Calcmgr rules circumvent planning unit ownership read/write restriction?

Hi All.
Planning 11.1.2.2
I have obsaerved that a rule set up to allow writing a value on a database intersection, circumvents the planning unit ownership allowing users to write to an intersection in a unit that is not in their ownership and where they are not able to write from the UI.
Is this expected/has it always been this way?
I have a requirement that the user should not see the full account tree when loading a form, as not all accounts are relevant for all entities. Therefore missing rows are suppressed. In order for a missing row to become visible on the form I implemented a rule which allows to enter the value for the account, which then becomes visible on the form. However this same rule when run by a user on a planning unit they are not owning can still change values that the user cannot change in the UI as he is not a planning unit owner.
I assume this is due to the fact that the planning unit ownership restrictions don't apply in essbase and the rule goes directly there, but I want to know if it is expected that business rules fail to honor ownership restrictions on planning units.
Agnete
Edited by: Agnete on Aug 23, 2012 3:23 PM

These are correct, the calc will run whatever you tell it to run. If you use a business rule, it will still run the calc on what you tell it to run on, but you can prompt for a member (or take it from the form), and right your fix statement so that the calc only runs on the prompt. The prompt is related to security and a user can't select a member they don't have access to. That might help with your issue.
Kyle Goodfriend
www.In2Hyperion.com

Similar Messages

An alert message pops up upon opening saying could not initiate application security component, and it says to check to see if profile has no read/write restrictions.

An alert message pops up upon opening saying could not initiate application security component, and it says to check to see if profile has no read/write restrictions. Than when it opens all of my saved passwords are gone, I use a master password and its disabled. When I try to enter in a new on e it says can't change password. I can't even open yahoo e-mail says that my ssl security is down but when I check it its clicked. I'm just very confused as to whats going on.
== This happened ==
Every time Firefox opened
== 5/14/2010 ==
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.1.249.1064 Safari/532.5

See [[Could not initialize the browser security component]]
Rename (or delete) secmod.db (secmod.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with the file.

Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory. Please ck that this directory has no read/write restrictions and your hard disk is not full or close to full.

This is an Alert when I open the browser. It isn't functioning at all. I've cleared ample space on my C drive, but I cannot find the application's profile directory to check the read/write restrictions.

See https://support.mozilla.com/kb/Could+not+initialize+the+browser+security+component

How can I disable read/write restriction from directory, disk is not full ?

Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory. Please check that this directory has no read/write restrictions and your hard disk is not full or close to full. It is recommended that you exit the application and fix the problem. If you continue to use this session, you might see incorrect application behaviour when accessing security features.

See:
*https://support.mozilla.com/kb/Could+not+initialize+the+browser+security+component

Workflow Planning Unit Ownership - Begin the budget review process

As an Admin, is there a way to assign multiple planning units with an import option or something like that? Right now the only option I see is to go in one-by-one and start the fcst cycle and then assign the ownership to the person who is entering the budget information. I have 150 Entity members to assign for one forecast cycle and was wondering if there was a "smarter" way to do this.

Hi!
We are referring to the same example of wf for which you answered some time ago. But we need to extend the process to the whole entity dimension. Thus we have this situation.
our entity dimension: --> http://postimage.org/image/d3utdauzn/
Our wf process:
free format wf. (since the entity hierarchy does not follow a linear path: bottom-up or top-down)
1.ENTITY 1 inserts data and submits them to a reviewer.
2.the reviewer approves or rejects data.
3.then the process should be sent to ENTITY 2,3,4 (lower levels of ENTITY 1) to start to modify/adjust data that ENTITY 1 has imputed and distributed to their levels trough a rule.
the problem is at the 3rd point. How could ENTITY 1 or the REVIEWER pass the process to ENTITY 2,3, and 4 at the same time? I see that I cannot make a group of users owner of one PU, and then limit their level trough the provisioning. The only solution that I have found for this is to send an e mail to ENTITY 2,3,4 and then let them start to input their data (the drawback in this case is that they can always modify data in cells for which they have the write provisioning , and not only when the reviewer has approved data.
moreover in the case the reviewer approves data sent by ENTITY1 he becomes the new owner of the PU, that is the only way trough which ENTITY 1 cannot modified them after the approvation)).
Thank you very much.
Edited by: user648334 on Jun 6, 2012 2:51 AM

When i click on firefox it says "couldnt initialize security component"... "check that this directory has no read/write restrictions"..."If you continue to use this session, you might see incorrect application behaviour when accessing security features"

i had a problem with firefox before saying that it was corrupted, so i restored it, and it fixed that problem. the actual browser still loads up but i havent used it just in case.

See [[Could not initialize the browser security component]]
Rename (or delete) secmod.db (secmod.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with the file.

Running Rules on "Locked"/Promoted Planning Units

Hi All,
I'm using Hyperion Planning and Smart View Version 11.1.2.2.
Does anyone know if it is possible to prevent users from being able to run rules on data that is supposedly "locked out" by virtue of a Planning Unit? I was under the impression that Planning Units were supposed to control who could change the data rather than simply who could type numbers into forms, maybe I had this wrong? It seems a bit of a transparent piece of functionality if users can still change numbers after they've passed ownership to someone else.
A working Example:
A user can promote their data, but is still able to go back to a form where that data sits and run Rules on-Save, through Right-click menus or through Smart View.
I'm worried about someone accidentally interfering with data whilst another user is analysing it etc.
Am I missing something here?
Regards
Ed

Hi, Ed.
You're right, Planning has so many parts to be developed. PU promotion doesn't prevent users from running BR's
If you're really worry about it you can think up a workaround.
You have to create a new form having design simular to a PU hierarchy. User have to enter data (suppose 1) in intersection of Scenario, Version, Entity and Account (if used in PUH) All others dims member should be Begbalance, Product n/a etc.
All BR's you need to prevent from executing while PU is approved, freezed or just owned by the reviewer or in other cases you think about should include extra code before original calculation takes place. You simply check the value of 1 in all calculated PUs in current BR and throw an error if meet it (@RETURN with some justified text message)
So when one user (lets say first owner) has finished entering data he goes to the form discussed above and enters 1 for related PU. You can build a task list having such steps After that no one can execute BR successfuly
Try this maybe it helps you
Vladimir

Function module to read/write notes in the planning book

Hi All,
Can you guyz tell me the FMs to read / write NOTES in the planning book. Notes as in you can right click on a cell of PB and do display notes.
win full points for the answer.
Thanks - Chandan

Check FM /SAPAPO/MSDP_NOTE_WRITE and Use of APO BAPIs page in SCM Wiki.
Thanks,
Somnath

Why can't I open read/write rules file?

I have followed the Cookbook XML tutorial exactly as prescribed, even down to using all the examples from the 'Completed' folder, but when I try to perform any procedure such as generating a EDD or reading an XML instance (the ColorDoc.xml example) I get the following in the log file:
Could not open the read/write rules file
(App\ChapterReadWriteRules)
Make sure you have read access to the file and that
the file is not already in use.
Using XP and Framemaker 7.
Its a real blocker this proble. Have tries unsetting the XP Read-only folder property on all the folders in the heirarchy but XP won't let me do that. Very grateful if anyone could help me over this problem.

What is the path you mentioned the structapps.fm file for read/write rules
It should be full file path for read/write rules(including extension of file). Otherwise there is possibility of throwing the error you mentioned.
Would it be possible to paste your XML application defined in your structapps.fm file??
Thanks
Basav

Read/Write Rules: Generic Identifiers & FM Tags

I have seen this question answered in one of the dev guides but I cannot find it again.
My question is whether it is legal within the read/write rules to refer various generic identifiers to the same FM tag/element.
For instance:
element "body" is fm element "Paragraph";
element "preface" is fm element "Paragraph";
Thanks!
[moved to FM Structured forum]

Does every structured fm document need a prior XML document?
No. It depends upon the application. In my case, I create user manuals using structured FrameMaker. Our writing team created an EDD that does what we want and need it to do. We do not export or save the structured FrameMaker files as XML; however, we could if the need arose, for example, to create HTML versions for viewing in a browser. This application works for our needs.
I have one application in which I begin with XML. When I create a parts catalog, the part information is exported from a database as XML. The structure of this XML file is determined by the database; it does not match the structure design in my EDD. But I use an XSL transform to convert the parts XML into a structure that is valid with respect to my EDD. Again, it depends upon your application.
Some people DO export their structured FrameMaker files to XML. They may want to do something else with the content that requires its being in XML. Or they may use the XML for storage because XML files are smaller than FrameMaker files. Then when they open the XML files in FrameMaker, they are imported into a clean template, which cleans out any overrides and any junk that may have acummulated in the FrameMaker files.
If your goal is to convert unstructured FrameMaker files into structured files, then I suggest concentrating on developing the EDD that works for your needs. Export to XML can come later if you need it.
Van

Can't change read-write permissions on DMG despite ownership

Hey there! So, I recently followed these instructions to create a 20 megabyte, 128-bit encrypted DMG on my hard drive in order to password-protect some confidential documents. I have had no problems opening the DMG or editing its contents, but today I discovered that I am unable to add, delete, or edit its contents, as I receive the following message: "The document "___" could not be saved as "___". The volume “Encrypted” is read only."
I'm able to mount the DMG and open the document, but I can't make any changes. First, I tried changing the permissions on the document itslef; I went to "Get Info," but I discovered that the Sharing & Permissions indicates I (the admin) should be able "Read & Write." I wanted to to tinker with this, so I clicked the lock icon at the bottom of Info and entered my password, but--mysteriously--I can't change the permissions settings, even when unlocked. I click, but nothing happens.
Same thing when I try to change permissions for the whole DMG. It says that I have "Read & Write" permissions, but I can't try messing with these settings even after unlocking.
Now, it's possible that at some point in the last couple of weeks I may have changed the setting of the document to "locked"--I honestly can't remember--but shouldn't I still be able to "unlock" it given my admin status? And even if I compromised that one file, why can't I save any new documents to the DMG?
Any ideas as to how I can return my DMG to true read-write status?
Thanks ever so much!
embr

Okay, so I figured it out, and it was an "Oh, duh!" moment. Figured I should explain for anyone else experiencing this problem.
The DMG was locked, but I couldn't see this or change it while it was mounted. So, if you encounter this problem, simply eject the disk, then navigate to its location in Finder, Get Info, and uncheck the "locked" option. That did the trick for me!
embr

Planning Units issues in Hyperion Planning 11.1.2

Hi, experts.
I'm new in HP, so needed some help with misunderstanding of how PU&proccess management normally works.
More detailed I interested at the area of Validation rules.
I have to give an example of few problems I met during my try to implement this functionality.
Firstly, it's a newest version of EPM 11.1.2 installed and supported by the vendor's professionals
I have Planning app deployed in EPMA with 14 dims. I didn't drop any standard planning dimensions, all are present
There is the only PU hierarchy to test how approvals works. It has 3 entities and 12 elements of additional dimension - functional group. Hence, there are 36 level zero members in PU hierarchy.
Form1 consists of 36 rows according to PUH, columns are Period (17) and one custom dim for the target, plan values, it's diff etc. Validation rule VR1 on Form1 check negative values of target minus plan (I plan expences) VR1 has "No Promote" flag. Then I start 2 level0 planning units (entity1-FuncGroup1 and entity1-FuncGroup2). I try to promote these PU1&PU2. It's Ok only if negative exists I get an data error links drilling down into my form1. So user can see the error and all happy.
Problem actually with form2 that has Region Dim in page. Entity,Functional Group,Account in rows and Plan value,Year,Period in columns. It also has VR2 for testing plan values greater than 1000 with No Promote option. Another VR3 checks values greater than 100 to add new approver, reviewer (no matter) to the approvals process management.
Both VR2 and VR3 don't work accurately. They fired only for the first member in page (Region), hence any data validation for other regions except first skipped. In addition VR3 when triggered for Region1 always circles (between new and previous approver). It meens there is no way to finish this proccess using the promote option. Anyway you can approve PU, but all steps after current Aprover will be skipped in promotional path.
Maybe I can't work with Proccess managment in the right way? So could anybody give me an idea what's wrong. I've spent much time googling any issues like me have
Many thanks in advance,
Vladimir

Hi, Theresia
Yes you're absolutely right, I created VR from the manage form's menu. So I use standard HP 11.1.2 functionality. I've seen it in new features while read Oracle documentation. Also with testing of approvals in Proccess managment I use distinct colours for negatives and diff values (greater 1000 and 100 in my example). Colours work fine, but i can't say it about aprovals :). And all these examples of using planning form VR's i've taken from oracle administrators&user guiide and from presentations of EPM 11.1.2
In addition I've started work with Hyperion products 2-3 month ago. Hence I have to read a lot of information because my previous experience was OLTP, RDBMS not OLAP.
As a first step i wanna know all standard possibilities of product i use. And also best practice and some often used technics. Many thanks for your idea with Smart list and BR i'll try it (though i use EMPA and Calc Manager rules). I know that soon I have to use Java API's, so I might read and learn Java to write the simplest code first. But for me it's too much info i have to load into my brain in such short period :)
As a resume, my opinion it's a bug of new features EPM 11.1.2. But maybe I'm wrong cause none has said the same
Anyway thanks, Theresia, for your help. If you know or will some new additional info i'll say you thanks again
Best regards,
Vladimir

Business Rules in Planning 11.1.2.1 - Cannot connect to Planning

Hi,
I started experiencing some problems today in forms with Business Rules. I don't really know how it happened, but I noticed after a Refresh and after stopping CalcManager service (business rules run on this service?). Either way I restarted the EPM System and the error persists.
When I ented in any form with business rules i get the error: An error occured, in a white background.
In logs i have the following:
missing property key:embedded_timeout
missing property key:css_refresh
missing property key:PLUGIN_DATA_REFRESH_RATE
missing property key:MYOLAP_ENABLED
missing property key:HBR_CACHE_REFRESHRATE
missing property key:launch_log.filename
missing property key:launch_log.log_calc_script
missing property key:launch_log.log_prompt_values
missing property key:launch_log.date_format
missing property key:EDS_UserName
missing property key:EDS_Password
missing property key:EDS_Domain
missing property key:EDS_url
missing property key:log4j.logger.com.hyperion.hbr
missing property key:log4j.appender.stdout.layout
missing property key:log4j.appender.stdout
missing property key:log4j.appender.stdout.layout.ConversionPattern
missing property key:log4j.appender.R
missing property key:log4j.appender.R.File
missing property key:log4j.appender.R.MaxFileSize
missing property key:log4j.appender.R.MaxBackupIndex
missing property key:log4j.appender.R.layout
missing property key:log4j.appender.R.layout.ConversionPattern
missing property key:HBR_CACHE
Default HBR = http://<servername>:19000/aps
In getDBDetails()
Found HBR product = ESSBASE_PRODUCT
In lookupBRLWA()
Found HBR product = ESSBASE_PRODUCT
Found HBR product = ESSBASE_PRODUCT
- Cache Manager initialized...
- authenticateUser: UserName = admin, Password = password
- Repository does not exist for poolname: nullnullnull
- Repository does not exist for poolname: nullnullnull
- Creating new Repository for poolname: nullnullnull
- Invalid Database Type specified: 0. Unable to create Repository object.
- Error while creating Repository object. Please make sure your HBR Configuration is correct.
- COMM001
Embedded HBR initialized.
Seeking ESAPI.properties
Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\ESAPI.properties
Loaded 'ESAPI.properties' properties file
Seeking validation.properties
Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\validation.properties
Loaded 'validation.properties' properties file
Seeking antisamy-esapi.xml
Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\antisamy-esapi.xml
- authenticateUser: UserName = admin, Password = null
- Repository does not exist for poolname: nullnullnull
- Repository does not exist for poolname: nullnullnull
- Creating new Repository for poolname: nullnullnull
- Invalid Database Type specified: 0. Unable to create Repository object.
- Error while creating Repository object. Please make sure your HBR Configuration is correct.
- COMM001
Launching the business rules against Planning also result in the following error message:
ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server <server name>
- Error connecting to Planning server <server name>.
Any advice on what might be going on?
Thank you

I'm still having this problem. I checked that RMI is running but whenever I try to enter in Planning the logs write that it can't connect to the eas database, and HBRPluginData relational table isn't being filled.

User In Planning unit Hierarchy unable to see data form in editable mode

hi all,
we are facing a problem in planning unit hierarchy in Hyperion planning, where we have 4 users, Hierarchy is define as
hierarchy: budget approved
version: approved
Entity: Finance
Senario:Budget
haroon asghar ( owner)
adeel javid (Reviewer)
Naeem asghar (Reviewer)
Imtiaz (Reviewer)
Issue is that,after start the budget activity (promotional path) by Admin, the data form editable to Owner haroon asghar
but after completing his work by haroon,when he promote the planning unit ,the next user in Hierarchy "Adeel javid" unable to see data form in respective planning unit in uneditable data form not only for this user but all rest of the users as well,while i think data form should only uneditable(grayed) for user Haroon Asghar who promote the planning unit.
we have checked all security rights to the users those are "Write access" but still Adeel javid is unable to enter data,so the budget activity is stop due to this problem.
when i remove the planning unit then i log in with all user one by one and see all data form required version,scenario and entity were editable to all users mention above
we want to run budget activity with the above planning unit hierarchy.
plz any one provide the proposed solution of the said issue
we are using Product Version 11.1.2.0.00
Regards
Anwar

Reviewers will not be able to write data to the intersection. Reviewers can only review the data and follow-up with a Reject, Promote, Sign off, Delegate, Originate or Freeze.
Please refer Article ID 1226783.1 in MOS.
HTH-
Jasmine.

Read/Write to External Media

I have an external harddrive I plan to use for torrenting, but I haven't been able to figure out how to give my user read/write access to it.
Is there some kind of udev/fstab rule that could accomplish this, or should I be looking to add my user to a group? Also, is there a breakdown of what the different groups are for somewhere?
Edit: A bit unrelated, but where do I set the number of main terminals (the Alt + F key ones)? I remember doing it on my last install, but I forgot what I did.

It's an ext3 drive.
Thanks for the link. As I understand it, MODE will allow me to change the permissions on the drive?
Edit: Got it. Thanks.
What exactly's the point of all the symlinks in /dev? I don't really understand why there are redundant ones, such as cdrom, cdrom0, cdrw, cdrw0, etc.
Here's my final stuff; it works, but I'm open to suggestions if there's a better way:
udev rule wrote:ATTRS{model}=="SP0822N", NAME="%k", SYMLINK+="torrenthd",
GROUP="storage",OPTIONS+="last_rule"
fstab wrote:/dev/torrenthd /mnt/torrent ext3 rw,user,auto 0 0

Calcmgr rules circumvent planning unit ownership read/write restriction?

Similar Messages

Maybe you are looking for