Data security for multiple data sources

Dear BO guru's,
I am struggling with a brainbraker on authorizations on Universes since quite some time.
I am not a BO guru so hopefully someone can help me with this.
I (more or less) know the concept of data security in BO: users can be restricted on data level in (mainly) two ways:
1) with roles in CMC and with restrictions in Universe Designer.
OR
2) with a DB table that contains all authorized values per user and per field (i.e. John can see data for country UK)
The first is easy to set up, but hard to maintain.
The second is difficult to set up, but very flexible.
Now here is the problem...
Supporse your BO server is connected to different source systems (i.e. an SQL server, an Oracle server...) and you want only one universe to get data from all systems at the same time and display it in one report.
If I am not mistaken, this means we need a data federator.
...My questions:
1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
As this questions keeps me busy since long time, I would be very grateful to have your help.
It seems hard to find information on this.
Thanks a lot in advance!
UniverseDummy

1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
Apart from the Data Federator, you can either use an ETL tool to load your data into a single Datawarehouse or wait until XI 4.0
2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
If you are going to use the Data Federator then you can create the table in one of your source systems and add it as a data source in your DF project.
Regards,
Stratos

Similar Messages

Date Difference for multiple dates

I have a field called 'LOG_COMMENTS' in a table named T_PRODUCTION_WORK_LOG.
In the 'LOG_COMMENTS' whenever a request is placed on hold comments are added by the application, such as 'Status changed from Open to On Hold' and
'Status changed from On Hold to Open' along with a 'LOG_DATESTAMP' field. A request can go on and off Hold multiple times, how do I detrimine the days a request is On Hold?
I know I can use the sql function DATEDIFF ( datepart , startdate , enddate ), but how do I account for the possiblity that the request was On Hold more than once? And how would I get LOG_DATESTAMP' times for 'LOG_COMMENTS'
that contain
'Status changed from Open to On Hold' and 'Status changed from On Hold to Open' ?

declare @Aid1426_sampleData TABLE (
[LOG_ID] [int] NULL,
[LOG_DATESTAMP] [datetime] NULL,
[LOG_UID] [int] NULL,
[LOG_COMMENTS] [nvarchar](255) NULL
INSERT @Aid1426_sampleData ([LOG_ID], [LOG_DATESTAMP], [LOG_UID], [LOG_COMMENTS]) VALUES (1530253, CAST(0x0000A2FB00A998CC AS DateTime), 317690, N'Status changed from On Hold to Open. ')
INSERT @Aid1426_sampleData ([LOG_ID], [LOG_DATESTAMP], [LOG_UID], [LOG_COMMENTS]) VALUES (1531819, CAST(0x0000A30200D25424 AS DateTime), 317690, N'Status changed from Open to On Hold. ')
INSERT @Aid1426_sampleData ([LOG_ID], [LOG_DATESTAMP], [LOG_UID], [LOG_COMMENTS]) VALUES (1511894, CAST(0x0000A29600788C28 AS DateTime), 317690, N'Status changed from Open to On Hold.')
INSERT @Aid1426_sampleData ([LOG_ID], [LOG_DATESTAMP], [LOG_UID], [LOG_COMMENTS]) VALUES (1536836, CAST(0x0000A31D00D2D188 AS DateTime), 317690, N'Status changed from On Hold to Open.')
declare @nowWithStatusColumns table (log_id int, log_datestamp datetime, log_uid int, log_comments varchar(255), new_status varchar(20), old_status varchar(20))
insert into @nowWithStatusColumns
select *,
case
when left(log_comments,20) = 'Status changed from ' then ltrim(left(right(log_comments,len(log_comments)-19),charindex('to',right(log_comments,len(log_comments)-19))-1))
end as new_status,
case
when left(log_comments,20) = 'Status changed from ' then ltrim(replace(reverse(left(reverse(log_comments),charindex(' ot',reverse(log_comments)))),'.',''))
end as old_status
from @Aid1426_sampleData
select *, datediff(hour, n2.log_datestamp, n1.log_datestamp)
from @nowWithStatusColumns n1
left outer join @nowWithStatusColumns n2
on n1.old_status = n2.new_status
and n1.log_uid = n2.log_uid
and n2.log_datestamp = (select min(log_datestamp) from @nowWithStatusColumns where log_datestamp < n1.log_datestamp and new_status = n1.old_status and log_uid = n1.log_uid)
order by n1.log_datestamp
select n1.log_uid, sum(datediff(hour, n2.log_datestamp, n1.log_datestamp)) as hours
from @nowWithStatusColumns n1
left outer join @nowWithStatusColumns n2
on n1.old_status = n2.new_status
and n1.log_uid = n2.log_uid
and n2.log_datestamp = (select min(log_datestamp) from @nowWithStatusColumns where log_datestamp < n1.log_datestamp and new_status = n1.old_status and log_uid = n1.log_uid)
where n1.new_status = 'On Hold'
group by n1.log_uid
Give this a shot.
I took the liberty of creating new/old status columns to make it easier.
Thanks Patrick, this is very close to what I need, but it is also counting the hours between when the request
comments were changed from 'Status changed from On Hold to Open' on 2014-03-27 10:17:29 -and-
'Status changed from Open to On Hold' on 2014-04-03 12:45:47 which is 170 hours. Anyway you could remove that?

Legacy asset data upload for multiple line items

Hello
Legacy asset data upload for multiple line items- for example Building is an asset which is having different line items for purchasing of land,constructaion or renovation etc.........now to upload the legacy data what should be consider...only one line item for Building or numbers of line item.........
which one is the proper way to do this exercise?
regards

Hi,
It completely depends on clients requirement. but following are few approaches:
1. Define Building as Asset Class.
2. Create a Building at specific location at asset code and
3. create asset sub numbers for other components.
other approach would be:
1. Define Building as Asset Class.
2. Create a Building at specific location at asset code and
3. create further asset codes for other components where field description will be used for relating each other.
Regards,
Sayujya

Master Data Required for 2LIS_02_HDR Data Source Installation

Hi All,
We are trying to install 2LIS_02_HDR DataSource through BC for our purchasing implementation . Can you suggest what all the Master Data required for this Data Source.
Regards,
Aditya

Hi ,
Please see this link.
http://help.sap.com/saphelp_nw70/helpdata/en/ed/62073c44564d59e10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/en/ed/62073c44564d59e10000000a114084/frameset.htm
In the same page you can find all details.
Hope this helps.
Thanks
CK

Date range for key date in hierarchy

Dear Friends,
Is there a work around for single key date restriction for time dependent hierarchy.Bcos i can only select one key date in teh report for my hierarchy so that it will take that hierarchy which falls in this date and display the result accordingly.
But is there a way to select the date range for key date so that more than one hierarchy can be used to display my report accrding to the time range.
Say,i have 4 hierarchies (time dependent) like v1,v2,v3,v4 and v5 for jan 08,feb 08,mar 08,apr 08 & may 08 respectively.
In my report,i want to display the result for the time interval say mar to May.
So my report should diplay the result according to the 3 different hierarchies for the time period i.e.v3,v4&v5.
How do i acheive this.
Thanks.
ragu

Hi
I think we may do with the Char with text with replecement path.
take time char as Calmonth and set the offet value as -1 and -2 and design the report and use the hierarchies in that query.
Am not surt it willwork but better to try with this.

Configure a single ODI install for multiple Data Sources in ERPI

I am setting up multiple data sources in ERPI to point to different EBS instances. How would I go about setting up ODI to support that without multiple installations of ODI? or is multiple installs the best way to go, from an 'ease of management' perspective?
Thanks!

First off - Have no knowledge of ERPi - Just googled it.
If its any help, we have multiple instances of EBS on the same box, we have seperate DWH (and ODI Work / Master Repos) environments aligned to these instances. An ODI Agent can only communicate with one ODI Work repository, hence we have Multiple Agents so we can use the EBIZ -> DWH pairs simultaneasouly.
Maybe someone will come along and tell us how it could work differently, until then - its works for us!

It is possible to have a dynamic Oracle Label Security procedure/script to configure data label (compartments and data label) for multiple rows at same time?

A single script which can be run below mentioned commands... instead of using multiple manual steps for configuring data labels. Is that possible and how? Having bulk of data where OLS need to be applied.
exec LBACSYS.SA_COMPONENTS.CREATE_COMPARTMENT
exec SA_LABEL_ADMIN.CREATE_LABEL
exec SA_POLICY_ADMIN.APPLY_TABLE_POLICY

Have you ever answered this question? If not, have you tried to use the "HIDE" property on your table_options?

Single .rar file for multiple data sources

Can we configure multiple data sources into single .rar file? . Currently,
we are creating a seperate .rar file to configure each datasource by
'only' modifing ra.xml file. This is proving to be a tedius operation in
some cases when the application is integrated with multiple data sources.

Siva-
Unfortunately, no. One of the limitations of the resource adapter spec
is that it doesn't provide a means of specifying multiple separate named
configurations, so you can only have a single configuration.
If you need more flexibility, you may want to consider programatically
building up the PersistenceManagerFactory and then binding them into
JNDI.
In article <cqscdo$n1o$[email protected]>, Siva wrote:
Can we configure multiple data sources into single .rar file? . Currently,
we are creating a seperate .rar file to configure each datasource by
'only' modifing ra.xml file. This is proving to be a tedius operation in
some cases when the application is integrated with multiple data sources.--
Marc Prud'hommeaux
SolarMetric Inc.

ADF Service Interface: two-phase commit issue for multiple data sources

In FusionApps, For a service interface we had to use two DataSource resources (in the ejb-jar.xml),
one is ApplicationServiceDBDS for SI and the other one is ApplicationDBDS(I don’t know the exact reason why this is needed, but when running the webservice, Framework was throwing an error asking for this) After adding these two, now(while running the webservice) we’re caught up with an error saying that unable to participate in two phase commit. I think this is because we added two dataSources, if we just use one dataSource everything is working fine.
Error message from app server:
"JDBC driver does not support XA, hence cannot be a participant in two-phase commit. To force this participation, set the GlobalTransactionsProtocol attribute to LoggingLastResource (recommended) or EmulateTwoPhaseCommit for the Data Source=ApplicationDB"
we have made the changes to ApplicationDB as said in the error message, but then the server is failing to start because of this.

Hi,
this is what the doc says - though not about two phase commit but transaction sharing:
"At runtime, the calling client and the ADF service may or may not participate in the same transaction, depending on the protocol used to invoke the service (either SOAP or RMI). Only the RMI protocol and a Java Transaction API (JTA) managed transaction support the option to call the service in the same transaction as the calling client."
When your application accesses a remote ADF Business Components service, each remote call is stateless, and the remote service will not participate in the same transaction as the business component that uses a service-enabled application module's service interface.
In the majority of the cases, calls to remote services will be informational in nature and will not make changes to remote objects. However, if you must use a remote service to make changes, then keep these points in mind:
An exception thrown by the remote service will cause the local transaction to fail.
If you successfully call a remote service that results in modifying data, and then subsequently your local transaction fails for any reason, then it is the responsibility of your error handling code to perform a compensating transaction against the remote service to "undo" the previous change made."
http://docs.oracle.com/cd/E23943_01/web.1111/b31974/bcextservices.htm
Frank

Any examples of a data template using multiple data sources?

I'm looking for an example report using multiple data sources. I've seen one where they do a master/detail but I'm just looking to combine results in sorted order (sorted across all data sources). The master/detail used a bind variable to link the two defined queries, I'm thinking what I want won't have that, so I'm lost on how to make that happen. I have reports using multiple sql queries and there is a way in the data source pulldown to tell it to combine the data sources. It appears to be a more manual process with data templates, if it's even possible.
Any pointers/links would be appreciated.
Gaff

Hi Vetsrini :
That's just it. Mine is simpler than that. There is no master/detail relationship between the two queries. I have the same exact query that I run in two databases and I want to merge the results (ordered, by, say eventTime) in one report. So I think my results are going to be two separate groups (one for each data source) which I'll have to let BI merge vis XSLT or whatever it uses. That's fine for small result sets but for larger ones, it would be nice if the database did the sorting/merging.
Gaff

Security for Military Data --- our Options -- Share your experiences

Hi,
We want to secure military specific data in SAP.
We also want to comply with ITAR requirements.
One option is to create roles and profiles and then assign it to users who can view that data. In this approach the biggest problem is over head of maintaining 100's of profiles and roles. Our company does not have suffecient funds or team to do that.
Second option was to use development and here is how we envisioned it.
Maintain an indicator for foreign nationals in HR and also maintain an indicator for military personal in HR. (We are allready doing that, for some other busines process) So this table will tell us if an employee if foreign national or a military personal.
If Military person.
give access for military specifc data.
else.
error message.
endif.
similarly
if foreign national.
give error message.
esle.
let him view data
endif.
Now we are not sure if SAP has a common routine for authorizations, which we can change and add these conditions in it. (We will do core mod by getting access key).
If we follow this approach will we have to modify a single routine (for all SAP modules) for all master and transaction data transactions, or will it be multiple routines which we will have to modify.
We also need to cover authorization for table maintenence, transaction codes, org structure level...etc.
Can you please provide your inputs/point of view on this.
Will apprecaite if you can share any other option.
Thanks in advance.

Agreed with Wolfgang, roles & profiles are better in the long run than system mod.
There are ways to redesign roles to make them manageable. Example: Derived roles.
If you already maintain the users thru HR, you can assign roles in R/3 to Job, Position, Work Center, etc. Another idea to help you automated the roles assignment.
Regards,

Need a Data Integration for multiple ERP systems

We are doing some research into a data integration layer to our BW 7.3/BOBJ 4.0 from multiple ERPs. Of course we are looking at Data Services and Information Steward in the BOBJ suite but just looking for anybody's recommendations on the topic.
What technology platform do you use to do the extract, transform, load processes from multiple backend sources into BW? Any you would advise us to avoid?

Hello Edward,
The answer depends on multiple factors.
Some pointers:
Volume and growth of db in scope planning (Federation vs replication )
If data federation is where you want to move data services / BO tools will be ideal
If your data is coming from multiple ERP systems you can utilize there delta queue to load data via data services (in case of SAP)
Use native DB connect/UD connect functionalities in BW as with BW 7.3 its delta capable.
Moving to BW 7.4 you will have SDA to solve that problem of integration to Non - SAP data into your EDW landscape
These are pointers but I would say talk to enterprise architects and look into the foresight of wheyare you want to move your EDW platform.
Cheers!
Suyash

Data Extraction from Multiple data sources into a single Infoprovider

Hi Experts,
Can anyone send me links or examples on how to extract data from multiple data sources into 1 Cube/DSO.
Can anyone send me example scenarios for extracting data from 2 data sources into a single Cube/DSO.
Thanks
Kumar

Hi Ashok,
Check the following link from SAP help. Ths is probably what you are looking for.
[ Multiple data sources into single infoprovider|http://help.sap.com/saphelp_nw70/helpdata/en/e3/e60138fede083de10000009b38f8cf/frameset.htm]
Data from multiple data sources which are logically related and technicall have the same key can be combined into single record.
For example, if you have Sales order item and sales order item status .
These both have the same key - sales order and item and are logically related.
The Sales order item - provides information on Sales order item - material , price, quantity, plant etc.
The item status - povides information on delivery status, billing status, rejection status....
These are two different data sources 2LIS_!1_VAITM ad 2LIS_11_VASTI.
In case you have few master data attributes coming from different systems ie tow data sources in different systems say completely defines your master data. Then you could use a DSO or infoobject to combine the records.
If you want to see aggregated data you use a cube.
ie say you want to analyzae the customer revenue on a particular material and a particular project.
The project details would come from Project syatem and Sales details fom sales flow.
The data is then combined in the DSO with key cutomer and sales area say.
Then it is aggregated at cube level...by not using sales order in the cube model...so all sales order of the same customer would add while loading the cube.. to give direct customer spend values for your sales area at aggregated level.
Hope this helps,
Best regards,
Sunmit.

Error in viewing data in a data template with multiple data sources

Hello,
I have designed a data template with two data sources.One is from DEPARTMENTS table and the other datasource is a xml file.Following is the code for the data template :
<dataTemplate name="EmployeeListing" dataSourceRef="demo">
<parameters>
<parameter name="p_DEPTNO" dataType="character" defaultValue="20"/>
</parameters>
<dataQuery>
<sqlStatement name="Q1">
<![CDATA[SELECT DEPARTMENT_NAME,DEPARTMENT_ID,LOC from DEPARTMENTS]]>
</sqlStatement>
<xml name="empxml" expressionPath=".//ROW[DEPARTMENT_NAME =$DEPARTMENT_NAME]">
<url method="GET" realm="" username="" password="">file:///D:\OraHome_1\xmlp\XMLP\DemoFiles\Employee Salary Report.xml</url>
</xml>
/dataQuery>
</dataTemplate>
The problem is when i am trying to view the data, only data from SQL Query Q1 is getting displayed and the data from Employee xml is not at all getting displayed.
Could anyone please let me know what i am missing?
Thanks
Nutan
Edited by: user609971 on Oct 23, 2008 8:06 AM

This is from Documenation sample....
Did you see the data structure section, where you say, how you wanted the columns ?
<?xml version="1.0" encoding="WINDOWS-1252" ?>
<dataTemplate name="Employee Listing" description="List of Employees" v
ersion="1.0">
<parameters>- Defines a single parameter for the Department Number
- with default of 20:
<parameter name="p_DEPTNO" dataType="character"
defaultValue="20"/>
</parameters>
<dataQuery>
<sqlStatement name="Q1">
<![CDATA[SELECT DEPTNO,DNAME,LOC from dept
                  order by deptno]]>
</sqlStatement>
<xml name="empxml" expressionPath=".//ROW[DEPTNO=$DEPTNO]"> - Defines name
- and link to DEPTNO in Q1
<url method="GET" realm="" username="" password="">
file:///d:/dttest/employee.xml</url> - Defines url for xml data
</xml>
</dataQuery>-
<dataStructure>- The following section specifies the XML hierarchy
- for the returning data:
<group name="G_DEPT" source="Q1"
<element name="DEPT_NUMBER" value="DEPTNO" />
<element name="DEPT_NAME" value="DNAME"/>
- This creates a summary total at the department level based
- on the salaries at the employee level for each department:
<element name="DEPTSAL" value="G_EMP.SALARY"
function="SUM()"/>
          <element name="LOCATION" value="LOC" />
<group name="G_EMP" source="empxml">
<element name="EMPLOYEE_NUMBER" value="EMPNO" />
<element name="NAME" value="ENAME"/>
<element name="JOB" value="JOB" />
<element name="MANAGER" value="MGR"/>
<element name= "HIREDATE" value="HIREDATE"/>
<element name="SALARY" value="SAL"/>
</group>
</group>
</dataStructure>
</dataTemplate>

Adjust date/time for multiple images

Wonder if anyone else is having this problem (some posts seem similar but not exactly the same)
1. Clean library (mix of DNG, JPEG and TIFF files)
2. Need to change dates to match other images in the project
3. Selected multiple images and used Metadata -> Adjust Date/Time
4. "Lead" image (bright white box) date and time adjusted accordingly but other images in the selection date have their capture date and time generated apparently randomly (I'm trying to set 08/01/2008 but I'm getting anything from 27/03/1982 to 24/12/2010!)
5. The dates do appear random - repeating the process will lead to different dates in the IPTC field
6. I've clean installed everything - drive format, OSX10.6.2, Aperture 3 - and rebuilt the library. The problem remains unchanged!
Any ideas?
Cheers,
Adrian

I'd actually looked at this before attempting the metadata adjustment but checked it again just now to ensure I wasn't missing anything.
I guess if it's a shift based on the relative differences in the date of the imaes selected then that could explain the apparent random variations I'm getting. Although this would certainly be useful for the time stamp, when I'm trying to ensure all images in a project have the same date, relative changes certainly aren't!
I'd have to run it again tonight to confirm by comparing before/after adjustment dates. If that's what going on I think I'll have to get Adobe Bridge to do the heavy lifting for me..... just a shame I have to drag in another app rather than doing everything inside Aperture.

Data security for multiple data sources

Similar Messages

Maybe you are looking for