Authorization in BPS

Question

Hi Everybody.
We have Multi-Planning Area ZMPA that consists of standard planning areas ZSPA1 (infoProvider ZICPA1) and ZSPA2 (infoProvider ZICPA2).
ZICPA1 infoProvider has:
- characteristics
     0BUS_AREA;
     0CALQUART1
     0CALYEAR;
     0CMMT_ITEM;
     0FM_AREA;
     0FUNDS_CTR.
- a key figure 0OI_EXPENSE.
ZICPA2 infoProvider has:
- characteristics
     0BUS_AREA;
     0CALQUART1
     0CALYEAR;
     0CMMT_ITEM;
     0FM_AREA;
     ZFUNDCTR.
- a key figure 0OI_EXPENSE.
ZFUNDCTR is compounded with 0CALYEAR, 0CMMT_ITEM, 0FM_AREA. ZFUNDCTR has a navigation attribute 0FUNDS_CTR.
Example of ZFUNDCTR master data:
ZFUNDCTR   0CALYEAR    0CMMT_ITEM   0FM_AREA      ZFUNDCTR-0FUNDS_CTR
01        Y1          A1           2700          01
01        Y1          A2           2700          01
02        Y1          A1           2700          02
02        Y1          A3           2700          02
03        Y1          A3           2700          03
03        Y1          A4           2700          03
Where Y1 - year value,
A1..A4 - different values.
0FUNDS_CTR is an authorization relevant characteristic. We have selected the 'Obsolete Concept with RSR Authorization Objects' and have created an authorization object ZOFUND for InfoProvider ZICPA1 only.
The planning function ZMPAPF at the ZMPA area should copy data from ZSPA2 to ZSPA1 with formula like this:
=== begin ===============
Operand {0FUNDS_CTR,ZFUNDCTR,Plng Area}
DATA s_fund TYPE STRING.
DATA V_0FUNDS TYPE 0FUNDS_CTR.
DATA V_ZFUNDS TYPE ZFUNDCTR.
foreach V_ZFUNDS in REFDATA.
  s_fund = V_ZFUNDS.
  V_0FUNDS = s_fund.
  {V_0FUNDS,#,Plng Area} = {#,V_ZFUNDS,ZSPA2} .
endfor.
=== the end ==============
1) A User has an authorization object ZOFUND with values '01' and '02' .
But when he performs this planning function there becomes an error that he hasn't an Authorization. System can not to read data from {#,V_ZFUNDS,ZSPA2} because User hasn't an Authorization ZOFUND = #. But ZOFUND authorization have not been selected for ZICPA2 infoProvider.
Have you any comments?
2) We have given an authorization value '#' for this User to solve the problem. And now User can see all values in the list of authorization relevant variable in the BPS. I think it's not correct. For example he can see only '#', '01', '02' values for autorization type variable in the BEx Analyzer .
SAP NetWeaver BI 7.0, Support Package 15.
With best wishes, Alexander.

Answer 1

Hi,
To answer ur first question, as u didnt select infocube2 for authorization and the planning function level contains 0FUNDS_CTR, system cant read any record from infocube2 example {#,V_ZFUNDS,ZSPA2}.
Now after giving # access, he can see all values for the variable but the planning function wont work because authorization is not checked for cube2.
i hope u should give authorization check for cube2 also. and see giving only # value to cube2.
i didnt understand what exactly is the planning function doing.
i guess it is dealing only those records which have 0funds_ctr as # from cube2.
u can try this.
Bindu