Authorization variable - not work

I need to define authorization criteria using 0COMP_CODE.
1) I checked 0COMP_CODE as "Rilevant for authorization"
2) I defined the object authorization using RSSM
3) I put the authorization object into the roles (PFCG)
4) I defined an authorization variables into the queries
But when I execute the query, no authorization range is applied.
Where is my error?

Hi Fabio,
from your list it seems that everything is well...
so, in the maintenance of the authorization objects, I suggest you to activate the extended trace function for the reporting (Transaction RSSM).
Select key 'Authorization Check Log' to do this.
Enter a user in the field 'User' or select one via F4 help. Then activate the trace for this user with the pushbutton 'Create' (F5).
If the user is already entered, it is recommended to delete the old trace first.
After you have carried out the authorization-relevant activity, you can display the current status of the trace for the user entered in the 'User' field by using key 'Display' (F6).
After, remember to deactivate the trace for the entered user by using pushbutton 'Delete' (F2) and the existing trace of this user is deleted.
The system stores the trace in the database according to the key fields, thus, if you start the same query several times in succession with the same parameters (in the authorizations, too), the checks appear only once in the trace and not several times as in a log.
Hope it helps !
Ciao,
Roberto
(and please don't forget to assign some points by clickin'on the yellow star to the contributors that help you !!!)

Similar Messages

(Substitution Variables) not working in "SQL Developer" Environment !!!!!!!

this photo illustrate how that (Substitution Variables) not working in "SQL Developer" Environment :-
http://www.imagehosting.com/show.php/1555180_ddddd.PNG.html
any solve for this problem ?????!!!!!!!!!!

There is a dedicated forum for SQL Developer related questions
SQL Developer
I should admit however, that query you have provided ( with substitution variables) works like a charme in my environment (SQL Developer 1.1.0.23 build 23.64)
Best regards
Maxim

Payload variables not working

Hi all,
I've been trying to use Profile Manager to specify user e-mail accounts on Mac devices (eg, MacBooks) but I've been encountering a couple of problems. I've tried searching around and didn't find any answers.
First of all I'm running the latest Mountain Lion Sever. All clients have up-to-date Mountain Lion too.
Problem 1: Payload variables not working
I'd like to automatically setup Gmails on the MacBooks. Now the users' email addresses are already set to their gmail accounts. So all I have to be able to do is use the %email% payload variable as the username when I go set up the (IMAP) mail accounts in the Profile Manager. However, when I download the profile to the device, it does not convert the payload variable; ie, it tries to log into gmail with the username '%email%'. Other payload variables do not work either.
Oddly enough, the payload variables work as they should with iOS devices...
Problem 2: Profiles stuck on 'Sending'
After enrolling the devices, it seems a hit and miss whether the MacBook downloads the correct profiles from the server... Is there a way to force on the MacBook to update/refresh its profiles? Also, when I update profiles within Profile Manager, the changes are pushed to iOS devices fine but not to MacBooks. Those tasks are all stuck on Sending... Logging in, restarting etc. sometimes helps but not always... Is there a reason why?
Thanks in advance.
P.S. Sorry I posted in the wrong forum first...

Same problem here. Some profiles are being sent, some are stuck on the server. I have no idea why this difference.
Any luck solving the issue?

Payload variables not working & Profiles stuck on 'Sending'

Hi all,
I've been trying to use Profile Manager to specify user e-mail accounts on Mac devices (eg, MacBooks) but I've been encountering a couple of problems. I've tried searching around and didn't find any answers.
First of all I'm running the latest Mountain Lion Sever. All clients have up-to-date Mountain Lion too.
Problem 1: Payload variables not working
I'd like to automatically setup Gmails on the MacBooks. Now the users' email addresses are already set to their gmail accounts. So all I have to be able to do is use the %email% payload variable as the username when I go set up the (IMAP) mail accounts in the Profile Manager. However, when I download the profile to the device, it does not convert the payload variable; ie, it tries to log into gmail with the username '%email%'. Other payload variables do not work either.
Oddly enough, the payload variables work as they should with iOS devices...
Problem 2: Profiles stuck on 'Sending'
After enrolling the devices, it seems a hit and miss whether the MacBook downloads the correct profiles from the server... Is there a way to force on the MacBook to update/refresh its profiles? Also, when I update profiles within Profile Manager, the changes are pushed to iOS devices fine but not to MacBooks. Those tasks are all stuck on Sending... Logging in, restarting etc. sometimes helps but not always... Is there a reason why?
Thanks in advance.

Same problem here. Some profiles are being sent, some are stuck on the server. I have no idea why this difference.
Any luck solving the issue?

Analysis Authorization Object not working

Hi Gurus,
I m working on BI 7.0, I have created an analysis authorization object zz_div for 0DIVISION characteristic.
For a given report i want a given user to view only data for '32' and '33' 0DIVISION.
I have followed the below steps but still the report shows all data instead of restricted one.
1)RSECADMIN -> Maintenance ->zz_div ->Create
2) Add 0DIVISION in Auth structure , and in details
I     EQ     32
I     EQ     33
3) Add 0TCAIPROV with I     EQ     0SD_C03
4) Add 0TCAACTVT, 0TCAKYFNM, 0TCAVALID, this having details as
I     CP     *
5) Then in User tab -> Assignment -> User -> Change-> Inserted ZZ_DIV-> Save
6) In Query created a Authorization variable(with no input prompt) and restricted 0DIVISION.
Following are the authorization object in that user's Role (Reporting Only)
S_RFC
S_TCODE
S_GUI
S_BDS_D
S_BDS_DS
S_OC_SEND
S_RS_AUTH - only having zz_div
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
S_RS_RSTT
S_RS_TOOLS
S_RS_PARAM
I have surfed lots of thread for this issue but not getting a solution
Tell me what i m missing in above or any additional setting need before creating analysis authorization
Edited by: Sonal Patel on Apr 18, 2009 8:10 AM

Hi
Thanks a Ton for ur reply
I have checked in SPRO : Analysis Authorization
where the authorization mode is " OLD obsolete Concept With RSR Authorization Objects "
We have to do the same in Production system .Can u please how its going to effect to others authorizations if change it to New Concept
Thanks
Sonal....

Optional BEx query variables not working in WebI

Hi,
I have an Webi report based on Bex Query using BICS connection.
One characteristic is restricted with two variables. First an authorization variable and additional with an input ready variable.
This input ready variable is optional. When it comes up in webi and you choose a value it doesn't filter on it.
We are on BO 4.1. SP3 and BW 7.31.
With SAP_ALL the optional prompt is working, but for a user with limited access, the optional variable doesn't work.
I have already made a RSRT trace with a test user. But I'm not sure what's the problem.
Trace returned:
S_RS_AUTH RC=4 --> BIAUTH=0BI_ALL; type=RF;name=BICS_PROV_OPEN;
But I don't want to give the user 0BI_ALL, otherwise my analysis authorizations for this info object would be obsolete.
Any ideas?
Thx and Regards,
Katharina

Hi Neetika,
thank you for your advice!
I tried the filter without authorziation variable and it was working.
I in addition I tried another option: I defined auth variable as input ready and deleted filter variable and that would work working.
With this setting I recognized that for the authorization variable all allowed values are set as default values! If you execute query with SAP_ALL no default is set, but with limited access the allowed values are set as default.
This may be the problem here. I don't know if this behaviour is by design or if there is a problem with rights?
But now I know where the problem comes from.
Regards,
Katharina

Authorization Variable not prefilling on RRI jump

Hi,
I have an Authorization Variable which prefills according to the users authorized values - this works fine in all instance EXCEPT when I jump from another query.
Has anyone seen this before?
Anybody know why?
What is the function which prefills the variable?
The jump goes to a web analyzer session. The session works fine if I just execute the jump query - but as soon as the url contains passed variables the authorization variable does not prefill.
eg. http://sldn1450dap:6777/sap/bw/BEx?SAP-LANGUAGE=EN&CMD=LDOC&INFOCUBE=H3FST_M_M&QUERY=QFCMM_AD0060_V2_JMP - works fine, variable prefills
http://sldn1450dap:6777/sap/bw/BEx?SAP-LANGUAGE=EN&CMD=LDOC&INFOCUBE=H3FST_M_M&QUERY=QFCMM_AD0060_V2_JMP&VAR_NAME=8BBS_ID&VAR_VALUE=43RUCKR22P5SIA2LJXEE2XJBN - variable does not prefill
Desperate to sort this one out. 2 days to release deadline and spending days on this.
Regards
Neville

Hi Neville,
First query also has the same authorization variable?
if yes it should work.
Otherwise add the same object and variable in the first query also.
Regards,
Vijay.

Authorization variables not filled up in Bex Portfolio

Hi there,
not sure if any of you guys came across this, but i have saved a web report on "bex portfolio"section. When i run this report, the authorization variables are not getting filled up.
but it works when i run the report using "new analysis" in Bex web analyzer tool.
does anyone has an idea?
I want to publish the reports in Bex portfolio because it is mush simpler for end users that don't have use Bex web analyzer and then open roles and then choose a report.
is there any easier way to do this?
thanks in advance.

Hi -
I assume that you might have kept the filters(Variables) in Default Values section. Only filters which are placed in Characterstic restrictions will appear in Universe Designer. Thanks!
Regards,
Anesh B

BW hierarchy variable not working in Crystal Report 2008

Hi,
I have created BEx 7.0 report which has hierarchy on 0customer object, the report is working fine whith hierarchy variable. I have created Crystal Report by using this query as source. I have followed below link to create grouping to get data through hierarchy variable.
http://wiki.sdn.sap.com/wiki/display/BOBJ/BWHierarchiesinCrystalReports
But report does not work for hierarchy variable and report is blank. When I give filter of child node which has actual data then I get report output. For ex.
Below hierarchy for 0customer
11396
- 737007
- 123456
When I run report for 11396 then no data display but when I run 737007 child node I get report output but with blank group name.
Can anyone came accross this issue. Please guide me . Thanks in advance.

Thanks Ingo for your reply..
The word filter means, I have hierarchy node variable in the BEx report that has become Parameter in CR. When I give hierarchy node variable value of parent node then there is not data display but for the child node I get the data.
For ex. In the info cube there is data for 730707 customer but in the customer hierarchy the parent node of 73707 is 11396. I am giving 11396 in the variable pop screen for hierarchy variable. I do not see any data but for 73707 I get data.
User does not know 73707, he always enter 11396 customer no. and he gets data in BEx query that is source of CR. but crystal report is not showing data for 11396.
One more point I want to tell here, I am saving CR at my local system not to SAP BW server.
Hope this clear my issue.
Harish Swami
Edited by: hswami27 on Jan 31, 2011 8:17 PM

ME21N Material group level authorization is not working in ECC 6.0

Dear Security Experts,
We have created a role Z_ME21N with one Tcode ME21N. The role has to restrict users in the material group level.
For that, we added Authorization object M_MATE_WGR.
1. When we are trying to add field values for {M_MATE_WGR, BEGRU}, generally it should show me the list possible values to be used based on the MM configuration related to Material Authorization Group. We have correctly configured the authorization groups from V_TBRG for M_MATE_WGR. But itu2019s not showing any possible values.
2. However we are able to add values manually, but I guess these are not being considered during authorization check and our restriction on Authorization group level in ME21N is not working.
Test Scenario: We have manually added values 005,007,009,010,013 (which is pointing to specific material group) to BEGRU of M_MATE_WGR. We already assigned this Authorization Object to role Z_ME21N and this role has been assigned to u2018testuseru2019, but the authorization check with the M_MATE_WGR authorization group is not happening. It allows operations on all the material groups.
Anybody came accross same scenario?
SAP Prodcut version : ECC 6.0
Database : SQL Server 2005
Support pack level : 15
Please share your views, thanks in advance.
Regards,
Abu Sandeep

Dear All,
I got a reply just now from SAP regarding the same issue.
I coudnt understand what SAP and you are saying.
Dear Abu
*Apologies for the delay. This message has been turned on to application*
*area of MM from the Basis side just now.*
*Unfortunately, authorization object "M_MATE_WGR " is not checked*
*in the purchasing transactions (PR & PO), the system works as standard*
*functional designed.*
*Only the following objects are checked in PR/PO:*
*M_BEST_BSA Document Type in PO M_BANF_BSA Document Type in PR*
*M_BEST_EKG Purchasing Group in PO M_BANF_EKG Purchasing Group in PR*
*M_BEST_EKO Purchasing Org. in PO M_BANF_EKO Purchasing Org. in PR*
*M_BEST_WRK Plant in PO M_BANF_WRK Plant in PR*
*Setting in check/maintain on in SU24 only means that the profile*
*generator will propose the object when creating a user, however is*
*does not mean that M-MATE_WGR will be checked.*
*Please close this message by pressing the confirm button at your*
*earliest convenience.*
*Many thanks in advance for your understanding.*
So, how can I resolve this problem? John, are you sure that, you implemented this successfully?
SAP says, this cant be done.
Regards,
Abu Sandeep.

Row Level Security - Data filter - Roles Variable Not working in OBIEE 11.1.1.7.1

Hi all,
Previously, we were using OBIEE 11.1.1.5.0 and we were able to assign users to application roles by using the initialization block to assign the ROLES session variables.
1. My USER_SECURITY table in Oracle database:
USER_NAME | USER_ID | ROL
user1       | 1723    | GobalDataRole
user2       | 1739    | GobalDataRole
user3      | 1743    | GobalDataRole
2. The SQL query in my session initialization block:
select USER_NAME, USER_ID, ROL
from USER_SECURITY
where USERNAME = ':USER'
3. The row-wise initialization option is not checked.
4. In the Oracle Enterprise Manager Fusion Middleware Control, we created new application role: GobalDataRole and sync with rpd.
5. The GobalDataRole is used in the RPD to filter the data under permissions --> data filter. GobalDataRole only has access to Country A data.
6. Result: under my account, also in rpd Manage --> Sessions, user variable details
User_name , user_id & Rol variable is working fine as expected,
When we log in as user1, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
When we log in as user2, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
When we log in as user3, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
User1, User2, and User3 are able to see the data correctly according the their data access setup.
Now, we using OBIEE 11.1.1.7.1 and using the same method, but we not able to assign users to application roles by using the initialization block to assign the ROLES session variables anymore.
Result:
User_name & user_id variable is working fine as expected, but the ROl variaible is not capturing the DB value,
When we log in as user1, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
When we log in as user2, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
When we log in as user3, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
User1, User2, and User3 can see all data (which is wrong) because they are not assigned to the correct application role that sets the data restriction/filter.
Has anyone encountered the same issue? Any advice on how to solve this?
Thanks in advance!
Satheeshkumar P

Thanks user10615659   ,
- Yes the variable ROLES available in OBIEE 11.1.1.7.1
- Tested the init block and variables in offline rpd its working as expected.
- In online rpd, except ROLES and GROUP variable remaining variables working fine.
- Verified log file in both online and offline init block testing - the init block execution is successful.
Thanks

Text Variable not working correctly

In CS3 I could create a TEMPLATE (.indt) with the "creation date" text variable in it and when I opened it it would have the CURRENT DATE (the date the new file was generated from the template) . In CS4 it opens with the date the TEMPLATE was MADE and not the current date (the day the new file was generated). I need the template to open with the current date (the day the template was opened). I tried using the "modification date" variable which works the FIRST time but if I open it the next day the date changes. I need the date to remain the same as the creation date. Does this make sense? Why did Adobe change the behavior of this? Please help.
-John Streeter

Hi Rakesh,
Just curious what is the purpose of creating a hidden column as suggested? Anyway, I have created it but nothing changes.
Allow me to clarify my situation again.
I have three columns:
1. Actual This Year
Type: Selection
2. Actual Last Year
Type: Selection
3. % of Actual This Year / Actual Last Year
Type: Formula
Definition: (Actual This Year) %A (Actual Last Year)
All columns use &0T_FYEAR& as text replacement variable. As such, all title would have year text.
The first two columns have been restricted with Fiscal Year variable, 0P_FYEAR.
1. Actual This Year
0P_FYEAR
2. Actual Last Year
0P_FYEAR - 1
Upon executing the query, I got the first two columns displaying their titles right, but the third column does not.
For example, let's assume I entered 2008 for 0P_FYEAR variable, the columns would display the following titles:
1. 2008
2. 2007
3. &0T_FYEAR&
I need the third column to display current fiscal year i.e. 2008 but it does not.
Appreciate your help!

Bind Variable NOT working in APEX 4.0 within charts SQL

All,
I had a chart working fine in 3.2 which had a bind variable like :P11_EMP_NAME, when I created the same chart in 4.0 using the same query it did not work, until I changed the variable to v('P11_EMP_NAME'). Does anyone have experienced the same behaviour?
Thanks
Venkat

Hi Deb,
Both of your queries are using multi-series syntax i.e. returning more than one series of data, therefore your generated chart is actually generating 6 series rather than just the two that you're aiming for. You could try changing your queries to ensure they each generate a single series of information, which would then result in the extra Y-axis being applied to your "Series 2". Here's an example of what I mean:
Series 1:
select null link, label, value from (
select 'test' label, 1 value from dual
union all
select 'test2' label, 2 value from dual
union all
select 'test3' label, 3 value from dual
)Series 2:
select null link, label, value from (
select 'test' label, 100 value from dual
union all
select 'test2' label, 200 value from dual
union all
select 'test3' label, 300 value from dual
)I hope this helps.
Regards,
Hilary

Evaluate variable Not working properly

Hi
When i used Evaluate variable , It is having list of Operator (=,<>,IN etc).
When is specified operator '=' and give one value its working properly.
eg. Select name from table ;
O/p = AA
In ODI , Operator =AA its working .
But when i specified Operator "IN" and giving value ('AA','AB') Or value (AA,AB) its not working propelry.
Any other operator or any other option to use IN operator.
Thanks
Ashwini

Hi,
I never saw that "IN" woks!
There is a workaround, use a at variable refresh tab a command like: (you can refresh the variable from itself)
select case when '#project_code.my_var' in ('ab','a','x')
then 'OK'
else 'KO'
end
from dual
put it as refresh step and add a new instance as evaluate "= OK"
Does it help you?
Edited by: Cezar Santos on 05/02/2009 08:59

Filepath variable not working

Hi I have a page builder form and when the user is finished building her page, she can click "Write File" and the file will actually be saved to a particular folder as an html file. All this worked fine until I wanted to try and save these new files to a network shared folder so that our employer could copy the files over to his pc and review them before uploading to the remote server.
Here is the new file path variable and the path I assigned to it.

<cfset fileExtension = ".html">
<cfset pathToFile = "C:\webdes-pc\newPageFiles">
<cfset fileToWrite = pathToFile & SESSION.fileName & fileExtension>
Here is the original code that worked perfectly.

<cfset fileExtension = ".html">
<cfset pathToFile = "C:\ColdFusion8\wwwroot\replacememntlightbulbs\pageBuilder\">
<cfset fileToWrite = pathToFile & SESSION.fileName & fileExtension>
Is there a reason why I could not write a file to a networked folder? I would have thought there wouldnt have ben a problem with that idea. Thanks for any help in advance!

function(){return A.apply(null,[this].concat($A(arguments)))}
ilssac wrote:
<cfset pathToFile = "C:\webdes-pc\newPageFiles\">
That worked? That looks like a mapped folder and those usually do not work because ColdFusion runs as a different user then the whomever might have mapped the folder?
What usually works is a UNC path more like "\\webdes-pc\newPageFiles\" after ColdFusion has been configured to run as a domain user that has the permissions to that network path rather than the default "localSystem" user which usually has NO network permissions.
Actually you might be right. I think I have a folder named webdes-pc in my C drive as well. I had the file path set as \\webdes-pc\newPageFiles\ as you suggested before, but might have not had the last backslash on there either. So I think when I get to work tomorrow I will try this path again. Thanks!

Authorization variable - not work

Similar Messages

Maybe you are looking for