BOE XI 3.1 - Universe Export Restriction

Guys,
Our configuration's are
BOE XI 3.1 SP2.
Windows AD authentication
In our organization we have few developers and few Super Users (Power Users).
Both Developer and Super Users have Universe access. So by default both Developers and Super Users can do Import, Export, Edit and Save, etc functionalities in Universe.
Here my question:
Is it possible to deny 'Export Universe' or 'Save Universe' explicitly to particular users who are all having UNIVERSE access?
If yes then i will restrcit 'Super Users' explicitly.
I have tried many options which are given in tutorial and businessobjects sites. but no hope.
Thank you.

Hi
I would suggest that you have to deny the particular users explicitely the right to create and edit objects in the Universe folder.
Go to the CMC->Universes, navigate to Manage->Top Level security->All universes. Add your particular users as principals there. You can even create previously a user group and set the rights for the group itself. Then select to Assign security and go to Add/remove rights under the Advanced tab. Here you can explicitely deny your users to create and edit objects in this area/folder. That would be enough to stop the specific users from exporting the universes they create into the BOBJ repository.
Regards,
Stratos

Similar Messages

JSSE Export Restriction Error

I am moving a client application from Java SDK 1.3 to Java SDK 1.4. I was previously using version 1.0.3 of JSSE but am currently using the later version shipped with SDK 1.4. I get the following error when trying to connect.
Export restriction: SunJSSE only
From what I can gather, this is caused by restrictions imposed by the American government on certain cypher suites but this should not apply to me since I am located in North America.
I can get rid of this error by removing the following entry from the security providers list in the java.security file.
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
However, I then get the following error:
Algorithm TLS not available
Any help would be greatly appreciated.
Cheers,
BL

I have the same error when using JSSE in a weblogic application, if my JSSE .jar files are in the context of the application.
I got rid of this error by installing the files in the directory/jre/lib/extHowever, this annoys the server administrator because the installation is not standard anymore in case of rebuild after crash.
pda

Universal export for iPhoto

Hi all!
Since I am switching to Lightroom I was looking for universal way to export my photos from iPhoto. It turns out something as simple as exporting albums to folders with album names doesn't exist (or I couldn't find it). Then I found GREAT UNIVERSAL exporter!
http://www.n8gray.org/code/scriptexport
You type in your script actions (unix command line knowledge required).
For example to export album to folder with same name as album:
Preflight: mkdir ~/Desktop/NEW/"$iPAlbumName"
Per-Item: cp "$iPImageSourcePath" ~/Desktop/NEW/"$iPAlbumName"
And volia
You can easy script what you wish...FTP, SSH, format conversion.....
Thank you Nathaniel!

You type in your script actions (unix command line knowledge required).
Unfortunately that requires more than what most of us are knowledgeable in.
Do you Twango?

About JCE export restrictions by the relevant law

Hey,everybody.
i am in China, Can i use Java Cryptography Extension (JCE)?
And the relevant law limit JCE usage in China?
Thanks

The only relevant laws are your country's import laws. The US lifted crypto export restrictions two presidents ago.

Universe export - data changes not reflecting in Report

Hi
The changes and the latest updates in the database are not reflecting in reports,
even if i export the universe again.
and i have refreshed the reports, that even not reflecting.
i did Edit query and Run query this action also not bringing the latest data to reports
why this happens ?
how to solve this issue ?
Regards
Dineshkumar

You can search for KB articles on SAP Service Market Place .
Here is first :
Symptom
You make changes a local Universe in Designer.
When refreshing the report, in Desktop Intelligence, the results do not reflect Universe update.
It used to be enough to simply refresh report's data, for Dataprovider to show object changes from the Semantic layer.
Change of behaviour in SP3 codeline: the DeskI Query Panel does not automatically pick up the latest modifications made to the local Universe.
Reproducing the Issue
Using BusinessObjects Desktop Intelligence XIR2 SP3:
Using your universe (eFashion), create and refresh a simple Desktop Intelligence report (.rep).
Make a simple change to the universe (like renaming a field/ object name) and save these changes.
Go back to the open DeskI report and try to refresh the data provider using: 'Data/Refresh Data'.
This will not show the latest changes.
However, if you follow the same workflow using XIR2 SP2, the universe update will be immediately visible (in the report) simply after refresh.
Cause
This is not a product regression, but intentional change in application's code delivered with FixPack3.1.
Fix Request ADAPT00818520 changed the application's behaviour: << When a restricted user is logged on to view a Desktop Intelligence document, prompt windows may be slow to open. >>
Resolution
In Desktop Intelligence menu, go to: Tools > Universes
Click 'Refresh'
Select and 'Import' your universe
Next, go to toolbar menu: Data > Edit Data Provider
In Query Panel, click 'Run' to regenerate the Query and interrogate the updated universe.
Only after following these actions will the .unv ammendments be visible in the report.
Here is second :
Symptom
Changes to object made for the Universe is not affected when refreshed from InfoView if we check 'Allow selection of multiple Contexts' in Universe Designer
Desktop Intelligence (Deski) Report still prompts for selection of contexts even if 'Allow selection of contexts' is unchecked for Universe
Row level Restriction is not applied correctly in InfoView(View Mode) when 'Allow selection of multiple Contexts' checked in the Universe Designer
Environment
BusinessObjects Enterprise XI 3.1 Service Pack 2 Fix Pack 2.6
Reproducing the Issue
Changes to object made in the Universe is not affected in InfoView(View mode) when 'Allow selection of multiple Contexts' is checked in Universe
1. Log in to Designer
i) Import Island Resort Marketing
ii) Go to Universe Parameter >> SQL
ii)Uncheck Allow Selection of Multiple Context
2. Create a new Desktop Intelligence(Deski) Report based on Island Resort Marketing
i) Drag the object Country in the Result's Pane
ii) Save and Export the report to the repository.
3. In Designer Change the Object Country under Resort from Resort_Country.country to
i) Resort_Country.country+'ddd'
Note: Uncheck Allow Selection of Multiple Context
ii) Save and Export the Universe
4. Log in to InfoView
i) View the report
ii) Refresh the report
iii) Changes to the object taken place i.e Country is concatenated with ddd
5. In the Universe Designer, change the Object Country under Resort from Resort_Country.country to
i) Resort_Country.country+'eee'
Note: Check Allow Selection of Multiple Context
ii) Save and Export the Universe
6. Log out from InfoView and login again
i) View the report
ii) Refresh the report
iii) Changes not taken place. Shows only Country instead of Country concatenated with eee.
Row level Restriction is not applied correctly in InfoView(view Mode) when 'Allow selection of multiple Contexts' checked for the Universe.
Import efashion Universe
Drag the Outlet_Lookup table into the objects pane on the left hand side
Create Row Level Restriction on the state field of Outlet_Lookup table as Outlet_Lookup.State=(u2018Texasu2019)
Apply the restriction to Administrator
Save and Export the Universe. Note: Uncheck Allow Selection of Multiple Context in Universe Parameter>>SQL
Log in to Desktop Intelligence (Deski) as administrator with Enterprise Authentication
Create a new Deski report
Drag the object state from the Outlet_Lookup table to the Results pane
Observed that the administrator is able to see only Texas which is expected behavior
Save and export the report
Log in to Infoview as Administrator
View the report. Refresh the report
Observed that the administrator is able to see only Texas which is expected behavior
Log in to Infoview as any user say Test User
View the report. Refresh the report
Observed that Test User is able to see all the states which is expected behavior
In the Universe Designer, Check Allow Selection of Multiple Context in Universe Parameter>>SQL for efashion Universe
Save and export the Universe
Log in to Infoview as Test user
View the report
Refresh the Report
TestUser is able to see only Texas which mean that the restriction is applied to Test User also
Cause
This is by Design as the 'Allow selection of multiple Contexts' forces selection of the context, which is not possible in Infoview, so that in Infoview it is assumed the Context is already selected and no SQL regeneration is required.
Resolution
Problem Description: Changes to object made in the Universe is not affected when refreshed from InfoView if we check 'Allow selection of multiple Contexts' in Universe Designer
Explanation:
If we modify an object and selects also the option 'Allow selection of multiple Contexts', it means that potentially there is more than one SQL that can be generated with the use of that object. Hence if a report is created in Deski, run and exported to enterprise, that means, one particular context (SQL) has been selected.
If you then update one or more of the objects again, the SQL will have to be regenerated in Deski for the right context to be selected for that particular report.
Therefore, if this option is used, for the objects to be updated, the SQL of the report will have to be regenerated in Deski, run and export it back to repository, then refresh the report in InfoView.
For Deski reports viewed in InfoView, it is not possible to evaluate the context on refresh. The report will always use the context stored with the report and same for the SQL. Therefore the Deski report will need to be imported locally, refresh it and then export it back to repository for the changes to take place.
Problem description: Desktop Intelligence (Deski) still prompts for selection of contexts even if 'Allow selection of contexts' is unchecked for Universe
Explanation:
The option 'Allow selection of Multiple Contexts' in Designer is not to disable the prompt. It will prompt you to select context if the object used is associated with context. The option is just to allow Deski to select multiple contexts at a time if in case the object used is associated with multiple contexts and accordingly generates the SQL.
However if we uncheck the option even if there are multiple contexts associated with the object used, it will allow selection of only one context at a time.
Problem Description: Issue with Row level Restriction when refreshed from InfoView with 'Allow selection of multiple Contexts' checked for the Universe.
Explanation:
We first have to regenerate the SQL in Deski, then export it to repository and refresh from InfoView for the changes to take place correctly. The explanation above applies.

Is it possible to migrate Universe with restrictions

There are 2 Deployment:
DEV:6400(user A,B) and PROD:6400(user X,Y)
Universe U is created in DEV has restrictions applied to it for its users such that user A has connection C1 and user B has connection C2.
Save and migrate the universe U to PROD:6400
Requirement is to migrate the Universe in such a way that for User X the connection should be updated as C1 and for user Y connection should be C2. Also the migration should happen correctly.
Regards,
Velington

Hi All,
Iu2019d like to ask your help concerning an issue that Iu2019m charge of resolving. It's concerning the migration of universe overload from a source to a destination. Two unviverse restrictions are applied on two groups in the source: Rest1->Group1, Rest2->Group2.
These are the steps:
1-     In srource CMC create 2 groups: Group1 and Group2
2-     In Designer apply two row restrictions Rest1 applied on Group1 and Rest2 applied on Group2 (I used eFashion universe)
3-     Export the groups and eFashion universe to destination CMS using Import Wizard (keep the universe overload)
4-     In the destination CMS, Create a new user User1 and add it to the newly imported Group1 AND Group2
5-     In the destination system, Log in InfoView using User1
6-     Create a new Webi doc using eFashion universe
7-     You get this error :
User rigths not found: See your BusinessObjects administrator (Error WIS 00502).
does anyone knwo why the user rights cannot be found?
Thanks in advance,
Mohamed Ali

BOE XI 3.1 - Universe Designer Installation

Guys,
Is it possible to get the UNIVERSE DESIGNER setup (Package) alone instead of go with BOE full installation package?
I have the BOE installation full package.
Every time i am installing the Designer in below way to my users,
Custom/Expand installation --> Deselect all the client components; Select "Universe Designer" --> Install Designer
I want to make the installation in easy way.
I found that 'Web Intelligence Rich Client" Client Package is available in ALONE as well as in BOE FULL Installation Package.
i can install this 'Web Intelligence Rich Client' in either way.
Thanks in advance.
Regards,
Kiruba v.r.

Hi Simon,
I know this process. Even i am doing the same to my users machine.
But i am looking for 'Universe Designer' individual client package as like 'Web Intelligence Rich Client'.
Note: I am not getting any error message.

Query re universe export

Hi All,
I imported a universe <name of the universe is weekenddemo> from the repository and then renamed it and saved it with name demo_MS. After that I made few changes to demo_MS universe and after that when I tried exporting it back to repository but the universe is getting exported with the old name (with which I initially imported it). Attached is the screen shot showing the same.
Please advise on how to import an existing universe, rename it, and then export the new universe with new name.
Thanks

Hi Mohit,
The universe has two names:
1. File name which is for identifying for windows based folder system(This you will find when you click on Save as). This is Long name of universe.
2. There is a short name also present in File--> parameters of the universe, which is used in the repository.
Try to keep both same.
In your case you changed only Long name and your short name was same as the one you gave previously.
Thanks
Gaurav

Data pump export restricted

Hi all,
Is export using datapump by default consistent? If I do a export on production database for production dev refresh, do I need to start the production database in restricted? It is not required right?
Please let me know.

Initiate the export during low database activity.
what's the problem in using FLASHBACK_SCN and FLASHBACK_TIME?
Restricted mode allow only users with special privileges to access the database. Any users connected to the database when its going into restricted mode will remain connected. You have to manually remove them using “alter system kill session” command.
Try to test it with small amount of data and validate your requirement.
-Anantha

WEBI above universe - hierarchy restriction

Hello,
I read that the authorization concept in WEBI above universe works if we build a universe above a query and we use authorization variable. But what is the case for restriction by a hierarchy? For this restriction in the Query designer there is no need for authorization variable. Is it also possible in the WEBI?
Thanks,
David

Hi David,
are you referring to a hierarchy node authorization ? so that should work via the query automatically as well.
ingo

Olap universe lov restriction on detail object key

Hi,
I created a restriction on dimension lov in SAP olap universe using 0PLANT dimension on Orders keyfigure as below
<EXPRESSION>(@Select(Key Figures\Orders),[0PLANT].[1000])</EXPRESSION>
this syntax works but webi results are not matching with BEx.
Values of BEx RKF and formula object (
=[Orders] Where([L01 Plant] = "1000")
)created in webi are matching.
I am trying to create restriction on detail key object, like
<EXPRESSION>(@Select(Key Figures\Orders),[0PLANT].[LEVEL01].[[20PLANT]].[Value].[1000])</EXPRESSION>
above measure is giving error when i run the webi query.
here both L01 Plant and L01 Plant Key are having same lov as 1000,but i wanted check exact values with detail key syntax.
Can anyone please tell me the syntax for using detail objects keys for restriction in Select Clause.
Thanks,
Harsha

Hi,
why are you not creating this as a restricted key figure in the underlying BEx Query ?
Ingo

Changed RDP port to bypass University Network restriction on 3389, now can't access server at all.

I'm new to Windows Server and I recently changed the RDP port from 3389 to 3390, due to University restrictions on Port 3389 and now I can't access the server at all via RDP, the port is not blocked at my end and the server is definitely up as I can still
access my File server.
Is there any way I can fix this blunder, it's a dedicated server so I do not have access to the actual hardware, only via RDP. Do I have to reinstall? I do still have access to RescueMode SSH.
Thanks!

No, you'll simply need to logon to console and undo the regedit.
http://support.microsoft.com/kb/306759
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Prompt @ Universe - Access restrictions

Hi all,
Can we apply the Access restriction for Universe level prompts?
Requirement :have 2 prompts at Universe level based on user i need to restrict any one of the prompt at report level
Best regards,
reddeppa k

Hello,
If I understood you clearly what you want is if you have two filters defined at universe level e.g. Filter1 & Filter2 so you want user1 to see Filter1 and User2 to see Filter2.
You will not be able to restrict filter like this but you can: -
1. Create a new object with same definition as per your filter and then using "Manage access restriction" set restriction for these objects.
2. If you have these user accounts in DB, you can use @variable ('BOUSER') in your where clause and direclty restrict the data fetched from database.
Thanks,
Vivek

Migrate Universe Security restrictions

Hi,
I have modified Access Restrictions in a universe and added a Group using CMC, in Development region.
Now I need to migrate these changes to Validation region.
I've been doing report and universe migration from Dev to Validation using Import Wizard.
For the access restrictions to get reflected in Validation is it enough to migrate the Universe.
Please could someone help me out in this regard.
Many Thanks,
Vai

Hi,
you have to migrate simultaneously also the user groups you applied the restrictions for. Add them along with the universe in the list of the objects to transfer.
Regards,
Stratos

Universe export issues

Hi Guys,
I am on development environment. I am trying to export one universe which has secured connection to the repository but still it is giving error "universe cannot be exported"
As an alternative,
I created a new connection as secured, saved the universe and tried to export, giving the above error. it says the universe is not exported be-cos its connection type is not secured.
Thanks in advance
Speedsin

Hi,
You may not have export access when working from local system. So If you have remote access to client environment then try exporting unv in client environment and if you still face same problem then it would be better to take help of our admin.
Before that delete all the unv's in unv folder then save it and try to export it.
Cheers,
Suresh Aluri.

BOE XI 3.1 - Universe Export Restriction

Similar Messages

Maybe you are looking for