Authorization with OLAP Variable

Dear all,
we have the following scenario: we need to built a report where we show e.g. a value per employee.
In order to establish that user A can only see his own data and not data from user B we did the followoing:
- Creation of a table ZUSER which contains User-ID (logon) and employee number, e.g. smith / 12345
- Creation of an authorization variable with type customer exit (Y_SU202) and assign it to InfoObject employee
- In the customer exit for OLAP variable the coding reads from ZUSER
So if user A executes the report the system reads the table and fills the variable with the corresponding entry.
It works fine.
But I have to assign in the PFCG Role for the corresponding authorization object * (all values); if I enter the name of the OLAP value it doesnt't work. But I need to do that due to the fact that otherwise the user can select via filtering in the report all values as the auth. variable just works for the exection but not for the filtering (when a * is assigned) in the authorization object.
I tried to enter Y_SU202 and $Y_SU202 in the authorization object; both ways doesn't work.
Thanks for your support
Marc
P.S.: I'm not sure if I should have post this topci to the security forum.

yes, RSSM setting is fine; i have there two InfoObjects (employee number and costcenter).
i changed in the role the value to * for both fields for testing. (after $Y_SU202 did not work for the employee).
It seems that this has something to do with the i_step = 0; if I change it to i_step = 2; the initial execution works.
But if I filter afterwards in teh query on the employee (select filter value) I see all values which is wrong.
If i change the coding to i_step = 0 and the variable to input ready I do see all values, too.
it seems that the auth. check does not work

Similar Messages

  • Issue With OLAP Variable

    HI all,
    we have an issue with the OLAP variable. One of the  SAP olap variable(0P-perf1) is processed  as Authorisation. where it should be sap exit. When we try to change at the BEx analyzer it was in disabled status.
    My question here are :
    1) How we can change the processing type?

    Hi,
    Pls refer link
    creation of OLAP  Variable
    http://help.sap.com/saphelp_nw04/helpdata/en/f1/0a55ece09411d2acb90000e829fbfe/frameset.htm
    It may help you.
    Thanks
    Edited by: npathak on Aug 4, 2010 4:09 PM

  • InfoPackage selection offset with OLAP variable

    Hi Bw Gurus,
    I have a requirement to load ODS with full upload everytime but in order to reduce repeated loads I am trying to use a DATE field which is not part of communication str. as a selection critera in InfoPacakge.
    I changed DS to include this field avaialable for selection and It's working fine when I input date to and from values hard coded in InfoPackage.
    Further I am trying to automate this InfoPackage scheduled weekly and I need to include date offset value for this DATE field to load for additional last 2 weeks every time to capture changes for already loaded data.
    I have created OLAP customer exit variable having Date interval for Date starting from last 3 weeks to Current DAte and included in InfoPackage selection for DATE field but it's not working. By the way if someone can explain what's meaning for two columns there for TYPE(Variable change to selection.....) and detail for type.
    Any clue for reason or any other way to accomplish this requirement?
    Thanks in advance,

    hi,
    can you explain me ,hw you solved the pbm,
    the same pbm i am facing.
    i am trying to load the data everyweek ( i have date field ),so i have selected OLAP Variable option -7 and there i have selected 0WEEK,but data is not comining from R/3,then i have selected the option -6 abap code,i have written code to get the date range,even though i am not able to retrive the data.
    can you suggest me
    Thanks
    Madhu

  • OLAP Variable with user exit for Infopackage Selection 0fiscper

    Hi Frds/ Guru's ,
                    I have a requirement to use a OLAP Variable for Fiscal year period 0fiscper(Characteristic ) in the Infopackage Selection. . I need to extract the data for Previous Year and Current Year , that is to be automatically selected with a OLAP Variable . The standard one's provided by SAP are not satisfying my requirement,as they are getting populated with SAP Exit and I am not getting the ranges .I am planning to create a variable and use the processing type as Customer Exit and Populate it with ABAP code in respective Enhancement RSR00001.
    Even Can I create a ABAP Routine ? Please suggest me which is better to do in respect to performance of dataload  , will be really glad if anyone can provide some code for doing this as u might have faced the situation sometime .
    I have checked with all the threads available , could get some idea but will be really thankful if u gimme some hints in writing the code , at Exit level and routine level .
    Thanks,
    Krish

    thnx

  • Authorization with customer exit variable (CP, BT, EQ)

    Hi SDN-Experts,
    I have a question concerning the new authorization concept.
    I created an authorization for 0COSTCENTER which also contains the 3 special characters 0TCAACTVT, 0TCAIPROV and 0TCAVALID. I inserted a customer exit variable for 0COSTCENTER. The exit reads datasets from a db table which contains authorizations for the actual user. The authorizations have different formats, e.g. "1000", "1000;1200", "25*" etc.
    The internal table e_t_range is filled as followed in the exit:
      i   eq   1000
      i   bt   1000   1200
      i   cp   25*
    This does not work. It works if I only use "eq" OR "cp". But not both at the same time.
    How can I achieve to use the different authorizations in the db table for the bi authorization?
    Thanks in advance...
    Joerg

    Hi Olivier.
    Yes, the variable is defined as selection option and I did also try to use "EQ" instead of "CP".
    I tested again with another variable which is "ready for input" and is not used in an authorization. The Variable is filled in the customer exit. This is the code:
    WHEN 'ZJGR_COSTCTR_TEST'.
      l_s_range-sign = 'I'.
      l_s_range-opt  = 'BT'.
      l_s_range-low = '0000001000'.
      l_s_range-high = '0000001200'.
      APPEND l_s_range TO e_t_range.
      l_s_range-sign = 'I'.
      l_s_range-opt  = 'CP'.
      l_s_range-low = '0000002*'.
      APPEND l_s_range TO e_t_range.
    The result in the variable screen in BEx Analyzer is the following:
    1000 - 1200;0000002*;
    And it still does not work. It seems that you could not mix EQ, BT and CP. But this is exactly what I have to do with the authorization variable...
    Do you have any other tipps that I might try out?
    Thanks,
    Joerg

  • Pseudo delta with ABAP or OLAP variables

    Hey gurus!
    Since I have to post my first question at SDN one day, it may better be now! I'm rather new to SAP BI, therefore your help is requested:
    I'm currently implementing a pseudo delta, a full data load from ODS to ODS and subsequently ODS to Cube. The data requested should consist of yesterdays records, which was relatively easy in SAP BW 3.5.
    Since it is not possible anymore to, and I quote, choose one of the following selections in the Type (Variable Changing of Selections with Background Processing) entry column from the Data Selection tab page (numbers 0-7, 0 is required), I can now only solve it with creating another OLAP variable or ABAP coding.
    Is there anyone that can give me some advice or provide me with some basic ABAP coding which selects data from 'yesterday?'
    Your help is appreciated!
    Regards,
    Joost

    Thanks for your reply Pom!
    I'm not sure where to insert the '0' as type in my case. I've created a data transfer process instead of an infopackage now, but when setting up my filter there is nowhere to select the type. Or do I have to create an 'old fashioned' infopackage?!
    Your help is appreciated, please provide some directions.
    Regards,
    Joost

  • Hierarchy authorization with variables of type exit

    Hi all,
    I am trying to implement hierarchy based authorizations with variables. After collecting information from the SAP documentation and this forum, I think I know more or less how to do it, but it's not working and it has me very confused.
    These are the steps I have followed:
    - From RSSM, I have created a hierarchy authorization object including my characteristic and 0TCTAUTHH
    - From RSSM again, I have created a hierarchy authorization pointing to the node $ZG_V_008
    - From the Query designer, I have created a hierarchy node variable of processing type customer exit ZG_V_008 (are any special settings needed here?)
    - From the Query designer, I have created <b>another</b> hierarchy node variable of processing type authorization, and I have used this variable to restrict the hierarchy for my characteristic
    - I have edited the EXIT_SAPLRRS0_001 to watch for I_STEP = 0 and give values to ZG_V_008 (we'll get to my code later in case we solve this issue first
    It is my understanding that with this setup, the user exit will be called to process the value of ZG_V_008 in I_STEP = 0, however, when debugging, I don't see any calls for the function with I_STEP = 0.
    What have I done wrong?
    Thanks a lot in advance.
    Guillermo

    Thanks, Jimmy, but that does not help much: my problem is that my user exit is not evaluated with I_STEP=0, but there are no error messages or anything like that.
    I have created a test user <b>without</b> a developer role to see if that could have any impact, but it's still not working.
    Any ideas?

  • LOV(af:selectOneChoice) with bind variable in af:table

    Hi All,
    I have a table where a column is defined as dropdown(af:selectOneChoice). The query for selectOneChoice has a bind variable which needs to be set as a value from the base view Object corresponding row.
    Suppose a table Employee
    EmpId EmpName EmpType Authorization
    101 John Temp No
    The above table is created as af:table and 'Authorization' is implemented as dropdown(af:selectOneChoice) . The selectOneChoice has a query(AuthorizationLovVVO) with bind variable . For each row of af:table(EmployeeVO) , af:selectOneChoice query(AuthorizationLovVVO) requires
    the corresponding row(EmployeeVO) 'EmpType' to be set as value of bind variable.
    Can you please suggest how can we achieve this functionality.
    Edited by: 907302 on Oct 17, 2012 7:22 AM
    Edited by: 907302 on Oct 17, 2012 7:22 AM

    I have checked the following post where it has been suggested to access the the current row value as groovy expression.
    groovy for bind variable
    Suppose my AM name is 'TestAM' , i have tried the below expressions for value of bind variable but it does not work :
    1) adf.object.TestAM.findViewObject('EmployeeVO1').currentRow.EmpType
    2) adf.object.TestAMDataControl.findViewObject('EmployeeVO1').currentRow.EmpType
    None of the above expressions work and i get the error while running the page as 'Variable NotesAM is not recognized.' / 'Variable NotesAMDataControl is not recognized.' .
    Can you please suggest if we can achieve the functionality using this approach . Also let me know if i am missing something in the above expression.

  • Use of OLAP variable 0FYTCFP in extracting GL transaction figures

    Hi
    We load data to cube 0FIGL_C01.
    We use the OLAP variable to ensure that we are extracting for the current fiscal year to date, as a full load, with a deletion of overlapping requests in the process chain.
    Our fiscal year ends 30 June. My question is around  special periods and opening of the new fiscal year while posting is still allowed into the old year e.g. on 15 July both the old year and the new year are open as the year end processing is still underway, and special periods 13-16 might also be in use.
    Do I have to wait until the user close the year (a manual step) to then do a "final" run for the year, with the periods specified manually, or is there a way to automate this?
    thanks and regards, Lara

    Hi Sander
    Thanks for the response.
    That;s what I have been doing (run manually after the period is closed). It is not ideal, in my mind, because it (1) relies on someone remembering to do it and (2) has to be done repetitively i.e.at least daily until the "old" period is closed, otherwise reports based on the provider will not be accurate. Again, not hard to do, just a pain when everything else is automated.
    This particular DataSource is not delta enabled, otherwise I would have used the delta loads.
    regards, Lara

  • SAP BI - OLAP variable in DTP unable to read from input ready variable in query

    Hello,
    Here's the problem:
    We have a process chain which is launched in a WAD.
    We would like to filter the DTPs in the PC with the values entered in the variable screen of the WAD
    I created a variable of type customer exit X which reads the input ready variable Y in CMOD.
    Customer exit variable X was placed in the filter of the DTP.
    The input ready variable Y in the query contained in the WAD.
    I am getting an error that customer exit variable X is getting not value.
    Is it possible to read an input ready variable in a customer exit variable placed in a DTP?
    Or am I missing a step here?
    Please help.
    Thanks in advance

    Hi Anjalee,
    Maybe it would be good to share a bit more information on your scenario and the chosen solution design. I am currently missing the point of triggering a Process Chain using Web Application Designer.
    Anyway, I recommend to be careful with using OLAP variables in DTP filters. For sure not all functionality is present, e.g. because the variable pop-up is absent. Your constellation of an input ready variable and a customer-exit variable will only work in the context of a BEx Query and probably not if used in a DTP filter.
    Best regards,
    Sander

  • Creation of OLAP Variable for Master data

    Dear BW Experts,
    How to Create OLAP Variable for Master data  in SAP BW? What is the use of OLAP Variable?

    The entry column Type (Variable) on the Select Data tabpage indicates a variable time frame in which the data should be requested. The variables are not replaced by concrete values until a request is made. There are eight options:
    Variable            Data request        Description
    0
                          Yesterday
                                            (12am – 12am)
    1
                         Last week
                                            (Monday-Sunday)
    2
                           Last month
                                            (1. (First day - last day of previous month)
    3
                           Last quarter
                                           (1. (First day - last day of previous quarter)
    4
                           Last year
                                          (01. (January 1 – Dec 31 of previous year)
    5
                      User time selection
                                               See below
    6
                       ABAP routines
                                               See below
    7
                         <b>OLAP variables</b>
                                                See below
    <b>Time selections with the help of the variables 0 to 4.</b>
    The variables 0-4 only refer to date fields of the data type DATS.
    <b>User time selection</b>
    Type 5 gives you a free selection of all fields.
    If you select this variable for a field, confirm the selection, and then choose Detail for Type, an additional dialog box appears. In this dialog box you can freely limit the values of the fields and determine the next period value and the number of periods until a repetition.
    Variables are placeholders for values and are not replaced by concrete values until a data request is made. You can also use a Variable for selections when requesting data for an InfoObject, if you choose type 7, confirm the selection, and then choose Detail for Type.

  • Issue with Default Variable in WAD after Java Patch 7.01.7.31

    Hello all,
    I'm running into an issue with the Web Application Designer Template execution for a particular default variable. This started occuring after Java Patch 7.01.7.31 we had implented over the weekend.
    The issue is when Executing the WAD Template, we have a selection screen with a variable with default values assigned to it. When leaving the default values and hitting Ok to execute  through the screen does not register and stays as is and I get a message at the top with the following: Characteristic Prob % Number has no master data for "1.00" or you do not have authorization.
    This only seems to occur for this default variable on info object Prob % Number, the other default variables seem to work fine. Also another note when clearing out the values it returns data and executes through. The value 1.00 is also a valid value in the cube and also in the output display. If we run this report in the BEx analyzer, the selection screen executes through with the default variable perfectly fine, this is only an issue with the Web Application Designer Template.
    Has anyone ran into this? I've searched and have not found any notes as of yet.
    Thank you,
    -Andy

    Dear Andy,
    Please raise this to SAP, seems like a strange problem this needs to be addressed by OSS note only.
    Close this thread once you get a solution.
    Regards.
    Den

  • OLAP variable in ABAP Routine.

    In data selection of Infopackage, I have used a OLAP variable. Is it possible to access the routine for OLAP variable in a ABAP routine?? How to proceed for the same???

    Hi,
    There are function modules for SAP variables.
    -     RSVAREXIT_variablename
    -     RREX_VARIABLE_EXIT (for variables to be processed see include LRREXTOP).
    Customized variables with exit can be accessed by FM EXIT_SAPLRRS0_001.
    If you are able to transfer mandatory parameters, just implement call of required FM
    Into report. If not, you have to copy and adopt coding desired from the FMs.
    Hope this helps
    Joe

  • ABAP code for custom OLAP variables

    Hi experts,
    We have a custom variant set as customer exit that I have just added to an infopackge for the data selection of 0FISCYEAR infoobject via 7-OLAP Variant. When I click on the magnifying glass under the "details for Type" column, the "Use Variable of OLAP Processor" window appears showing the OLAP Variable and the fiscal year variant. When you hit F6 (check) it should process the variant and return data for the ranges. With this variant we are using there is not data being returned (using the SAP exit variants data is returned).
    I have gone through the forums and have seen people citing the function module EXIT_SAPLRRS0_001 as this is the user exit which houses such abap code. I have seen the variant inside this module and the code itself, but why is it in the infopackage when I click on check (F6) no data is returned? I am getting the feeling this abap code is only executed for reporting. In this case I want the infopackage to select certain data from R/3 (via the use of OLAP variable with custom code) during the load to the ODS.

    Hi Mark,
    If you created the custom fiscal year variant as a customer exit type, I doubt that it'll work.
    Variant is an auxiliary time characteristic. You cannot create it. You can only add new char values:
    BW Customizing Implementation Guide (SPRO tcode) -> Business Information Warehouse -> General BW Settings -> Maintain fiscal year variant.
    Though, maybe I misunderstood your requirements.
    Best regards,
    Eugene
    Message was edited by: Eugene Khusainov

  • Infopackage Selections Tab-OLAP Variable/ABAP Routine

    Hi Experts
    In my Infopackage Selections Tab i had Cal Mon/Year field....
    As per my requirment i have to write a selection condion that when we execute info package (it is a monthly data load)  it will extract data only for the months greater than or equal to current month
    Please update me on how can i achieve this either by using OLAP Variable or ABAP Routine in infopackage...will be great if can provide the required ABAP Code
    Thanks in Advance

    here's an example that fills the fiscal year from last month (bold is customer code... the rest is standard):
      data: l_idx like sy-tabix.
      read table l_t_range with key
           fieldname = 'PARAM_P_GJAHR'.
      l_idx = sy-tabix.
      data:
      v_caldy type /BI0/OICALDAY,
      v_calmn type /BI0/OICALMONTH,
      v_calyr type /BI0/OICALYEAR.
      v_caldy = sy-datum.
    determine first day*
      v_caldy+6(2) = '01'.
    determine last month*
      subtract 1 from v_caldy.
      v_calyr = v_caldy(4).
      l_t_range-sign   = 'I'.
      l_t_range-option = 'EQ'.
      l_t_range-low    = v_calyr.
      modify l_t_range index l_idx.
      p_subrc = 0.

Maybe you are looking for