Creating Security Class in EPMA

I am unable to create security classes in HFM EPMA 11.1.2.2.3 - can some one please enlighten with the Security procedure for HFM in EPMA App.
Thanks in Advance

You need to create a "security class"dimension in EPMA and associate your HFM dimensions with it.
See the following page on how to work with HFM dimensions in EPMA;
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_architect/frameset.htm?epma_hfm_prop.html

Similar Messages

Provisioning, security classes etc.

Hi there,
I have several questions about setting up security in HFM application.
1. Provisioning
We have sevaral users that can be divided into two general groups - end users and consolidation users.
General users should use only project view with task lists. They shouldn't create any new grids or forms, only existing. And they should use export/import feature from forms.
Consolidation users should have access to almost all features.
What privileges should be each group provisioned in HSS?
2. Security classes
We have prepared entity dimension splitted into several hierarchies. Basic one is geographical, another are functional and entities are shared in these hierarchies. Let's say that we have SK region with SK entities (SK01, SK02...). I know that we should create security class for each entity to grant users access only to their own entity. But I'm not sure how to do that...
I have created two security classes - SK01 and SK02 - and associated them to appropriate entities. Then I have selected security for entities in app settings and selected "Entity" option in security node.
In shared services I have selected "All" for security class SK01 and "metadata" for security class SK02 (for my account for testing purposes only). But nothing happened - I'm still able to write to both entities.
The question is if there is any connection between security class settings and provisioned roles. I mean if this is because I'm provisioned with all rights in application (meaning "Application Administrator" in HSS).
Can anydoby help me with this please?
Thanks,
Vlado

In shared services, go to help and search for Financial Management Roles. This will bring you to a nice table of all available roles for HFM. Use this to determine who gets what. To limit users to Tasklists, be sure to not provision them to Advanced User.
Make sure you are very specific with those consolidation users. Many roles should be Admin only. The way I figured them out was to create fake users in Native Directory (one for each type of user) and provision a role at a time and test the functionality.
The above test will help with Security Classes as well. Your guess was correct, Administrator role overrides all security classes. You may not need a class per entity, just a class per group of entities that distinct set of people will need. You will also need classes applied to Parent entities that may or not be shared among your hierarchies. In your example this could be SK or it could be SK01 if that works. Try to keep the total number of classes down. You might end up assigning a unique combination of classes to each person in the system and that would be very difficult to maintain. Remember to assign the same access to the Default class as the highest access the user has. If in doubt, just grant All for the Default class. Default is assigned to all items in metadata unless you specify otherwise. For example, all accounts will have Default security and if a user only has Read, they will not be able to create a journal entry.
Here is how the class access works:
None - user cannot view or edit data
Read - user can view data
All - user can view and edit data
Metadata - I have not used this one.

Hierarchy in Security Class

Hi experts,
Can we create hierarchies in security class dimension? If yes, can you please let me know how to achieve this in CLASSIC? Any documentation on this would be extremely useful.
Regards,
Sounak

Security classes are never hierarchical in HFM, not in Classic nor in EPMA mode. Each class is independent of the other, and they can only be displayed in a flat list.
There are times we need to review the metadata in hierarchical format along with the assigned classes. For this you can use the HFMUtilities from Oracle. The following is from OTN:
Up to v9.3.1 HFMUtilities Utility is placed under ~:\Hyperion\FinancialManagement\Consultant Utilities folder which was shipped along with the product.
From v11.1.x HFMUtilities Utility is not shipped along with product bundle. The latest release of HFMUtilities Utility can be accessed via Oracle Technology Network at http://www.oracle.com/technology/products/bi/files/hfmutilities.zip. Latest utility can be used with all Hyperion Financial Management versions.
Note: This is a third part utility developed and maintained by Accelatis. Suggestion and queries related to HFMUtilities utility should be send to Jonathan Berry at [email protected] or [email protected].
--Chris

Message while creating a class method

Hi all,
I have created a class as local object. When i try to modify that class the following message is displayed.
"You are not authorized to make changes (authorization object S_DEVELOP)"

Click [here|http://help.sap.com/saphelp_40b/helpdata/EN/27/174b6e5733d1118b3f0060b03ca329/content.htm] to know about s_develop authorization object.
and Please ask your BASIS Team or Security Admin to get the Change Authorization to your User
ID/Profile.

Missing security classes

Hi all,
I have updated Security Class dimension via EPMA (added but also removed some classes). Deploy was successful and the application is in sync with EPMA.
When I wanted to update security class access via HSS, I couldn't find new classes and old ones (which I removed via EPMA) were still there.
How is that possible? I don't see any problem in interconnection between HFM and HSS but this seems that security classes haven't been refreshed in HSS.
Could anyone help me with this please?
BR
Vladino
EDIT
I can see newly added classes but I can see also old ones. This is really weird... I have duplicated the application, cleared all data and metadata but old classes are still there. :-/
Edited by: Vladino on Jul 11, 2011 1:49 PM

Solved.
The issue was because of migrating the old application into new one with different security classes. After clean deploy everything was fine but the migration (using command-line utility) replaced security settings with that coming from the old application.
Vladino

Securing class files

Hello,
I read all these topics about securing class-files,
and about encryptors and stuff like that
so I tought this could be possible :
I've made an application and you can run it by using an exe-file.
In the same directory you find the class-files.
Now I archived the class files with winrar, and set a password on it.
I tried to use the exe-file to run the application, but it can't.
Obvisiously, it can't find the mainclass.
So I was wondering if there is a way to make clear to the exe -file, that the main class is in that zip-file, and that you need <this password> to get in to the zip-file.
I think it's possible, but I don' know how to do it.
I thought Google would know it, but he don't.
...

The collision wasn't "stumbled" across it was found
because the researchers
found a way (from your link) to "reduce the search
space".I didn't say "the collision was "stumbled" across"...
>
This means that, under certain circumstances, inputs
producing the same hash
can be found for other inputs + hashes.That is what I said...
>
Did you have a look at the PDF ?
http://eprint.iacr.org/2004/199.pdf
This doesn't damage the use of MD% for verifyingthat
file contents are unchanged, so to OP - go aheadand
use it.Well, it does because it means that there is the
potential for another
file that is not the same to return the same
sum - hence the program
won't realise the difference.And the situation is no worse now that before the duplication was found. Any encryption/hashing routine can create duplicate hashes - because none of them have an infinitely large numberspace.

Could not create Java class: associated with region:

Hi All,
I am extending the standard controller oracle.apps.pos.supplier.webui.SuppSummCO
With a custom controller xxmycomp.oracle.apps.pos.supplier.webui.XXSuppSummCO
I have built the project in my local JDEV,
Compiled the custom controller and put it under $JAVA_TOP
I have verified the same by ls -l $JAVA_TOP/xxmycomp/oracle/apps/pos/supplier/webui/XXSuppSummCO.class
I have given full permission to xxmycomp folder under $JAVA_TOP (chmod -R 777 xxmycomp)
I have done the OC4J core bounce
After setting the custom controller at site level by personalizing the Region,
When I am returning to the application I am getting the following error
oracle.apps.fnd.framework.OAException: Could not create Java class: (xxmycomp.oracle.apps.pos.supplier.webui.XXSuppSummCO) associated with region: (PageLayoutRN). This is probably because the class name is wrong or not included in project.
     at oracle.apps.fnd.framework.webui.OAPageErrorHandler.prepareException(OAPageErrorHandler.java:1247)
     at oracle.apps.fnd.framework.webui.OAPageErrorHandler.processErrors(OAPageErrorHandler.java:1435)
     at oracle.apps.fnd.framework.webui.OAPageBean.processRequest(OAPageBean.java:2559)
     at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:1894)
     at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:538)
     at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:426)
     at OA.jspService(_OA.java:212)
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:379)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:713)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
     at com.evermind.server.http.ServletRequestDispatcher.unprivileged_forward(ServletRequestDispatcher.java:259)
     at com.evermind.server.http.ServletRequestDispatcher.access$100(ServletRequestDispatcher.java:51)
     at com.evermind.server.http.ServletRequestDispatcher$2.oc4jRun(ServletRequestDispatcher.java:193)
     at oracle.oc4j.security.OC4JSecurity.doPrivileged(OC4JSecurity.java:284)
     at com.evermind.server.http.ServletRequestDispatcher.forward(ServletRequestDispatcher.java:198)
     at com.evermind.server.http.EvermindPageContext.forward(EvermindPageContext.java:395)
     at RF.jspService(_RF.java:225)
The custom controller is for testing only and has only the following code
public void processRequest(OAPageContext oapagecontext,
OAWebBean oawebbean)
super.processRequest(oapagecontext, oawebbean);
public void processFormRequest(OAPageContext oapagecontext,
OAWebBean oawebbean)
super.processFormRequest(oapagecontext, oawebbean);
I have created the directory xxmycomp under $JAVA_TOP
I have read only access to other directories under $JAVA_TOP apart from xxmycomp.
Can anybody help me resolve this error?
I am doing the same steps in another instance where it is working fine.
Regards,
Gourab

Hi Gourab,
Double check the the page.xml has referring to the correct CO. Open the page.xml and see which controller is attached to it.
Also attach the extended controller through personalization to the page/Region.
Thanks
--Anil

Security class requires java.security file???

What is the use of java.security file? Which
classes refer this file while creating the instance?
Can we create a class file that will refer this security
file?
When the java program loads security class it needs java.security class?
In what type situation security class look into java.security file???
Pls help me
regards,
namanc

Open the java.security file up in notepad or something.

HFM security Class

Hello Guys,
I've to create around 3500 security classes and same number for the HSS roles I'm wondering if there is a way to bulk upload from a txt or a csv file rather than create everityng manually.
Thanks
Fran

That's right: HFM's security extract has four sections: users/Groups, Security Classes, User/Group Role assignments, and User/Group class access. This can be easily coded outside of HFM and then loaded into the HFM application directly. Please note that security can only be loaded in Merge mode, so if you need to remove a user's access, you must do so from within Shared Services. Do not use the "Clear all security" mode unless you plan to rebuild the application entirely.
--Chris

How to create proxy class for a Siebel WS which has many Workflows in it?

Hi,
I am facing a strange problem. I have a Web Service for which there are many workflows associated with this. When I generate WSDL for this Web Service and later on generate proxy class in .NET, it creates mutilple classes for each workflow. From UI, I can invoke a perticular method for the class for which I am interested in. But when I am building the same in JDeveloper, using Web Service proxy, I get only one class and I am not interested in invoking method in this class but interested in some other class for which the proxy was not generated. Is there some way to generate multiple classes in JDeveloper proxy?
Thanks,
Sudha.

I have figured this out. Actually Generate proxy creates package and it includes all the class in it. Now i am able to invoke web service method call.

How to create a class using java script..

Hi all,
Iam new to java script and I tried out the following program but its not working..I basically created a class just like a java prog' but Iam not getting any output or error.Iam attaching the code below.
If I created one function inside the script and create one object its working fine but what should I do when I have a lot of function??so I created a class and put all the function and created an object but its not working..
Do let me know what changes should I do..Iam attaching the code which I had written. or give me an example of how to create a class with couple of functions using JAVASCRIPT
Thanks
Avis_su
<html>
<head><title>JSP Page</title></head>
<body>
<SCRIPT language = "JavaScript">

</script>
</body>
</html>

Run this program to get your answer:
public class AnswerToYourPost {
public static void main(String args[]) {
System.out.println("TRUE/FALSE: This question
ion belongs on a Java forum.\n"
+ "ANSWER: " + ("Javascript" == "Java"));
}Since when do we compare objects for equality using operator == ?

How to create Development Class in SAP R/3 4.7c and Netweaver?

I follow some old notes on ABAP Development Class but I could not create a new Development Class. i.e. Stuck in creatinf a type group. Please give some details on how to create a development class. Thanks.
see the following stepa:
(A) Procedure for creating a type group:
/nse80
1. Object Navigator> select Development class>(Enter your development class
   yFTGxxDEV
2. Double click on development class object types.
3. Type Group: zPTAxx1.
4. Click on the Create button at the bottom (4th one from the left).
5. Enter short text: zPTAxx1 type group.
6. Save>Enter your development class> click on diskette button to save the type group
7. Select Source Code tab and enter the following:
"An example type-pool statement containing types and constants
type-pool zxx1. "zxx1 is a type pool. It is also known as a type group
types: zxx1_dollars(16)    type p decimals 2,
             zxx1_lira(16)          type p decimals 0.
constants:
       zxx1_warning_threshold type i value 5000,
       zxx1_amalgamation_date like sy-datum value '19970305'.
8. Select Type Group from menubar
           a) Check
           b) Save
           c) Activate
9. Click the back button or F3 to exit.
10, Show your type group to your teacher.
11. Go to ABAP editor and enter the following program:
"Calculations on date
report zxx_0914.
type-pools zxx1.                   "contains zxx1_amalgamation_date
data:    d1              like sy-datum,
            d2              like d1,
            num_days type p.
d1 = d2 = sy-datum.
subtract 1 from d1.
write / d1.                              "yesterday's date
d2+06 = '01'                         " first day of current months
subtract 1 from d2.
write / d2.                           " last day of previous month
num_days = sy-datum - zxx1_amalgamation_date.
write / num_days.                " number of days since amalgamation
11. Double click zxx1 from the type-pool statement to see the type group.
12. Follow lab1 procedure and run your program
(B) Run an ABAP program using field symbol ( i.e. pointer)
report zxx_lab6.
data f1(3) value   'ABC'.          "Step 1 Define a variable
field-symbols <f>.                     "Step 2 Define a pointer variable ( it only stores address)
assign f1 to <f>.                        "Step3 Initialize the pointer variable with an address
write <f>.                                    "Step4 Now you can use <f> in place of f1
write / f1.                                      " (same as write f1 )
<f> = 'xyz'.                                   " Assign a new value to f1
write <f>.
write / f1.

This is not the way to create a new development class.
Follow this steps to create a development class:
http://sap.mis.cmich.edu/abap4/knowbase/Create-Dev-Class.pdf
Regards,
Naimesh Patel

Error Occured While Creating message class 8II In SapNote 1486147

Dear All
I applied SapNote 1486147 but at the time of creating message class 8II
It shows error like this
Object MSAG 8II is in reserved name range for sap partner
Any body help on this.
Edited by: chandrap on Feb 24, 2011 2:08 PM

Hi Yasir,
remove the jaxb.jar from the WEB_INF/lib and move
them to your SUNWappserv/lib/endorsed - dir, together
with the following jars:
dom.jar jaxb-api.jar jaxb-impl.jar jaxb-libs.jar
jaxb-xjc.jar namespace.jar relaxngDatatype.jar
r xalan.jar
xercesImpl.jar xsdlib.jar
(restart the deploytool if used)
This should work,
Bas van OudenaardeHi Bas
Thank you for the very useful tip but I don't seem to have a SUNWappserv/lib/endorsed - directory inside my .war archive , could you please advise on this issue

Error While Creating Asset Class

Hi Friends,
I am getting the following error in development client while creating the asset class AB2200.
"Screen Layout 200 was not created" but the same was created.
Please guide me how to handle this error and the reason for me getting this error message while creating asset class.
Your quick response would be highly solicited.
Thanks and Regards,
C.R.Srinath

Hi Srinath
There are 2 things.. Create the screen layout and Define the screen layout... (IMG> AA > Master Data> Screen Layout for asset classes)
Complete both the steps here and specify the same sccreen layout in your asset class
Regards
Ajay M

Error while creating model classes, operation aborted in NWDS

Hi All,
When i select Adaptive rfc 2 model and then search for the RFC, when i select RFC and click on next i get an error while importing :
Error while creating model classes, operation aborted.
It is working fine in visual composer and i have activated function module, RFC but getting same error. It is also working in web service navigator also.
Can any one help me out??
Regards,
Pradeep kumar
Edited by: pradeep_546 on Feb 17, 2011 9:35 PM
Edited by: pradeep_546 on Feb 17, 2011 9:36 PM
Edited by: pradeep_546 on Feb 17, 2011 9:37 PM

Hai guys thanks for reply
Tushar,
I am using NWDS 7.2, ce7.2 server, ECC 6.0.
Amit,
I have tested the JCO destinations they are working fine and i created a new pair of JCO destinations but unable to import the Adaptive RFC2 Model gives same error but Adaptive webservices are working fine in my NWDS7.2
Deepak,
I am unable to create model in other projects also.
I have sufficient amount of memory in my drive.
I have imported the DC to other NWDS but it gives same error.
Thanks for all,
Regards,
Pradeep Kumar G
Edited by: pradeep_546 on Feb 18, 2011 3:05 PM

Creating Security Class in EPMA

Similar Messages

Maybe you are looking for