Business Rules Security based on work flow

Hello,
How can we enable security on Business Rules, based on the workflow,
for example,
we have Business rule, that is attached to one input form, which opens a window for entering run time prompts for entering
new asset details, and after entering he saves and the planning unit is promoted to next level,
but on the input form, the Business rule is still visible, where by he can enter the the details though the planning unit is promoted,
Is there any way that makes the Business rule access disables/hides as the planning unit is promoted?
Thanks,
murali.

There is currently no out-of-the-box integration between workflow and business rule security.
This thread may help with some alternatives:
Workflow Problem
- Jake

Similar Messages

Business rules security in task lists

Hi experts,
I have question regarding security in business rules, the problem is that we have, lets say, 10 users who have all access to a tasklist, but not all of them have access to the same forms / business rules. The ideal would be that if a user has no access to a form, it doesnt show in the tasklist, but he gets to see the form in the tasklist and when he opens it he receives an error message. We can get the user to accept that. But with business rules, the case is different: when a user clicks on a business rule on the tasklist he has no access to, instead of receiving a message denying access, he gets a screen with all the business rules he does have access to, and checkboxes to select the plan type the BR will run on, which is unacceptable and confusing. There are many users and creating custom tasklist for each one of them would be too hard to mantain. Is there a way to achieve a better solution for the user? Thanks in advance for your comments.

Hi,
I don't think of any other way.
The user have access to task list so it will show all tasks, and if the user don't have access to any particular web form it will throw an error informing same only once user open the web form.
For Business Rule it will show all rule/calc scripts for which user have access too, if the user don't have access to rule attached to that task.
I had same requirement and then after trying for some time, we provided education about the same to the users.
Regards,
-SM

Business Rule Security not refreshing?

I have a business rule project that contained a bunch of rules and have a user that is part of a group that was granted launch access to that project. If I remove a rule from the project, in theory that user should no longer see that rule in Planning but that's not happening. The user still sees all the rules including the ones that used to be in the project but have since been removed.

1) I've verified that the sec. group that the user belongs to is only provisioned with business rule "basic user". Also verified that the rule that was taken out of the project does not contain any access previlges of it's own
2) No overlapping projects
3) Have already tried refresh security from SS, migrate users in HBR, Planning migrate\refresh with no luck
It seems like some sort of refresh disconnect because like I said, user can still see rules that don't have any rule level access previlge assigned but did at one point exist in a project that did enable access via project level access. Once I took the rule out of the project, security to it should have gone away.
Thanks

Business Rule in trigger not working

Hi,
I have business rule that no one below 18 years should be employed in this system.
I have created a trigger that alerts me so, but when ever I insert someone either over 10 or below, it fires and deos not insert any record, but if I deleted the trigger, everything works fine.
I should have put a check constraint (s_hire_date - s_dob) < 6570 on the table, but I just thought should be able to do it.
Why please?
stops insertion of under 18 years into employee table
CREATE OR REPLACE TRIGGER Tr_new_employee
BEFORE INSERT ON employee for each row
DECLARE s_hire_date DATE;
s_dob date;
begin
select :NEW.hire_date, :NEW.dob into s_hire_date, s_dob from employee
where empid =:new.empid;
IF (s_hire_date - s_dob) < 6570 then
raise_application_error(-20101,'Person too young');
end if;
end;
Many thanks in advance
cube60

Hello Warren and All,
Thanks for the code, the trigger did compile successfully, but prevents any kind of insertion whether over 18 or younger.
SQL> CREATE OR REPLACE TRIGGER Tr_new_employee
2 BEFORE INSERT ON employee for each row
3 DECLARE s_hire_date DATE;
4 s_dob date;
5 begin
6
7 select :NEW.hire_date, :NEW.dob into s_hire_date, s_dob from employee
8 where empid =:new.empid;
9
10 IF TRUNC(months_between(s_hire_date,s_dob)/12) < 18 then
11 raise_application_error(-20101,'Person too young');
12 end if;
13 end;
14 /
Trigger created.
SQL> COMMIT;
Commit complete.
SQL> --under 18 to time of hire_date
SQL> EXEC NEW_EMPLOYEE('CHARLES','DICKSON','M','29-JAN-1992','PT2','','','','',sysdate,NULL,09890111
,'HSBC','WANDSWORTH','CURRENT','PR3');
BEGIN NEW_EMPLOYEE('CHARLES','DICKSON','M','29-JAN-1992','PT2','','','','',sysdate,NULL,09890111,'HS
ERROR at line 1:
ORA-01403: no data found
ORA-01403: no data found
ORA-06512: at "SYSTEM.TR_NEW_EMPLOYEE", line 5
ORA-04088: error during execution of trigger 'SYSTEM.TR_NEW_EMPLOYEE'
ORA-06512: at "SYSTEM.NEW_EMPLOYEE", line 26
ORA-06512: at line 1
SQL> COMMIT;
Commit complete.
SQL> --over 18
SQL> EXEC NEW_EMPLOYEE('WARREN','TALENTINO','M','29-JAN-1975','HOURLY','','','','','18-FEB-2001',NUL
L,36901212,'BARCLAYS','SYDENHAM','CURRENT','TEMP7');
BEGIN NEW_EMPLOYEE('WARREN','TALENTINO','M','29-JAN-1975','HOURLY','','','','','18-FEB-2001',NULL,36
ERROR at line 1:
ORA-01403: no data found
ORA-01403: no data found
ORA-06512: at "SYSTEM.TR_NEW_EMPLOYEE", line 5
ORA-04088: error during execution of trigger 'SYSTEM.TR_NEW_EMPLOYEE'
ORA-06512: at "SYSTEM.NEW_EMPLOYEE", line 26
ORA-06512: at line 1
I know your logic is fine, something might be wrong with the trigger even though it created succesfully. It is not doing what it is intended to do.
Many thanks
cube60

Business Rules security issue

We have been unable to access the business rules in out QC environment for a while. When you try to expand on them in EAS we get the error
Error logging in to Business Rules. The repository has not been configured or you are not authorized to use Business Rules.
Our dba recently upgraded the SQL server to a new machine and thought everything was ok. I just noticed in Shared Services that it still shows the old SQL server name in there. So how do we point it to the new SQL server?

I thought that would take care of it but we got this error:
(Apr 26, 2010, 03:26:33 PM), org.apache.commons.httpclient.Wire, DEBUG, << "Product already exists.Registeration failed: error.generalSaveModel."
(Apr 26, 2010, 03:26:33 PM), com.hyperion.ess.EASDBConfigurator, DEBUG, Exception generated
com.hyperion.interop.lib.OperationFailedException: Product already exists.Registeration failed: error.generalSaveModel.Product already exists.Registeration failed: error.generalSaveModel.
at com.hyperion.interop.lib.helper.RegistrationHelper.register(Unknown Source)
at com.hyperion.interop.lib.CMSClient.register(Unknown Source)
at com.hyperion.ess.EASDBConfigurator.registerHBRPropFile(EASDBConfigurator.java:317)
at com.hyperion.ess.EASDBConfigurator.configure(EASDBConfigurator.java:229)
at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeDBConfigTask(RunAllTasksWizardAction.java:282)
at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:151)
at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
(Apr 26, 2010, 03:26:33 PM), com.hyperion.ess.EASDBConfigurator, DEBUG, com.hyperion.cis.config.ProcessingException
(Apr 26, 2010, 03:26:33 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
com.hyperion.cis.config.ProcessingException
at com.hyperion.ess.EASDBConfigurator.configure(EASDBConfigurator.java:252)
at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeDBConfigTask(RunAllTasksWizardAction.java:282)
at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:151)
at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
Did we run it incorrectly?

Business Rules Security Question

I have a sequence having 6 business rules. I am providing lunch previlege to a group for that sequence.
Is that enough for the group to execute the sequence or I have to provide indivdual lunch previlege to each business rule listed in the sequence?

Hi,
I would say the group needs access to the business rules as well, if you don't and give just access to the sequence I don't think they would see the sequence.
Cheers
John
http://john-goodwin.blogspot.com/

Business Rule - Filtering based on dimension

Hi,
I am trying to copy data from one scenario/version to another scenario/version based on account member(smartlist) value.I am currently unable to achieve this result.
/* Copy the data from Begin Scenario to Final Scenarioo
based on the vendor status*/
FIX(@Relative(Year))
"Begin Scenario"
IF (("Vendor Status" == [[VENDOR_STATUS.NEW]]) OR
("Vendor Status" == [[VENDOR_STATUS.ACTIVE]]) OR
"Begin Scenario"->"Working Version" = "Final Scenario"->"Working Version";
ENDIF
ENDFIX
In this example,"Vendor Status" is an account member of the type smartlist. I would like to filter data based on "Vendor Status" as I copy from
one scenario/version to another scenario/version. The above rule is not copying any data.
Kindly advice.
Thanks,
Cz

Hi,
Try out the following way
FIX(@Relative(Year,0))
"Begin Scenario"
IF (("Vendor Status" == 1) OR
("Vendor Status" == 2) OR
"Begin Submission"->"Working Version" = "Final Scenario"->"Working Version";
ENDIF
ENDFIX
/* Assuming Smart List Value of Vendor_Status.New=1 & Vendor_Status.Active=2 */
As in backend ( i.e Essbase) the smart list values are stored in numerical.
Cheers!!

Business Rules security from EAS throwing error while adding locations

Hi,
Currently we are trying to provide security to the BR's from EAS. As a part of which, we are trying to add location to the BR's. When we expand the Planning node on Locations, it throws the error, "Cannot connect to the Planning server <server name>". When we expand the Essbase server, we do see the application and database, but after a long time, around 10 mins.
After a call with Oracle, we have restarted the services RMI, EAS and planning in the sequence suggested. Also checked the RMI service, its running fine as well. Below is the error from hbrclient.log
"2011-08-06 20:41:58, 076 Warn AWT-Eventqueue -0 com.hyperion.hbr.core.metadatamanagerserviceremote - cannot retrieve connected rppt element for planning/a01gidssapp2a"
Hbrserver.log doesnt have any error. We also have performed reconfiguration of Planning services, but still no help.
Appreciate if someone can help us resolve the issue, since we have to release the servers for Planning by tomorrow. Thanks in advance.

I assume that you are using BR as calculation module.
1. Try creating a new test user say HBRADMIN,
2. Provide him the admin access to BR, Essbase and Planning App,
3. Log into Planning Application,
4. Check the HBR Plugin Data table in EAS schema/databse, see if there is any entries in that table,
5. Now, Log into EAS console,
6. Try creating a test BR,
7. Select outline,
8. Select Location,
9. Add access.
If there is no entry in the HBR Plugin table, try making a manual entry, below is an example:
HP11113 11333 App1 HP11113 admin AABPAAANAAEKAAEHAABPAADOAAAIAAFG 8/7/2011 1:05:16 PM
AABPAAANAAEKAAEHAABPAADOAAAIAAFG is an encrypted password for 'password'.
Cheers...!!!

Business Rules Security Disappears

We have a strange problem in 11.1.2.1 Version.
When we assign access to BR's in the planning application to few Groups and Refresh the application. These Groups access to BR's works well after sometime the Groups access to BR's disappears even without any changes being done.
Is this a bug in the newer version or something wrong in assigning the access.
Any help is appreciated

we have had the similar issue with version 9.3, was related to a patch upgrade, not sure if this is a bug.

Business Rule Security

Hi All,
Do we need to give access permissions "LAUNCH" to the BR exclusively to all users...................or do we need to give LAUNCH permissions only to the BR which have got RTP...............do we need to give LAUNCH access permissions to the BR which are associated to the webforms & have run on save & doesnt have RTPs(If we dont give lauch then does the BR calc)
Appreciate your response.

Hi,
You need to give access to all the BR's as well as all the global variables/RTPs that you have created. The best option would be to create a Group, which will have all the users you intend to give access to execute the BRs. And provide the Launch access to the group.

Group Security Issue with Business Rules

Hopefully you experts out there can follow this. We have about 200 users in our Planning application split into 3 categories (Admins, Interactive Users and Planners) via groups setup in Shared services. We also have an email group list setup in Outlook that has all 200 users in it that we use to send out emails to all users regarding the application. So in Shared Services we have the email group list as an assigned group in the Planners group. So as new people are added to the group list in email they are automatically included as a user in the Planning application. People that are Admins or Interactive Users are manually added to those groups in Shared Services. Everything seemed to be working fine until we tried blocking the Planners groups from running certain business rules in the application. We have clusters setup in Essbase to control access to the business rules. I went into the cluster and set the Planners group to cannot validate or launch on certain rules but found that I now could not run the business rules either even though I am an Admin and the Admin group has vaildate and launch privledges in the cluster. I believe the issue has to do with the fact that I am by default in the Planners group because I am in the email group list which is assigned to the Planners group in Shared Services. Other than setting up and managing 3 seperate email group lists and assigning them individually in Shared Services, does anyone know how I can manage business rules security using the 3 groups i have setup? I hope this makes sense. If not I can provide more detail. Thanks.

Have you tried using Business Rules projects? Create a project for the admin Shared Services group and assign all rules to that group. Create a Planning project for planners and assign only rules that you want them to run. Any rule that planners should not have access to would be removed from the Planner business rules project, but still in the admin project for you to run.

Business Rules Disappearing in Calc Manager

I've got a classic planning app on 11.1.2.1 running business rules through calc manager but just the other day I logged in an i could no longer see the business rules in calc manager when i go to expand the database. The rules still run and are visible in other places like the business rule security manager but not in calc manager. I tried restarting calc manager, reconfiguring weblogic, creating new rules (which actually works but the old one still are invisible). I migrated over the environment from another environment, without luck. Any idea's what could be wrong?
Thanks!
Mark

Hi, have you migrated rules though Appication Group->Foundation->Calculation Manager path of LCM? Or just rules with your application. It looks like the second but it's not enough you should use first one too.
It's not explain what have happened with you rules but may help you to restore them

Query in Essbase/EAS Business rule

How can I assign an Account member which is of type Text in BRs?
Ex: If I have account member 'TrueorFalse' with SmartList 'TrueorFalseList' associated to it.
SmartList has entries (True, 1) and (False, 2) besides the default entries.
In business rule
TrueorFalse = 1 is working but TrueorFalse = "True" or TrueorFalse = @member("True") is not working.
Can anybody help?

Hi
I think that there are separate security roles that determine access to Business Rules, it shouldn't just be because you have given them administrator access to the Planning app.
Take a look at the Shared Services User and Role Security Guide (link to v11.1.2 doc attached)
http://download.oracle.com/docs/cd/E17236_01/epm.1112/hss_admin.pdf
There is further security possible in Business Rules via EAS so if you assign the user a role less than administrator you should be able to restrict there access to specific rules.
Hope this helps
Stuart

Error while saving Business Rule EAS Java

Hi there all, I get the following errror when saving a business rule that actually was working fine just yesterday. Something tells me it's about network issues but i'll appreciate if anyone got the same and how to solve this. Thanks.
Error while sending command to HBR Server running within the EAS server.
Detail:com.hyperion.hbr.excp.DatabaseException.<init>(java.lang.String, [Ljava.lang.Object;, com.hyperion.hbr.excp.ExceptionSeverity, java.lang.Throwable)

Thanks for your fast reply.
This error is occurring in our development environment as well. Production is fine.
I had the users get out of the system last night and I tried restarting services and eventually restarting each server but nothing has cleared the error yet.

Access privileges lost in business rules

Hello everyone,
I noticed that my security for business rules have disappeared. Only my native admin account is able to see the groups that have access to BR through the EAS console. When I logon with my account or the main hyperion admin account (MSAD) I don't see the groups. I ran the sync utility and stopped and restarted the services but with no success.
Last Friday I copied over a production planning app into our dev environment and it seems that screwed up the business rules security.
Console version is 9.3.1.3
Does anyone have an idea on what is going on?

I think it will be more of an issue when you migrated the business rules 2 weeks ago, did you check the security after you migrated them, it can get lost on a migration.
Cheers
John
http://john-goodwin.blogspot.com/

Business Rules Security based on work flow

Similar Messages

Maybe you are looking for