BPC Security: User should only see status of packages started by himself

Dear Experts,
we have the users run packages to perform their planning process and we also trained them to check their package status so they know when to go on within the process. Until now we have not had a very intelligent security management since it's only a pilot system with a few pilot countries. Everybody had full_tsk profile. But now it should get a llittle more restrictive. Very important in the first place is, that the user only sees his own package. If he can see other user's packages this would meen he can see copied values too within the protocol but thats very sensitive data.
I cannot find a security setting that helps me here. Do you have any hints for me?
Thanx in advance,
regards,
Cora

Sorry to confirm that security does not limit the visibility to the individual DM logs.  There is a filter capability however that could be taught to your users.
Please include your request on the BPC page at SAP Idea place.  See the top of this forum for more information.
Best regards,
[Jeffrey Holdeman|http://wiki.sdn.sap.com/wiki/display/profile/Jeffrey+Holdeman]
SAP Labs, LLC
BusinessObjects Division
Americas Applications Regional Implementation Group (RIG)

Similar Messages

  • User should only work on created Form

    Hi all!
    Here is my problem.
    A user is working in B1. For example:With a double_klick on a Textfield and a user created Form will be shown.
    No the User should only work with this Form until its closed! There should be no possibility to open an other form or so.
    Like if you get a MessageBox, there is no other "normal" way to work on until you close this Messagebox.
    May it is possible to let the Form act like such a Messagebox.
    Thanks for replies..
    Matthias

    The Sample you speak of show the hack/workaround (Not true modal functionality).
    From the sample:
        Private Sub SBO_Application_ItemEvent(ByVal FormUID As String, ByRef pVal As SAPbouiCOM.ItemEvent, ByRef BubbleEvent As Boolean) Handles SBO_Application.ItemEvent
            ' Don't let the user to move to other forms
            Dim EventEnum As SAPbouiCOM.BoEventTypes
            EventEnum = pVal.EventType
            If bModal And FormUID <> "Modal" Then
                oForm.Select() ' Select the modal form
                BubbleEvent = False
            End If
            ' If the modal from is closed...
            If FormUID = "Modal" And (EventEnum = SAPbouiCOM.BoEventTypes.et_FORM_CLOSE) And bModal Then
                bModal = False
            End If
        End Sub
    In the sample the bModal bool set to true when opening the form block all events by selecting the modal form on each event and setting bubbleevent to false.. the EventEnum = SAPbouiCOM.BoEventTypes.et_FORM_CLOSE set the bModal to false so events can continue
    Biggest problem with this is if you use a eventfilter (which you should do)... here you need to remove the event filter along with setting the BModal (not in the sample), and reapply it after form close.
    <i>Kind Regards
    Rasmus Wulff Jensen | http://www.b1up.net</i>

  • A user can only see the public area in a collaboration room

    Hi all,
    We have experienced that a certain user can only see the public area of
    a collaboration room although the user has member rights to see more
    content.
    We have tried to remove the user from the room and add him again. It
    did not help.
    Other users have been added before and after this user without problems.
    What could be wrong with this user?
    Regards,
    Ashwin

    Hi Ashwin,
    Check the roles and the groups by this user..  Is the same of the others users?
    Regards
    Eduardo

  • How to restrict user to only see Performance Monitoring in RWB?

    Hi
    I have an issue, where I would like to let a business person see how many requests, there have been the last 24 hours for a given interface in PI 7.11. This can be done, in the RWB -> Performance monitoring, but how do I restrict the user, to only have access to the Performance Monitoring link in RWB?
    Shold I just give him the UME role "NWA_READONLY" even though, this probably will also give him access to the other links in RWB? Or is there a smarter way?
    BR
    MIkael

    Hi,
    There is no way to provide access to only Performance monitoring in RWB.

  • Column Security - Users can't see it, but need to use it in the query WHERE Clause

    I am looking at possible solutions (if any) on column security. We need to be able to restrict users from seeing certain columns, however, they will need these columns in the WHERE clause of queries.
    I thought about creating views, however, it would be a poor database design. Is there any way that this can be done on the database level. I know about Fine Granular Access Method, however, this just excludes the column completely. Which means that they can not be used in the WHERE clause.
    Any help would be greatly appreciated.
    Philip

    I too added 2nd apple ID when I tried to get Free app from apple store just to get to NONE on the credit card needed. It said it sent confirmation email to my new apple ID email that I have to confirm. Problem is I can not get to the new apple ID email account.  On my ipad it logs into my original email account and I see no where to log into another email account.  If I go to my laptop, the new apple ID I created does not let me log into email where apple said it was sent to.  It did not send to back up email account either.
    Can I log into 2 email accounts on my ipad where it says mail at bottom?
    Can I have 2 apple ids?
    If I created a 2nd apple id to get to NONE on credit card needed, can't I log into it also on another laptop in gmail?
    (won't let me)
    If I used my original apple id I created when I got my new ipad, it will not let me get free app without credit card, there is no where it says NONE needed. I am too new to apple to start with credit cards etc until I get use to it.

  • SharePoint 2013 users only see custom list and document lists that they uniquely created

    In my first SharePoint 2013 project, I want to create a view where users can only see their own files that they generated. I think I know how to create this view when the list is associated with the 'Documents; folder. However I have created several custom
    lists where I can only see these items when I am on the navigation pane to the right and the unique custom lists are listed under 'recent'.
    Let me know if you can answer any of the following questions:
    1. When on the main SharePoint website, can lists be displayed in other locations than what I just listed? If so, where would I see these other lists?
    2. I would like to include the custom lists that are located in the 'recent' navigation pane as a view that only I can use. This would be based upon userid. If this is possible,  how would you combine the lists lists in the same view? If this is not possible,
    how would you set a view just for the lists listed under the 'recent' section?
    3. The content approval solution under versioning settings of a library to restrict the documents to only ones that the user created (and also Approver rights).  Then if they create a new view they still won't see the documents that were not created by
    them. What about custom lists that are not in the documents area but are in the 'recent' area? Would this restrict users to see only items that they created?
    4. Item level Permissions in advance settings solve this problem for the list in the document area and the custom list in the recent area? If so, how would you setup these values?

    As it turns out the, setting Item-Level Permissions in a library is fully supported with PowerShell!
    The PowerShell commands for changing this are very simple:
    $web = Get-SPWeb http://YourSite/
    $list = $web.Lists[“Your Document Library Name”]
    $list.ReadSecurity = 2
    $list.Update()
    $web.Dispose()
    Note the 3rd line which is where you determine the value for this setting using the following values:
    1 = “Read all items”
    2 = “Read items that were created by the user”
    If you wish to modify the values for Create and Edit access instead, replace .ReadSecurity with .WriteSecurity with
    the following values:
    1 = “Create and edit All items”
    2 = “Create items and edit items that were created by the user”
    4 = “None”
    For example:
    $web = Get-SPWeb http://YourSite/
    $list = $web.Lists[“Your Document Library Name”]
    $list.WriteSecurity = 2
    $list.Update()
    $web.Dispose()
    Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

  • BPC security can be used in SQL Reporting Services?

    Hello,
    We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
    Is it possible to use BPC security user access control in SQL RS?
    We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
    Thank you in advance.
    Sam

    Hello,
    We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
    Is it possible to use BPC security user access control in SQL RS?
    We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
    Thank you in advance.
    Sam
    ==================================================================
    Hi Sam,
    Could you be more specific on what you are going to do with RS?
    BPC, as you know, uses Windows AD. If you intend to use RS in BPC, you have already introduced Windows AD and BPC access security for RS.  But only given RS report is eligible in this case.
    If you want to make a report that refers to business data of BPC, and need to pass argument as query parameter such as what category, what entity, not possible actaully, no way to make it happen with standard feature of BPC. But you can think of possibility of customizing and need to find out how to pass the argument for a user(read ACS table containing security info).
    Reg. the reporting tool, if you are using 7.5, BO products is aligned well. Xcelsius and Voyager will be a tool for your requirement.
    Regards,
    YH Seo

  • WCS - Lobby Ambassador users don't see each other's guest users

    Hi, we currently have the problem with WCS 5.2 that a user of the group "Lobby Ambassador" cannot see guest users that have been created by another user of that group. The user can only see his own created guest users. All are in the same virtual domain which is the root-domain.
    I believe this behaviour was not this way in previous versions, here all guest users were visible to all Lobby Ambassador users.
    I couldn't find any hint in the documentation about this.
    Is this simply a change in behaviour (works as designed) or is this maybe a bug?

    You will get this error:
    Error(s): You must correct the following error(s) before proceeding:
    Error:A Guest User account with the name ''lobby user'' has already been created by you or another WCS Lobby Ambassador user. Please choose a different User Name for this Guest account.

  • Migration assistant now seeing my User file only back ups on my time machine, nor am I able to drag the entire user folder to my new desktop.

    I cannot recover my system on a clean install when I try to either use migration assistant or drag and drop of my backed up user profile. I did not back up anything else. I can see the file on my external drive but migration assitant does not see it as a restore and when I drag and drop the file to my desktop, the system informs me I do not have permissions to transfer all of the files.
    What can I do?
    Any help would be very much appreciated.
    Thanks,
    Persol

    persol19 wrote:
    Yes, there were no system files included. Soley the items that are incopassed within the user file.
    Rats.  It's awful that Apple doesn't warn folks about that. 
    Since I am not able to use them as backups, what is the best way to restore all of my previous preferences, calenders, notes, adressbook, etc.?
    Would it be best to replace each file in the library of the new machine with the coresponding folders of the new machine?
    That's going to be difficult, but is about your only option (assuming you have no other backups).
    Part of the hassle is, you have to do it "piecemeal" -- you can't just delete the old home folder, or any of the "default" sub-folders (Desktop, Documents, etc.), and drag in the one from your backups -- you'll get a message about it being a required folder, so you can't delete it.
    So you'll have to do it with the contents of the sub-folders.
    Make a large pot of coffee. 
    For future reference, many long-time users consider a good backup plan to start with a minimum of two full backups, via two different apps, on two different pieces of hardware.  These should be updated regularly. 
    For "primary" backups, Time Machine (built in to OSX) is quite good.  You might want to review the Time Machine Tutorial, and perhaps browse Time Machine - Frequently Asked Questions.
    #27 in the FAQ link has some suggestions for "secondary" backups.

  • I have an ipad version 5.1.1. i have multiple albums in the ipad and i want to transfer some photos to my computer but when i open the ipad files via "computer" i can only see picture from one of the albums.what should i do?

    i have an ipad version 5.1.1. i have multiple albums in the ipad and i want to transfer some photos to my computer but when i open the ipad files via "computer" i can only see pictures from one of the albums.what should i do?

    You can only import photos from the camera roll into the computer. Is that the album that you are seeing?
    Any albums that you create on the device itself (the iPad that is) cannot be transferred to your computer. iPad created albums do not contain copies of your photos but merely pointers to those photos so they do not actually exist in those albums.

  • I accidently deleted my pre-installed safari program on my iphone and can't find it anywhere. I have tried to search spots to download it again, but not sure which is the right download as only see for mac users etc.  Need help to get safari back Iphone 4

    Hi,
    I have accidently deleted safari from my iphone and can't find it to put it back. I did it ages ago as I didn't know what it was and I was trying to create extra space!   Now when I click on a link say in an email, it doesn't come up with a browser.  I have looked at the apple site but can only see a download for mac users.  Not sure if this is the case because it is preinstalled on the iphone.
    Help needed please!
    Linda/Phillip

    Try this...
    Reset your Home screen to the default layout:
    Choose Settings > General > Reset and tap Reset Home Screen Layout.
    iPhone User Guide
    http://manuals.info.apple.com/en_US/iphone_user_guide.pdf

  • SharePoint 2013 On-Prem- Can I limit users of only 1 group should be only able to create OneDrive?

    I have a requirements of limiting users to use onedrive for business site. What I want to do is below
    1) I want to configure in such a way that not all users should be able to create their personal site
    2) only members of a particular AD group should be able to create oneDrive?
    Is this possible? and how?

    You can do this by editing the permissions in the User Profile service application.  Access the User Profile service in Central Admin.  Click on the Manage User Permissions link in the first set of links on the manage user profile page.  By
    default the groups listed have all three permissions.  Remove the Create Personal Site permission from all the existing groups.  Now add the AD group that you want to be able to create personal MySites (OneDrive) and give them all three permissions.
     Click OK.
    This won't affect any existing users that already created mySites (OneDerive).  But only members of the AD group you gave permission to will be able to create OneDrive for business sites from then on.
    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

  • Security group provisining only to show Business rules to the users.

    Hi,
    Could anybody tell what setting in the Group Provisioning required so that users in that group only see business rules in planning application and not calculation script on the servers. We work on 9.2 env. ?
    Thanks,

    Yes group is provisioned as planner and have essbase server access... and user in this groups are able to see both business rules and calc script in planning application... but we want to show them only business rules and not calc scripts...

  • I updated my I Phone 4 to the os 5.1.1 but lost all of my contacts.  I believe it should still be stored in my laptop Apple file but don't know how to restore.  I only see the restore option to the factory settings.

    I updated my I Phone 4 to the os 5.1.1 but lost all of my contacts.  I believe it should still be stored in my laptop Apple file but don't know how to restore.  I only see the restore option to the factory settings.  I have never used the I Cloud.

    If you did not sync afterwards, follow this article to restore from your latest backup:
    iTunes: Backing up, updating, and restoring iOS software

  • When trying o play Youtube videos I only see "Plug-in failure". It looks like a button but does nothing.  What should I do?

    When trying o play Youtube videos I only see "Plug-in failure". It looks like a button but does nothing.  What should I do?

    Wait until Adobe updates the Flash Player.

Maybe you are looking for

  • I keep getting reminders in Japanese, not sure how to eliminate?  さんは「M

    I keep getting iCloud related Japanese reminders, not sure how to eliminate?  さんは「M&M」への参加依頼を承諾しました. 日時 年2月7日火曜日.07:00 - 10:00 繰り返しイベント 場所 Whereever 参加者 [email protected]とご自身 iCloudはAppleの提供するサービスです. My Apple ID | Copyright © 2014  Apple Inc. All rig

  • Hello from an old but new member

    Life is full of double meanings.....;) I am old (I am eligible for all senior discounts) I am a long-time (old) Arch user and borderline user of this forum What's NEW, is that I have completed the 12-step program for distro-hoppers and have standardi

  • No sound when playing DVDs, yet fine with bluray

    my sony bluray does not have sound when playing dvds. it acts fine when using blu ray. any suggestions?

  • Illustrator CS on Vista 64

    I know Illustrator CS is not officially supposed to run on Vista 64. I read reports that it does run, but sometimes gives error messages. I thought I'd come here to the experts so to speak and get their feedback. Are there major problems running Illu

  • Where is EH&S  data stored?

    How to find workarea ID for the work area name.(Work area name CCIHT_WAH-WAID and I want to fetch characteristic data from table AUSP matching the OBJEK field,but I only have Work area name).Can anybody help me to find tables or relationship between