Auth for Nav Attributes

Hi All, I have a report on a multicube which is secured by company code. I also have 2 navigational attributes on company code- Plant of origin-company code and ship plant-company code. I have an authorization variable on company code which I am using to feed the variables on the 2 navigational objects through customer exit. When I run the report, it runs fine but when I try to drill down by any of the two navigational attributes(on comapny code) then there is an authorization error. I ran a trace and see that the system does an auth check for all the 3 objects(main auth object and the nav). Is there a way to stop the auth check on the nav attibutes? Thanks
Puneet

Hi Emerald,
maybe an approach to resolve some irritations.
Let consider your scenario, one char is used as nav attribute in several chars. i.e. Char A, used in B__A, C__A and D__A.
If you want to protect the usage of the characteristic A as navigational attribute in the characteristics B, C or D, you have to set the flag 'Authorisation relevant' in the attribute section of the respective characteristics B, C or D (which means up to 3 flags and corresponding 3 authorisations).
If you want to use the characteristic A in its on right in an InfoProvider, you have to set the flag 'Authorisation relevant' in the InfoObject maintenance of characteristic A.
If I have stated something different in my previous replies, please neglect them.
  Cheers
    SAP NetWeaver BI Organisation

Similar Messages

  • Authorization for multiple nav attributes

    Hi Experts,
    I have 2 doubts that I need to confirm with you:
    Scenario :
    an aggregation level has nav attributes  A__C  and B__C.
    A__C is restricted by authorization variable in the filter section of the query.
    A__C is shown in the rows as well.
    B__C is not defined anywhere in the aggregation level and the query.
    Authorization is created for the user on  A__C   and  B__C   and assigned to user via the BI7 auth admin tcode(s).
    The requirement is to control such that user cannot  access certain values of  Both  A__C  values and  B__C values found in records. In this case,  user is set to access  only  :
    A__C  :   1111
    B__C  :   2222
    A record exist like this :
    A__C     ****     B__C   ****  KF
    1111      ****     3333    ****  $1000
    Question:
    1.  when the query is executed, authorization check is ok for  A__C  and the query should execute.
    But given that this user is not authorized to B__C  = 3333,   will the KF value of $1000  be displayed by the query at runtime assuming the query only is selecting A__C and the KF?
    If it does not show results or shows 'not authorized' , can I say its due to B__C = 2222 is granted and not B__C = 3333 was granted?
    Else if it does show the $1000, can I say that even if B__C  is set = 2222 in the user profile / authorization object assigned,  there is no effect of authorization in this case and the record having B__C = 3333 will be displayed with the KF value (B__C value still will not be shown as its not in the query definition).
    2.   Assuming char C is defined in the query and aggregation level,  must this be individually restricted (i.e set auth of  C = value1, value2 .....)  in authorization object or roles in order that the effect of A__C is achieved where authorization values for A__C is defined by  setting auth of A__C = value 1, value2 ...?
    Scenario A:  char C is in the aggregation level but not used in the query definition in the rows and filter.
    Scenario B :  char C is in the aggregation level and used in the query definition in the rows.
    What would the result be in the above 2 scenarios ?
    Hope to get enlightened about this aspects.
    Thanks in advance.
    Best regards
    PRex
    Edited by: pointes rexiproca on Apr 3, 2008 6:21 PM
    Edited by: pointes rexiproca on Apr 3, 2008 6:22 PM

    Dear Pointes,
    For management authorization by navigational attribute, I suggest the following steps:
    1.     Should check the attribute setup of “A” and “B” InfoObject in Tcode RSD1, and be sure if they are relevant of authorization. Remember, in BI2004s the attribute navigational are different component authorization.
    2.     Then, you should check your analysis authorization in Tcode RSECADMIN Authorization and verify which these attributes navigational A__C and B__C are included in analysis authorization, and what value do they have? Be careful which logical sing “<, >, =…”. Also, remember include colum “:” value in each attribute navigational for avoid problem.
    3.     Before that, you should check the queries structure and be sure if theses attribute is like a entry variable authorization.
    I hope that can help you,
    Luis

  • Can I use Nav Attribute of a Nav Attribute for Drill Down....??

    Hello Gurur:
    I have a strange request.  We need to use 0EMPLOYEE in our Cube, whic has 'Comp. Code', 'Cost Center' 'User ID' as Nav Attributes.  "Com Pcode" has Nav attributes 'Global Divison" "Subsidiary" etc.
    We need to use the 'Global Division' ifor Selection in Dashboard and Web templates.  The only way to use it with 0EMPLOYEE" would be to use Variable on a Nav. Attribute of a Nav Attribute. ......  So involves 2 jumps.
    Is this something possible??  I have my doubts but has anyone seen done this?  Can someone please shed some light.
    Thanks a ton in advance,........
    Best  PBSW

    Hi pbsw2009:
       To answer your question, yes, that is possible, in fact that is what SAP calls "Transitive Attributes".
    In other words, Global Division is a Transitive Attribute of 0EMPLOYEE (in your scenario).
    Take a look at this document, "Understanding Transitive Attributes"
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90efdd6e-c86e-2910-db9c-87da68b3fc57?quicklink=index&overridelayout=true
    Regards,
    Francisco Milán.
    Edited by: Francisco Milan on Apr 27, 2010 10:31 AM

  • How to show data for navigational attribute in a report ?

    Hello all,
    I have a hierarchy info object A which has a navigational attribute(hierarchy) B. I need to filter on B for a particular node.
    I have added A in the filter column and selected B as the attribute. How can i restrict B for a particular hierarchy node ?
    Any help will be appreciated.
    Thanks in advance
    S N

    Hi,
    Have you defined 'B' as Navigational attribute at InfoProvider Level?
    You can Restrict B for a Particular Value once it is defined as Navigational attribute at InfoProvder level.
    Go to InfoProvider maintaince>click 'nav attributes'>enable it (check the box).activate the InfoProvider.
    Then you can see it under same dimension where 'A' is assigned and its name would be  A_B.
    Drag and drop in to rows and restrict(include/exclude) with required value.
    thanks
    Message was edited by:
            Murali

  • Report Issue - Nav Attribute

    Hi All,
        Here is my issue...
    I've a sales report against Multi Provider to display a filed <b>'Province Ship To'</b>, it is a Nav attribute of <b>'Customer Ship To'</b>. I've verified in mastre data of <b>'Province Ship To'</b> that there are values for both text (Medium & Short) & Key and also verified values exits in MP through LISTCUBE. But when I run a query I'm getting 'Not Assigned" value for <b>'Province Ship To'</b> and I need to see full description it.
    I'd appreciate if some one could help me on this as this is urgent...
    Thanks
    BI Consultant

    Thats what I did, display as both TEXT & KEY. For KEY it is  showing up, for example OR in KEY but not showing up the description for TEXT/Name column, isntead it is showing as "Not Assigned" for all records.
    I've verified Short & Med description extits for all records in Masterdata.
    Example:
    <b>Key                                    Txt/Name Desc.</b>
    OR                                         Oregon
    CA                                          California
    CT                                           Connecticut
    Thanks

  • How to create variable in BEx on a Nav Attribute?

    Hi All,
    We are creating a report on Master data object 0MILESTONE. 0PROJECT is the navigational attribute of 0milestone.
    and ZSTATUS is the navigational attribute of 0PROJECT.
    Requirement is to create variable on ZSTATUS in BEx. How do I do that? I dont see option of creating variable on Nav attribute of a Nav attribute.
    Regards,
    Bob

    Hi,
    There is nothing as such creating variable for navigation attribute. You can only create variable directly on particular infoobject.
    In your case you are using transitivie attributes. So they can not be accesed directly in BEX query. You can only use 1st level nagivation attributes in bex query.
    [http://help.sap.com/saphelp_nw04/helpdata/en/6f/c7553bb1c0b562e10000000a11402f/content.htm]
    Regards,
    Durgesh.
    Edited by: Durgesh Gandewar on Feb 22, 2012 3:53 PM

  • Tricky! Change of navi-attribute values in ABAP and use in selections

    Hi gurus,
    now I have a teaser that really keeps me busy, and which might be interesting for some of you:
    we use several statuses in our <u>Demand Planning in SCM 5.0</u>, some of which can be switched by using a user-function macro which just basically is a ABAP function module that <u>changes navigation attribute values directly on the database</u>, meaning in the master data tables of the respective characteristic.
    Now, the code works, the values are changed accordingly, leaving the data set in object status "active" - <b>BUT</b>:
    <i>when we call a selection, it still shows the old values, even after activating master data or running the attribute change run!</i>
    This is not what we expected. Our wish was, that once the table was updated with the correct field values, we would also see them in our selections.
    <u>Details:</u>
    we have two statuses as navi-attributes to an article:
    <i>DP:</i> YES/NO, and
    <i>oDP:</i> YES/NO
    Combinations originally are: <i>DP</i> YES/<i>oDP</i> NO
    After the status change macro, the table shows the following, as expected:
    <i>DP</i> NO/<i>oDP</i> YES
    As we have two selections, one on DP status "YES", the other one on oDP status "YES", we would like to see the article vanish in the first selection and show up in the other one...
    Does anybody have an idea what is wrong and what we can do to have to proper navi-attribute values from the master data table in the selection? Does the selection not read from the database but from a buffer?
    Looking forward to your answers,
    Klaus

    Hi Fabrice,
    yes indeed, I did check the object version, and it is A.
    Problem is, the function module changes the data record which is "A" anyway. So the changed data record is active - however, I just had a look at the SID master data table, and it looks that direct changes to the P-table do not affect the X-table where the SIDs are stored. So I guess I will also have to update the X-table with the correct SID-values.
    If this works, I let you know. We will be using this change by ABAP quite often, it is rather useful.
    Regards and thanks for your prompt reply,
    Klaus

  • Aggregates based on Nav Attribute Hierarchy

    Hi,
    I have naviational attribute hierarchy based on created by and enabled as navigation attribute from Infocube. So for each transaction the created by pulls up the corresponding nav attribute from master data.
    I have enabled the Created By nav attribute hierarchy in the query and the rendering of the hierarchy is really slow and the performance went down.
    What is the best way to increase performace creating aggregates at Created by level or Created by Nav attribute hierarchy level?
    Is there any document available on this topic?
    Thank you
    Arun

    Hi Arun,
    I don't know if this can be useful, but take a look to OSS Note 738098 'Performance problems with hierarchies'..
    Hope it helps!
    Bye,
    Roberto

  • Macro help: Nav Attribute Value

    Dear Macro Gurus,
    I need to realize this
    IF the value of the Navigational Attribute "NavChar2" of a POS "Char1" is = a, b, and c
    then
    do something.
    ENDIF
    I could do the something
    but couldn't get the macro function right for the IF.
    Help appreciated
    Thanks
    BS

    Is this any help?  Function ACT_IOBJNM_VALUE with a double underscore to separate the characteristic from its nav attribute.
    ACT_IOBJNM_VALUE( 'characteristic__navattr' ) = 'X'
    which could be implemented in macro similar to attachment

  • New Nav attribute

    Hello Experts,
    This is the situation.
    Three Infobjects:
    Sales Ord
    System ID
    Sales Ord Rpt
    Compounded:
    Sales Ord is compounded with system ID to make it unique
    Sales Ord Rpt is a nav attribute of Sales Ord
    Sales Ord Rpt = Sales Ord
    Purpose of Sales Ord Rpt:
    In the reporting to provide rollup on Sales Ord
    Master data:
    loaded for Sales Ord
    Trx Data feed:
    Transaction data is feed into Sales Ord Infobject & system ID.
    Report:
    rollup required on the Sales Ord Rpt
    Will the report show the values of Sales Ord Rpt.
    I know that I am missing something in here. Any suggestions appreciated.
    Thanks,
    Sweatha.

    Hi Sweatha,
    I follow you up to Trx Data Feed.  Does your Trx data load into a cube or ODS?  If you are using a cube or ODS then the Trx data will roll up to the aggregated level of that object.  For example: if Sales Ord is the key then all records will be at that level or if Sales Ord and Sales Item are the key then the records will be at the Sales Item level.  If you are loading this data into a master data object then the key is the master data object, example: all data in Sales Ord master data roll up to the Sales Ord.
    Hope this helps,
    Aaron Blasi

  • Transferring the Cube with activation of some Nav Attribute

    Hi , In Production system, I have a sales multicube which has data coming in from sales overview and sales history cube. Data is loaded from mARCH 2006 to Till date every day in 2 basic cubes "sales overview" and "sales history"
    Question 1:I need to now avtivate  "ship to party - postal code" which  is there in two basic cubes but not checked so I now select the check mark in nav attribute "ship to party - postal code" for both the cube in development system. and same in mULTICUBE should I Transport 2 basic Cubes, and Multicube and All effected Queries or just the query in which change is requested.  
    Question #2 : How to reload all the data which is right now there in Production, If I transport the cube with changes from DevLOPMENT to Production will the data be deleted in Production. All Data is feeding in Cube from ODS so Can I just Transport the cubes in Production and Use Update data to data target in ods. will the data be reloaded in cubes by doing that. Data loaded is delta so please let me know asap what will be best way to make the change and also save the data that is right now there in cubes in Production. since i have to transport it from dev no changes allowed in production.Hope you will reply back soon. Thanks
    alot
    seeraj

    Hardeep,
        You need to transport the Sales Overview cube, Slaes History, Multicube cube and modified Queries.
        when ever you make changes like Making Navigational there is no need to delete the data. you just do one transport.
    All the best.
    Regards,
    Nagesh Ganisetti.

  • Look up on Nav Attribute

    Hi Friends !
    Is it possible to write a code in start routine using the look up on Nav attribute? For instance:
    A = Master IO
    B = Nav Attribute
    C = field in source package
    where A__B = SOURCE_PACKAGE-C.
    With Regards
    Rekha

    Hi Rekha,
    you have lookup the P table of the MAster data:-
    in Start Routine:-
    Global section declare the ITAB
    data : itab type table of /BIX/PXXXXXXX,     (Mater data Table name)
              wa like line of itab.
    in Start Routine Section:-
    select * from /BIX/PXXXXXXX into table itab.
    then Compare it either in Fields Level routine or End Routine (depending on your scenario)
    where wa-B= REsult_package-C.
    Best Regards
    Obaid

  • What are the different values available for type attribute

    Hi,
        I am working with IDOC to Stored Procedure. For each field we need to give the values for 'isInput' and 'type' attributes. I need to pass values for 'datetime' and 'numeric' fields. What are the list of values availabIe for 'type' attribute. I know only about 'CHAR' attribute.
         Can anybody please tell me what all the values availabe for attribute 'type'. I am facing this problem while giving the value for type attribute.
    Thanks in Advance,
    Murthy.

    Does this help
    tring
        Data that contains a combination of letters, numbers, and special characters. String data types are listed below:
    CHARACTER: Fixed-length character strings. The common short name for this data type is CHAR.
    VARCHAR: Varying-length character strings.
    CLOB: Varying-length character large object strings, typically used when a character string might exceed the limits of the VARCHAR data type.
    GRAPHIC: Fixed-length graphic strings that contain double-byte characters.
    VARGRAPHIC: Varying-length graphic strings that contain double-byte characters.
    DBCLOB: Varying-length strings of double-byte characters in a large object.
    |BINARY: A sequence of bytes that is not associated with a |code page.
    |VARBINARY: Varying-length binary strings.
    BLOB: Varying-length binary strings in a large object.
    |XML: Varying-length string that is an internal representation |of XML.
    Numeric
        Data that contains digits. Numeric data types are listed below:
    SMALLINT: for small integers.
    |INTEGER: for large integers.
    |BIGINT: for bigger values.
    DECIMAL(p,s) or NUMERIC(p,s), where p is precision and s is scale: for packed decimal numbers with precision p and scale s. Precision is the total number of digits, and scale is the number of digits to the right of the decimal point.
    |DECFLOAT: for decimal floating-point numbers.
    REAL: for single-precision floating-point numbers.
    DOUBLE: for double-precision floating-point numbers.
    Datetime
        Data values that represent dates, times, or timestamps. Datetime data types are listed below:
    DATE: Dates with a three-part value that represents a year, month, and day.
    TIME: Times with a three-part value that represents a time of day in hours, minutes, and seconds.
    TIMESTAMP: Timestamps with a seven-part value that represents a date and time by year, month, day, hour, minute, second, and microsecond.
    Regards
    Ravi

  • Validation error message is not displayed for an attribute as an Input List Of Value

    Hi everyone,
    I use jdev 11.1.1.7.0
    In my application I've created an Entity Obj and a View Obj base Employees table.
    for the JobId attribute I've taken actions as listed below:
    1. in Employees EO I've created a validation for this attribute and in some cases an error message returns (the error message is "the salary is not high"):
         * Validation method for JobId.
        public boolean validateJobId(String jobid) {
            if (...) {
                return false;
            if (...) {
                return false;
            if (...) {
                return false;
            return true;
    2. in Employees VO  I've created a LOV for this attribute (the view accessor is JobsViewObj ) and I display the attribute as an Input Text with List Of Values.
    in jspx page I drag& drop this attribute as below:
              <af:inputListOfValues id="jobIdId"
                                    popupTitle="Search and Select: #{bindings.JobId.hints.label}"
                                    value="#{bindings.JobId.inputValue}"
                                    label="#{bindings.JobId.hints.label}"
                                    model="#{bindings.JobId.listOfValuesModel}"
                                    required="#{bindings.JobId.hints.mandatory}"
                                    columns="#{bindings.JobId.hints.displayWidth}"
                                    shortDesc="#{bindings.JobId.hints.tooltip}"
                                    autoSubmit="true">
                <f:validator binding="#{bindings.JobId.validator}"/>
              </af:inputListOfValues>
    I open the Popup and I select a row from the Popup list and then I click Ok. After that if the validation method(validateJobId) returns false, the error message("the salary is not high") must be show to the user. but the error message doesn't display. I don't understand why this happens.
    Can anybody guide me about this problem?
    Regards
    Habib

    yes, you're right, I've tested it in 12.1.3 and error message was displayed.
    it seems it's a bug(bad bug ) in both 11.1.1.7 and 12.1.2. and now what can I do? is there any way to display the the error message?
    Regards
    Habib

  • Data not coming from DOE to Mobile After defining Rule for device attribute

    Hi All,
    I have created a DO and rule for it.In case of Bulk Rule for all definition when i triggere extract from Portal then all the data comes to outbound queue but when i define rule for Device attribute then no data comes to my Outboun queue.Here is the scenario what i am doing :
    1. I have order header in my backend which has a field named "Work_Center" and this will be criteria field.
    2. In CDS table i have all the records for all the work center.
    3. Now in RMM under customized , i have added an attribute named "Work_center".
    4. Now i defined a rule with Device attribute mapping and activated the rule.
    5. Now on Portal i assigned this data object and in the device attribute tab i assigned the value(this value exist in CDS table for few orders) of a   Work center to the attribute "Work_Center" .
    6. Then i triggrere extract but its Outbound queue is empty, what could be the reason.
    Is my approach is correct
    Regards,
    Abhishek

    Hi Abhishek,
    You can check one ore thing, after you have performed all the steps till step 5, i.e. just before triggering
    extract. Check if the AT table for ur DO has entries based on the criteria specified by you...
    1. In the workbench click on the Data Object, and then right click and select "View Metadata".
    2. Select Distribution Model tab.
    3. Now select your DO's Association table.
    4. For the input field DEVICE ID specify your corresponing device id,and also for status field specify it 
        as "I"  and execute
    If there are any entries now in the AT table, and on triggering extract if they are not coming to the
    outbound Q there is some EXTRACT Q blocked. And is there were no entries in the AT then the rule
    specified is not  the satifying.
    Thanks,
    Swarna
    Now if you have entries w

Maybe you are looking for

  • How do I get a busy cursor?

    I have a Flex (3.0) application that takes a long time.  Using LiveCycle, a databases is checked and records extracted. While this is going on, I want the cursor to be an hour glass (or busy looking). I added the import and the "CursorManager.setBusy

  • Using Java with Oracle Spatial

    I am using the JDBC (Java classes dowloaded from technet.oracle.com - (sdoapi.zip)) together with Oracle Spatial 8.1.6. I am writing a collection of Linestrings into Oracle Spatial using the supplied java classes(sdoapi.zip). I use the function creat

  • Issue in smartforms

    hi experts ple tclarify my doubt.why we use selection screen in smartforms.what is the need to use selection screen in smartforms. regards polureddy

  • Dreamweaver CS5.5 Slow down when minimising and loading pages.

    Hi there I'm having a really strange problem with Dreamweaver CS5.5 I'm currently in the process of building a CMS for a client and I am experience slow down in Dreamwever when opening and closing certain pages, it also causes slow down/hanging when

  • I loss my photo when i software update in iphone4 i want to get back the photos from itunes backup i can not find

    hi i update the iphone 4 software 4.3.3 that time i made the back up file after update the software i want restore my backup and i start backup restoring half way the error message come your computer space not enough need to clear some files so i cle