BEx Query RRI with authorization object

Hi,
I have two queries linked using RRI (Sender and Receiver).
Queries have authorization object.
Both queries work fine with authorized user if I use them separately.
(Query Sender works fine with authorized user, Query Receiver works fine with authorized user)
Using BEx in Excel:
- when an authorized user jumps from the Sender to the Receiver, system tells him he doesn't have the authorizations, and Receiver query doesn't appear.
Using Web:
- when an authorized user jumps from the Sender to the Receiver it works fine and user can see the results in the Receiver Query
Could anyone help me?
Thanks in advance
Fede
Edited by: Federico Carta on Jun 23, 2009 2:53 PM

Hi Mohan,
I checked the authorizations and S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE are correctly set.
The strange thing is that if user calls the Receiver query from the web (BI web server), it works fine. The problem is only if user executes them by BEx in Excel. If he uses Receiver query directly without using Sender query, it works fine!!!
Best Regards
Federico

Similar Messages

Restricting infoobject in query designer with authorization object

Hi,
We have to restrict CUSTOMER infoobject with a authorization object in query designer.
How to do this task ? Request kindly suggest.

thr RSSECADMIN tcode. Search with this key word you will get good docs & Wikis in SDN
bhaskar

Red Light with Authorization Object in PFCG

Hello All - I have a question with authorization objects, there are three roles with red lights 'ON' in authorization object screen in our PRD. However users who are using these roles have no auth issues, standard procedure is to make all lights green in PFCG by maintaining these auth objects.
Big question is "what is the down fall by leaving these objects RED, I need to support my theory when I say all lights green with auth objects.
Why best practise says maintain all lights to green?
Please suggest, appreciate your suggestions.
Thanks.
Edited by: AJ on May 12, 2009 9:44 PM

Hi,
> "What will be the difference between leaving that red lights 'ON' vs "disabling" these red objects? (I am bit confused on this).
Red Object: As you know that authorization Objects comprises of Authorization fields. There are certain fields, which are known as "Organization Level" fields and need to be maintained Centrally. If you miss this fields, then the traffic light icon is RED. For all other authorization fields, light will be Yellow if you miss any blank field to maintain. During check, these fields will provide missing authorization (but you may not get error if same object is present in the role with all fields maintained status).
Disabled Object: If you make any Object Disable, then during check, this Object will not be treated for checking Authorizations. But profile generator will keep this in mind, so you don't get Standard Objects repeatedly (if already present in Deactivated status also) whenever you go to "..Merge with New Data".
You all other questions are very nicely answered already.
Regards,
Dipanjan

Put a Query in an Authorization Object

Hi everyone
Is there any way to set a query as an authorization object value?
Best regards,
Luis Elizondo

Hi,
This is not possible for finding out authorization value from a Table for an Authorization Oject. But in case of BI Analysis Authorization we have the option to pass the information of Authorization Value Dynamically from a Z-Table or an Hierarchy as a node of that Hierarchy. If you are looking for this in a BI system then you can of course dynamically pass a value from a Z-table through a Customer exit variable.
Please note that even in BI analysis authorization also we don't have option to pass Query technical name and also conceptually this is not convincing and useful. BI query technical name can be maintained in the authorization objects S_RS_COMP and S_RS_COMP1 (please go through the text description of these two objects to understand the difference).
Let us know for any query you have.
Regards,
Dipanjan

Association of authorization group with authorization object

Dear Colleagues,
We are using ECC 6.0 system. There is a transaction EMMAC2 where in the user would pick the case categories & view/make changes as required in the cases.
However, we would like to have a user to pick only those case categories for which he/she is authorized & view/change the data.
This EMMAC2 is controlled by authorization object B_EMMA_CAS & this authorization object has field BRGRU (Authorization Group) along with ACTVT (activity).
We would like to control this via authorization groups
We would like to create authorizations groups based on case categories & those authorization groups would be assigned in this BRGRU field.
Meaning, the end result should be such that, when that new authorization group is added in BRGRU field & that role is assigned to an end user, the user should be able to see data only for those case categories for which the new authorization group has been created
If I use SE54 to create authorization group, it automatically associates itself with authorization object S_TABU_DIS & this does not solve my purpose.
But we would like to create a new authorization group & associate it with authorization object B_EMMA_CAS.
Can someone please let me know the steps on how to achieve it or any other method to achieve it(for above underlined text)?
Does a developer or functional consultant also need to be involved in this?
PS: I tried to search in Google & our forums but could not get any answers

Dear Aninda,
Thanks for the help.
I created an auth group via SE16 in table TBRG & associated to B_EMMA_CAS
A case category was then assigned to this auth group
We tested it - below are the results:-
1. The user is allowed to 'change' and 'display' the case for the case category for which the user is authorized: this works as per requirement.
2. The user is not allowed to 'change' case for the case category for which the user is not authorized: this works as per requirement.
3. However, he is able to 'display' cases for the case category for which the user is not authorized: this we do not want.
If I remove activty 03 (display), then the user is unable to display the case for the case category for which the user is authorized.
How to resolve this?

How to refresh report data from bex query (BW) with parameters

Hello,
i hope someone can help me with my problem. I developed an desktop application, which loads (actual state) a report from the local file system. After setting the parameters, the report should be saved as a pdf file. Loading the report into the ReportDocument object and exporting the report to a pdf works fine. Setting parameters (without) a data source too. But now i can't refresh the data in the reports given by a parameter (e.g. time).
I know there are two methods to do this. Push and pull. I want to use the pull method, cause my program should exports different reports and i think it should be easier to handle this with this method.
On my development environment is installed:
Crystal Reports SP 4
MS Visual Studio 2010 (coding with C# .NET)
.NET Framework 4
SAP Integration Kit
Crystal Reports for Visual Studio 2010 SP1 - SDK libraries
Crystal Reports for Visual Studio 2010 SP1 - Runtime 32 bit
SAP GUI 7.20 (Compilation 3)
The bex query is enabled for external use from ole db for olap. Do i have forget something else?
Here is a part of my code:
 public ReportDocument doPullMethod(ReportDocument crReportDocument)
 TableLogOnInfo crTableLogOnInfo = crReportDocument.Database.Tables[0].LogOnInfo;
 ConnectionInfo crConnectionInfo = crTableLogOnInfo.ConnectionInfo;
 crConnectionInfo.Password = "*******";
 crReportDocument.SetDatabaseLogon(crConnectionInfo.UserID, crConnectionInfo.Password, crConnectionInfo.ServerName, crConnectionInfo.DatabaseName);
 MessageBox.Show(crConnectionInfo.UserID + " _ " + crConnectionInfo.Password + " _ " + crConnectionInfo.ServerName + " _ " + crConnectionInfo.DatabaseName);
 for (int i = 0; i < crReportDocument.Database.Tables.Count; i++)
 // crReportDocument.Database.Tables.ApplyLogOnInfo(crTableLogOnInfo);
 MessageBox.Show("TestConnectivity: " + crReportDocument.Database.Tables.TestConnectivity());
 return crReportDocument;
Cause i'm using only one bex query, i know that the SetDatabaseLogon()-method should bring me the same result as the ApplyLogOnInfo()-method SAP Crystal Reports .NET API Guide
Exists an order which i have to follow? First setting parameter and then set the login informations or backwards? Cause i also get the "Failed to load database information" exception, when i set a parameter and TestConnectivity() returns false.
Do i have to activate the data refresh manually or will be the data refreshed automatically on export?
I searched in this forum (.NET - SAP Crystal Reports) and found only this thread which according to my problem:
[Re: Crystal report connects to BW RFC by .NET;
The question is assumed answered.

Hi Robin,
There is a SAP Integration Kit you need to allow CR to connect to SAP data sources. There isn't one for CR for VS 2010 and I don't believe there are the various extra options available in the SDK, no SDK access to the DB driver.
Possibly, Check the other post, download and run the app Ludek suggested, it will get the connection info for your report using RAS and then plug the output code into your code and see if that works. It should show the crdb_olap dll is the database driver, assuming that is the connection method you used when designing the report.
Pay attention to the database dll in the output from that app and verify it is on your PC in: C:\Program Files (x86)\SAP BusinessObjects\Crystal Reports for .NET Framework 4.0\Common\SAP BusinessObjects Enterprise XI 4.0\win32_x86
If that doesn't work then.....
The problem is, CR for VS 2010 ( version 13 ) is the runtime for BOE 4.0 ( version 14 ) which includes the Integration kit drivers on install. There is no standalone install of the database drivers. They are installed with CR 2011, which doesn't have a SDK included, CR for VS 2010 is also the Developer version for CR 2011.
Because of the "custom" connection requirements there is no SDK or access to the BW datasource extra options....
Also note that CR 2008 is not supported in VS 2010, it should work though as long as you stick to 2.0 -> 3.5 framework, no 4.0 Framework support in CR 2008 or BOE 4.0
You may want to try the SAP Integration Kit forum to see if anyone has been able to make this work or contact your account manager to verify if there are any plans to do what you are doing....
Don

Issue with authorization objects

Hi,
We are running on ECC 6 . There is an issue while adding t-codes to a role.
When we add a transaction code in the Menu tab, for eg, a Z transaction code, it throws up a whole lot of open authorization objects under the authorization tab (open authorizations under FI, MM, so on). The open values proposed are all the default values in SU24. This happens even if we use the 'Read old status and merge with the new'. Our check indicator maintenance for all t-codes seem to be fine. Pls advise.
Cheers!!

> The default values (SU24 values) are once again populated if they were not maintained during the earlier maintenance.
They are populated again if they were deleted during the earlier maintenance or are in a changed status of the original authorization where new values in SU24 are proposing something different.
That is why you should never delete standard or maintained authorizations and try to avoid the copy & change strategy by maintaining SU24 to meet your needs.
It shounds like SU24 is not as "fine" as you have stated before hand.
Cheers,
Julius

Problem with a Bex Query Report with Web Intelligence

Hello!
I have a Bex query (with query Bex version 7.0) I'm connecting with Web Intelligence (4.0) but one of the attributes instead of displaying the description shows only the key, and it is strange because other cubes if given by the conversion.
I wonder if there is a solution for this or if it is a problem of version 4.0 of Web Intelligence.
I await your response,
Greetings!

Hi,
Whereabouts in the application are you seing this problem? (in the query panel conditions, in the prompt list of values, or in the table block? )
also, what do you mean by "and it is strange because other cubes if given by the conversion" ?
it's worth noting that the "key and text display properties" in the Bex Query Designer do not influence webi. WebI consumes the global infoobject property from BW RSH1.
Regards,
H
p.s. if you need to understand which features are or are not supported with BI 4.0 tools, please look here: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d056e1bc-2794-2e10-959e-8779c5623cc5

Program with authorization object

Hi Experts,
I have an issue regarding rules and authorization.
I have created a program with 2 radio buttons transfer and backload. The requirement in authorization is not all users can access both; some can only access transfer and some can access backload only. (r_trans,r_back)
The basis told me that they need an authorization object in order for them to block/separate the transaction for transfer and backload.
Is there a way for me to modify the program and put an authorization object with my radio button? or is it possible to do this with the current program?
Thanks!

Hi,
Thanks for the reply,
Our basis is using PFCG for roles and authorization , how can they check if my authorization object was created using that code?
Here is my code: Im getting sy-subrc = 12.
IF r_trans EQ 'X'.
   AUTHORITY-CHECK OBJECT 'ZACTIVITY'
                ID 'ACTVT' FIELD '01'.
   IF sy-subrc NE '0'.
     MESSAGE 'User not authorized' TYPE 'S'.
     LEAVE LIST-PROCESSING.
   ELSE.
     MESSAGE 'User is authorized' TYPE 'S'.
     LEAVE LIST-PROCESSING.
   ENDIF.
ELSEIF r_back EQ 'X'.
   AUTHORITY-CHECK OBJECT 'ZACTIVITY'
                ID 'ACTVT' FIELD '02'.
   IF sy-subrc NE '0'.
     MESSAGE 'User not authorized' TYPE 'S'.
   ELSE.
     MESSAGE 'User is authorized' TYPE 'S'.
   ENDIF.
ENDIF.

Display users with authorization objects assigened to them

Hi,
How can I display list of users with company code assigned to them?

hello Rajesh,
What you want is not straightforward. There is no SAP report for this as such. You need to find roles assigned to the user first then go to table agr_1252 anf give the value $BUKRS along with the role names.
You will find out the company codes assigned to the user.
This is not a very efficient way really and will involve too much of effort. If I needed such an information I would have written a simple ABAP report using joins of table AR_DEFINE and AGR_1252. Also check tables UST12 and AGR_1251.
Hi Ben,
Company code is present in several authorization objects other than F_BKPF_BUK. Check F_SKA1_BUK..There are several of them. So we need to check on basis of field BUKRS.
Regards.
Ruchit.

How to Ignore Fiscal Year Variant in BEx Query displayed with FISCYEAR?

Hi All,
I am developing a report.
In which I have taken Fiscal Year in columns.
When I executed the report Fiscal Year is showing with Fiscal Year Variant, I mean it is displaying as K5/2009.
Please let me know the settings how to ignore Variant? I mean Fiscal Year should show 2009 only.
Regards,
HM.
Edited by: Hariman on Nov 9, 2010 7:47 AM
Edited by: Hariman on Nov 9, 2010 8:05 AM
Edited by: Hariman on Nov 9, 2010 8:13 AM

Hi,
Fiscal year variant is compounded to Fiscal year. So in Bex query output it will be the format.
In case you need to remove the fiscal year variant you need to write customer Exit code.
-- Selva

FAQ: CR (based on Bex query) bursting with Local profile

We have the following scenario
1. A CR based on BEx query, specified to use a BW account with the property - 'use same DB account for refresh'.
2. Created a profile with two different Groups, each group having a specific CR expression for a field. The users in this group are enterprise aliases not BW aliases
3. Created a publication with the above two Groups as 'Enterprise Recipient'
4. Assigned personalization on a specific field with local profile (the profile created in step2)
When we schedule the publication with the option 'single DB refresh for each batch', it fails with the error "User specific security is in use. One database fetch per recipient must be used"
Env: BOE XI 3.1 SP2, Windows
Edited by: Rajesh Jayakumar on Oct 27, 2009 9:33 PM

Hi,
would suggest you open it in the general BusinessObjects forum as this doesn't look to be related to the SAP Integration Kit
Ingo

Bex query copy with variants

Hi,
How do we copy a Bex query with variants?
thanks in advance.
regards,
Prasad

Hi VaraPrasad,
The query can be copied using the transaction RSZC between the cubes.
Regards
Rohit

SAP BW ,BEX query,Infocube with the universe problem

Hi gurus,
Plz throw some light....
1. Now i can create the universe on the top of each bex query,but how to select 2 or more query in the singel universe itself.Because this leads to me to create lot of universe.

2. I dont have option to select the infocube..how i can select the infocube???only folder is there,when i click on it,bex query is there,but how to select the INFOCUBE??

3. In the particular folder(infocube) itself i cant find the all the bex query available...for eg:i have 20 bex query in SAP BW but i see only 5 querys in universe...
plz guide me gurus...
santose

Hi,
This is a normal behaviour.
Please have a look on the deffierent Universe's guides:
[Designer's Guide|http://help.sap.com/businessobject/product_guides/boexir31/en/xi31_designer_en.pdf]
[Using SAP BW in Universe Designer|http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_sap_olap_universes_en.pdf]
Moreover please have a look on SDN documentations:
[OLAP universes best practices|http://www.sdn.sap.com/irj/boc/index?rid=/library/uuid/c0a45246-ce76-2b10-e688-f5c8206203eb]
[Best Practices. Web Intelligence XI 3.x on SAP NetWeaver BI |https://wiki.wdf.sap.corp/wiki/display/globalregions/BestPractices.WebIntelligenceXI3.xonSAPNetWeaver+BI]
[OLAP Universes - how to samples and recommendations |https://wiki.wdf.sap.corp/display/globalregions/OLAPUniverses-howtosamplesand+recommendations]
Regards
Didier

Query on new Authorization Objects after Upgrade&SAP_NEW profile

Dear Experts,
We have upgraded our system from 4.5 to 7.0 version, i was checking what are the new authorization Objects introduced after upgrade comparing older system ojects. I got few objects which are new in upgraded system,
But when i check SAP_NEW profile, and in the latest profile SAP_NEW_7000 profile i can not see all those new Ojects which are new.
generally SAP_NEW should contain all new objects which come after upgrade? i can see those in SAP_ALL but not in SAP_NEW
is there any issue in system? how should I know and where should i check what are the new Objects come in upgrade,
Please advise.
Thanks#Regards,
Vijay

Hi Jurjen Heeck ,
see my previous post
I did 'nt get this.
SAP_NEW is your friend here
does the SAP_NEW profile contains all the new authorization Objects.
Regards,
Anthony

BEx Query RRI with authorization object

Similar Messages

Maybe you are looking for