Assigning database access using Shared Services

I need to be able to assign security to a specfic database within an application. We have an application that has two databases. I provisioned the necessary group to the correct application to give them access. However, I only want that group to be able to see one of the two databases. How do assign security using Shared Services to provision access to just that database and not the other.
Thank you very much for your help.
Info:
Version of Shared Services - version 9.3.1

So I am going to answer my own post just incase anyone else is wondering the answer. I found the information right out of the hyp_security_guide.pdf - Security Administration guide. It states that - In Shared Services, if an Essbase application contains multiple databases, the databases must have the same user security access levels.
This is just my two cents, but I would think this might be something you would consider adding to Shared Services in future releases.

Similar Messages

Unable to connect to the database to product shared services

Hi
I got an error in configuring shared services with the Oracle server database
"" Unable to connect to the database to product shared services ""
I created a database that is working properly when accessed by a client.
I typed everything in config utility, Does we need to take care of any other servies?
I appreciate if any one help with this.
Thanks
Abel Junior
Version: Hyperion System 9 and Oracle 9i

John is of course correct that XP is not a supported environment for Essbase 9.3.x.
Having said that, I have successfully installed Shared Services, Essbase, and EAS on multiple XP laptops. I have done so with 9.2 (painful) and 9.3.1 (just about painless) although always against SQL Server. This is strictly for development/kick the tires work, never as a production environment.
Planning has quite an issue with XP (and Vista) although I have heard that there is a Windows Registry fix for this.
Of course Oracle support is going to gong you if you call up with questions about your laptop -- it isn't supported.
One last thing -- Shared Services and laptop suspends =! stability. For my development purposes, I have backed off Shared Serivces and just go with Essbase as a service with native security and EAS.
Regards,
Cameron Lackpour
P.S. VMs are probably the way to go if your desktop/laptop has the horsepower to drive a proper OS with the VM overhead. On a 4 gigabyte laptop with a Duo Core (no, not a Mac, I just can't remember what Intel calls it -- the power of marketing) VMServer running Windows Server 2003 and the full stack is pretty slow, but it works.

Moving users from one server to another using Shared Services

How do you migrate users and groups from one server to another from Hyperion Shared Services in version 9.3.1?
When users were provisioned from EAS on version 7.x we could use Migration Utility but now since users are provisioned using Shared Services, what is the approach to be followed?

Someone will probably give you a real-world example of how to do it, but to get you started you may want to review the Hyperion Security Administration guide, section "Migrating Native Directory" which discusses that you need to first install the Import/Export Utility on your Shared Services server, then create an export file, then go to your target Shared Services Server and long story short, import it.
-Karen

Trouble assigning security filters in Shared Services

In Shared Services/Application groups - right click on database to "Assign Access Control" and get the following error "Cluster Name specified is invalid" Anyone seen this one before? - thanks.

Hi,
are you sure you configuration of Essbase and Shared services went on fine?
does your essbase cluster name during configuration contains special characters?

Database access using windows authentication

We are updating our Applications to use single sign on and are running into a problem with database access. We are using CF11 Enterprise and SQL Server 2008 on IIS 7.5.
We have set up the ColdFusion Application Service to run under an AD service account and have created the data sources in CFAdmin leaving the username and password blank. The data sources verify and all seems good. The problem comes when running a query. The credential passed to the database is the service account and not the windows authenticated user. As such the query fails. What are we missing to get CF to pass the Windows Authenticated user credential instead of the service account?
Thanks
Tim

ColdFusion does not pass user's credentials to the database connections by default, and cannot pass Windows Authentication credentials that way. It only sends the service account's credentials (if you leave username/password blank as you have done). The only way to pass user credentials is to put them into the individual query calls themselves, and even then you can't pass Windows Authentication credentials. You would have to use SQL Server Logins, and create accounts for each user.
I think most people are using either a dedicated SQL Server login for ColdFusion and run all queries under that account, or they do as you have already done and use Windows Authentication along with the ColdFusion service account. If you need an audit trail, then pass usernames into the insert/update queries and store them manually along with the other data you are inserting/updating.
-Carl V.

Problem with Business Rules access from Shared Services

Hello,
When trying to access Business Rules from Shared Services (expand Business Rules and click on the application) I get the "Refer to the Security Guide to configure security permissions for this application" message, but the user is fully provisioned for Business Rules. It happens even logged on as admin. Access from Administration Services works fine. The version Hyperion system 9 (9.3.0.1). What is wrong? Help, please.
Thanks,
Timur

You can't access Business Rules from Shared Services. This is no different from any other application - Planning, Essbase, etc. You can provision users to the application roles, but you can't actually do anything with the application, other than security, in Shared Services. You use Admin Services to maintain Business Rules.

Configuring New Oracle Database with HFM Shared Services

Hi,
We have upgrated the oracle database to new version 11g. We are using HFM 11.1.1.3 version. When I tried to configure the new oracle database with existing HFM Shared Services, the EPM Configurator hangs. Please could you clarify the below few questions before start configuring the database.
1. Do we want edit any properties or configuration files before starting the EPM Configurator?
2. If we want to edit the reg.properties file, what is the password denotes in reg.properties file(Below is the structure of the reg.properties file)? Whether I need to give Oracle database schema password?
jdbc.url=jdbc\:hyperion\:oracle\://xxxxx;
password=?
jdbc.driver=hyperion.jdbc.oracle.OracleDriver
local.value=####
username=schemaname
Thanks,
Aravindh K

Is it a new database server you are trying to configure? As if it was just upgraded then you shouldnt need to do anything.
If it is a new database server then have a read of the following doc in Oracle Support - "How To Change Shared Services Database Repository in EPM 11 [ID 976279.1]"
Cheers
John
http://john-goodwin.blogspot.com/

ERROR WHILE CREATING A DATABASE LINK USING HETEROGENEOUS SERVICES

I'm creating a database link with the Oracle Dataware Builder, and i get the following error:
Probando...
Fallo.
SQL Exception
Error del repositorio: Excepción SQL.
Nombre de la Clase: CacheMediator.
Nombre del Método: getDDEntryFromDB.
Mensaje de Error del Repositorio: ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Generic Connectivity Using ODBC][Informix][Informix ODBC Driver][Informix]Incorrect password or user [email protected] is not known on the database server. (SQL State: 28000; SQL Code: -951)
ORA-02063: preceding 2 lines from PRUEBA_SEH
As you can see i'm using heterogeneus services to connect to a informix database. ALTIADM is a valid user for that database, i don't send my ip address 192.168.0.62, but the error says "[email protected] is not known in the database server". how can i solve it?????

Right places to ask this question are
Heterogeneous Connectivity
Warehouse Builder

Block database access using toad or other tools

We have a forms application running on oracle database 10g release 2, with the users created in the application the database can be accessed using the same id's through sql plus or any other tool. We have already restricted sql plus access by product_user_profile. Is there any other way to make sure toad or any other tool can be stopped from accesing the database.
Thanks
Eric

eric_in wrote:
We have a forms application running on oracle database 10g release 2, with the users created in the application the database can be accessed using the same id's through sql plus or any other tool. We have already restricted sql plus access by product_user_profile. Is there any other way to make sure toad or any other tool can be stopped from accesing the database.
Thanks
EricHi Eric
I've a blog post on this issue. You can look for .exe extentsion of the program which connects to the database
http://kamranagayev.wordpress.com/2009/10/04/block-developers-from-using-toad-and-other-tools-on-production-databases/

Help...create database(access) using java

i had developed an java application that capture packet using Jpcap but i dont know how to keep the packet captured into database(access).i can save the packet captured in text file but not in database(access).i already had the database conectivity but i don't know how to insert the packet caputred in the table in access, is it using sql statement like INSERT INTO? or else?i realy don't know.can someone help me....?

i can save the packet captured in to text file but not in database(access).I guess that you wish to get a databse file with your data, not a simple insert sql question.
1. commercial solution: HXTT Access(http://www.hxtt.com/access.html), which supports create database, create table sql, and batch insert data from any JDBC driver.
2. free solution: jdbc-odbc bridge and dsn-less jdbc url, you need to prepare a blank mdb file with blank table, then copy that blank mdb file into new mdb file, then repeat insert sql for that new mdb file.

Jsp database access using odbc - please help

Hi friends,
I�m trying a very simple database access program in jsp data base access using odbc. Odbc has to be used because thin driver or other drivers may not be available in every system of our college and as you know it's not that easy to make changes to those systems. My problem is so simple. I always get an exception in my program.
My jsp content is as simple as:
<%@ page import="java.lang.*,java.sql.*,java.io.*,registerbean" %>
<jsp:useBean id="db" class="registerbean" scope="session"/>
<%
String str="insert into reg values('" + db.getName() + "','" + db.getUname() + "','" + db.getPass() + "'," + db.getAge() + ",'" + db.getSex() + "','" + db.getAdd() + "','" + db.getUgcourse() + "','" + db.getUgqual() + "'," + db.getPer() + ",'" + db.getIadd() + "')";
try
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con=DriverManager.getConnection("jdbc:odbc:yogaesh","scott","tiger");
Statement stmt=con.createStatement();
stmt.executeUpdate(str);
}catch(Exception e1){out.println(str);};
%>
the table reg has the structure:
Name Null? Type
CNAME VARCHAR2(20)
UNAME VARCHAR2(20)
CPSWD VARCHAR2(20)
CONFPASS VARCHAR2(20)
CAGE NUMBER
CSEX VARCHAR2(5)
CADD VARCHAR2(100)
COURSE NUMBER
CQUAL VARCHAR2(10)
CPER NUMBER
IADD VARCHAR2(100)
The registerbean.java file is as below: (This seems to work fine because I tried printing the values using <%= %> tag and it worked out fine and moreover the query string is intact.)
import java.io.*;
import java.util.*;
import java.lang.*;
public class registerbean
private String name,uname,pass,cpass,age,sex,add,ugcourse,ugqual,per,iadd,otherugqual,ccode;
public void setName(String a)
name=a;
public void setUname(String a)
uname=a;
public void setPass(String a)
pass=a;
public void setCpass(String a)
cpass=a;
public void setAge(String a)
age=a;
public void setSex(String a)
sex=a;
public void setAdd(String a)
add=a;
public void setOtherugqual(String a)
otherugqual=a;
public void setCcode(String a)
ccode=a;
public void setUgcourse(String a)
ugcourse=a;
public void setUgqual(String a)
ugqual=a;
public void setPer(String a)
per=a;
public void setIadd(String a)
iadd=a;
public String getName()
return(name);
public String getUname()
return(uname);
public String getPass()
return(pass);
public String getCpass()
return(cpass);
public String getAge()
return(age);
public String getCcode()
return(ccode);
public String getSex()
return(sex);
public String getAdd()
return(add);
public String getUgcourse()
return(ugcourse);
public String getUgqual()
return(ugqual);
public String getPer()
return(per);
public String getIadd()
return(iadd);
public String getOtherugqual()
return(otherugqual);
I initially thought the problem was with str but then str seems to be perfect and I get a string of the form �insert into reg values('c','c','c',98,'Male','c','B.Tech, Applied Artificial Neural Networks','HSC',9898,'h')� which I verified through a javascript debugger. The session scope used is to get values through the db bean from another jsp file. The problem is in the executeUpdate() line of this code. I even tried changing the updation table, but in vain. What could be done to rectify this? Please help me out and please do remember that I have no option but to use odbc.
Thanks in advance.
R. Yogaesh.

I didn't verify the type of exception and i'm now going to do that, but then when the string is as perfect as needed, what is the need for a prepared statement? What is the basic difference between the two? And basically what is the problem with this piece of code which creates an exception? Please reply as soon as possible.
Thankyou very much.
R. Yogaesh.

Loading standard R/3 Hierarchy in BO Database Table using Data Services

Hello,
i'm trying to load Cost Center Hierarchy from R/3 to BO database table using SAP BO Dataservices 4.0
i have replicated the Data Flow and Abap Data Flow explained in SAP documentatio (SAP BusinessObjects Data Services 4-0 SP1 Supplement for SAP) and http://wiki.sdn.sap.com/wiki/display/BOBJ/ReadingR3Hierarchies
but it doesn't work
i get errors like:
[Merge:Merge]
Length <64> for Tran Merge input ABAP_DF_Hierarchy_Leaf_Values column <PARENT_DESC> does not match the length <30> of Tran Merge input ABAP_DF_Hierarchy_Extraction column <PARENT_ID>. The matching columns of Merge transform must have the same data type length. (BODI-1111062)
[Merge:Merge]
Length <30> for Tran Merge input ABAP_DF_Hierarchy_Extraction column <PARENT_ID> does not match the length <64> of Transform Merge output column <PARENT_DESC>. The matching columns of Merge transform must have the same data type length. (BODI-1111062)
thanks for your support
Bilal

It appears that the structures of the two Data Transports going into the Merge Transform don't have the columns in the same order. One of the Data Transports has PARENT_DESC listed before PARENT_ID and the other Data Transport has PARENT_ID before PARENT_DESC.
Basically, you need to change the order of the columns in one of the Data Transports so that it structurally matches the other Data Transport that it's being merged (UNIONed) with.

Database access using LDAP (AD) credentials

I am looking for any information about how to allow users access to a database and underlying applications that rely on DB authentication methods, to be able to access without specifying username/password credentials.
I know that OP$ accounts can be used in which case a user does not need to specify username/password credentials... but last I checked on this I thought there were security concerns related to this and this approach was not generally recommended.
We want users to be able to access databases and applications without login since they have already authenticated to the network using their credentials as authenticated via AD... So my quesrion is...
Is there a way that credentials can be passed from AD/OID using network login credentials of users to allow access to the database and applications? Is there a way to have an Oracle database talk directly to an AD LDAP solution or is it required that you implement OID and SSO?
I hope that makes sense.... Bottom line is we want to not require username/password authentication to every Oracle database application for users. We would like a way to use their AD credentials....
Is this possible?
Or can it only be accomplished with an OID/SSO inplemenetation?
Or is this essentially OPS$ accounts? are there security concerns with ops$ accounts.
Thanks.

This can be achieved by means of an enterprise user.
You may want to read this HowTo Document: How to set up Enterprise User Security.
~ Madrid

Database access using DAO

I'm new to Struts and would like to know about accessing database in struts
using Data Access Object (DAO) pattern.
It would be better If anybody can point me to any good source on how to write the DAO
and how to configure the Struts-Config.xml in order to use the DAO pattern,
Any sample would be better too.
Any help pretty much appreciated. Thanks in advanced.

I'm new to Struts and would like to know about
accessing database in struts
using Data Access Object (DAO) pattern.
It would be better If anybody can point me to any
good source on how to write the DAO
and how to configure the Struts-Config.xml in order
to use the DAO pattern,
Any sample would be better too.
Any help pretty much appreciated. Thanks in advanced.Hi,
I am developing a web application with struts and DAO pattern.
If you study this pattern you will know that it makes connection to database. and there is two way to obtain a connection object from your action class:
1. througth DriverManageras mention in java tutorial JDBC Basics:
2. througth Datasource as mention in java 1.3 turorial, chapter 31 "Resource Connections", sections "DataSource Objects and Connection Pools" and "Database Connections". This tutorial show you how to set up Datasource for Sun Java System Application Server Platform througth the j2ee deployment tool.
in the case of having an different platform from Sun Java System Application Server you must know how to correctly set up the datasource object with your web or ejb container.
I have chosen the second solution for my webApp. I am using tomcat co-bundle with netbeans 4.0. those ares the configuration files of my web app (according to netbeans 4.0 help context "Setting Up a Tomcat Database Connection Pool"):
file server.xml
<Resource name="jdbc/WebForumDB" type="javax.sql.DataSource"/>
<ResourceParams name="jdbc/WebForumDB">
<parameter>
<name>validationQuery</name>
<value>select * from "PBPUBLIC"."USER_ACCOUNT_TAB"</value>
</parameter>
<parameter>
<name>maxWait</name>
<value>5000</value>
</parameter>
<parameter>
<name>maxActive</name>
<value>4</value>
</parameter>
<parameter>
<name>password</name>
<value>PBPUBLIC</value>
</parameter>
<parameter>
<name>url</name>
<value>jdbc:pointbase://localhost:9092/WebForumDB</value>
</parameter>
<parameter>
<name>driverClassName</name>
<value>com.pointbase.jdbc.jdbcUniversalDriver</value>
</parameter>
<parameter>
<name>maxIdle</name>
<value>2</value>
</parameter>
<parameter>
<name>username</name>
<value>PBPUBLIC</value>
</parameter>
</ResourceParams>
file context.xml
<ResourceLink name="jdbc/WebForumDB"
type="javax.sql.DataSource"
global="jdbc/WebForumDB"/>
file web.xml
<resource-ref>
<description>Web Forum Database</description>
<res-ref-name>jdbc/WebForumDB</res-ref-name>
<res-type>javax.sql.DataSource</res-type>
<res-auth>Container</res-auth>
</resource-ref>
after all configuration work your DAOFactory class should nearly looks like this (my DAO pattern obtain connection througth Datasource object):
public class PointbaseDAOFactory
extends DAOFactory {
private static DataSource ds = null;
private static String dbJndiName = "java:comp/env/jdbc/WebForumDB";
/** Creates a new instance of PointbaseDAOFactory */
public PointbaseDAOFactory(){}
public static Connection createConnection()
throws DAOException {
InitialContext ic = null;
Connection conn = null;
try {
//lookup datasource
ic = new InitialContext();
log.info("method: createConnection, lookup dataSource jndi name: " + dbJndiName);
ds = (DataSource) ic.lookup(dbJndiName);
if (ds == null){
throw new DAOException("method: createConnection, null Datasource from jndi lookup");
// get connection
conn = ds.getConnection();
} catch (SQLException e){
throw new DAOException("method: createConnection, SQLException",e.getMessage());
} catch (NamingException e){
throw new DAOException("method: createConnection, NamingException",e.getMessage());
return conn;
hope this help you. :-)

SO 8 database access using BASIC

I created a database using StarOffice 8 and I want access it through BASIC. Unfortunately I keep getting the following error:
Table not found in statement [SELECT ItemDescription FROM Inventory].
This should work because my SQL query uses the same syntax and it works.
Here is the code (copied nearly verbatim from the StarOffice BASIC manual):
Dim DatabaseContext As Object
Dim DataSource As Object
Dim Connection As Object
Dim InteractionHandler as Object
Dim Statement As Object
Dim ResultSet As Object
DatabaseContext=createUnoService("com.sun.star.sdb.DatabaseContext")
DataSource=DatabaseContext.getByName("TestDatabase")
If Not DataSource.IsPasswordRequired Then
Connection=DataSource.GetConnection("","")
Else
InteractionHandler=createUnoService("com.sun.star.sdb.InteractionHandler")
Connection=DataSource.ConnectWithCompletion(InteractionHandler)
EndIf
Statement=Connection.createStatement()
ResultSet=Statement.executeQuery("SELECT ItemDescription FROM Inventory")
If Not IsNull(ResultSet) Then
While ResultSet.next
MsgBoxResultSet.getString(1)
Wend
EndIf

This can be achieved by means of an enterprise user.
You may want to read this HowTo Document: How to set up Enterprise User Security.
~ Madrid

Assigning database access using Shared Services

Similar Messages

Maybe you are looking for