BI Publisher Security

When I go into EM console and look at credentials in some walk-through's, I see credentials maps such as "oracle.bi.publisher", "oracle.bi.actions" and "oracle.wsm.security". Where do these come from other than creating them, and if creating them what username is assigned to them? On my install I have 2 maps, "oracle.bi. enterprise" and "oracle.bi.system". So I am guessing that "oracle.wsm.security" is for an external security setup and "oracle.bi.publisher" is for BI Publisher. How do I go about finding the key name for that..for example is publisher's key just publisher.user?
Edited by: J.A.M on Sep 19, 2011 1:55 PM

JAM,
These are referend to as credential keys and credential key mapping. They are part of the OPSS concept of security management, etc.
These credential keys are for the most part arbitrarily named although some like the example you pointed out, oracle.bi.system, are created and referenced specifically by an OOTB process and is basically required.
The other ones like oracle.bi.actions and other arbitrary ones like oracle.bi.EPM are created for reference in other associated libraries/applications. The one most popular for this usage is the Oracle BI 11g Action Framework. Creating a credential key allows you to create an "Account" in the ActionFrameworkConfig.xml file which makes a one-to-one reference for security. That account can then be used for one of the action framework registered content types such as connecting to EPM content via OBI 11g or connecting to a secured webservice.
If you want more info on this specifically you can look at hte action framework documentation,
http://download.oracle.com/docs/cd/E21764_01/bi.1111/e16364/actions.htm#CHDDAFJJ
I hope this helps. Please toss some points my way if it does.

Similar Messages

BIP: Upload error (Invalid BI Publisher Security model SBL-RPT-50532)

Hi, We have Siebel 8.1.1.5 running and having trouble integrating with BI Publisher 10.1.3.4.2 . I have setup and configure BIP as per the instructions.
When we try to upload reports from Reports - Standard Templates View, getting the following error messages:
Invalid BI Publisher Security Model Setting (SBL-RPT-50532) && Error (null) invoking method (null) for business service (null).
I have setup the security model to siebel in BIP and able to login tot he console using SADMIN/SADMIN. All the required components are also online and updated the params as per the instructions.
Any help would be greatly appreciated. Thanks in advance!

Hi Hakan,
Please check whether your EAI Object manager is using different srf to one that application set to. In that case try to
set the EAI to same srf Or compile report stuff to that particular srf. And befiore that have you declared the Siebel securiy model setting in BIP.
Please reach me at [email protected] for any issues.
Thanks,
Ravi

BI publisher security mged by OBIEE can't access role (500 internal error)

Hello all,
I have set the BI Publisher security model to BI Server, after creating apropriate groups in the admin tool as described by the documentation. I restarted all the services. Now I have an admin user that can log in, but when trying to access the roles and authorizations page to grant access to folders, I get the following error :
500 Internal Server Error
Servlet error: An exception occurred. The current application deployment descriptors do not allow for including it in this response. Please consult the application log for details.
The log file says the following. In french, "table non résolue" simply means table unresolved (you guessed? ;) )
07/07/06 12:46:45.281 xmlpserver: Servlet error
oracle.apps.xdo.security.ValidateException: java.io.IOException: prepare query failed[nQSError: 27004] Table non résolue : "SA System".
     at oracle.apps.xdo.security.SasValidator.getAllRoles(SasValidator.java:254)
     at oracle.apps.xdo.servlet.ui.admin.security.SecurityAdminUtil.getAllRoles(SecurityAdminUtil.java:353)
     at oracle.apps.xdo.servlet.ui.admin.security.RoleHomeServlet.getRoles(RoleHomeServlet.java:367)
     at oracle.apps.xdo.servlet.ui.admin.security.RoleHomeServlet.renderBody(RoleHomeServlet.java:259)
     at oracle.apps.xdo.servlet.ui.admin.security.RoleHomeServlet.doPost(RoleHomeServlet.java:101)
     at oracle.apps.xdo.servlet.ui.admin.security.RoleHomeServlet.doGet(RoleHomeServlet.java:59)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
     at oracle.apps.xdo.servlet.security.SecurityFilter.doFilter(SecurityFilter.java:60)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:621)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:368)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:866)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:448)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.HttpRequestHandler.serveOneRequest(HttpRequestHandler.java:216)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.HttpRequestHandler.run(HttpRequestHandler.java:117)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].server.http.HttpRequestHandler.run(HttpRequestHandler.java:110)
     at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
     at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:239)
     at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:34)
     at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:880)
     at com.evermind[Oracle Containers for J2EE 10g (10.1.3.1.0) ].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
The SA System seems to be a subject area dedicated to users management. But this is where I get lost. I have no idea of whet to do to get things working. Most probably I have to give some more privileges to somebody... but which? to who? where???
any help much appreciated!!!
thanks in advance.

You need to setup SA System in order for BI EE security to work with BI Publisher. Setting this up will fix the error that you are listing below. Couple of options for you.
1. Log an SR on supportweb to get sample RPD and table structure for the SA System
2. check the 7.8.x documentation. It had a better description of the SA System than the 10.1.3.2 documentation does.
3. I can email you an RPD and table structure that I have used.
The only thing BIP needs in SA system is user name, group name and user to group assignment. This is needed for two screens in BIP (Roles and Permissions and JDBC connections). It's a bit annoying to have to set this up, but two good things to note. If you setup SA System, then you have additional options for delivery of iBots (that's what SA System is really designed for). The other is that BIP's dependence on SA System is going away in a future release. So this will get easier soon.
Bryan

SAP published security note 2113995

Could someone tell me where the below issues was discussed on SCN so that I can subscribe to the appropriate groups?
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200
Revision History:
01/15/2014 - Vulnerability disclosed
04/22/2015 - SAP published security note 2113995
04/23/2015 - Advisory published

I don't think this issue has been discussed yet on SCN. The three spaces that I think it would most likely be discussed on are:
SAP Adaptive Server Enterprise (SAP ASE) for Custom Applications [this one we are on now]
SAP Adaptive Server Enterprise Developer Center
SAP Applications on SAP ASE
-bret

Error while confgiuring Siebel Bi Publisher Security Model..

Hi,
Steps Done
1)     Imported the BIPSiebelSecurityWS.XML
2)     Replaced Existing address with the specific address of the Siebel Server
3)     Enabled Local Super user checkbox, entered a Super user name and password
4)     Configured the Siebel Security Model by pointing the Siebel Web Service end point with Siebel Username/Pwd
5)     Restarted the Bipublisher
6)     When I try to login to Bi Publisher with Siebel Credentials I am getting the error
The server cannot be used due to configuration error, please contact admin..
Please let us know the necessary steps ..

Login using the credentilas used for super user. Siebel user do not work here, it will only fetch the responsibilities here as a roles for that super user.
Thanks,
Ravi kanth

A BI Publisher Security Centre

Where do I find it? I don't have the option to create reports - and apparently need to grant myself privilege in this obscure piece of infrastructure.
This is on an OBIEE 10 platform.
Edited by: 934462 on 15-May-2013 04:40

You need to setup SA System in order for BI EE security to work with BI Publisher. Setting this up will fix the error that you are listing below. Couple of options for you.
1. Log an SR on supportweb to get sample RPD and table structure for the SA System
2. check the 7.8.x documentation. It had a better description of the SA System than the 10.1.3.2 documentation does.
3. I can email you an RPD and table structure that I have used.
The only thing BIP needs in SA system is user name, group name and user to group assignment. This is needed for two screens in BIP (Roles and Permissions and JDBC connections). It's a bit annoying to have to set this up, but two good things to note. If you setup SA System, then you have additional options for delivery of iBots (that's what SA System is really designed for). The other is that BIP's dependence on SA System is going away in a future release. So this will get easier soon.
Bryan

Publish security camera view

hi, i want to display or show ( publish) view/image/stream on a web browser coming from an security ip camera as online (real time ) and record them. how can i do ? what can i use ? any idea ?
thanks.....

bkarli wrote:
hi, i want to display or show ( publish) view/image/stream on a web browser coming from an security ip camera as online (real time ) and record them. how can i do ? what can i use ? any idea ?Network camera? See this thread http://forums.sun.com/thread.jspa?threadID=5438765 for some ideas. Though you can ignore the part of the thread where the OP becomes petulant about which forum it should appear in.
If the camera is not a network camera, then JMF might suffice. The JMF forum is located at (Java Media Framework Be warned though, that neither applets nor media handling are good topics for someone who is 'New To Java' to achieve.
thanks.....Your thanks is better expressed by using your shift key on the 1st character of every sentence, as well as for any use of the word 'I'. This makes text easier to read, and you would not want to make it harder to help, would you?

Help needed in XML bi publisher security side

Hi all
i have a requirement to set groups and access permissions to these groups for using XML publisher.
am trying to find documents but i cant
if anyone has experience please let me know
appreciated

Hi,
Thanks for your help. I tried with that solution. But after page break I have another page which is like
If you have any queries contact us
Yours faithfully
Emploee Name.
This page is cominng repeatedly after each page break.
Suppose If I give the variable value=4 then, this last page is coming one time for each page before the Invoice lines.
Could you help me in this?
Thanks

Is that possible to publish a security policy in registry???

Hi all,
Can any one of you tell me if it is possible to publish security policy in owsm to registry.
If so, Kindly tell me how to go about that..
Thanks ,
Manoj Nair.

Not possible, and there are no apps. Put a passcode on your phone, as that is your only option.

BI Publisher Using BI Server Security

I have setup BI Publisher to use BI Server security which works well, I can even see the Admin Tab ;-)
My problem is that I can no longer access the Security>Roles and Permissions Tab. I get a HTTP 500 error.
Has anyone else come across this problem?
Thanks,
Matt

i managed to resolve with the help of this thread
Re: BI publisher security mged by OBIEE can't access role (500 internal err
Basically the SA System is the key.

Cannot Select 'Siebel Security' when configuring BI Publisher

Hi,
Background: I am (attempting!) to configure a new reporting server for Siebel..
On the BI Publisher Console, there exists the following screen, I can't seem to add a screenshot, but you navigate to it via:
Admin > Security Configuration > section entitled 'Security Model'.
There is a drop-down there, and only the following options can be selected:
BI Publisher Security
LDAP
Oracle E-Business Suite
Oracle BI Server
Oracle Database
On the existing server, there exists and is selected, another option 'Siebel Security', and a whole bunch of settings I need to make
(presumably) are below that..
So my question is, why can't I select 'Siebel Security' in the drop-down?
I suspect I have missed some installation step or something?
Can anyone help with this one?

Thank you SO MUCH, Dave! I had entered cn=orcladmin in the Security Configuration screen and did not notice that it was saved to the xmlp-server-config.xml as orcladmin... I manually editted the xmlp-server-config.xml file to cn=orcladmin and it appears to be working now!
Why is the entry not saving correctly from the Security Configuration screen? Is this a bug?
Thanks again, Dawna.

Emulating Oracle Applications Environment in BI Publisher Enterprise Server

Hi there,
I think I know what the answer is going to be to this post but for reasons outwith my control I'm trying to understand if there is a workaround to achieve the resultant report output I require.
Background
Oracle E-Business on Demand 11.5.10.2
Oracle BI Publisher 10.1.3.2
My client has Oracle E-Biz on Demand but rather than utilising the integrated XML Publisher engine they have gone down the path of installing BI Publisher Standalone Enterprise Server for their report generation.
Now this works to an extent but I am experiencing problems trying to emulate the setting of an Apps context when I run a report so that I can utilise the Apps security within the Stanalone Enterprise Server. Is this even possible?
Example, basing a data model on PO_VENDOR_SITES (multi-org view) returns 0 (zero) rows but basing it on PO_VENDOR_SITES_ALL returns all rows (for all Orgs).
I can hear you all now yelling, "Use the Oracle Applications XML Publisher" version but in this "On Demand" arena that practice hasn't been adopted so i am raising this post in the hope that someone may be able to suggest a workaround or solution.
Actually, no BI Publisher security model has been adopted and all users use the GUEST account to run reports.
All comments and suggestions are appreciated :-)
Kind Regards,
Gary.

Gary, create a data template and call your own db function to initialise these. The beforeReport trigger will fire and set the enviro prior to the query being executed (as in Reports) Something like this below:
<dataTemplate name="BasicQueryDT" description="Simple query data template" defaultPackage="xxbi_setenviro">
     <dataQuery>
          <sqlStatement name="basicQuery">
               <![CDATA[
select max(last_update_date) today from apps.pa_projects_v]]>
          </sqlStatement>
     </dataQuery>
     <dataTrigger name="beforeReport" source="xxbi_setenviro.before_rep"/>
     <dataStructure>
          <group name="G_Main" source="basicQuery">
               <element name="TheDate" value="today"/>
          </group>
     </dataStructure>
</dataTemplate>

Issue with web publisher services

hello,
i try to use the bi publisher services and in particulary SecurityService(Jdeveloper 11.1.2.0.0 and publisher 11.1.1.5) .
the security model is setting on Bi publisher security.
i use the http://bipconsulting.blogspot.com/2010/04/how-to-use-bi-publisher-web-service.html for help
when i run this code
package com.oracle.xmlns.oxp.service.v2;
import java.net.URL;
import java.util.ArrayList;
import java.util.List;
import javax.xml.namespace.QName;
// This source file is generated by Oracle tools.
// Contents may be subject to change.
// For reporting problems, use the following:
// Generated by Oracle JDeveloper 11g Release 2 11.1.2.0.0.6017
public class SecurityServiceClient
public static void main(String [] args)
try {
SecurityService_Service securityService_Service = new SecurityService_Service();
SecurityService securityService = securityService_Service.getSecurityService();
String sess_id=securityService.login( "Administrator", "password");
System.out.println(sess_id);
securityService.createUser("jean", "jean", "Administrator", "password");
} catch (Exception ade_e) {
System.out.println(ade_e);
i have the following output
3447993075936D60EEF980C3472AC415
javax.xml.ws.soap.SOAPFaultException: java.lang.SecurityException: Security violation: /~jean; administrator does not have permission to create this folder.
Process exited with exit code 0.
If someone can help me,it would be great.
best regards
jean marc

i try with soapui for the method createuser,
i have the same issue.
any help ?

Help on IDT on HANA : secured connexion doesn't show all the views

Hello HANA and BusinessObjects experts.
We want to build a Universe on a HANA View.
We are following the steps indicated in the IDT user Guide :
Build a Relational Connection on HANA (JDBC driver) in my project.(.cnx)
Publish the connection to BO repository and create a secured connection shortcut (.cns)
Create a Data Foudation and that last (cns) connection.
And there is the problem :
If in the Local cnx connection, I am able to see all my calculation views (as well as all HANA live views) , whereas I am only able to see a very small subset of these views in the published secured connection (cns).
The name of the views I am still able to see are kind of 'renamed' : ex :
What I see in the cnx for the 'ADVINI_ANALYSE_COPA' view
.... And what I get in the published connection
I have played with filters, tried ODBC connection... but anyway I am not able to see the view on which I want to build a universe.
We are running SAP HANA 1.0 SP07, and BO 4.1 SP03.
Thanks all for your help.

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Unsync/delete all music and resync
To delete all music go to Settings>General>Usage>Storage>Manage Storage>Music>Tap edit in upper right and then tap the minus sign by All Music
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: Back up and restore your iOS device with iCloud or iTunes
- Restore to factory settings/new iOS device

Cannot find "Create A Role " in BI Publisher

Hi All,
I am trying to configure EBS security and assign catalog permissions to the EBS Roles.Following the Oracle Document Integrating with Other Oracle Security Models - 11g Release 1 (11.1.1)
and it says under Security Center-->Role & Permissions click "Create A Role" but I can't find Create A Role button or option. I am using OBIEE 11.1.1.7.0
Any help or thoughts if i am missing anything.
Thanks
SYK

As Per the Oracle Support Documentation
1. Login in to xmlpserver as weblogic user
2. Navigate to Administration > Security Center > Security Configuration
3. On the bottom of the page navigate to the Security Model section
4. On the drop down list select "BI Publisher Security" and provide a password for the security
5. Log out of xmlpserver and login as weblogic user on Weblogic Console and restart the BI Server
6. Once restarted then login back to xmlpserver with the username as administrator and provide the password you had provided on step 4.
7. Now navigate to Administration > Security Center, and a new link called "users" is available and on the Roles and Permissions link, "Create Role" button can be found.
N.B this solution is applicable to only Standalone BI Publisher
It is not recommended to change the Security Model to 'BI Publisher Security' when using BI Publisher within OBIEE installation.
For OBIEE installation the Security Model should be 'Fusion Middleware' security or 'BI Server Security'.
It Worked for me ..Just posting it if anyone run into same issue:)

BI Publisher Security

Similar Messages

Maybe you are looking for