenacionAction();
IWDParameters param = ordenacion.getActionParameters();
param.addParameter("nombreNodo",nombreNodo);
IWDTable table = wdThis.wdGetInformesController().crearTabla(view, nombreNodo, movimientosInfo,new String[]{"Codi Projecte",null,"Nom Projecte", "Import Projecte", "Client", "Increment Disponible futur per facturació no emesa i / o anualitats pendents","Increment Disponible futur per ingressos pendents de cobrar", "Disponible"},new String[]{"10px", null,"10px", "10px","10px","10px","10px","10px"},new IWDAction[]{abrirProyecto,null, null, null, null,null,null,abrirDisp}, -1);
//ordenar tabla
wdContext.currentContextElement().setTableSorter(new TableSorter(table, ordenacion,null));
containerTablasProyecto.addChild(table);
Edited by: Mireia Romo on May 28, 2009 12:27 PM

Crystal Reports - ECC Tables - Row level security on Multiple tables

Hi Experts,
We are implementing Crystal Reports directly reporting on ECC Tables. Lot of information on row-level security has been provided by experts Ingo Hilgefort, Don Williamsand Mike Seblani, but not related to multiple tables or Wild cards
Requirement:
Crystal Users should have access to ALL the tables in ECC, but restricted by Company code, plant, Sales Organization, Purchasing Organization fields to what ever table it applies to. Example: MARC table should be restricted by Plant, BSEG table should be restricted by Plant and company code, GLT0 table should be restricted by Company code..etc
Users should ONLY see their Organization related data.
Solution Developed:
1. We created custom authorization object with BUKRS and WERKS
2. In /CRYSTAL/RLS we used Wild Cards *, + rather than specific table and referenced the custom authorization object with =BUKRS and =WERKS in the Field Value
3. Enabled global lock
4. Custom Authorization object was added to user-profiles with corresponding restrictions
*Observation:*
1. This security works when a crystal report was developed on a ECC table which has both BUKRS and WERKS
2. This setup DOES NOT work when a crystal report developed on a table with either one of BUKRS or WERKS
Example: Does not work on MARC table - error message "Database connection error: /CRYSTAL/OSQL_EXECUTE_QUERY Message: field T0~BUKRS" unknown"
Does not work on GLT0 table - error message "Database connection error: /CRYSTAL/OSQL_EXECUTE_QUERY Message: field T0~WERKS unknown"
Trouble Shooting:
In the "where clause" of the internal ABAP code generated for MARC, system is checking for BUKRS - which should not be the expected result
ANYTHING WRONG IN THE SECURITY SETUP ? PLEASE ADVICE
Note: Document "BusinessObjects XI Release 2, Integration Kit for SAP, Installation Guide" does not talk much about this multiple table restriction. Any other document to be referred to ?

I'm not sure how that would help; by using the Faculty_ID Session Variable I can identify the CRN and Term of all courses a faculty member is teaching. But I don't think that has to do with the problem I am having?

Record level restriction in Main Table

Hi Forum,
I have a scenario where in we are maintaining master records related to multiple regions.
We have created users of a particular role to mainitain master records for each region.
Now what I want is when a regional user accesses the master records, I want the user to access records to his region.
I tried using Masks, but this can be set at role level. In my scenario all the regional users are with the same role.
All your suggestions and ideas are highly appreciated.
Regards
Madan

Hi Madan,
In console, for every user/role there is tables and fields options.
Select the region as restriction value.
This will solve the problem.
If you have problem in doing this as I dont have console access now, I will try to send you the screenshots tomorrow.
Hope it will solve,
+ An
Pls close your questions if answered

Applying row-level security to crystal report instance

Hi
we have created crystal reports based on sap r/3 data using open sql driver and imposed row level security and published to BOE.The user when opens report with view on demand can see the data which he is supposed to see.
Is it possible to schedule a single instance of the crystal report and then all the users access the instance and see the data that they are supposed to see.If not what is the other way out.
Thanks in advance.
Kamal

Hi,
I didn't try it so far
but I found this Link:
http://neverknewthat.wordpress.com/2007/11/06/row-level-security-trick-with-crystal-reports/
-> create Instance with full authorization
-> Join CR-Result with Customer-Table: User Authorization
Max

Sale Order Item Level Text Field which table and field

Hi,
Thanks for your prompt reply and best solution.
Can you please tell me one more thing, in sale order at item level the TEXT Field maintaining by user at transaction level now they want that field in one of the report, so can you please tell what is the table and field where i will get this sale order item level text details.

Hello,
is this going to work for item level text as well.
can you tell how to proceed with this functional module
or is there any other thing required.Please elaborate to
understand better way.
You can check out two table in respect to Sales TEXT i.e. STXH (STXD SAPscript text file header) and STXL(SAPscript text file lines).
The best approach of tracing out the Text in respect to Sales Order would be to use the Function module READ_TEXT and put this FM in SE37 and execute with the following parameter.
Client
Text ID of text to be read
Language of text to be read
Name of text to be read
Object of text to be read
Archive handle
Text catalog local
When you are essentially looking to read item level Text with respect to Sales Order then your Text OBject would be VBBP.
Regards,
Sarthak

Sales order item level partial delivery field table and field?

Will anyone share your expertise, In SD sales order level, at item what is the table and field name in which the partial delivery status is stored. I want the table and field name?. will anyone share pl.

Hi,
Try with table VBUP - and field LFSTA.
Regards

Row level ppr in advanced table

Hi,
my requirement is as follows...
for example
One dept lov is there, and two more fields are there, one is LOV and another one is Message text input.
if I select 10 in DEPT lov need t show lov field and hide text field if i select 20 need tod show text field and hide lov field.
for this i wrote code, but problem is this effecting for every row.
requirement need to effect for that current row only.
pls check below code and advice
in CO at PFR
if (pageContext.isLovEvent())
OAApplicationModule oa=(OAApplicationModule)pageContext.getApplicationModule(webBean);
String rowReference =
pageContext.getParameter(OAWebBeanConstants.EVENT_SOURCE_ROW_REFERENCE);
Serializable[] parameters = { rowReference };
// Pass the rowReference to a "handler" method in the application module.
oa.invokeMethod("initPPRevent", parameters);
at AM
public void initPPRevent(String rowReference)
OARow row1 = (OARow)findRowByRef(rowReference);
if (row1 != null)
String Action=(String)row1.getAttribute("Action");
System.out.println("reserveMethod"+Action);
xxpdpVORowImpl row = (xxpdpVORowImpl)findRowByRef(rowReference);
// String jname = (String)row.getName2();
// xxpdpVORowImpl invViewVO= (xxpdpVORowImpl)getxxpdpVO1();
if(Action.equals("10"))
row.setAttribute("attrb1", Boolean.TRUE);
row.setAttribute("attrb2", Boolean.FALSE);
else
row.setAttribute("attrb1", Boolean.FALSE);
row.setAttribute("attrb2", Boolean.TRUE);
}

Hi ,
when value selected from LOV ,fire some action ,
then redirect to same page ,
in process request get the value of LOV which is selected
based on value hide or show the fields .
Thanks
Raju

Row Level PPR in Advanced Table with Add More Rows Button

<br>
I have programmatically fired PPR event on MessageChoice. But it is in Advanced Table with
Add More Rows Button. When the value is changed in MessageChoice I Show/Hide Custom LOV
through SPEL like this ${oa.BioEmployeePVO.EmpManagerRender} .
But it is <b>hiding the all the ROWS</b> not just the row where the value has been changed.
I even tried with this code and get NULL for rowReference.
String rowReference = pageContext.getParameter(OAWebBeanConstants.EVENT_SOURCE_ROW_REFERENCE);
In Processrequest()
String pageName = pageContext.getRootRegionCode();
     Hashtable params = new Hashtable (1);
     params.put ("param1", pageName);
     Hashtable paramsWithBinds = new Hashtable(1);
    paramsWithBinds.put ("param2",new OADataBoundValueFireActionURL (mcb, "{$AttendeeType}"));
    mcb.setFireActionForSubmit ("empPositionChange", params, paramsWithBinds,false, false);
In ProcessFormRequest() {
if ("empPositionChange".equals(pageContext.getParameter(OAWebBeanConstants.EVENT_PARAM)))
      String rowReference = pageContext.getParameter("param2");
    //    String rowReference = pageContext.getParameter(OAWebBeanConstants.EVENT_SOURCE_ROW_REFERENCE);
     Serializable[] parameters = { rowReference };
      am.invokeMethod("handlePositionChangeEvent", parameters);
<br>

HI Kumar,
Answer to your last post is "yes".
Now to your doubt regarding the code:
Hi Anna
I am trying to understand your code.
FireAction firePartialAction = new FirePartialAction("fireHideEvent"+(i/noOfTlaColSpan));
HideImgBean.setAttributeValue(PRIMARY_CLIENT_ACTION_ATTR,firePartialAction);
1. What is this i/noOfTlaColSpan ?
:)Forget abt this in your case it should be the event name which u r firing and capturing the it in the PFR.
Like FireAction firePartialAction = new FirePartialAction("YOurEventName");
and in PFR u can capture tht as:
if("YOurEventName".equals(pageContext.getParameter(EVENT_PARAM)))
//your logic to invoke AM method
2. I believe this HideImgBean would be MessageChoice for me?
:)Yep ur right
3. This brcdOhInventoryViewUpdateVOImpl would be the Custom PVO(Extending Seeded Base VO)
I create by adding the transient attributes?
:)Yep ur right
4. I cannot understand this code. Could you explain.
:)Please look at my comments in some of the lines .I have explained wht i am doing
if(updateIter==null)
updateIter[0]= invViewVO.createRowSetIterator("updateIter");//This initViewVo should be ur custom VO object
if(cnt>0)
updateIter[0].setRangeStart(0);
updateIter[0].setRangeSize(cnt);
for(int i=0;i<cnt;i++)
row = (brcdOhInventoryViewUpdateVORowImpl)updateIter[0].getRowAtRangeIndex(i);
String selectFlag=(String)row.invokeMethod("getPartNumber");//This getPartNuber should be replaced by the Prim Key inoke methd of ur VO
if(RowID.equals(selectFlag))
//This is my logic to set the transient attributes based on the msgChoiceBean value ..u have to pass the value when u invoke this method
if(reserveMethod.equals("BINARY"))
System.out.println("In Binary");
Boolean bVal= new Boolean("false");
Serializable sr[]={bVal};
Class []methodParamTypes = { bVal.getClass() };
row.invokeMethod("setshowreservetxt",sr,methodParamTypes);
Boolean bVal1= new Boolean("true");
System.out.println("bVal1"+bVal1);
Serializable sr1[]={bVal1};
Class []methodParamTypes1 = { bVal1.getClass() };
row.invokeMethod("setShowreservemsgchoice",sr1,methodParamTypes1);
break;
In my AM I am doing this. Am i doing right?:)Yep u r right
BioPrescribersPVO is the custom VO(extending seeded base VO).
public void handlePositionChangeEvent(String param)
OAViewObject vo = (OAViewObject)findViewObject("BioPrescribersPVO");
OARow row = (OARow)findRowByRef(rowReference);
if (row != null)
String position = (String)row.getAttribute("AttendeeType");
if (("PRESCRIBER".equals(position)) )
// BioEmpManagerRender is the transient attribute in BioPrescribersPVO.
row.setAttribute("BioEmpManagerRender", Boolean.TRUE);
row.setAttribute("BioPresManagerRender", Boolean.FALSE);
else
row.setAttribute("BioEmpManagerRender", Boolean.FALSE);
row.setAttribute("BioPresManagerRender", Boolean.TRUE);
} // end handlePositionChangeEvent()
// Initializing the custom VO
/*No need to initialize the VO because this is not a PVO(Propeties View object)
U r just using the existing VO and tht vo shloud have a primary key.Tht way u can match the rowref u r getting with the actual row from the View object*/
public void init()
OAViewObject appPropsVO = (OAViewObject)getBioPrescribersPVO();
if (appPropsVO != null)
if (appPropsVO.getFetchedRowCount() == 0)
appPropsVO.setMaxFetchSize(0); appPropsVO.executeQuery();
appPropsVO.insertRow(appPropsVO.createRow());
OARow row = (OARow)appPropsVO.first();
row.setAttribute("RowKey", new Number(1));
handlePositionChangeEvent("");
} // end init()
Thanks
Anna

Applying Row level restrictions on a Table and Contexts

Similar Messages

Maybe you are looking for