Data Access Restriction in Webi via Infocube/Multiprovider

Hi All,
As we know that Row level security is not available in OLAP universe, the approach for data level restriction is to creat roles at BI level.
I have Query regarding the same.
If I m creaing my universe on top of Infocube or multiprovider.
I have 2 users, User1 and User2.
Now if I want User1 should see data for CostCentre = UK,India.
User2 should see data for CostCentre = US, UK,India
Here are my queries:
1) Will User1 and User2 be able to see the data level access in Webi Report based on the their Login?
2) If I creat the Prompt on "CostCentre" in Webi then, will User1 see Lov as {UK,India} and Will the User2 see Lov as {US, UK,India}
If Data level access cannot be achieved in Webi via universe created on top of Infocube/Multiprovider then what is the approach to do so?
Regards,
Nisha

Hi,
I m creaing my universe on top of Infocube or multiprovider.
>> The recommendation path is to use BW queries with the necessary Authorization Variables leveraging your BI Authorizations.
I have 2 users, User1 and User2.
Now if I want User1 should see data for CostCentre = UK,India.
User2 should see data for CostCentre = US, UK,India
>> This is part of BI Authorizations in BW.
Here are my queries:
1) Will User1 and User2 be able to see the data level access in Webi Report based on the their Login?
>> assuming you follow the 2 steps mentioned above (Query and authorization variables) - yes
If Data level access cannot be achieved in Webi via universe created on top of Infocube/Multiprovider then what is the approach to do so?
>> Data level security is part of your BI authorizations in BW
Ingo

Similar Messages

  • Oim 11g r2: data access restriction using roles instead of organisations

    can i implement data access restriction using roles instead of organisations in oim 11g r2?

    in my use case a particular user can be member of more than one organisation. as far as i know oim does not suoport this use case using organisation, so i decide to use roles to represent my "organizations", but now i loose all the data access restrictions (scope).

  • Data access restriction

    Hi,
    How to achieve row level data restriction in crystal reports based on the user log-on?
    Pls. let me know if there is any..
    Thanks
    Viswa

    Hi Vishwa,
    You can obtain row-level data restriction from within Business Objects by using "CEUserName" and an external security table together with suppression formulas that are evaluated at run-time.
    You can refer the link below,
    http://neverknewthat.wordpress.com/2007/11/06/row-level-security-trick-with-crystal-reports/
    Regards,
    Abhijeet Taskar.

  • WRT54G2 and WRT54G locks-up (freezes) when blocking web sites using Access Restrictions

    I am convinced that a few Linksys routers such as WRT54G2 and WRT54G have a major issue when blocking web sites using Access Restrictions (Internet Access Policy). After a few hours of internet access by 15 wired users the Linksys locks-up and blocks all internet web access. The only solution is to restart the power on the router.
    We are currently using a Linksys WRT54G2 v1 (firmware 1.0.04). We upgraded the WRT54G2 v1 firmware to the latest 1.0.04 version which did not resolve the issue.  NOTE: We were previosuly using a a Linksys WRT54G v1.1 (firmware 4.21.1) until the power supply blew a week after we started blocking web sites using Access Restrictions (Internet Access Policy).  
    Basically, we have a T1 internet connection and a hub connected to the Linksys router. We are trying to block several web sites such as facebook, myspace, etc. for 15 wired users. We do not use wireless connections.
    This is the 2nd time it happened with 2 different models.
    Please help ASAP.
    Thank you,
    Lance
    (Mod note: Edited post. Some parts off topic.. Thanks!)

    Also,  you have already upgrade/re-flash the firmware of your Linksys Router you need to reset and reconfigure your router from scratch. Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

  • Accessing sap tables data and display in webi

    Hi all,
    i installed business objects edge series.
    i want to access SAP tables data and display in webi for adhoc reporting.
    Is there any process to achieve this.

    Hi
    currently (April 2010) you have the following options:
    1. You load your R/3 data into an SAP BW and use universes based on BEx queries to create WebI reports
    2. You can use SAP rapid marts. They contain Data integrator mappings (you need an installation of the DI for this) to extract and load your SAP R/3 data into a relational database. Additionally they provide universes (based on a relational schema) hich ill allo you to build WebI reports.
    3. You can use the R/3 connector for the Data Federator (You need a DF installation for this). Please note that the R/3 connector is not yet a product rather just a PROTOTYPE. Take a look here: SAP BusinessObjects Web Intelligence Reporting for SAP ERP [original link is broken]
    4. You can try to access the underlying database directly using the appropriate DB drivers. Please note that this is NOT RECOMMENDED. This way you cannot leverage security defined on the R/3 side in your WebI reports and you will not be able to access all data as available in R/3 since some of them are stored encoded/compressed in the underlying tables.
    5. Instead of WebI you can use Crystal Reports and the R/3 drivers (eg. SAP Tables, Functions, Cluster) provided when installing the integration kit for SAP.
    Regards,
    Stratos

  • Data access in Web Template

    Hello everbody,
    Does anybody know if is possible to access query data when execute a Web Template.
    I'm trying to use a MODIFY_CLASS (..WWW_MODIFY_CLASS).
    But, If we put in param name MODIFY_CLASS a Z class or original class, we have the same problem: Error... TABLE_1.
    Thanks,
    Bueno

    Hi,
    First of all you have to create a Z Class with CL_RSR_WWW_MODIFY_TABLE class as Super Class in SE24.
    Then you have to use that Z class in your Table_1 attribute Modify_class.You can do wonderfull customization with this option but be sure to consider the problems with OLAP features such as Swap axes, Remove drilldown etc.
    For more info look into the link below,
    http://help.sap.com/saphelp_nw04/helpdata/en/d8/f3a83adae1a010e10000000a11402f/content.htm
    Look into area "Creating and Using ABAP Classes".
    Thank you
    Arun

  • Data flow of logical partitions via MultiProvider

    Hi experts,
    I need to report on an InfoCube which will hold 2 years of data totals about 120 million records..So I would like to use logical partition to distribute the data to other InfoCubes based on time characteristic e.g. month..But I am not sure how can I achieve this? What I would like to know is the procedure, e.g. how to set up DTPs, how to use Process Chain to automate the data load, recommended strategy/approach etc...
    Your advice is highly appreciated!
    Thanks in advance.
    Regards,
    Meng

    Hi Joon,
    In case of logical partitioning the very first import thing is reporting will always be done on Multiprovider so as to keep the reporting unchanged with respect to underlying infoprovider changes.
    Now you can have different approaches, let us say in your example you will have to create two different infocubes one for say current year data (I assume already existing) and one for previous year data.
    Create transformation and DTP between current cube and previous year data cube and move all the previous year data from current cube to newly created cube using delta method by giving month or year selection in DTP selections. Once you move the data validate the data in target cube and do the selective deletion on the current cube, so as to avoide the data duplication. Compression on current data cube will be good as most of the requests will be empty after selective deletion only holding request ID's.
    Till now you have separated the current year and previous year data in two separate cubes, create a multiprovider on top of these cubes and you are free to create reports on top of multiprovider.
    Now when you are loading data from source system you have two options,
    1) Keep the current data flow as it is for current cube from source system and load all the history data in current cube and let it be as it is in current cube, being in the same multiprovider your overall reporting will not have any impact. But if you want you can move this data from current cube to previous cube using earlier used delta DTP and do the selective deletion again. You can even automate this process.
    2) In second scenario you can create individual flows to current and history cube and do the selective loading from source system. Your data will be directly loaded to both these cubes but the extraction from source system will be twice from the same source.
    Regards,
    Durgesh.

  • Can I access my Time Capsule via web, even if it´s not connected to a mac??

    Can I access my Time Capsule via web, even if it´s not connected to a mac??

    Yes, but the issue is the IP address. If you have a static IP from your ISP it is easy.. Or if you use another router with dyndns it is easy.. but Apple make it exclusive to their network so you can have loads of issues without a computer to function as a client for dns.
    Look up remote Time Capsule access .. there is plenty of info out there.

  • Access Restriction tab is missing on e3000 web interface

    I am quite sure that this tab has been there before but now its missing - could it be because I have activated  Parent Control on Cisco Connect ?
    If so - how do I 'get It back'
    (I thing parent control in Cisco connect is too limited)
    Regards
    Fleohans
    Solved!
    Go to Solution.

    Yes, the Access Restrictions tab goes away when the Parental Controls section is activated. According to the faqs, a hard reset is the only way to restore it.

  • How to get current logged-in user name in data access driver or in universe

    In universe, to get the current log in user is via @Variable('BOUSER').
    Right now, I need to be able to get the user name in the data access driver. I am writing a customized data access driver because we need to patch some where clause on the the query generated by the universe based on the logged-in user info. I only think of using end_sql parameter or adding an universe level filter to patch the @Variable('BOUSER') to the query, which would not work if user want to use customized query.
    Can anyone tell me how to get currentBO user name from connection server ? or how @Variable('BOUSER') is translated into the logged-in user name in the universe?

    I do not know your EJB Service. But you should pass the credentials of the current logged on portal user to your service. That's not by default I think.
    I had a similar problem with CAF developed webservices. I had to turn on permission checks in my web service and passed the credentials via logon ticket.
    Regards, Bernd

  • Verizon Cloud Access Restricted

    This morning I tried to access my photos through Manage & Store Media so that I could download them to my own computer. Although all of my photos were listed, I couldn't see the images. I logged out, and logged back into my account thinking that maybe my browser needed to refresh. Now, anytime I try to access "Manage & Store Media", I get this error page that says "Verizon Cloud Access Restricted". It goes on to say:
    Sorry for the inconvenience, but employee use of the Verizon Cloud web portal is blocked in accordance with the Verizon Wireless Information Security Policy.
    If you wish to access the Verizon Cloud portal, please do so from a personal computer using another method to access the Internet (e.g., using a home computer with your home Internet connection).
    Please do not request access to Verizon Cloud via the ACSR process, which does not provide for exceptions to the above blocking policy.
    If you would like more information on Verizon Cloud services, visit InfoManager>Products/Svcs>Media Center>Verizon Cloud
    I'm on my personal computer in my house. I don't understand how I continue to get this message, especially since it worked once this morning. Any thoughts on how to fix this? I've tried using Chrome and Firefox, and I've disconnected and reconnected to my wireless router.

    Same problem, I called tech support and they are researching the  problem. Explained that the IP address was assigned a verizon employee  restriction that essentially restricts verizon employees with account  access privileges from viewing personal content that we store in the  cloud, ie: basically they can't view our files/pics. They have no idea  how this has happened but shows that the restriction happened sometime  around 11 am today. CALL THEM ASAP. 1-866-406-5154 and option 3

  • Is XRaid good for ramdom data access

    We plan to have about 50 Mac users to ramdomly accessing XRAID's files via XServe (connected via Apple Dual channel Fibre card). Given XRAID's 400MB/s throughput, I see a possiblility of bad latency rate if all users accessing it at the same time.
    Questions:
    1)Are both RAID controllers are active in XRAID, or one is passive?
    2)Is Apple using SATA in its RAID?
    3)Will it have better performance if we have 7x500GB stripe than 14x250GB stripe?
    Thanks
    G5 Tiger 10.4.8   Mac OS X (10.4.8)  

    Quick comment since I'm dealing with the same thing:
    Remote Home directories are always slow. OSes like OS X are too chatty with the file system. Your most common apps are constantly hitting the hard drive (local or networked). Web browsers are the worst, they write temp, cache, bookmarks... Even Word is constantly writing scratch (recovery) and periodic saves. We've totally ruled out roaming profiles in Windows too.. it's just too slow.
    What we are doing is Apple's Portable home directories. They work fantasticly. Basically:
    -Set up Open Directory and populate it with your users.
    -Bind the machines to the OD
    -When you log in as a user (who is set in OD to be portable capable) that user will be asked if they would like a portable home dir on that machine. You can opt to have a network drive or to have a portable. If you choose portable you copy all the remote files locally and you now have a local home dir. The local dir regularly syncs with the server copy.
    Here are the advantages:
    - Local account speed
    - The ability to sit at another workstation and access your files (remote home dir)
    - The ability to set up mulitple machines with portables (laptop and desktop, work and home) and then sync the home dir contents
    - redundant copies of your data. You can have your laptop explode and you just connect to the server again to instantly restore everything.
    We moved some Mac Minis (1.42GHz G4) from networked NFS home dirs on Linux to portable home dirs on OS X and the machines are much more responsive in every way.. even with the slow 2.5" internal drives.
    I'm using this as the first line of backups. We're using Tivoli institutionally so.. basically we don't have working backups. I hope to expand the SAN later and add tape and we'll use Remote Home directories as the first step of our tiered data security plan.
    As for your config.. the speed depends entirely on your useage. I'm still setting our hardware up and I get 80MB/sec sustained copies from one RAID to the other (peak ~147MB/sec) when copying many 11GB files that I created from /dev/random. That Byte not bit of course.
    When I copied in the /Applications and /Developer dirs from the boot drive (to add a load of small files, I was seeing a sustained transfer of over 600 file i/o per second.
    You should be fine on I/O for 50 users if your basically using this as a file server or even if you're doing background home dir syncing.

  • Access Reliability in Web Application

    Does anyone have recommendation on using Access database in
    Web application.
    I have always used Access, but recently heard that it can
    cause great problems if more than one user is accessing information
    at the same time.
    Is there anyway around this or do I need to switch to MySql?
    The application is written entirely within Coldfusion, using
    a DSN for the Access DB.
    This is a small application and it would be rare that more
    than one user would be into the same table at one time but it could
    happen, as there is a login and the users table would be accessed
    each time someone logs in.
    Any insight would be helpful. I really don't want to have to
    redo the database.
    so far there have been no problems but I would be in a fix if
    the system crashed.
    Thanks.

    quote:
    Originally posted by:
    TJ_onTheWeb
    Thanks for the feedback.
    My next client application will be using MySQL on a Unix Web
    server so I am setting it up for development on the local server.
    Regarding the Coldfusion Application which is currently
    running on the web, using an Access database, how disruptive do you
    think it would be to migrate to MySQL from Access?
    Anyone have experience with this?
    Thanks!
    The work might not be hard, but there is an awful lot of it.
    I changed one from Access to Oracle once. What I did was:
    1. Create the Oracle tables and sequences.
    2. Transfer the existing data to the new db.
    3. Test every single query and rewrite the ones that needed
    it.
    So far there is no disruption to your production app, until
    now.
    4. Take the production app offline to freeze the data.
    5. Bring the new db up to date.
    6. Put your new app into production.

  • WAD : Result set is too large; data retrieval restricted by configuration

    Hi All,
    When trying to execute the web template by giving less restiction we are getting the below error :
    Result set is too large; data retrieval restricted by configuration
    Result set too large (758992 cells); data retrieval restricted by configuration (maximum = 500000 cells)
    But when we try to increase the number of restictions it is giving output. For example if we give fiscal period, company code ann Brand we are able to get output. But if we give fical period alone it it throwing the above error.
    Note : We are in SP18.
    Whether do we need to change some setting in configuration? If we yes where do we need to change or what else we need to do to remove this error
    Regards
    Karthik

    Hi Karthik,
    the standard setting for web templates is to display a maximum amount of 50.000 cells. The less you restrict your query the more data will be displayed in the report. If you want to display more than 50.000 cells the template will not be executed correctly.
    In general it is advisable to restrict the query as much as possible. The more data you display the worse your performance will be. If you have to display more data and you execute the query from query designer or if you use the standard template you can individually set the maximum amount of cells. This is described over  [here|Re: Bex Web 7.0 cells overflow].
    However I do not know if (and how) you can set the maximum amount of cells differently as a default setting for your template. This should be possible somehow I think, if you find a solution for this please let us know.
    Brgds,
    Marcel

  • How can I disable data access on C1-01 ?

    I have a C1-01, for emergency use only.  Today it displayed an unsolicited "Download Failed", message, and sure enough, my paygo account had been emptied.  How can I prevent all data access, ie attempts to update firmware, internet access, etc?
    TIA, Richard
    Solved!
    Go to Solution.

    easiest way is to contact your network operator and ask them to disable your data plan and all internet access on your device. there are also a few miscellaneous settings in your phone, so you can try deleting access points if they are displayed in the Settings. i would check the phone Settings menu and the Web browser settings for items that you can turn off / disable.

Maybe you are looking for