Document Universe Overloads/Access Restrictions

Is there a good way to document universe overloads/access restrictions? I can't seem to find anything. We have a ton of universe objects which are restricted for certain users/groups, and we need to re-work this list. Ideally, I'd love to have these listed out by restriction name - restricted object, or restriction name - row-level restriction.
Any help is much appreciated!

Hi Kunal,
Yep, that's exactly what I did. The query I used was:
Select SI_NAME, SI_OBJECTS
from CI_APPOBJECTS
where SI_KIND like '%OVERLOAD%' and SI_PARENT_CUID = '<universe ID>'
This worked fairly well, but it would be great if SAP would give us an ability to output these queries to Excel to make them more manageable.
Thanks!
Bill

Similar Messages

Access restriction in Universe

Hi All,
In our environment we have 2 domain (US and Europe) and most of the user have id created for both the domain. We have 2 identical databases one in US and other in Europe. US database holds US information and Europe holds Europe data.
In our BO environment we have set the ad groups to create new id for each user Alias i.e if the user abcd has access in both US and Europe domain BO creates 2 separate ids for each domain (bo internally creates abcd and abcd0). We have only one universe and set of reports which has connection switching based on the domain user logs into BO (access restriction at connection level). This works absolutely fine, switches database connection depending on the domain user logs in.
Now we are hearing from our users that they can access the personal reports created under Europe login in US login (this because users has abcd and abcd0). So we decided to create enterprise id and alias the users from AD group (abcd --> alias AD abcd), if we do this the change the connection swap is not happening as the BOUSER always returns abcd as user and universe restriction is only picking the default connection.
Thanks
Srinivas

Hi,
As you have mentioned in the post that OS is solaris. so for Solaris LAFix has been released by PG for this issue.Below are the details:
VERSION:     XIR3.0 LAFix0.18
PLATFORMS:       Solaris Solaris 10
LANGUAGES:       English
ADAPT ID:      ADAPT01099598
Synopsis:     Universe connection override does not work u2013 Error WIS 10901
WARNING: This LAFix has not been through a full regression test cycle but it has been deemed to fix the problem reported by the customer. Inadvertent introduction of an unforeseen issue can however not be fully excluded. Before providing this LAFix to the customer, Customer Assurance must perform their own tests to confirm customer issue is solved.
ADDITIONAL INFORMATION
       Installation Instructions :
1.     Stop all BO Enterprise services, e.g <BOE_DIR>/bobje/stopservers
2.     Gunzip and Untar XI3.0_RHEL_LAFix0.18.tar.gz
3.     Change directory to <EXTRACTED_LOCATION>/LAFix0.13/DISK_1
4.     Run install.sh
5.     Re-start all BOE services, e.g ./startservers
       Uninstall Instructions :
2. Run uninstallpatch.sh from your system.
     New Behavior :
            The above issue is now resolved.
     Limitations :
            No known limitations
     Component(s):
      libuum.so
Note: LAFix is released on top of XI 3.0
To download the or get the LAFix you need to contact to your Sales Account Manager of BusinessObjects.
Cheers,
Deepti Bajpai

Prompt @ Universe - Access restrictions

Hi all,
Can we apply the Access restriction for Universe level prompts?
Requirement :have 2 prompts at Universe level based on user i need to restrict any one of the prompt at report level
Best regards,
reddeppa k

Hello,
If I understood you clearly what you want is if you have two filters defined at universe level e.g. Filter1 & Filter2 so you want user1 to see Filter1 and User2 to see Filter2.
You will not be able to restrict filter like this but you can: -
1. Create a new object with same definition as per your filter and then using "Manage access restriction" set restriction for these objects.
2. If you have these user accounts in DB, you can use @variable ('BOUSER') in your where clause and direclty restrict the data fetched from database.
Thanks,
Vivek

[BO3.1]How can I copy access restriction to another universe

Hi experts,
I have an old universe which contain a very complex access restriction setting. It is time consuming if I create it again in a new universe.
I tried to delete all objects from the old universe and then create the new objects on this cleaned universe, however this method creates some serious bugs.
Therefore how can I copy the access restriction from the old universe to the new universe?
Thanks,
Gordon

Dear Antony,
If the old universe are upgraded from previous version (eg: from R2 to 3.1)
You should not remove the contents in the old universe and then build some new objects in this universe. It will create some unexpected bugs.
You should rebuild a new universe from the beginning.
If the old universe are not upgraded, you can remove the contents in the old universe and then build some new objects in this universe so that we can keep the access restriction.
Thanks & Regards,
Gordon

Create access restriction in designer using script

Hello,
I am looking for a way to automate the creation of access restriction within universe.
I looked in the API universe reference and it seems that there is no entries for such an object
For information I use Business Objects XIR2 with SP3
Thanks for any help or answer

Creation/Modification of Universe Access Restrictions is not part of the Universe Designer SDK, but part of the BusinessObjects Enterprise SDK.
It requires sending requests to the CMS using the SDK to get User and UserGroup information.
For the COM-based version of the Enterprise SDK, the object is known as Overload, and described here:
[http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/en/BOE_SDK/boesdk_com_doc/doc/boesdk_com_doc/CrystalEnterpriseOverloadPluginLibrary.html#1351377]
Sincerely,
Ted Ueda

How to migrate "Access Restrictions" from One Environment to another Env

Hi ,
Can anyone suggest regarding the "Access Restrictions" , we need to move the "Access Restrictions" from one environement to another environment .
Thanks & Regards
Venkat.

hi,
When using Import wizard,
while importing Universe, Please check the below option to migrate Access Restrictions.
"Keep Universe Overloads for imported Users and Groups"
Regards,
Vamsee

"access restrictions" did not work sometimes when using 3-tier DeskI.

My customer found that "access restrictions" did not work sometimes when using 3-tier DeskI.
But this issue can be solved by logging on from another machine, or restarting the DeskI.
For I can reproduce this issue, so I just want to know that:
1.What is it probably related to?
2.If this issue happens again, what can I suggest my customer for tracking it?
For example, get some log files from servers etc.
Thanks!

Hi Sarah,
Also you can try the following solution.
1. Import the universe.
2. Go to manage access restrictions
3. Remove the restriction .
4. Again create the rescrition and unchecked the " limit size of result set to"
5. Now assign it to the unlimited results group ( this is the name of
the group we have given to those users who should be able to retrieve
more than X rows)
6. Now we save the universe. (Dont export the universe).
I hope this will help you.
Regards,
Sarbhjeet Kaur

@prompt used as part of Access Restriction

We are struggling with implementing this, and wanted to check to see if this we can accomplish this. We need to use an @prompt as part of an access restriction applied to the everyone group in order to force all users to select Group A, B or C at run time. We've added the prompt into an access restriction, but we cannot get the query to finish processing. Does anyone have a thought about this?

Tony,
If you are using BOE XI 3.x, I suggest you create a predefined filter that includes the prompt definition in the universe and set it as "Compulsory applied on universe".
Thus will prompt any user to answer to the prompt you will define in this predefined filter.
Hope this helps.
Didier

Universe overload migration failure

Hi All,
Iu2019d like to ask your help concerning an issue that Iu2019m charge of resolving. It's concerning the migration of universe overload from a source to a destination. Two unviverse restrictions are applied on two groups in the source: Rest1->Group1, Rest2->Group2.
These are the steps:
1- In srource CMC create 2 groups: Group1 and Group2
2- In Designer apply two row restrictions Rest1 applied on Group1 and Rest2 applied on Group2 (I used eFashion universe)
3- Export the groups and eFashion universe to destination CMS using Import Wizard (keep the universe overload)
4- In the destination CMS, Create a new user User1 and add it to the newly imported Group1 AND Group2
5- In the destination system, Log in InfoView using User1
6- Create a new Webi doc using eFashion universe
7- You get this error :
User rigths not found: See your BusinessObjects administrator (Error WIS 00502).
does anyone knwo why the user rights cannot be found?
Thanks in advance,
Mohamed Ali

Grace's Babe wrote:
Trying to use Migration Assistant to transfer files from my G4 Mirror Door to a G5. Both are running updated Leopard.
Firewire's connected, everything seems to work fine, until the process is nearly done about an hour and half later. Then I get the message "The Mac you are transferring from is not responding. Check your network connections."
I don't get this. Why would the process fail at the end when all is working fine?
who knows. how are computers connected? via ethernet or airport? can you boot G4 in target mode and connect it to the G5 directly? try transferring that way.

Setup more than one policy in one day using Access Restriction

Anyone can tell me how to set up two policys in one day using Access Restriction ?
For example:
For Weekdays, before 6pm, no restriction to use internet. after 6pm, internet ok, but certain web site or ports need to be blocked.
I can set up policy for after 6pm but then before 6pm, the router consider no-internet access period.
Any advise ?

what you just need to do is to set the policy to allow from 6PM upto the time you wanted your router to give internet access... and just set the status to enable.. type in the LAN mac adress of your router in the edit PC list, then save the settings
"a helping hand in a community makes the world a universe"

Structural Access Restriction

G'day all.
I am wondering what are options available in SAP if we'd like to put additional user restriction base on organisation structure. I know the structural authorization but if we don't have HR module, what sort of options available in the standard SAP system?
Thanks

sandy,
What is stuctural access restriction?
Additional user restriction in SAP system like (SRM, CRM...
You can restrict users on personnel number ( I know you dont have HR installed)
Indirect role concept
Position based secureity
all deal with org struture.
In Ecc you can go with role base security or enabler concept
In SRM : we restrict user on org struture & even in CRM also .(for more information search for documents).
Thanks,
Sri

Does Adobe RoboSource Control provide a facility of access restriction on the WebHelp output?

I need to publish a WebHelp document that can be accessed only by a specific group of people.
In order to ensure that only the specificied group of people access the document, can it be restricted by aligning it with individual user ID/pwd? Is there any facility provided by RoboHelp/RoboSource Control to restrict access through individual User ID / password?
- If yes, how can it be implemented?
- If not, is there any other alternative?
Some direction would be really helpful. Thank you!

RoboSourceControl is just a source control application. It certainly does not have the sort of functionality you require. Neither would any source control application. You have some options though.
Publish your WebHelp to location that can be secured to a specific group of people. Your IT people can help here.
Purchase a RoboHelp Server licence and output WebHelp Pro rather than WebHelp. RoboHelp Server allows you to restrict access to users with a userid / password.
If PDF is an option, output to that and secure the PDF file to those with the supplied password.

WRT54GX2 Timed Access Restrictions work too well

I have set three access restrictions applicable to both a laptop (ethernet and wireless MAC addresses) and a desktop. They all work the first time; however, once they shut off internet access, they don't permit reconnection at the time they should. The time functions all seem to be set correctly and working properly. Is it possible that I am somehow "overloading" by having three separate MAC addresses for each access policy? Should I limimt each policy to one MAC address? Thanks.

Yep, I have the same problem. No answer yet on the thread I opened. I have 2 policies with 2 MAC addresses from a wireless network listed. It locks them at the right time, but when the morning comes, they remain locked. It didn't work the first 2 days, then it worked for 2 days, then it failed this weekend again. Just logging into the router doesn't solve it. Either a reboot (pull the power cord and plug it back in) or a re-save of the config (without even making any changes) also makes access available again.
It has to be a bug. The config is pretty cut and dried. Of course, it could be a clock problem if the router doesn't know what time it is! Not sure exactly how to troubleshoot that one. I've checked the logs, and they have the right time stamp in them, so I don't think this is what's happening.

E3000 Deny Access Restrictions not releasing

I've just recently purchased a Cisco E3000 router.
I've set up 3 Access Restriction - Deny policies using IP addresses.  Unless someone has a better idea I found I needed two policies to Deny from late at night (say 10.00pm) till first thing the next morning. As this spans two days I needed a Deny policy from 10pm till midnight, and another for the next day from midnight till say 7.00am.
Now to my problem, the laptops get 'Deny'ed exactly as they should within a few minutes of the set time, problem is they do not reconnect the next morning after the Deny time has passed.
Cisco help wasn't any help, and wanted me to use Cisco Connect. However the overly simplistic options it provides are next to useless for me.   The web option has more flexibility, if only it'd work.
Do I need to need to force an Allow to override the Deny but establishing a fifth policy just for this purpose? Don't know if this'll work but I've got no other ideas.
All help greatly appreciated

Anyhow, I'll answer my own question based on one nights experience.
Made the 5th (and last, don't know why all the reviews say you can have 10 policies, there are only 5) an Allow policy for the previously restricted IP addresses with the parameters of Allow everyday for 24 hours.
Last night the Deny policies as the first in the list worked correctly and the two restricted laptops had access back again at the set time. So on a test of one night it's all working correctly.
The trick was the inclusion of a universal Allow policy as the last policy to force a release of the Deny policies. I'll post again if it doesn't work at some point in the future.

WRT54G2 and WRT54G locks-up (freezes) when blocking web sites using Access Restrictions

I am convinced that a few Linksys routers such as WRT54G2 and WRT54G have a major issue when blocking web sites using Access Restrictions (Internet Access Policy). After a few hours of internet access by 15 wired users the Linksys locks-up and blocks all internet web access. The only solution is to restart the power on the router.
We are currently using a Linksys WRT54G2 v1 (firmware 1.0.04). We upgraded the WRT54G2 v1 firmware to the latest 1.0.04 version which did not resolve the issue. NOTE: We were previosuly using a a Linksys WRT54G v1.1 (firmware 4.21.1) until the power supply blew a week after we started blocking web sites using Access Restrictions (Internet Access Policy).
Basically, we have a T1 internet connection and a hub connected to the Linksys router. We are trying to block several web sites such as facebook, myspace, etc. for 15 wired users. We do not use wireless connections.
This is the 2nd time it happened with 2 different models.
Please help ASAP.
Thank you,
Lance
(Mod note: Edited post. Some parts off topic.. Thanks!)

Also, you have already upgrade/re-flash the firmware of your Linksys Router you need to reset and reconfigure your router from scratch. Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

Document Universe Overloads/Access Restrictions

Similar Messages

Maybe you are looking for