Authorization values for 2 different queries
Hi,
I have an info object which is a authorisation relevent info object.
I had used this info object in my 2 queries. Our requirement is when the user executes the query1, he should be able to see the data only for the authorized values which has been given in PFCG. But, when he executes the second query, there should be no check and query should display all the data irrespective of the values given in PFCG.
Basically, Query1 should execute as per the PFCG values and the Query2 should execute bypassing the PFCG authorization values.
Can anyone please help on this.
Thanks
Ramesh Ganji
Hi,
First create a role with the following authorizations (full)
flight no - * (all accounts allowed)
Define a query without any restrcitions/filter so that when the user 1 runs, he can find all the data from this query.
Now define one more query wherein restrict flight no as 001
Now when the user John runs this query, he can find only 001flight details
In this way, just by defining only one role, you can achieve ur requirement by using restrictions at the report level.
Regards
Pavan Prakhya
Similar Messages
-
Adding values from two different queries in one query
Hi,
I have developed a web template by combining 3 queries ,which were created from the same MultiProvider.These queries are having many different selections .Now I need to get the addition of values from these 2 queries into third query.
Is there any way to combine the selections from these queries into one instead of recreating them again.I tried to use global strucuture but not successful.
Kindly let me know is there any workaround for this.
Thanks & Regards,
RajaHi ,
You can do it by excel formula.
sheet 1 --> 1st query
sheet2 -->2nd query
sheet3--> put calculations accroding to your requirement based on sheet1 & sheet2 into sheet3.
Regards
Pcrao. -
Content Conversion- Same keyfield value for two different sub structure
Hi,
I have a scenario where the key field value for the 2 substructure of record structure is same.
MY XML structure is like this :
<documentName>
<recordset>
<Header>
<field-nameA1>
<field-nameA2>
<field-nameA3>
<ITM1>
<field-nameB1>
<field-nameB2>
<field-nameB3>
<ROW1>
<field-nameB1>
<field-nameB2>
<field-nameB3>
<ITM2>
<field-nameB1>
<field-nameB2>
<field-nameB3>
<ROW2>
<field-nameB1>
<field-nameB2>
<field-nameB3>
The sample text file is given below where line no. 3 and 5 are different substructure(For ROW1 and ROW2 respectively) with same keyfield value.
"HDR",399,"file",20050302,100642,3289
"ITM1",2,3,4,5,6,7,8,9,10
"ROW",3,4,5,6
"ITM2",2,3,4,5,6,7,8,9,10
"ROW",7,8,9,10
After content conversion I get a XML structure in which there is no ROW2 and all data within the fields of ROW2 are put under ROW1 as the key field values are identical.
In the records only the first field is constant (e.g. ROW).
How to handle such a scenario?
Regards
Satish ChauhanUnless you can somehow expand the key, I don't know that this is possible. The key implies uniqueness - and in your case, unfortunately, it isn't. Is there any way to edit the structure to make it more unique for you? Do you have any control or ability to change that?
Maybe if you add unique keys in your mapping, you can strip them off with content conversion on the way out using the parameter keyFieldInStructure=ignore? -
Will a sequence return same value for two different sessions?
Is there a possibility that a sequence will return same value to two different sessions when it is referred exactly at the same instance of time?
@Justin... Thanks for your insight; indeed, we too feel this shouldn't ever happen and never heard of it either, but there it is. (No, we haven't logged a TAR yet -- whatever that is -- partly because it didn't occur to us and partly because we only recently came across the issue and sensibly want to do some testing before we cry foul.)
However, the code is pretty straight-forward, much like this (inside a FOR EACH ROW trigger body):
SELECT <seqname>.NEXTVAL INTO <keyvar> FROM DUAL;
INSERT INTO <tblname> (<keyfield>, <... some other fields>)
VALUES(<keyvar>, <... some other values> );
(where <tblname> is NOT the table on which the trigger is fired). This is the only place where the sequence is ever accessed. The sequence state is way below its limits (either MAXVALUE or <keyfield>/<keyvar> datatype size).
In this setup, end users sometimes got an out-of-the-blue SQL error to the effect that uniqueness constraint has been violated -- as I said, we used to have a unique index on <keyfield> -- which leads us to assume that the sequence generated a duplicate key (only way for the constraint to be violated, AFAIK). We released the constraint and indeed, using a simple SELECT <keyfield>, COUNT(*) FROM <tblname> GROUP BY <keyfield> HAVING COUNT(*)>1 got us some results.
Unfortunately, the <tblname> table gets regularly purged by a consumer process so it's hard to trace; now we created a logger trigger, on <tblname> this time, which tracks cases of duplicate <keyfield> inserts... We'll see how it goes.
@Laurent... winks at the CYCLE thing Our sequence is (needless to say) declared as NOCYCLE and the datatype is large enough to hold MAXVALUE. -
Special Authorization Values for characteristics
I had a question about the authorization value '*' (asterisk)
SAP defines how this can be used as follows:
(asterisk)
.. Denotes a set of arbitrary characters
.. Used alone to grant access to all values
.. Used at the end of a value to specify a simple pattern (example: SAP*)
Here is my situation:
InfoObject A: Values can be: A,B, C, A1, B1, C1, C2, A1G, B1D, C1A, C2A etc.
If a user has authorization of C, it automatically means he is authorized to view values C1, C2, C1A and C2A. In this case can I assign values
C, C and C** (I am doubtful abt using *(double asterisk))
Please clarify.
ThanksAsterisk denotes a set of arbitary characters
Used alone to grant access to all values
used at the end of a value to specify a simple pattern(example SAP *)
+(Plus)
Denotes exactly one character
Used at the end of a value to specify a simple pattern (example - RED+)
Used to specify date patterns(only for validity (OTCAVALID))
Hope it Helps
Chetan
@CP.. -
How to giv diff varible values for all the queries in a Workbook?
Hello BI Gurus,
I have an issue with the variable in a the workbook,
I have a workbook in which 4 queries are inserted in the same sheet one below the other and all these queries has same hierarchy variable (same technical name). In all these queries uses different hierarchies but same selection variable.
Now the issue is , when I refresh the workbook the first queryu2019s variable pops up selection option for the hier variable and when I enter the value this first query runs fine but it carries the same value to another query and fails as the 2nd query uses diff hier.
All I need is, is there any way by which these queries pop up selection screen separately for every query in workbook?
Thanks a lot..! have a great day!Hi,
You should open workbook settings and remove tick for display dubplicate veriables omly once.
Regards,
Veronika. -
How to get the values for the Authorization Object Fields....
Hi Everyone,
I'm pretty new to the SAP Security and have been working on the Basis sides...I created a new role in PFCG and added a few transactions (ME13) and clicked on the Authorizations tab. In there, the authorization tree is in yellow and red. After providing the Org Values, only the yellow lights remain (apart from the green one ofcourse). Now how do we get the values for the different auth obj fields that are in yellow... say for example
Conditions COND
Maintain Condition: Auth. for Use/Appl./Cond.Type/Table V_KOND_VEA
Activity 03 ACTVT
Application KAPPL
Condition table KOTABNR
Condition Type KSCHL
Usage of the condition table KVEWE
Here the values for V_KOND_VEA fields e.g. KAPPL, KOTABNR etc are missing.
My question is how do we get these values in regard to the requirement provided by the client...is it the functional guys who provide these values or else how is a security person supposed to know it...
All the help in this regard is sincerely appreciated along with the awarding of points...Hey thanks Alex and Catastrophe for the quick response...
I'll be sitting with the functional team and reviewing the roles created.
Thanks for all the help once more
Regards,
Akash. -
How to use different iViews for variables and queries?
Hi all!
I need to use separtate iViews for storing variables and extracting queries.
For example, I have one variable "Currency" for two different queries, and I need that all of these queries (in separate iViews) would use the value of currency was put by user in the first iView with only one input.
How can I do this task? Is it possible at all?
Thanks for replies.Hello Alex,
You have to use EP client framework (EPCF) in your development.
I hope this idea will help you.
Kind regards, Pino. -
I have a multi-row region based on a table in which I have two particular columns of interest. The first has an LOV defined for which I have set up a pick-list of codes associated with the item's status as "OK" or having some problem, for which there are a small number of set codes associated. Most rows will be OK, but when there is a problem, the pick-list will be used.
When that pick list has been used, there is an optional "comments" column that can be filled in. I want my screen to dynamically enable/disable a pushbutton that links to the comment based on the code. This being row-based, the push-button needs enabling or disabling by row, not as a whole "conditional column". That bit is ok, I think, but I don't know and can't find the syntax for how within the javascript onchange function I set the current row value for a different column to the one that triggered it.
My header function (that doesn't work) is going to be something like this (where the status column LOV having a value = 6 means "OK"). Note I'm using alert for a debug mechamism. The $s line is my failed attempt to set he column value, here with a hard-coded string "Changed COMMENTS":
<script type="text/javascript">
function doActivateButton(object)
if(parseInt(object.value)!='6')
alert('It is not 6!');
$s('#COMMENTS','Changed COMMENTS','Changed COMMENTS',TRUE);
else
alert('It is 6, you know!');
</script>
Ideally, I want any existing comments blanked if the user picks "OK" (6) as the new status, whereas for debug above I'm setting the hardcoded debug string. You will probably also note I realise I haven't properly understood the purpose of the third parameter in the $s API.
(This is a reports region, by the way. A detail block, in forms-speak, with a header block above it.)
Thanks for any assistance.
MarkSorry, versions are: Apex 4.1 on Oracle RDBMS 11.2.
-
Authorization values to auth object
Hi,
Please let me know how to find the possible authorization values for an custom authorization object..
thanks.Hi,
the definition (and also display) of possible values for activity can be performed in SU21.Doubleclick on the object->there is then a button in the popup: 'Permitted activities'.
Depending on the values checked in the coding (statement 'authority_check') you can also maintain suggestions in SU24 for the corresponding transaction. So if you do not know any values at all, an analyze of the coding will be necessary.
b.rgds, Bernhard -
Filling OLAP Cache for 3 Bex queries
Dear Experts,
Here, We would required to fill the OLAP cache for four bex queries using the Broadcaster Settings.
can any one please suggest for the following.
how to schedule the OLAP chache filling for 3 different queries at a time. do we need to perform this activity individually for three times for three different queries or can we club three queries and do schedule using only one varaint.
Request you to suggests the steps for performing this activity
Thanks in advance,
MannuHey,
this may be useful for you.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f048c590-31a4-2c10-8599-bd01fabb93d4?quicklink=index&overridelayout=true
Regards,
Kiran -
Authorization object for SAP PO price change
Hi Experts,
Our customer has a requirement regarding PO Price change. The user should be able to create PO, Change the PO except the PO price once it putted.
What is the authorization object and authorization value for it ?
Can anybody help me?
Thanks
AsadDear Asaduzzaman,
You can achieve the same by creating transaction variant using SHD0 transaction.
I think below mentioned document may help you to resolve your issue.
How to Create a Transaction Variant
Regards,
Hardik Patel -
Hi,
Is there a way to extract specific authorization values for a particular user?
In SUIM, using "Users by Complex Selection Criteria" will display all the authorization & values. You then need to find that particular authorization, say "P_ORGIN" and go through each one of them to find the values assigned. It is very tedious if the user have a lot of the "P_ORGIN" authorization assigned.
I think in this case, SUIM is not the best way.
Is there a way to quickly zoom into and look at all the values in just that particular authorization, in this case, "P_ORGIN"?
ThanksIf your focus is on HR authroizations one of the ways :
SE16 - table name AGR_USERS
The technical name will provide the assignment coming from organizational management.
Take just those roles :
use SE16 - AGR_1251
Which will give you an output export to excel filter on P_origin.
If you are not using Organizational management:
Then use SE16 - AGR_1251 find roles having P-origin
get the role list and use AGR_USERS to find role to user relationship. -
Authorization steps for 0plant
hi
for 0plant at rsa1 i check authorization relevant
next i went rsecadmin , created authorization relavent ( ztest)
i had taken 0plant an drestricted for 2 values and assigned 3 sap defined special characters
so now my ztest contain authorization relevent from rsecadmin for 0plant
now i went pfcg
now what are the steps i need to follow at PFCGDo the following:
Write a name, for example ZTWS, in Role Name.
Click on Create Role and write a description for the role, such as "Role for the TWS user".
Save the role.
Select the Authorizations tab.
Click on Change Authorization Data.
In the ensuing pop-up select Templates.
Manually add the following authorization objects(depending on ue requirement): Object Description
S_ADMI_FCD System authorizations
S_BTCH_ADM Background processing: Background administrator
S_BTCH_JOB Background processing: Operations on background jobs
S_BTCH_NAM Background processing: Background user name
S_PROGRAM ABAP: Program run checks
S_RFC Authorization check for RFC access
S_SPO_ACT Spool: Actions
S_SPO_DEV Spool: Device authorizations
S_XMI_LOG Internal access authorizations for XMI log
S_XMI_PROD Auth. for external management interfaces (XMI)
Fill the values according to the following scheme: S_ADMI_FCD System authorizations
System administration function: Full authorization
S_BTCH_ADM Background processing: Background administrator
Background administrator ID: Full authorization
S_BTCH_JOB Background processing: Operations on background jobs
Job operations: Full authorization
Summary of jobs for a group: Full authorization
S_BTCH_NAM Background processing: Background user name
Background user name for authorization check: Full authorization
S_PROGRAM ABAP: Program run checks
User action ABAP/4 program: Full authorization
Authorization group ABAP/4 program: Full authorization
S_RFC Authorization check for RFC access
Activity: Full authorization
Name of RFC to be protected: Full authorization
Type of RFC object to be protected: Full authorization
S_SPO_ACT Spool: Actions
Authorization field for spool actions: Full authorization
Value for authorization check: Full authorization
S_SPO_DEV Spool: Device authorizations
Spool - Long device names: Full authorization
S_XMI_LOG Internal access authorizations for XMI log
Access method for XMI log: Full authorization
S_XMI_PROD Authorization for external management interfaces (XMI)
XMI logging - Company name: TIVOLI*
XMI logging - Program name: MAESTRO*
Interface ID: Full authorization
Save the authorizations.
Generate a profile. Use the same name you wrote in Role Name.
Exit the authorization management window and select the User tab.
Add the Tivoli Workload Scheduler user to the role.
Save the role. -
SQL queries for finding values in 4 different tables
I need to have certain queries to find specific data in this table, this is just an example table, but I will use the same ideas for my actual website and database.
customers (customerID: integer, fName: string, lName: string)
items (itemID: integer, description: string, price: float)
orders (orderID: integer, itemID: integer, aID: integer, customerID: integer, date: date)
addresses (aID: integer, housenum: integer, streetName: string, town:string, state: string, zip:integer)
Values I need to find are
List the town, first name, and last name of any customer who has shipped an item to the same town as another customer.
Return the average amount of money each customer spent in March of 2013. (Note that the answer will be a single number
List the first and last names of all customers who have had the same item shipped to at least two different addresses.
List the top two states that have generated the most total revenue and the revenue they generated
I did try a few different queries, for #3 I tried
SELECT customers.fName,
customers.lName,
COUNT(orders.itemID) AS `total items with diff address >= 2`
FROM customers
JOIN (SELECT customerID,itemID,
COUNT(DISTINCT aID) AS diff_address
FROM orders
GROUP BY orders.itemID
HAVING diff_address >= 2
) AS orders
ON orders.customerID = customers.customerID
but I only got 1 result, and I do not think thats correct.
Thanks for the help and I appreciate you taking the time to help meWhy not post the sample data + desired result? Always state what version you are using.
SELECT lname,A.aID,COUNT(*) cnt FROM customers C JOIN orders O ON c.Customerid=O.Customerid
JOIN address A ON A.aID=O.aID
GROUP BY lname,aID
Sorry cannot test it right now...
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence
Maybe you are looking for
-
Dear Apple Support, Good day to you. This is to report the problem i encountered when i updated my Ipad mini to the new IOS 8.1.. After the update my Ipad restart and after that it appears a picture that need to connect to itunes and need to restore
-
Report for Open ASN for GR is NOT done
Hello, is there any STD SAP T code to see how many open ASN for which Good Receipt is NOT done Thanks in advance
-
My Location Settings button is not showing up in Setting App. How do I get it to show up?
-
No new item in sales order refernced from quotation
Dear All, I am creating sales order which is referenced from Quotation. I should not able to add item directly in sales order other than item which i got from quotation. i have checked copy control of QT to OR but could not find how can i do this? pl
-
OES: How to install WebLogic SSM?
Hi, I have a small test configuration consisting of: - IDM (for OID) and IDAM (for OAM) 11g - a test Apache (not OHS) instance with a 10g webgate, proxying to (using the WebLogic plugin) - this is configured for X509 authentication - a test WebLogic