Discoverer folders security

Hi,
Anyone any idea if there is any way (query) to figure out the responsibility name or id through which we log into discoverer at that moment?
Thanks in advance
--Kumar

Got it...i can figure that out using fnd_global.resp_id.
Thanks
--Kumar
Message was edited by:
user539616

Similar Messages

Apps 11i, Discoverer, and Security

Just an FYI for those out who are having problems picking up Apps Security when trying to implement Oracle Discoverer on top of Apps 11i. We have struggled over the past six weeks to have Discoverer pick up Apps Security and have finally found a combination that works. If anyone else is having a similar problem and would like the details of our configuration, please e-mail me at [email protected]

Hi,
If you have an issue with Discoverer and security, your best option is to post a question in the Discoverer forum (Discoverer
Rod West

Use Discoverer folders in MSSQL 2005.

I am trying to use folders created through Discoverer Administrator in MS SQL 2005.
Is it possible to use these folders to generate output within SQL as I cannot find them when I drill down through the tables or views in the SQL Manager.
Thanks

Hmm, an interesting question. What kind of EUL do you have in Discoverer? Is this an Oracle Applications EUL, or some other kind of EUL?
When you say you created folders in Administrator, how did you do that? Are you saying you created custom folders? Or that you have imported tables from someplace to create Discoverer folders?
Based on my somewhat limiited understanding of Discoverer, Discoverer does not store actual data. It merely points to where the actual data is stored at. Maybe you are thinking a folder is like a view, but it really is not that. If you want to work with data in MS SQL, then you need to work with wherever the actual data is located at.
Does this make any sense? I admit I am puzzled by your question, so not sure if I am giving you a good answer, or not.
John Dickey

Missing favorites and inbox folders - security?

I applied a custom access level for users on the root folder within the CMC, went to logon and test, however, the users favorites and inbox folders are now missing.
I went to return the security by removing the custome access level, however, remove is not an option at the root level and when I try to change the everyone access to full control (which is supposed tom be the default) still no change, uses cannot see their favorites or inbox.
Please help?

Thanks for your quick response Michael....
We are on XI R2 platform. I went into the CMC as Admin, but cant find Favorites folder.
Actually this Favorites folder is not a public folder, this is the personal one each user gets when their profile is created.
But for one particular user this happens to be missing while the "Inbox" is available. Not sure why??
thanks!
P

Discoverer Portlet security

Once a discoverer portlet has been added to portal, only the user that added the portlet can edit it. The only workaround I can think of is for all administrators to use one generic user to add and edit discoverer portlets.
Does anyone else have ANY other suggestions?

Got it...i can figure that out using fnd_global.resp_id.
Thanks
--Kumar
Message was edited by:
user539616

Mail folders - security

Hi
Is there any way at all to be able to password protect a folder within mail??
I have a work mac which others can access and so would like a sub folder in mail to hold private mail..... I am unable to set up a new account BTW.
Thanks.

It's not really possible, if you don't want people to see your private email you should access it via webmail (so you can close it easily and keep all messages out of the shared mail app) or use your own device like a smartphone.

Discoverer security limitations

Hi all,
Does Discoverer allow security to be implemented down to specific items? If I had a workbook and several users had access to it, would there be a way for me to define which user could drill down into which item? Also, if I had a report for sales figure per region, could I implement security so that one could only
see the details for one's region?
Any help in this regard would be appreciated.
Thanks,
Gillian

Gillian,
For such security requirements, you might want to define different custom folders on top of the exiting and apply security settings to them. e.g create a custom folder which contains all items required for the sales report, but put a mandatory condition of region=<one particular region> on that folder and give access to users for that region...
Cheers
Deepak
Hi all,
Does Discoverer allow security to be implemented down to specific items? If I had a workbook and several users had access to it, would there be a way for me to define which user could drill down into which item? Also, if I had a report for sales figure per region, could I implement security so that one could only
see the details for one's region?
Any help in this regard would be appreciated.
Thanks,
Gillian

How to make Custom Discoverer workbook use Custom Security profile of Apps

We use Discoverer in Oracle Apps setup. We have added Custom security in our HR People Form of Apps.
This Custom Security restricts one HR Emplpoyee not view other HR employee record except for himself/herself. Also maintining that they should be able to view all other employee's records.
The following code was put under the Security Profile Form -- > Custom Security Tab
exists (select 1
from per_jobs b
where ASSIGNMENT.job_id = b.job_id
and (b.name not like '%HR%')
and (b.name not like '%Human%')
and ASSIGNMENT.assignment_number is not null
union
select 1
from fnd_user fu
where fu.user_name = fnd_global.user_name
and fu.employee_id = PERSON.person_id
and ASSIGNMENT.assignment_number is not null)
Above security profile works fine for HR People Form.
However, It does not work for our Discoverer Workbooks. I found a note on Metalink 422841.1 which talks about leveraging the Custom Security of Apps in Discoverer Report. I read it, but did not get much clue.
Can Anyone help.
Thanks

Hi,
If you want to use custom HR security with Discoverer you have to ensure that the correct security filters are applied when the Discoverer reports are run. These filters can use the supplied HR_SECURITY package or you can develop your own conditions using table lookups or functions. To get the filters applied to your reports you have a number of options:
1. Build the security into custom folders using additional conditions
2. Use custom database views in Discoverer and build the security into the views
3. Use mandatory conditions in you Discoverer folders using either a function call or database contexts set at login time
4. Use VPD (Virtual Private Database)
I am not sure which of these options you are using to implement your HR security in Discoverer. The last option, VPD, is the most flexible and can give the best performance but maybe it is more complex to set up.
Rod West

Discoverer - Views vs. Folders

We have been told via a training class that the creation of views for use in Discoverer folders is not as efficient as just creating folders which read against the tables directly and then are linked. Has anyone proved this theory ? We currently create the views and then build the folders based on them. We feel that the direct method suggested by the teacher will cause a maintenance headache due to all of the linking that will need to go on. The WHERE's of the views we have are somewhat complex. Anyone encounter anything relevant to this ?
Thanks !!
Jim E.

Your observation regarding maintenance is very important. I cannot exactly quantify the performance difference of the two methods (and in many cases it should not be much if any), but if maintenance is a bigger issue than a small performance tweak, then do whatever is better for maintenance. You don't want to spend 90% of your effort to get 10% performance improvement.
Hope this helps,
Oracle Discoverer Team http://technet.oracle.com
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by James Ernst ([email protected]):
We have been told via a training class that the creation of views for use in Discoverer folders is not as efficient as just creating folders which read against the tables directly and then are linked. Has anyone proved this theory ? We currently create the views and then build the folders based on them. We feel that the direct method suggested by the teacher will cause a maintenance headache due to all of the linking that will need to go on. The WHERE's of the views we have are somewhat complex. Anyone encounter anything relevant to this ?
Thanks !!
Jim E.<HR></BLOCKQUOTE>
null

How to Define Workbook / Business Ares Security Correctly for new Users

Hi All,
Please could you help me understand the Security Model for Workbooks and business Areas as I believe I am very close to understanding it, but missing something important.
Background Information:
We are using the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger) to build our reports on. These are the steps I am taking to try and assign a new user & responsibility access to the existing report.
1. I create the Report in Discoverer Desktop under the General Ledger Responsibility logged in as myself assume report name = Report_1.
2. I create a new Responsibility in Oracle Apps called Discoverer Resource Coordinators.
3. I create a new User in Oracle Apps called Joe Bloggs and assign the responsibility Discoverer Resource Coordinators to the Joe.
4. Logged in as myself in Discoverer Desktop, Responsibility General Ledger I Share the Report (Report_1) to the new Responsibility I just created Discoverer Resource Coordinators.
5. In Discoverer Administration, Security, I assign the new Responsibility Discoverer Resource Coordinators to the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger).
6. In Discoverer Administration I set privileges so that the Responsibility Discoverer Resource Coordinators can do all tasks, query data, administer. .etc. etc..
7. I therefore believe everything has been done and attempt to Login and run the report under Joe Bloggs, but am unable to retrieve any data.
Help what am I missing!
Thanks,
Lance
Message was edited by:
Lance

Dear All,
This has now been adjusted according to your recommendations but to no avail.
Myself and Lance have ensured that this new responsibility has unlimited access to all the existing Business areas to eliminate joins within folders not being recognised, we have also ensured that the workbooks that have been created are shared with the correct responsibility.
I have thoroughly tested this set up by logging in as this new responsibility within Disco. Client to try and retrieve data in a new Workbook, but even for the simplest of queries this fails.
It seems that there may be a problem with the Responsibility linking to the EUL, could this be due to the new responsibility being created after the Current EUL was set up?
Does anyone have any information or knowledge where this could happen?
Regards
Si

Database Level Security not working ???

The 10 g (10.1.2.1) documentation states the following:
Chapter 7 Controlling access to information:
"Regardless of the access permissions and task privileges that you set in Discoverer Administrator, a Discoverer end user only sees folders if that user has been granted the following database privileges (either directly or through a database role):
ex: SELECT privilege on all the underlying tables used in the folder "
So how come a folder (view in my case - not table) cannot be queried directly by a user, but the folder still shows up a choice when building a report using PLUS ? I am misreading the above ? For is sounds lilke to me if the user account does not have SELECT privilege then they will not see the folder in Discoverer ?
Anyone run into the same issue or have an explanantion ?
thanks
OBX

I think the user has access to see all the folders in the business area in Discoverer if he has permission to do so. This is a Discoverer level security to filter people who should not have access to the business area at all. You'll find that although they can see these Discoverer folders because the permission is set in Discoverer Administrator, that the database tables they are based on will not allow the users to see any of the data if they don't have those rights at the database level.

Discoverer In Apps Mode Help

I am currently working on a project using oracle discoverer and it is being run in "apps mode". This is the first time I have worked practically with discoverer and I am unfamiliar with the standard apps EUL. I understand that the EUL uses a number of views which are located in the apps schema (not sure if these are standard apps views or if the apps eul has created them, the eul as you will have gathered has been installed to the apps schema)
I have been looking for a reference document that covers the apps mode eul however I have been unable to locate anything that describes the workbooks or anything at all about the apps eul in general apart from install documents etc.. from otn.
Has anyone worked with the apps eul?, do you have any feedback/comments about it and if you have any references/docs regarding the eul structure and the available responsibilities etc.. that would be great.
Thanks for your help in advance
Keith

Keith.
Huge potential question, but here's a quick run-down.
There are 2 types of EULs (well 3 now that OLAP is supported). The 'standard' EUL was the only type of EUL at one time where all users were database users or database roles. All worked well and people were happy.
Then Oracle came out with the Apps EUL. The concept is entirely similar to the 'standard' EUL in the sense that the users now ARE NOT database users, but are Oracle Apps (Enterprise Suite) users or responsibilities. It has a bit more smarts also in that (and you may not have set this up properly if having problems) you also have to identify the 'gateway' info in the Admin, desktop, Plus versions. This setting if found in the various programs in the Tools -> Options -> Connections area. You want to make sure that if you only have an Apps EUL, then choose the 2nd. radio button (connect only to Apps EULs). If you have more than 1 EUL (and IMO you should strive NOT TO), and one is Apps and one is standard, then choose the 3rd. radio button. If only a standard EUL then choose the 1st. radio button. For the gateway info top box, 99.9999% of the time (I've never seen otherwise), you put in: applsyspub/pub. For the gateway info. bottom box, again 99.9999% of the time, you put in: apps.
All that is doing is that when an Apps user logs in (ie: Apps username, password and EUL), then it has to use the gateway info to call up Oracle Apps, get info about that Apps username, and present a list of responsibilities they can choose from.
So ... when you have business areas, you have to share them like you did in the standard EUL you know. You could have chosen to share ba's with a database name or a role. If you're smart (IMO), you'd have only shared with roles.
Likewise, in an Apps EUL, you can share the ba's (and therefore see the data their folders are pointing to) with Oracle Apps usernames, or Oracle Apps responsibilities. LIkewise, if you're smart (IMO), you'd only share with responsibilities.
When you create a workbook as a particular user, you can share access to that workbook with an Oracle Apps username or responsiblity. I'm sure you can guess who I believe you should share it with.
So, it's all pretty identical to what you're used to. The only other thing you're referring to ( I believe ) is the BIS views. These are 'freebie' views (well you paid for 'em with Oracle Apps), that can be 'generated' similarly to NoetixViews. There's lots of opinions of these views when compared to NoetixViews, but the concept is similar. Views are owned by the Apps schema, and without going through the process, you 'generate' them in Oracle Apps where lots of good info about your particular environment (ie: kffs, dffs, etc.) are 'put' into the generated view. You'll see many versions of a view where the Oracle Apps schema abbreviation is first, then the 'type' of generated view, then the viewname. Trust me on this - or look up further info - YOU ONLY WANT TO POINT TO THE xxFG_ type of views.
So, you'll see view types for a particular view such as: ARBG_actuals, ARBV_actuals, ARFV_actuals and ARFG_actuals.
Again, without going into the whole subject, the xxFG_ type views are 'fully generated' versions (well, my guess at the FG_ name). These will have all the good stuff in them and only use them.
One last point (to this supposed 'SHORT' explanation), you may well get no rows returned when looking at the Discoverer folders that are pointing to those BIS views (or new folders you create similarly pointing). That's not that "it doesn't work". It's because many of the BIS views have security right on the view. You'll see many times around the last line of the SQL code for the view reference to: CLIENT_INFO, or GL_Security_Pkg, or HR_Security_Pkg, etc. That's just the BIS view stopping you from seeing the data if you're not allowed to see it. In fact, if you bring up the view in TOAD or a similar SQL product, you again may well see no data. Just for testing (and there are other methods such as setting your environment variable), just comment out the security part of a copied BIS view and look at it again in TOAD, etc.
That should give you a SHORT explanation. For more on BIS views, search this forum and the Discoverer forum for BIS info as I know I've written more on the generation process, etc.
Russ

Discoverer 4i to OBIEE migration methodology - Oracle Recommended Way

Hi,
We are looking into a scenario where we are required to migrate large number of Discoverer 4i reports to OBIEE. We have good number of custom reports(approx 200) and views too that are to be migrated.
Am aware about the migration assistant that comes along with OBIEE 10.1.3.4. It's a very useful tool, BUT we need to consider the following facts before proceeding:
1. The tool is not for migrating Oracle E-Business Suite Discoverer reports (BIS).
2. The minimum version of Discoverer EUL that can be used with the Assistant is 10.1.2.n.
3. The version of the RPD file that is generated is dependent upon the installed version of Oracle BI EE that the Assistant is run against but must be a minimum of 10.1.3.4.
What is the Oracle recommended approach... complete rebuild of the repository in OBIEE/ Migration from 4i -> 9i ->10g and then to 10.1.3.4/...?
Appreciate inputs from the product gurus and experts.
Regards
KSK
Edited by: user633620 on Sep 30, 2008 10:04 PM

Ok firstly I'm not sure there is an Oracle recommended approach for migration,.
However based on my experience at an eBS client - the Discoverer workbooks were very different from what we wanted to achieve with our new OBIEE dashboards. The Discoverer folders were based on complex views which joined relevant OLTP tables together and contained both Dimension attributes and Facts in the same folder. They were used by our users mainly to extract data at the transaction level into Access databases, this is something we were keen to move away from, and adopt a more Analytic top down approach, drilling into the detail as in Disco. This did require some additional work with our user base to see what they were actually doing in Access and if we could do this in OBIEE, which in most cases we could (although we did use Apex in places too).
We looked at the migration tool, and it seemed to do a decent enough job technically, however for the reasons above ie. the move towards a top down solution we decided on a manual build approach.
The model for OBIEE had to be different, we broke down the views into their component Dimensions and Facts for - whilst the Physical model was 3NF, we ensured the Business model was a pure Star Schema (this was recommended by Oracle). The Subject Areas were kept quite small, and aligned to the business process, no more than 10-12 logical tables with a couple of fact logical tables, and most of all our dev teams had a set of guidelines to follow to ensure we had consistent repositories (Object Names, Ordering, Logical Levels etc..)
If you are using eBS i would have a look at some of the BI Applications Oracle have produced, you may get a good idea for best practise and standards for producing a repository from them. Also the new 10.1.3.4 dashboard has some examples of good layout, and some nice tips (ie. One Answer per Dashboard page, Prompts at the top etc...etc..)
Good Luck.

Error while changing the owner of an object in Discoverer

Hi All,
I have a problem in Discoverer folders.
I have a folder whcih is based on a view in schema in A, now i have created the same view in schema B and want to change the owner of the view in Discoverer to B.
But when i do that it gives me an error as -
'An error occured with the darabse transaction because the underlying object has been changed'
I am not able to understand this.
If anyone can help me this it would be really helpful.
Regards,
Shruti

Well, this is something not talked about in the Administration training class. My hunch is that you are trying to do something that Oracle never intended you to do. I think when you edit the folder and want to change the Owner property, the idea maybe is that you are trying to change the owner on the original table. Here you have said that you recreated the view in schema B (so technically a different table object). But in Discoverer you are still dealing with the view in schema A as the basis for the folder, not the view in schema B. Though I would think if you can see the new owner's name in the database/user list and thus can pick it, it should let you change the owner property, even if that may not be quite what you intended. Discoverer does store things under the cover (such as unique ids), so maybe something is going on that is not visible. My suggestion would be to open up a service request with Oracle support on this. The idea of dropping the folder and then readding it may be okay, but that would be something you would want to test in some kind of test environment and see what happens (not sure what impact that may have on workbooks using the original folder). Of course it may be possible that you have uncovered an Oracle bug.
John Dickey

10.1.2 App Server and Discoverer

Hello,
I'm attempting to install and configure Discoverer. I have installed the 10.1.2 Infrastructure successfully. As I read the docs for Installing the MidTier, I run into confusion. in part 7 of the Oracle Application Server (10.1.2) Quick Installation Guide, titled Installing Portal and Wireless or Business Intelligence and Forms Developer Topology. It claims that I will have a Business Intelligence and Forms option on the Installation Type screen. Well, this is not true. I have the following options after I choose Mid Tier: J2EE & Web Cache and Portal and Wireless. I don't have a BI & Forms option. Now, I did put the 3 cd's of BI on the machine in assuming that I will need them.
Do I need to install J2EE & Web Cache OR Portal and Wireless from the App Server Disk, or do I just need to install Bus. Intelligence from the 3 BI cd's? The documentation seems to have been a quick copy/paste from a previous version with pieces/steps missing. Thanks in advance,
Kelly

Hi Kelly,
The Oracle Application Server Middle Tier Installation should have the BI option - I just installed the Oracle Application Server 10.1.2.0.0 & as mentioned on the Installer Page, I saw have all these products :-
    * Oracle HTTP Server
    * Oracle Application Server Containers for J2EE (OC4J)
    * Oracle Application Server Web Cache
    * Oracle Application Server Portal
    * Oracle Application Server Wireless
    * Oracle Sensor Edge Server
    * Oracle Enterprise Manager 10g Application Server Control
    * Oracle Database Server 10g (10.1.0.4.2)
    * Oracle Internet Directory
    * Oracle Application Server Single Sign-On
    * Oracle Application Server Directory Integration Provisioning
    * Oracle Application Server Delegated Administration Services
    * Oracle Application Server Certificate Authority
    * Oracle Application Server Forms Services
    * Oracle Application Server Reports Services
    * Oracle Application Server Personalization
    * Oracle Business Intelligence Discoverer
    * Oracle Security Developer Tools
    * Oracle Application Server Guard
    * OracleAS Backup and Recovery ToolDid you download the CDs from the download page ? :-
http://www.oracle.com/technology/software/products/ias/htdocs/101202.html
Regards,
Sandeeep

Discoverer folders security

Similar Messages

Maybe you are looking for