BEX Roles and Folders help !!!

Hi Friends...
We need to restrict the access to the queries and workbooks by roles. Can any one send me some document / steps how do we make this restriction. example ; power user , coordinator , controller etc....
we would need to create a "User group" maybe even several user groups and assign existing folder names to these user groups.
It would be appreciated ,If some one can send me a step by step approach / document ,
Thanks

Hi SAm.
Not exactly what you are asking for.. But it might be helpful.
http://help.sap.com/saphelp_nw04/helpdata/en/55/2bb33b90131e73e10000000a11402f/content.htm
It gives you some different scenarios.
I have not been doing authorisation by folder, but by naming X..or Z.. queries. I think it should be possible to do it by folder also.
Assigning different folders or infoobjekts to different roles.

Similar Messages

Bex Browser and roles

Hello All,
We currently use the BEx browser to deploy the queries and workbooks to all the users.
We have set the auth object S_USER_AGR with the value '03 - Display' only.
However, what we are observing that the users are having the capability to move workbooks from their favorites to the roles.
When we run a trace for authorization check, it is checking the above auth object and shows a value being returned for 01 - Create, 02 - Change, 06 - Delete.
Object Text
S_USER_AGR RC=0 ACT_GROUP=NY_BW_WP_QUERY_USER;ACTVT=02;
S_USER_AGR RC=0 ACT_GROUP=NY_BW_WP_QUERY_USER;ACTVT=01;
S_USER_AGR RC=0 ACT_GROUP=NY_BW_WP_QUERY_USER;ACTVT=06;
However, in the above mentioned role, the only value assigned is 03 - Display.
The users have no other roles which would override the values.
We want to ensure that the users DO NOT have the capability to save the work books from their favorites to any roles.
Any ideas?
Sunil

"The Business Explorer Browser (BEx Browser) makes it possible for you to access all document types of the Business Information Warehouse that are assigned to your role or that you have stored in your favorites. You can select and open documents assigned to you in the BEx Browser or store and manage new documents in the BEx Browser."
http://help.sap.com/saphelp_bw33/helpdata/en/7a/87583c2439e66fe10000000a114084/frameset.htm
"The Business Explorer Analyzer (BEx Analyzer) is the analysis and reporting tool of the Business Explorer that is embedded in Microsoft Excel."
http://help.sap.com/saphelp_bw33/helpdata/en/ba/45583ca544eb51e10000000a114084/frameset.htm
Hope it helps!
Bye,
Roberto

I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work. Help?

I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work.
^^ that's the main problem. Here's the full history.
I bought a new 13" i5 MBP, early 2011 edition. I had an old white Macbook 2.14 ghz core2duo on Snow Leopard. I attempted to port over my time machine backup, but encountered problems in that my User was inaccessible from the new computer after the import finished, and I had to go in and change the root password, etc, and for some reason or another, I couldn't install any programs at all from that administrator's account. By "couldn't" I mean I could install them, but upon installation they would never boot. So, I took it to the apple store and did a clean install from the most up to date Lion OSX. Then, I created a brand new admin account, instead of trying to import the old one, and things seemed great. Then, I just imported my old files from the TM backup, but not any system settings, permissions, or user data. Just my Docs, pics, vids, apps, and itunes stuff.
Here's where things get weird again. I imported this stuff under the name "old", but all of these folders have a red negative sign on them, marking them as restricted. So, from my main admin account, I cannot even peruse these folders. Since I didn't import user data, I can't sign in to the "old" account to change permissions. I already tried to change the permissions from system preferences, but that didn't change anything. And now, for whatever reason, of all the apps that were imported then, MS Office is the only set of apps that does not work. When I click on it, it just says there was a problem and asks if I'd like to send a report to apple. I tried reinstalling it to no avail. I'm an English student, so i really need access to Word. Can anyone help? The Apple store is a major detour for me and would like to fix this issue myself.

Most likely you have Office 2004 which are PPC-only applications and will not work in Lion. Upgrade to Office 2011. Other alternatives are:
Apple's iWork suite (Pages, Numbers, and Keynote.)
Open Office (Office 2007-like suite compatible with OS X.)
NeoOffice (similar to Open Office.)
LibreOffice (a new direction for the Open Office suite.)

HT1349 guys, my itunes songs and folders disappeared? it's as if i went to itunes for the 1st time ever. i had 3,400 songs! No longer there!?!?!?!? PLEASE HELP!!!

guys, my itunes songs and folders disappeared? it's as if i went to itunes for the 1st time ever. i had 3,400 songs! No longer there!?!?!?!? PLEASE HELP!!!

Um... this is an Xserve forum. Kindly transfer to the appropriate forum.

HT203288 guys, my itunes songs and folders disappeared? it's as if i went to itunes for the 1st time ever. i had 3,400 songs! No longer there!?!?!?!? PLEASE HELP!!!

guys, my itunes songs and folders disappeared? it's as if i went to itunes for the 1st time ever. i had 3,400 songs! No longer there!?!?!?!? PLEASE HELP!!!

Empty/corrupt library after upgrade/crash
Hopefully it's not been too long since you last upgraded iTunes, in fact if you get an empty/incomplete library immediately after upgrading then with the following steps you shouldn't lose a thing or need to do any further housekeeping. In the Previous iTunes Libraries folder should be a number of dated iTunes Library files. Take the most recent of these and copy it into the iTunes folder. Rename iTunes Library.itl as iTunes Library (Corrupt).itl and then rename the restored file as iTunes Library.itl. Start iTunes. Should all be good, bar any recent additions to or deletions from your library.
See iTunes Folder Watch for a tool to catch up with any changes since the backup file was created.
When you get it all working make a backup!
tt2

Pleas help with my music files and folders on an external drive

A while back, I thought I had a virus on my C drive and was advised to by an external hard drive to move all my important files and folders to. As an inexperienced computer guy, this eventually led to a problem. I have many folders that shouldn't have been moved, main folders that were broken up, duplicates of songs, some song files that are empty, etc. This doesn't just apply to iTunes folders, it includes all the computer's music folders.
Can you please help me reorganize and delete duplicates (C and external drives)? Is there a quick way to search for song files that will not work? Is there a way to wipe out all iTunes files and start over without losing the songs bought via itunes?

Welcome to the Apple Discussions. I think you're in the wrong forum. This is the iDVD forum. If I read your question correctly you probably want the iTunes for Windows forum.
OT

Role Assignment Discovery Issue for Files and Folders through Sharepoint REST services

To preface, I am a decided Sharepoint newbie in every sense. I am trying to use the Sharepoint REST services (Sharepoint 2013) to walk the folder and file structure of my Sharepoint server and, determine as I go, the Role Assignments (and subsequently
Permissions) on those folders and files. I'm using an Administrator credentials and I'm actually able to successfully do it but I've run into some caveats. All the caveats begin with this; when I'm examining a folder, for example:
/_api/Web/GetFolderByServerRelativeUrl('/sites/cmisdev/Development')/ListItemAllFields
I receive either an empty list or an error response doc when following the link supplied for ListItemAllFields. When following that kind of link for folders, I either get:
<d:ListItemAllFields
m:null="true"
/>
or an error response document that says "The object specified does not belong to a list." When I hit the /ListItemAllFields endpoint for files, I receive a response with a link for Role Assignments which subsequently also works and I get the
info I need. So, is this a bug? Why does the link returned from Sharepoint work for files and not folders? So, google, google, google, and I discover that there is another possible way to get at the Role Assignments (and that the object does, indeed, belong
to a list!).
If I know the Title (or the guid) of the folder in question, I can use the following endpoint:
/_api/Web/Lists/GetByTitle('Development')
If I use that endpoint, I get the information I would have expected to get from following /ListItemAllFields and the subsequent Role Assignments links all work and I get what I need. If there's a bug and this is how I have to work around it, that's fine
but I have yet to discover how to dynamically determine the Title of a given folder nor am I sure if all Titles are supposed to be unique within a given Sharepoint server. I'm assuming that the folder name as represented in the server relative URL and the
Title may be different and this is where my newbishness may start to shine if I'm misunderstanding what a "List" is supposed to be in Sharepoint. Anyway, I did find that I could use the Properties endpoint to perhaps get the Title, for example:
/_api/Web/GetFolderByServerRelativeUrl('/sites/cmisdev/Development')/Properties
gives me:
<d:vti_x005f_listtitle>Development</d:vti_x005f_listtitle>
whose value I assume I could then supply to the /GetByTitle endpoint and be golden. However, "vti_x005f_listtitle" just sounds a little too deep to be something I should be relying on but maybe that's kosher. That's part of what I'm trying to
find out. Also, if there is a way to use the Sharepoint REST API to discover the guid of a given object, then I could look it up in that way.
So, in summary:
1. Am I going about getting folder Role Assignment information in the wrong way? Based on the CSOM examples I've seen, I believe I'm doing it correctly and that the answer to #2 below is a resounding "Yes!" :)
2. Is it a bug if I'm not able to use /ListItemAllFields on folders using the server relative url?
3. If I'm supposed to use GetByTitle as a workaround, am I discovering that Title correctly through /Properties? Seems quite circuitous and awkward. Are Titles required to be unique throughout a given Sharepoint server?
4. If I'm supposed to use the guid, how can I use the REST interface to discover an object's guid? Once we get down to the Role Assignments and other links, the guid appears in those links but I don't know how to discover it independently if that's the
path I should use to get the data I described above.

Upon further research, I'll answer my own question for the benefit of some other potential future newbie. The answer to question number 1 above is "Not exactly.". The server relative URLs I was using corresponded to lists (which are
returned as a collection through /_api/web/lists). I was treating them mentally like regular folders. That, coupled with the fact that accessing their data as I showed above returns a ListItemAllFields link, made me think that was the way to get
the Role Assignments just as I would for files and, as it turns out, "real" folders and sub-folders created under these lists. That was the other problem with thinking of these lists as regular folders. So, ListItemAllFields works on
all files and folders in a list. However, if you want Role Assignments for the lists themselves, you can keep track of the Titles and\or Guids from the /_api/web/lists that you're interested in (in my case, all non-hidden "document library"
type lists) and then access those Role Assignments as I discussed in questions 3 and 4 above. For example, from the /_api/web/lists collection from my test server, the "Development" document library Role Assignments are accessable via /_api/Web/Lists(guid'cd242eeb-aafa-4efa-aecc-9bbdf8e3d459')/RoleAssignments
or /_api/Web/Lists/GetByTitle('Development')/RoleAssignments.

BeX-Analyzer : no visible role and working-sheets

Hello experts,
after creating new working-maps under a role, i can't find it anywhere for the next day.
For example: After launch BeX-Analyzer 7.0 -- then open working-map -- then connect over BW/BI Developer-System -- then
roles. I can't find my saved user-working-maps or local objects who are saved one day before. They were under the "PFCG-created"
user-role : "example :Z_Role_External_".
When i open the map : QUERIES, i have the include for user-role and can manage and call the designed sheets
in my workaround.
In this case one more information that happens before this items. In the last week i had patched the BW-BI 7.0 with then following patches.
SAPKA70020
SAPKB70021
SAPKA70021
KIPYJ7K und KIPYJ7L
SAPKW70022
SAPKW70023
After this action i heard from this problem in BW-BI "No User-Role and no Test-working-maps" under my User-Profile.
Have anybody an idea to solve this problem ?
Thanks
Michael

Found this thread with an allegeded fix from SAP
Unable to see Roles in Bex Analyzer - even with SAP_ALL!

BeX-Analyzer : no visible role and working-sheets created bei querie

Hello experts,
after creating new working-maps under a role, i can't find it anywhere for the next day.
For example: After launch BeX-Analyzer 7.0 -- then open working-map -- then connect over BW/BI Developer-System -- then
roles. I can't find my saved user-working-maps or local objects who are saved one day before. They were under the "PFCG-created"
user-role : "example :Z_Role_External_".
When i open the map : QUERIES, i have the include for user-role and can manage and call the designed sheets
in my workaround.
In this case one more information that happens before this items. In the last week i had patched the BW-BI 7.0 with then following patches.
SAPKA70020
SAPKB70021
SAPKA70021
KIPYJ7K und KIPYJ7L
SAPKW70022
SAPKW70023
After this action i heard from this problem in BW-BI "No User-Role and no Test-working-maps" under my User-Profile.
Have anybody an idea to solve this problem ?
Thanks
Michael

Hi,
this forum is about Web Intelligence. I would suggest you post your questions into the BusinessExplorer (BEx) Forums.
ingo

Find the iViews, Pages and Folders assigned to Role

Hi,
Does any one has the idea about how to retrieve the worksets, pages and iviews assigned to a role.
I found a piece of code that will retrieve the roles, worksets, pages and iviews from PCD.
Here is the code, that is to retrieve the roles, worksets, pages and iviews from PCD
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, IPcdContext.PCD_INITIAL_CONTEXT_FACTORY);
env.put(Context.SECURITY_PRINCIPAL, WDClientUser.getCurrentUser().getSAPUser());
env.put(com.sap.portal.directory.Constants.REQUESTED_ASPECT, PcmConstants.ASPECT_ADMINISTRATION);
InitialContext initialContext = null;
DirContext dirCtx;
initialContext = new InitialContext(env);
dirCtx = (DirContext) initialContext.lookup("pcd:portal_content/");
PcdSearchControls pcdSearchControls = new PcdSearchControls();
pcdSearchControls.setReturningObjFlag(false);
pcdSearchControls.setSearchScope(PcdSearchControls.SUBTREE_WITH_UNIT_ROOTS_SCOPE);
dirCtx.addToEnvironment(Constants.APPLY_ASPECT_TO_CONTEXTS,Constants.APPLY_ASPECT_TO_CONTEXTS);
// Gets the full path of the iViews from the PCD
NamingEnumeration ne =      dirCtx.search("","(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.iview)",     pcdSearchControls);
while (ne.hasMoreElements())
     IPcdSearchResult searchResult = (IPcdSearchResult) ne.nextElement();
     String location = "pcd:portal_content/" + searchResult.getName();
     wdComponentAPI.getMessageManager().reportSuccess("View ="+location);
// Gets the full path of the pages from the PCD
NamingEnumeration nePage = dirCtx.search("","(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.page)",pcdSearchControls);
while (nePage.hasMoreElements())
     IPcdSearchResult searchResult = (IPcdSearchResult) nePage.nextElement();
     String location = "pcd:portal_content/" + searchResult.getName();
     wdComponentAPI.getMessageManager().reportSuccess("Page ="+location);
// Gets the full path of the worksets from the PCD
NamingEnumeration neWorkSet = dirCtx.search("","(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.workset)",pcdSearchControls);
while (neWorkSet.hasMoreElements())
     IPcdSearchResult searchResult = (IPcdSearchResult) neWorkSet.nextElement();
     String location = "pcd:portal_content/" + searchResult.getName();
     wdComponentAPI.getMessageManager().reportSuccess("WorkSet ="+location);
But my requirements is, if I have the role as "Sales Role", I want to find the iViews, Pages and worksets assinged to this role.
Your help is really appreciated.
Thanks in Advance,
Chinna.

Hi,
All you need to do is to change the search root object:
DirContext dirCtx;
initialContext = new InitialContext(env);
dirCtx = (DirContext) initialContext.lookup("pcd:portal_content/mypath/myrole");
PcdSearchControls pcdSearchControls = new PcdSearchControls();
pcdSearchControls.setReturningObjFlag(false);
pcdSearchControls.setSearchScope(PcdSearchControls.SUBTREE_WITH_UNIT_ROOTS_SCOPE);
dirCtx.addToEnvironment(Constants.APPLY_ASPECT_TO_CONTEXTS,Constants.APPLY_ASPECT_TO_CONTEXTS);
all the rest stays the same.
BTW - you can also retrieve all the objects using one search by putting
(|(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.iview),(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.page),(com.sap.portal.pcd.gl.ObjectClass=com.sapportals.portal.workset))
In the search query. Then you can get the type using PCM (portal content model) APIs.
Hope this helps, Elisha

How do I get Firefox to show hidden files and folders. It should be available under help but help only gets as far as Open Containing folder and doesn't go on to show hidden files and folders

I am trying to find the status of Adobe Flash Player on my computer. I am advised that it exists in Firefox's hidden files and folders but I cannot find such a folder

You have an older version of Flash installed - Shockwave Flash 10.0 r45
You can see that for yourself in Tools > Addons > Plugins
"Show hidden files and folders" is a function of the Operating System, not an application such as Firefox. Windows Control Panel > Folder Options > View - Advanced Settings

My desktop files and folders no longer appear on the screen. I think this is a result of an iPhoto updating. It appears (from getting info) that now Desktop is being treated like a normal file for which an application to open it must be supplied. Help?

My desktop files and folders no longer appear on the screen. I think this is a result of an iPhoto updating. It appears (from getting info) that now Desktop is being treated like a normal file for which an application to open it must be supplied. Can anything be done? Incila

You are not going to be able to run your old system from the backup on this old computer as the hardware is incompatible.
You need to get a new computer or a refurbished one.

HT1977 I'm a iPhone 4s and new iPad 3 owner. I'd like the apps and organization I've invested in the iphone to be exactly transfered to the ipad. Is this possible? Will all the applications and folders match exactly? Thank you for your help

I'm a iPhone 4s and new iPad 3 owner. I'd like the apps and organization time I've invested in the iphone to be exactly transfered to the ipad. Is this possible? Will all the applications and folders match exactly? Thank you for your help

Restore the latest iPhone backup you made to the iPad.

Roles and authorisations in SEM BW

Hi All,
Our SAP SEM lies in BW, Business Planning and Simulation. I have configured everything, but now i want to create roles and authorisations which point to specific planning folders. How do I do that? I understand we do not use the standard transaction PFCG to create roles in BW SEM, what transaction do I need to use? May I get a little bit of detail from the transaction to the point at which i specify a certain role for a specific planning function or planning folder.
I will really appreciate your help.
Regards,
Tatenda.

Hi,
please use the search function and read the great number of threads regarding this topic.
The SEM-part of SAP has a lot of role-stuff for authorsation (via PFCG) but also BW-authorisation which is done via "rsecadmin". Actually, forget pfcg because you can click on pfcg in the rsecadmin, so you never have to go back to pfcg anyway.
The BW-authorisation is created via rsecadmin, as i said, and included to a role via pfcg in the object S_RS_AUTH.
For example someone needs the reporting-auth for one company. You create via rsecadmin a BW-auth-object, call it "comp_01". Include there the infoobject 0COMPANY (if you use that one) and include the special infoobjects (there is a button on the top). Then go in rsecadmin to the tab User and switch there to PFCG. Select/create a role, put the S_RS_AUTH in there (and maybe if needed the BEx-Query stuff) and then type in that BW-auth-object "comp_01". That's it.
btw: Roles are only for the application, the BW-Auth is for infocubes, infoareas, infoobjects and so on...
Best Regards

Roles and Authorization strategy for SAP BIBO

Hello All,
We are doing an implementation where Source is a Oracle, SAP BI warehouse and BO XI3.1 as reporting solution.
Our customer has asked for the authorization strategy that will be implemented in SAP BI. Currently the users belong to different companies or plants or countries
Current structure is like,
User 1 belongs to Plant1 of Country1
User 2 belongs to Plant2 of Country2
user 3 belongs to Plant3 of Country1 etc..
We have more than 500 users who will use the reports. The user belonging to a particular plant should only see the plant data/Country data he belongs to.
As I understand, we need to create the roles in BW and these roles to be imported into BO to use for the row and column level security.
The options we considered are,
1. Use Bex queries in BW to with ABAP code in CMOD to identify the user belongs to Plant 1, 2 or 3 and provide necessary authorizations.
2. Create user groups based on the country or company they belong to and create as many roles as required. This will however impact the maintenance of so many roles in the BI system.
We are also forced to avoid Bex queries in BW and hence, trying to connect Multiproviders directly in BO universe.
How should we go forward in designing the authorization concept? Any better ideas?
Thanks and Regards,
Srinivas

There are two ways which we can implement this kind of authorization based on my knowledge.
1. Data Security purely at BW
If the data is secured based on roles and users, there is no need of additional authorization from BO side except at report and folder level if you go for SAP Authentication.
Once you use SAP authenication and enable single sign on option in universe connection, the SAP users can access data based on their profile set at BW.
2. Data Security from BO
Let's assume that, if nothing is set at BW and every thing to be take care from BO.
Then you could create one multiple provider for each plant / country. Create one connection for each multiprovider
Create restrictions (Tools--> Manage Access Restrictions) for each plant/country. There you can change connection names.
So you would need to create many restrictions for different permutations and combinations.
I never tries this option with Multiprovider. But It worked well with NON-SAP data.
Hope this helps!
Regards
Gowtham

BEX Roles and Folders help !!!

Similar Messages

Maybe you are looking for