Authorizations for variable input

Hi all.
I am facing the problem restricting users to input variables in BEX and BPS-SEM
The situation is that I can restrict the variables user can choose from the list (F4 input help) using S_TABU_LIN. The user sees only that masterdata values that he is authorized. Everything is fine, but... If user enters value directly, there is no check performed on mastedata. User actually can enter any value that exists in masterdata. The same situation in SEM forms.
I need to restrict user to be able to choose only particular values (separate list for each user/role)

Try executing NW2004s transaction RSECADMIN
and investigate using option Analysis-->Execution as with the particular user and the options available ...individually.
Hope it Helps
Chetan
@CP..

Similar Messages

Selection Options feature for variable input in BEx in 7.0 version

Hi All,
We are currently in EHP1 BI 701 software version. We have queries in both 3.x and 7.0 version. The variable screen that we get when we execute the report in 3.x and 7.0 is different.
We have selection options in 3.x (We can copy and paste values (non sequential) from an excel sheet for example during variable input) but I'm not seeing the same in 7.0 queries.
Please suggest if it's a configuration/software issue or i'm missing something here.
Regards,
Vivek

Hi,
I would like to inform you that you will not get the same button as in 3.x . But when you open the F4 screen and then you have
to click on the More Button.
Two ways you can copies:
To past from clipboard follow these steps:
1. Click on the u201CMore >>u201D button.
2. Click on the right box to set the focus.
3. Ctrl + V.
To import from a txt file follow these steps:
1. Click on the u201CMore >>u201D button.
2. Right click on the right box and choose u201CUpload selectionsu201D option.
3. Select the txt you want to import.
All the values will be copied on the Right Pane.
Thanks,
Venkat

Authorizations for Variables

Hi,
how can I control which variable is displayed for a characteristic in the BEx Query designer. I tried to use S_RS_COMP for this purpose and exspected that variables that are not in the name range of the authorization would not be diplayed in the BEx InfoCube Area.
I traced the access in ST01 and it looks like there is not authorization checked for the display of variables in BEx. Is there a different solution anybody knows?
We are using 3.0B with SP 22.
Regards,
Michael

Hi Nuno,
you might want to use the Analysis tool to assist you in finding the issue. Please search the forum or refer to thread [Hierarhy Authorizations in BI7|Hierarhy Authorizations in BI7]
Cheers
SAP NetWeaver BI Organisation

Variable in ''Name of Variable(Input Only Using F4).' for variant attribute

Hi All,
I Have a small problem with saving variant.
I am trying to save the Variant.In the varaint Attributes we have a field 'Name of Variable(Input Only Using F4).
I have created the PID 'XUS' in SU3.But i am not able to to view the variable in ''Name of Variable(Input Only Using F4).'.
Anybody please let me know how to make it.
Thanks,

Please follow the below steps to restrict the user to access 2 company codes,
1)Mark the IO(Company code) Authorization relavent and activate it.In the IO Business Explorer tab check the Authorization relavent check box.
2)Go to T-code RSECADMIN -Under Maintainance -Enter the name of Authorization Object an click on create Authorization.Insert the IO and also SAP recomended Objects 1.0TCAACTVT, 2.0TCAIPROV and 3.0TCAVALID.
Maintain the values for these objects.Select the company code and click on details.
3)T-code RSU01-Enter the name of the user to be assigned with the authorization object and click the change button.The select the relevant authorization object and save.
4)Create Authorisation Variable in Query Designer Create an Authorization Variable - Variable with Processing by Authorisation in Query Designer as Below for Sales Organisation
Note : Also include all Authorisation Relevant Objects which are used in that infoprovider in addition to the above additional 3 objects otherwise you may get "No Authorisation" error when you execute the query.
Note : 0BI_ALL is the authorization object to access all the info objects which are authorization relevant.
Reagrds,
Ramitha

Error while running a query-Input for variable 'Posting Period is invalid

Hi All,
NOTE: This error is only cropping up when I input 12 in the posting period variable selection. If I put in any other value from 1-11 I am not getting any errors. Any ideas why this might be happening?
I am getting the following error when I try and run a query - "Input for variable 'Posting Period (Single entry, mandatory)' is invalid" - On further clicking on this error the message displayed is as follows -
Diagnosis
Variable Posting Period (Single Value Entry, Mandatory) is used as a lower limit (X) and an upper limit () in an interval selection. This limit has the value #.
System Response
Procedure
Enter a different value for variable Posting Period (Single Value Entry, Mandatory). If the value of the other limit is determined by another variable, you can change its value also.
Procedure for System Administration

OK.
Well, if the variable is not used in any interval selection, then I would say "something happened to it".
I would make a copy of the query and run it to check if I get the same problem with period 12.
   -> If not, something is wrong in the original query (you can proceed as below, if changes to original are permitted).
If so, then try removing the variable completely from the query and hardcode restriction to 12.
   -> If problem still persists, I would have to do some thinking.
If problem is gone, then add the variable again. Check.
   -> If problem is back, then the variable "is sick". Only quick thing to do, is to build an identical variable and use that one.
If problem also happens with the new variable, then it's time to share this experience with someone else and consider raising an OSS.
Good luck!
Jacob
P.S: what fisc year variant are you using?
Edited by: Jacob Jansen on Jan 25, 2010 8:36 PM

Abort Could not determine a value for variable 0DAT from the authorizations

Hi All,
I encountered an error '/ Abort Could not determine a value for variable 0DAT from the authorizations\' when executing my query on a multiprovider in BW 3.5.
Can anyone help me in finding a solutionn to this issue.
Thanks,
Kartik.

Hi Kartik,
I am sorry as that note is for NW2004s. Please check if 0DAT variable installed from a business content? if not then I think thats the cause of the problem.
Hope this helps,
Bye...

How to create one submit form for both input an variable ports ?

Hello,
I would like to create an input from for a query I have.
The problem is that this query has both input an variable ports and each one creates a different input form. I would like to join it into one form or at least have it under one "Submit" button so the user won't need to fill two forms.
How can I achieve this?

Hi Mario,
Thank you for your quick reply.
>>Even if you could, only port would be effective.
Can you please elaborate?
>> You need to change your query and make your input port-fields variables?
So, if I understand correctly I should select whether I go for only inputs or only variables?
Thanks,
Roy

No conditions determined (no authorization for input)

Hi Friends,
I am trying to create a PO but i am getting a error message that "No conditions determined (no authorization for input)" and I am unable to view the conditions tab.
Can anyone please guide how do I rectify the error.
Regards,
Wasim.

Hi,
When I run the t-code SU53 it says "The last authorization check was successful" But the problem still exists.
Regards,
Wasim,

Create a variable for user input entry to act as i/p to anothr variable

Hi,
I have a requirement in my report where i have two variables one is user entry called "A" the a other user exit "B" and the query is based on an ods.
<b>
Scenario:</b> If the user were to enter a string XXX in A, i need to do a search on certain columns in ODS and store the corresponding keys (single column) in an internal table and the internal table column will act as multiple single values for variable B .
<b>Questions:</b>
1. How to get the value entered in A.(so i can do select statement on ODS table).
2. In the select statement we need to specify FROM table, so what would the ods table name be.
3. How to store the values from the select statement into the internal table.
4.How to populate the values in internal table into variable B.
5.Once all this is done i need to reset the variable A to empty.
p.s: ABAP code for any of the following would be highly appreciated.

hi Karthik,
1. you can try
LOOP AT I_T_VAR_RANGE INTO LOC_VAR_RANGE
              WHERE VNAM = 'varA'.
              l_var = LOC_VAR_RANGE-LOW.
2. ods table name = /bic/a[odsname]00 or /bi0/a[odsname]00
3. use select .... from... into table ...
4. loop at that internal table and populate as sample code
5. try to create a RKF with restriction to variable A, and hide this keyfigure,
    not use in reporting.
hope this helps.
Populating material numbers from a table to customer exit bex variable
tables : /bic/azods00.
DATA: it_ods like /bic/azods00 occurs 0 with header line.
CLEAR L_S_RANGE.
WHEN 'varB'.
    IF I_STEP = 2.
      LOOP AT I_T_VAR_RANGE INTO LOC_VAR_RANGE
              WHERE VNAM = 'varA'.
              l_odsfield = LOC_VAR_RANGE-LOW.
SELECT * FROM /bi INTO TABLE it_ods
WHERE odsfield = l_odsfield.
loop at it_ods.
L_S_RANGE-LOW = it_ods-fieldselected.
L_S_RANGE-SIGN = 'I'.
L_S_RANGE-OPT = 'EQ'.
APPEND L_S_RANGE TO E_T_RANGE.
endloop.
      ENDLOOP.

BW report authorization for restrict cost center

dear all,
i have problem on BW report authorization for restrict cost center.....when i execute the query, after selection screen, appear error message 'you cannot change zv_cctr for characteristic 0COSTCENTER during query'.
note : zv_cctr is variable restriction for costcenter, type processing = customer exit.
below the customer exit :
WHEN 'ZV_CCTR'.
    IF i_step = 2.
      DATA : gt_mstuidvscc TYPE TABLE OF ztbw_mstuidvscc,
             gs_mstuidvscc TYPE ztbw_mstuidvscc,
             wa_final2(10) TYPE c.
      SELECT * FROM ztbw_mstuidvscc INTO CORRESPONDING FIELDS OF TABLE gt_mstuidvscc
        WHERE userid = 'sy-uname'.
      LOOP AT gt_mstuidvscc INTO gs_mstuidvscc.
        wa_final2 = gs_mstuidvscc-kostl.
        l_s_range-opt = 'EQ'.
        l_s_range-high = wa_final2.
        APPEND l_s_range TO e_t_range.
      ENDLOOP.
    ENDIF.
Regards,
Tony

i defined variable as ready for input and mandatory.
regards,
Tony

Problem with Authorization for Planning folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
we are not pulling the data from any other server, all the data is on the sif any one has faced the same issue let me know.
Regards,
Abraham

Calling Thru Trans code: BPS0 in ECC 6
getting this error:
Error while calling up RFC
Message No. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"An error occurred during the receipt of a complex parameter."
after i check in bw trans code:st22
Following this error message:
Category                   Internal Kernel Error
Runtime Errors         PARAMETER_CONVERSION_ERROR
Application Component BC-MID-RFC
Short text
    An error occurred during the receipt of a complex parameter.
What happened?
    During a remote function call, an error occurred while converting
    a complex parameter.
What can you do?
    Note which actions and input led to the error.
    For further help in handling the problem, contact your SAP administrator
    You can use the ABAP dump analysis transaction ST22 to view and manage
    termination messages, in particular for long term reference.
Error analysis
    An error occurred during the conversion of a complex parameter.

How to make Flash to wait for user input

Hi,
I found this PHP script, then I made some changes to make it
FEED the Flash user interface with online user input.
The main concept of this script is WAITING for user input, so
it shows the messages and then go to next line and so on.
The user input go to directly to TEXT file which writes in
lines, each line has a unique id = (mag_id).
There "get_msge.php" which works as the middleware between
FLASH and messages text file.
The problem, its doesn’t show any data while there are
data in the text file.
Help here please, best regards.
This is the link of
problem illustartion
AS is:
// create an object to store the variables
varReceiver = new LoadVars();
// load the variables from the text file
varReceiver.load("get_msg.php?file_id=1&msg_id=1",
"POST");
// trigger something - when the variables finish loading
varReceiver.onLoad = function(){
//the variables have finished loading
if (this.msg_id == 1) {
_root.xmsg1_swf.text = this.msg;
_root.xmsg1_ch.text = this.msg;
gotoAndPlay("line2");
} else {WAIT }
PHP is:
<?php
//get these values from the FLASH
$file_id_swf = $_POST ['file_id'];
$file_name = "messages/messages".$file_id_swf.".txt";
$msg_id_swf = $_POST ['msg_id'];
// [0] ."||".[1] ."||".[2] ."||". [3] ."||".[4]."||". [5].
//$msg_id."||".date."||".time."||".$from."||".$to."||".$msg.
$fp = fopen ($file_name, 'rb');
while (!feof ($fp))
$msg_txt = fgets ($fp, 1024);
$line = explode ("||", $msg_txt);
$msg_id = $line[0];
$from = $line[3];
$to = $line[4];
$msg = utf8_encode ($line[5]);
if ($msg_id == $msg_id_swf)
echo
"msg_id=".$msg_id."&from=".$from."&to=".$to."&msg=".$msg;
}//while
fclose ($fp);
?>

Well, given the things that you've written, I don't think it
could. There technically isn't any code in flash that lets it
"wait." In order to "wait," you must run the script over again
until some condition is met.
However, your code does look accurate. Why do you need to
wait? The onLoad function will be invoked WHEN something is loaded.
So, I don't see the reason for the "waiting."
In addition to that, I would like to say that using text
files isn't that great with flash. I have done this before and
noticed several problems with using text files. The biggest problem
is that the text files are cached after being loaded. Every time
you re-load it again, you will get what you got the first time
until you reset your cache (ie. close your browser). I suggest
using MySQL. (Just my thought.)

What's the best way to do authorization for my app?

The authorization situation is somewhat complicated for my app.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM.
From what I've seen so far, there are two different options of setting the authorization for the component:
1. Set its Condition
2. Set its Security Authorization Scheme
Here is my understanding for each (from my limited experience with APEX):
1. Set its Condition
+ Can pass in parameters such as :APP_USER, page numebr, P0_ITEM. So I can just create one function that does all the authorization
- Have to combine the SQL query with the component's non-authorization display conditions, if any.
2. Set its Security Authorization Scheme
+ By name, it seems like it should be used for authorization
- Cannot take in parameters relating to the page, such as the page number --> therefore I will need to create many different schemes, for all the different pages.
#2 will end up with a long list of schemes (each with its own SQL queries) for different pages, which doesn't seem as efficient as #1 with far fewer SQL queries and just take in parameters.
Which one should I pick?
Thanks!

953006 wrote:
Thanks fac586 for the detailed response, and also everyone else who replied. You guys are very helpful and respond promptly. And we'd appreciate it if you changed "953006" into a real handle promptly.
Andre mentioned using conditions:
The way I work around this is to have two functions, one which is used at the page level as a normal authorization scheme and one which can be passed variables which is called as a Condition and the name of the item is one of the variables, in effect giving it "self awareness".But fac586 said:
You can't pass "parameters" to authorization schemes. Use application items, APEX collections or application contexts to set current context before the authorization scheme is evaluated, and access these values in the functions.Does this mean, fac586, that we can avoid conditions altogether? No, it means that I prefer to use Authorization Schemes to control access to resources based on user privileges and security, and Conditions to control rendering and processing for functional reasons. Using the approach described above I have found it possible to maintain this separation.
Say if a page has two buttons, Button_A and Button_B. Button_A has a set of requirements for displaying and Button_B has its own set of requirements (some of which are shared with Button_A). So far, the only way that I can see of using pure authorization is to write 2 different authorization schemes, and set the authorization schemes for the two buttons respectively.What's the problem with that? Consider a more concrete example using a standard APEX report/form pattern for customer maintenance. Page 6 contains the report, and page 7 is the maintenance form with P7_CREATE and P7_SAVE buttons. Only users entitled to create new customers should have access to P7_CREATE, and only users able to edit customers access to P7_SAVE. This would be controlled by the CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes respectively. Functionally, conditions are used to show P7_CREATE if the P7_CUSTOMER_ID is null, and P7_SAVE if it's not null. We don't mix non-functional security considerations with functional requirements.
The CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes are of type PL/SQL Function Returning Boolean. These are implemented using package functions. Exactly how a user has create/edit customer privilege is determined in the package. Determinants that are shared by multiple schemes can be combined at this level. These implementations can be changed as necessary without requiring changes to the application.
The authorization schemes are reusable across pages and components. On page 6, CREATE_CUSTOMER can be used on the "Create New Customer..." button; EDIT_CUSTOMER on the report column containing the "Edit" links.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM. So I guess this goes back to my original concern with Authorizations:
[Using purely authorizations] will end up with a long list of schemes (each with its own SQL queries) for different pages [and page items] ....
Re: VPD policies. Note that in the example above there's no need for the authorization schemes to "know" which pages/items are being evaluated. The P7_SAVE button and the page 6 link column are involved with the EDIT_CUSTOMER operation, so that authorization scheme is applied to them.

Variables/Input Parameters Value help not showing texts

Hello,
I have created a crystal report based on a calculation view in Crystal Reports for Enterprise 4.1 SP5, which has a input parameter on the field "Region". For the value help, I am using a custom view based on T005U in which I have made sure that RegionName field is present in the "Label Column" property of the Region field.(Required for viewing descriptions of LOVs).
In the crystal report, while previewing data in the query builder, I am able to see the value help for the input parameter in the prompt screen, which displays only the key part, but does not display the description of it. Moreover, after accepting the prompt value, the preview runs into an error(as shown below). Please note that I get the error below only when Region is a part of the output fields of the query.
Instead of input parameter, when I create a variable on the region field in the main calculation view, with the same value help view, I am able to do data preview in the query builder as also data appears in the report on running the query. But, just as in the case of input parameter value help in the prompt screen, even over here, I am only able to see the key part and not the description.
Are variables/input parameter LOV's supposed to display descriptions or just the key part? As also, any reason why I should be getting this error while using Input parameter?
Kindly let me know if I am missing something in the development of this report.
Regards,
Alston

Hi,
I hope you are taking the BEx Query as a source to the crystal report. In the BEx query check region info object should is maintained as Text and Key. If text is not maintained over there you will not be getting text in Crystal reports.
Krishna.

Customization of "No Authorization" for Query in BI!!!

Hi,
Have a query on when we get a no authorization for a query in BI. Can we customize the error message or create pop up in analyzer to show the user that he does not have access to a particular value like a Company Code etc.
Also is it possible to show data to the user for which he is authorized even if he has put in fields to which he has no access.
Thanks,
Yogesh

May be you can try Authorization Fill variable.
To see what the user ID is Authorized to see use RSECADMIN (Only in BI7.0) and see for Error Logs under Analysis.
AB

Authorizations for variable input

Similar Messages

Maybe you are looking for