BI and Portal: certain users can't access BI

Hi,
I have an authorization related problem with Portal/BI.
I use the portal to access BI reports. However, since yesterday, there has been problems for some users. For some it's still ok (administrators).
When adding an additional role - SAP_J2EE_ADMIN - to problematic user in BI back-end this user is then able to access the BI reports. When not using SAP_J2EE_ADMIN it gets the error message:
500 Internal Server Error
          BEx Web Application
Failed to process request; contact your system administrator
Error Summary
Exception occured while processing the current request; this exception cannot be handled by the application or framework
If the information on this page does not help you locate and correct the cause of the problem, contact your system administrator
To facilitate analysis of the problem, keep a copy of this error page Hint: Most Web browsers allow you to select all content, and copy and paste it into an empty document (such as in an email or simple text file)
Root Cause
The initial exception that caused the request to fail was: 
Access denied (Object(s): portal_content/Systemlandscape/SAP_BW)
Log ID     001CC4E1D3BE00780000002B000007F400046705D9DBB25B
However, I do not want to give all users SAP_J2EE_ADMIN. They should only be able to see their reports and not any admin iviews..
Some additional info is that when I add the SAP_J2EE_ADMIN to the problem user, another role containing some RFC related authorizations is getting red (deactivated) meaning I have to re-activate that role again (make it green). After that, it works...
Thankful for any help!
Regards,
Fredrik
Edited by: fc.sapbi on Apr 8, 2009 4:26 PM
Edited by: fc.sapbi on Apr 8, 2009 4:30 PM

Hi,
Find this object in PCD  "portal_content/Systemlandscape/SAP_BW".
Open the opction "Permissions", add the group EveryOne and set the flag End User.
Good Luck
Grilo

Similar Messages

  • Why the apple store is so expensive and why the apple users can't access for free after spending huge amount in apple phone ?

    Why the apple store is so expensive and why the apple users can't access for free after spending huge amount in apple phone ?

    The Apple store is correct. The warranty is not international, and Apple will not accept or return iPhones shipped from a different country.  You need to ship the phone to somebody in Hong Kong who can take it in to Apple for repair, or pay a third party repair shop in the Philippines to fix it.

  • Other user can't access to OBIEE 11G installed on a server

    Hello,
    We have installed OBIEE 11G on a server ( windows sever 2008 r2) with admin account, and it works fine, But others users can't access to obiee 11g ( administration icons are white in their sessions) even they have admin rights.
    Can anyone tell me what should we do??
    Thank you.

    Hi,
    This is the exact format how my tnsnames.ora file looks. sorry, I can ping it in command prompt now. In my connection pool i tried first DSN =  ab.bc.xy.zx, did not work. Then I saw oracle's default repository and changed my DSN to your suggested format starting from "DESCRPTION" to rest. Still no luck Do you think, i should put the same TNS in my local machine??
    ab.bc.xy.zx =
    (DESCRIPTION =
        #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.110)(PORT = 1521))
        #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.120)(PORT = 1521))
        (ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.130)(PORT = 1521))
        (LOAD_BALANCE = yes)
        (CONNECT_DATA =
          (SERVER = DEDICATED)
          (SID = cap2)
    thanks,
    BK.

  • Saving so that windows user can have access?

    I have my project all ready and those with quick time...loads up perfectly. However those who have windows have a long wait or pile will not come up. Do you know how i can save my final cut express project so that window users can have access to it?

    thank you. one last question....the quick time movie file can not be seen when opening on a windows. do you know if i need a quick time pro so that i can convert it? or is there a way that i don't know about?

  • How far will the extreme reach and how many users can be on there at the same time?

    How far will the airport extreme reach and how many users can be on there at the same time?

    Last question first, since that is the easy one......approximately 50 (fifty) users for wireless depending on how active each user might be.
    The first question is much more difficult, as distance is not really the issue with wireless.....obstructions are the issue.
    A wireless signal can easily travel 300 feet or more with no obstructions in the signal path.
    But, a typical wall of sheetrock or wallboard in a home will absorb....on average....15-20% of the wireless signal. Brick or adobe will obviously absorb much more. A ceiling....because it is thicker....will absorb about 25-35% of the signal.
    So, if the wireless signal must pass through several walls and a ceiling, there won't be much, if any, of the signal left....even though the distance that the signal travels is not great...for example, 20-25 feet.
    Other wireless networks around you at the neighbors can also affect the relative strength of the wireless signal.
    The bottom line....locate the AirPort Extreme where wireless devices will receive a signal with the least amount of obstructions in the signal path. Your actual performance cannot be predicted in advance. You will not know how well the AirPort Extreme works for you until you try it out in your home.
    If you find that the signal does not reach as far as needed,  you will need to add additional "extenders", like an AirPort Express to provide more signal coverage.

  • HT5925 I have an iCloud email on my iPhone that is now old as hacked and unused. I can't access anything as it asks for that account info and I don't remember the password etc. How do I delete it and replace it with my new iPad email? ! Help..

    I have an iCloud email and Yahoo email on my iPhone that is now old as hacked and unused. I can't access anything as it asks for that account info and I don't remember the password etc. How do I delete and replace it with my new iPad email? ! Help..

    Welcome to the Apple community.
    If you are unable to remember your password, security questions, don’t have access to your rescue address or are unable to reset your password for whatever reason, your only option is to contact AppleCare(or Apple ID Support), upon speaking to an operator you should explain that your problem is related to your Apple ID, this way you will not be charged for assistance, even if you don’t have an AppleCare plan.

  • Since i upgraded to maverick and my iPhone I can not access photo tab in itunes

    since i upgraded to maverick and my iPhone I can not access photo tab in itunes

    I have fixed mine by installing the [https://addons.mozilla.org/en-US/firefox/addon/remote-xul-manager/ Remote XUL Manager] then added my Notes domain to the whitelist.

  • I miss not having the same fonts as cs3 ie Bradshaw, Lucinda and papyrus. How can I access these.

    I miss not having the same fonts as cs3 ie Bradshaw Handwriting, Lucinda and Papyrus. How can I access these on cs5? I have not found the fonts for this program to my liking.

    I can't find any reference to a handwriting font named Bradshaw anywhere. Are you sure you have the name right? ITC Bradley Hand Regular, along with Papyrus and the Lucida (no "n") family are all included with recent versions of Windows, though, and should be in your font list in CS5 if you are, in fact, running Windows.
    Is this the same machine that has CS3 installed? Did you remove CS3? Do the fonts show up in any other programs?  Indesign can see fonts that are installed in the system fonts, the Common Files > Adobe > Fonts folder, and the private fonts folder for InDesign in the application folder. If the fonts show in CS3, but not elsewhere, they are probably in the CS3 InDesign Fonts folder.

  • Have Pages on iPad and MacBook Pro but can't access docs from iCloud on laptop.

    have Pages on iPad and MacBook Pro but can't access docs from iCloud on laptop. laptop keeps telling me to purchase pages for iPad (which I've been using on both the iPad and MacBook for months - App store says i have them both too). Both units have current updated systems and apps. Using same apple ID.  Calendar and contacts work fine between both machines.

    Do you have any secondary accounts set up in mail, contacts and calendars.

  • Windows XP users can't access SMB/CIFS shares on MAC OSX10.4.4 Xserve bug?

    The Xserves are new for us. This problem involves two of the 10.4 xerserves.
    1 serves as an Open Directory System Master(10.4.3). 2 Serves as a file share & backup (10.4.4).
    Both are production machines and cannot easily be restarted.
    There is no Windows network, Active Directory or Windows domain in our network.
    We created a SMB and AFP share on the file server which is a member of the Open Directory. (It is bound and kerberized to server 1).
    The users all have accounts in the OD system and all passwords are Open Directory. Our users can ssh into the various xserves (including the file share server 2) and authenticate against OD.
    We made the shares available via smb under Protocols --> Windows File Settings. We turned the Windows Service on in Server Admin. I'ts a standalone server and all the authentication types are checked under access.
    The MAC (powerbook) users can access the share fine. The Windows users can't. The Windows laptops can see the file share server (through search - not visable is Network Neighborhood) but when they try and connect they are presented by an authentication box that just keeps cycling over and over regardless of what the user types as user name & passwd.
    I tried to access the smb share with my powerbook(10.4.4) and have the same issue. I'm presented with an authentication box but authentication fails.
    The Windows File Service Log shows:
    auth.c:checkntlmpassword(312)
    checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
    [2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
    User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
    [2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
    opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
    [2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
    checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
    [2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
    User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
    [2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
    opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
    [2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
    checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
    [2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/smbd/server.c:exit_server(595)
    Closing connections
    I've googled this error and it seems that there a lot of engineers out there with the same problem but no answers. Could this be a bug with Apple's SMB process? Is there something I've missed? (I've looked at the smb.conf and have even turned off deny clear text passwords - I've even tried granting guest access) Anyone have any ideas?

    On the server itself, run the following in the Terminal:
    (from a few different sources):
    run ps -auxw | grep Password
    to see if Password service is running
    Also check the logs in /Library/Logs/PasswordService
    Try: id username
    and see if you get some info returned.
    Ex: id jimguy
    You should get some info about uid, gid, groups.
    sudo killall -USR1 DirectoryService
    Then try to login from a client machine.
    Be sure to re-issue
    sudo killall -USR1 DirectoryService
    in order to stop the (far more) verbose logging.
    Then check the logs in /Library/Logs/DirectoryService
    In Open Directory, you might want to revert to standalone (this will destory the existing OD setup) and then re-promote to OD Master. You'll lose all OD users however when doing so. If you don't have many, this may be best.
    You'll want to verify the hostname, and forward & reverse DNS lookups before re-promoting, and watch for any errors when promoting to OD master
    See, when you say "The real clue is that I'm unable to access the shares from my Powerbook G4 with my Open Directory account. I can log in to the file share as the local admin though and that's why I'm thinking there is a bug in the samba/OD relationship. " - that's the real clue indeed.
    The local admin account, the first admin account you setup on the server, is indeed local, and resides in NetInfo, not Open Directory.
    So something is afoul in your OD.

  • Multiple Users Can't Access Time Capsule Data

    My wife and I have two separate Apple MacBooks that share a Time Capsule. We have different account names on these respective computers. I initially set up my Time Capsule and created folders that I can access from Finder.app when I connect over our wireless network. In Airport Utility.app, under the "Disks" tab, I set up the shared disks "with device password", so that she and I can mutually access all the data on the Time Capsule. However, when I try to access it from her computer, I click on the Time Capsule in Finder.app and get this dumb Sharepoint icon--a total dead end. I created another account on her computer with the same name as the account on my own computer, and from that account, I'm able to access all of the data on the Time Capsule. This therefore seems to be a permissions issue, but I've checked all of the files and folders on the Time Capsule and ensured that they all have "everyone read & write" access, so there should be no restrictions on access to this data.
    Why are the volumes on my Time Capsule sensitive to the user accessing them? How do I set up data repositories on the Time Capsule that can be accessible to all users on my network? I'm out of ideas.

    Are both computers actually running Mavericks??
    This is very typical Yosemite problem.
    For some reason which I don't yet understand Yosemite is horrible at handling network drives.
    dumb Sharepoint icon
    Sharepoint is a dlink app?? If you have ever had some app loaded that uses a different product to apple then it can mess your access.
    WD share stuff seems to be the worst and causes no end of problems.
    What you are seeing btw is the TC is not a NAS.. you are trying to use it as one.. but it isn't.

  • User can't access a PDF with Forms

    On a website, we have a main menu PDF with a list of bookmarks linking to individual user manual PDFs.  When a user tries to access a user manual  PDF with forms in it, they get the error "There was an error processing a page. There was a problem reading this document (118)." The user dosen't appear to have any problem opening a PDF that doesn't contain forms. 
    The user is using Reader 10.1.3 and Internet Explorer 8.0.6001.19328.  This user cannot access the PDFs with forms when given a direct link to the file either. However, if the user is sent the PDF file they can open it with Reader and in their browser.  I'm stumped.  Does any body know what's going on here?

    Is there a browser setting that can affect if a PDF opens? Something in security, perhaps? I've looked around and don't see anything obvious that could allow/disallow opening a PDF file that contains form fields.
    Jeanie

  • User can't access detail Hardware/Software Inventory

    What right or permission do I need to give so that a user can access the detailed Hardware/Software inventory of a computer? I don't want them to be able to add or modify computer properties.
    It's currently grayed out for the user.
    Jim

    jwebb,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://forums.novell.com/

  • User can't access camera anymore, root still can [SOLVED]

    since the last udev update, i can't access my camera anymore as user. gtkam gives this error:
    An error occurred in the io-library ('Could not find the requested device on the USB port'): Could not find USB device (class 0x6, subclass 0x1, protocol 0x1). Make sure this device is connected to the computer.
    the camera is a canon A75, vendor 04a9, product ID 305b. lsusb says it's connected to Bus 001 Device 011. i added that info to a custom 010.udev.rules file, but i don't know where to add the USB info. :?: user is in the camera group, btw.
    ACTION=="add", SYSFS{idVendor}=="04a9", SYSFS{idProduct}=="305b", RUN+="/bin/chmod o-rwx $env{DEVICE}"
    ACTION=="add", SYSFS{idVendor}=="04a9", SYSFS{idProduct}=="305b", RUN+="/bin/chgrp users $env{DEVICE}"
    ACTION=="add", SYSFS{idVendor}=="04a9", SYSFS{idProduct}=="305b", RUN+="/bin/chmod g+rw $env{DEVICE}", OPTIONS="last_rule"
    thanks for any help.
    >>edit: turns out root can't access the photos, either. the camera is detected and the photos load and show up in gtkam, but when i try to save them i get an error, e.g., "Problem getting 'IMG_0332.JPG' from folder '/store_00010001/DCIM/103CANON'."  wtf? :?:
    >>edit2: okay, i got it by adding
    SYSFS{idVendor}=="04a9", SYSFS{idProduct}=="305b", GROUP:="camera"
    to a 00.gphoto.udev.rules file and restarting udev (i never noticed b4, but no script? i had to kill udevd and do /usr/sbin/udevd -d).
    is that just a kluge fix though? i don't know anything about udev to know if that's the best way to do it, or if there's a better, more "correct" way. i just want to be able to access the camera from now on without having to change rules or mess around with udev anymore (i thought the point of udev was to have transparency to the user? ). thanks.
    >> edit again: i love having conversations with myself.
    okay, i didn't even notice the gphoto.rules file bfore, but i just added the information for my camera to the file, restarted udev, and it seems to work. if the maintainer wants to add the info for canon A75 to the file, the line is:
    ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="305b", GROUP="camera"

    lanrat wrote:
    Nice conversation :-)
    If your camera isn't already in gphoto.rules you should report it to package maintainer (feature request) and/or gphoto devs.
    I wouldn't modify standard gphoto.rules. I'd rather put this rule in /etc/udev/rules.d/00.udev.rules:
    ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="305b", GROUP:="camera"
    to avoid overwriting after next update.
    For restarting udev there is /etc/start_udev (or udev_start or something like this - I can't remember it :-))
    thanks, it is /etc/start_udev - i was looking in /etc/rc.d.
    i moved it back to 00.gphoto.rules so it won't get overwritten.
    now that it's verified working in the standard rules, i'll make a report to the devs to add the cam there.
    is your method for doing this in the wiki? i pretty much only figured out how to do it by reading your posts. if you have time, i think it would be a great wiki item.  8)

  • 2nd user can't access internet

    I set up a 2nd user account on my Mac and I can't access the internet from it.  I've checked my Network settings and it says everything is working normal.

    These were written for Yosemite, but apply to 10.6 also.
    Internet – can’t connect - Yosemite
    Internet – can’t connect - Yosemite (2)

Maybe you are looking for

  • Form on a view

    Hello, I created a view on a remote database. This view contains a calculated column. I created a tabular form based on the view. When I try to cheange and update a record I receive the following message: Error      Unable to process update. Error in

  • How to set a language from LTR to RTL in illustrator cs4

    how to set a language from LTR to RTL in illustrator cs4.....plz help

  • Chart to image

    hi, is there a way to convert chart to image, i am using php in server side. thanks

  • Depo- material upload

    We have certain materials (finished goods) which has been imported after paying customs duty, CVD, Add duty etc...this materials do not have purchase orders created in the system. These materials are stored in our depo which has to be uploaded into S

  • Triggering event through Change Management for Sales order

    I am working on three different scenarios of workflow which is triggered on change of sales order.  I am trying to put conditions in SWEC for the workflows to start but not sure how to go about it.  I created change doc object VERKBELEG and assigned