DP Security for certain data view

Hi all,
Did anyone know if there is authorization object for a specific data view in planning book ? I want user to have access to just a certain data view not all of them in the planning book.
Thank you in advance for your help,
Paranee

Hello Paranee -
Planning Area, Book
C_AP0_PB - Planning book
C_APO_SEL3 - Selections in planning books
Authorization objects C_APO_SELE (Release 2.0) and C_APO_SEL2 (Release 3.0 up to Support Package 9) still exist in the system. They are however obsolete. If C_APO_SEL2 has been assigned to a profile, set all field values to "*".
C_APO_IOBJ Key figure
C_APO_CPY Copy function in data realignment
C_APO_ RLG Realignment, maintain realignment table
Authorization Checks in SDP
All authorization checks in SDP are performed by the function module
/SAPAPO/MCP_PERMISSION_CHECK2 for individual data objects and /SAPAPO/MCP_PERMISSION_SELECT for a range (table) of objects such as products, locations, or planning books. This second function module incorporates the first one.
If you want to adjust the result of the check, or program your own authorization check, you can do so by using user exit /SAPAPO/SAPLMCPR_015 in function group XDMUSER.
Hope this Helps.
Regards,
Suresh Garg

Similar Messages

Security for Military Data --- our Options -- Share your experiences

Hi,
We want to secure military specific data in SAP.
We also want to comply with ITAR requirements.
One option is to create roles and profiles and then assign it to users who can view that data. In this approach the biggest problem is over head of maintaining 100's of profiles and roles. Our company does not have suffecient funds or team to do that.
Second option was to use development and here is how we envisioned it.
Maintain an indicator for foreign nationals in HR and also maintain an indicator for military personal in HR. (We are allready doing that, for some other busines process) So this table will tell us if an employee if foreign national or a military personal.
If Military person.
give access for military specifc data.
else.
error message.
endif.
similarly
if foreign national.
give error message.
esle.
let him view data
endif.
Now we are not sure if SAP has a common routine for authorizations, which we can change and add these conditions in it. (We will do core mod by getting access key).
If we follow this approach will we have to modify a single routine (for all SAP modules) for all master and transaction data transactions, or will it be multiple routines which we will have to modify.
We also need to cover authorization for table maintenence, transaction codes, org structure level...etc.
Can you please provide your inputs/point of view on this.
Will apprecaite if you can share any other option.
Thanks in advance.

Agreed with Wolfgang, roles & profiles are better in the long run than system mod.
There are ways to redesign roles to make them manageable. Example: Derived roles.
If you already maintain the users thru HR, you can assign roles in R/3 to Job, Position, Work Center, etc. Another idea to help you automated the roles assignment.
Regards,

Data security for multiple data sources

Dear BO guru's,
I am struggling with a brainbraker on authorizations on Universes since quite some time.
I am not a BO guru so hopefully someone can help me with this.
I (more or less) know the concept of data security in BO: users can be restricted on data level in (mainly) two ways:
1) with roles in CMC and with restrictions in Universe Designer.
OR
2) with a DB table that contains all authorized values per user and per field (i.e. John can see data for country UK)
The first is easy to set up, but hard to maintain.
The second is difficult to set up, but very flexible.
Now here is the problem...
Supporse your BO server is connected to different source systems (i.e. an SQL server, an Oracle server...) and you want only one universe to get data from all systems at the same time and display it in one report.
If I am not mistaken, this means we need a data federator.
...My questions:
1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
As this questions keeps me busy since long time, I would be very grateful to have your help.
It seems hard to find information on this.
Thanks a lot in advance!
UniverseDummy

1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
Apart from the Data Federator, you can either use an ETL tool to load your data into a single Datawarehouse or wait until XI 4.0
2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
If you are going to use the Data Federator then you can create the table in one of your source systems and add it as a data source in your DF project.
Regards,
Stratos

Restrict authorizations for loads from HR to BW for certain data

Hi,
our customer wants protect some data in the HR productive system. This data are defined/restricted by certain personal areas.
It is not enough to use reporting authorizations in BW to restrict presentation in queries or use filters in infopackets during load to avoid this data.
The requirement is to make load of such data from HR to BW absolutely impossible, even BW administrator cannot see them and must not be able to load them.
We will probably have to somehow limit ALEREMOTE users authorizations in BW. I do not know how and I even doubt, that extractors in HR source system perform authorizations checks for fields.
Is there any way to do this?
Thank you very much,
Petr

Hi Petr,
Create a general enhancement program (restricted authorization) with generic name, which should be called dynamically for every datasource.
Refer-
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/2d99121a-0e01-0010-e78c-b1ae566a2413?overridelayout=true
Not personally tested but check following.
In that program, you may try applying following logic:
1) You may need to use TYPE ANY field symbols
2) In While Loop until all fields of C_T_DATA checked, may be a counter based on total number of fields.
DELETE C_T_DATA where <TYPE_ANY1> EQ (OR use IN) specific value(s) of Personnel Area
DELETE C_T_DATA where <TYPE_ANY1> CS (Contains, check pattern) specific value(s) of Personnel Area
ENDWHILE.
Optionally: For Standard Daatsources in the same program you can add logic based on standard field only "WERKS".
Note: You may need to research on dynamic pointing using field symbols for every field.
Thanks
Arun Purohit

Need additional security for schema data

Hi All,
I am using Oracle Database 11g Enterprise Edition Release 11.2.0.1.0.
Our client want to secure there data at schema level.
Suppose even though i logging to schema by providing the userid and password the data should not be visible until i provide with some more verification like one more password or something like this.
Please if anybody have idea of such scenario please share with me.
Thanks
Jamsher

That kind of security needs to be implemented on the application level. If the client logs on from the command line tools like sql*plus, there is nothing like a dual log-in which is going to be there . Yes, you can use FGAC to restrict the data based on some business rules if you want but whether that's what your client needs, you need to clarify .
Aman....

Skip currency translation for certain data source members

I have got percentage data againist some data source members which I do want to translate when the currency translation is executed. Is there a way to achieve this? The business rules for currency translations only have account and flow dimensions and does not include data source dimension so I am not able to filter out datasource dimension members in currency translation business rules.
Any suggestion how it may be possible to filter data source member during currency translation execution?
Thanks in advance.

Hi there,
You can use the *XDIM_MEMBERSET with the DATASRC dimension to limit what data gets translated (7.0 M SP9)
Please see [Note 1522149|https://service.sap.com/sap/support/notes/1522149] - XDIM_MEMBERSET can be used with DataSrc in Business Rule
Also, the IS_CONVERTED property in the DataSrc dimension can also be used:
The IS_CONVERTED property
The members of the DATASRC dimension will be processed according to the value of the property IS_CONVERTED, as per the following rules:
IS_CONVERTED = N: These members are ignored in the conversion
IS_CONVERTED = Y: These members are converted from LC into the desired currency
IS_CONVERTED = G (group): These members are copied from the reporting currency of the GROUP being translated into the currency member corresponding to the given group.
This obviously only applies if the translation is run for a GROUP and not for a reporting currency.
All members of the DATASRC dimension having the property IS_CONVERTED not set to u2018Yu2019 will be skipped.
Thanks,
John

DART: Generate program for data view query:RTXWGQ01

Hi all,
We've this program RTXWGQ01 which is generating programs for data view queries.
I'd like to know what is this data view which is there on the selection screen of this program?
Can we define Z data views, if so how? If we directly run this program in production for a data view does it automatically generate an executable program?
Is there any transaction which runs this program in background?
Regards
Deepthi.

Hi,
i m answer my self about this question
it is possible to use a extraction file generated by S2 system in S1 system to query directely this file and we can also to use this file by view query transaction
The only restriction is to use the same technical configuration for the both systems FTWP (technicals options)
bye
Mohamed

Unable to see live data view for a access db

I'm using the following:
Asp.net C#
Server 2003 Sp2/
DW CS3
Access db
I'm attempting to connect to a "local" db on my server.
I use the database connection string"
Provider=Microsoft.Jet.OLEDB.4.0;
Data Source=C:\catalog\Catalog\files.mdb;
Persist Security Info=False
ole db connection
While in the data link properties window the connection is
successful but in the ole db connection window I get "An
unidentified error has occurred".
If I just press ok I'm unable to see any of the table in my
db.
All I want to do is setup the Live Data view
Thanks in advance for all your help.

"madhooper" <[email protected]> wrote in
message
news:fcc6vt$jd6$[email protected]..
>
>
> I'm using the following:
>
> Asp.net C#
> Server 2003 Sp2/
> DW CS3
> Access db
>
> I'm attempting to connect to a "local" db on my server.
> I use the database connection string"
>
> Provider=Microsoft.Jet.OLEDB.4.0;
> Data Source=C:\catalog\Catalog\files.mdb;
> Persist Security Info=False
> ole db connection
>
> While in the data link properties window the connection
is successful but
> in
> the ole db connection window I get "An unidentified
error has occurred".
>
> If I just press ok I'm unable to see any of the table in
my db.
>
> All I want to do is setup the Live Data view
>
> Thanks in advance for all your help.
Did you configure your testing server?
Set up a testing server
http://livedocs.adobe.com/en_US/Dreamweaver/9.0/WSc78c5058ca073340dcda9110b1f693f21-79e0.h tml
Preparing to build dynamic sites
http://livedocs.adobe.com/en_US/Dreamweaver/9.0/WSc78c5058ca073340dcda9110b1f693f21-7a31.h tml

Separate security for both of two distinct parties - 1 the data owner - 2 the application owner

I have written a web application in .net that runs on a shared server using Sql Server 2012. My program is only useful if I partner with certain data owners. I need to protect my program; they need to protect their data. I am assuming they at least run Sql
Server 2008 R2. I need to interface with their database using a couple of stored procedures. I want these procedures to only be available to my application, and I want the processes and output of the stored procedures to be apparent to me and to my application
alone. I assume they want their data to only be available to my application, not to me generally. This application needs to be available from my website, as well as from their website. I realize this question touches on areas outside of Sql Server Security
as it reaches into basic architecture as well. Any help or pointers to help would be greatly appreciated.
Thank you,

That article discusses the situation in a single instance of SQL Server and is in no way applicable to a scenario where you want to set up trust between a web server and an SQL Server instance.
There is one thing you can do with certificate, that possibly may be appliable to your situation. Say that you develop the stored procedures at your site, and then deploy them at the other site. You want to make sure that the procedures are not modified
locally. To this end yon can sign the stored procedure with a certificate locally. When you ship the procedures, you also ship the public key of the certificate, and in the install script you use ADD SIGNATURE WITH BLOB to sign them. You take that blob from
your home system.
Your web application can then repeatedly check that the procedures are signed with the correct signature. It the procedure is changed locally, the signature is lost. They can re-sign it locally, but not with the certificate you shipped.
This does not prevent other users from calling the stored procedures or look at the code. For that you need trust and contracts between humans.
Erland Sommarskog, SQL Server MVP, [email protected]

Long time for loading Planning books/data views

Hi
Could someone throw some pointers/solutions for extremely horrible time taken for a planning view (data view) to load and populate for certains selection profiles that already have large number of trasactional records. In my case it is specifically the run time dumps thrown for a popular combination (large number of transactions).
Urgent suggestions/solutions required. Pls. call 9923170825. India, if you are lazy enough to type it out. or just type in some key words, tcodes etc.
Thanks

I hope you dont have too many macros hogging the memory in interactive book. The other thing is to be on the latest LC build. Also try to have default unit of measures (keep the dataview settings for UoM blank).
Can you confirm if you build the TLB view brand new in 5.0 or did you do some migration of the books ? The first time opening of book takes longer due to some compilation of certain objects. in SM50, try to identify where the process takes longest - whether it is at client end, at the DB procedure of LC or at application level.

Effect on SD Credit Limit when extension of Due Date for Certain Invoices

Dear SD Members,
Brief Description
Extension of Due Date for Certain Invoices
Due Date extension to be made for certain invoices posted in FI
Requirement
After Billing is done and invoice is posted in FI management may decide to postpone due date for certain for any particular invoice for a specific customer.
The payment term will be changed in the invoice and due date should change. But for this no SD credit limit should be affected. The change can only be made by specific user with authorization. The bank also will be intimated with details from SAP.
What I want to know will there be any effect on SD Credit Management part, when from FI side invoices payment terms due date will be extended. Please share your view & suggestions on this.
Regards
Subrat

There will be no affect on the credit mgmt..... the credit screen captures the total open AR... it does not consider Aging in AR.... all the values even if not due r calucalted in the open AR purpose for Credit....

How to Extract Data for a Maintenance View, Structure and Cluster Table

I want to develop 3 Reports
1) in First Report
it consists only two Fields.
Table name : V_001_B
Field Name1: BUKRS
Table name : V_001_B
Field Name2: BUTXT
V_001_B is a Maintenance View
For this one I don't Find any Datasource
For this Maintenance View, How to Extract the Data.
2)
For the 2nd Report also it consists Two Fields
Table name : CSKSZ
Field Name1: KOSTL (cost center)
Table name : CSKSZ
Field Name2: KLTXT (Description)
CSKSZ is a Structure
For this one I don't Find any Datasource
For this Structure How to Extract the Data
3)
For the 3rd Report
in this Report all Fields are belonging to a Table BSEG
BSEG is a Cluster Table
For this one also I can't Find any Datasource,
I find very Few Objects in the Datasource.
For this One, How to Extract the Data.
Please provide me step by step procedure.
Thanks
Priya

Hi sachin,
I don't get your point can you Explain me Briefly.
I have two Fields for the 1st Report
BUKRS
BUTXT
In the 2nd Report
KOSTL
KLTXT
If I use 0COSTCENTER_TEXT Data Source
I will get KOSTL Field only
what about KLTXT
Thanks
Priya

Power View in SharePoint Server - The data extension type for a data source is not valid

Hi All,
All of a sudden I am getting following error when trying to create Power View report using shared report data source (no error testing the connection):
"The current action cannot be completed. The data extension type for a data source
'http://dev/Shared Ducuments/Sales.rsds' is not valid for this operation"
I already have a data source (I had created it after creating my site collection a week ago) and when I use this source to create Power View report then there is no error but I am getting above error when I create another similar data source and use it to create
a Power View report.
Please help me to resolve the error.
Thanks

I am going nuts! I had selected 'Analysis Services' instead of 'Microsoft BI Semantic Model for Power View'

HT201299 My Iphone 4s wont remember the disable cellular data for certain apps as I soon as I switch on the 3g and go back to home and come back again to Cellular the all apps are being enabled..Please help

My Iphone 4s wont remember the disable cellular data for certain apps as I soon as I switch on the 3g and go back to home and come back again to Cellular the all apps are being enabled..Please help

First, try a reset: hold down the home button along with the power button until you see the Apple, then let go.

HT201299 Not enable or disable cellular data for certain iOS apps and features from setting? I keep it off but when I go to other app it on automatic

I can't enable or disable cellular data for certain iOS apps and features from setting.
When I off data for specific application and go to other option it automatic on all application
Any one can help

SOLUTION! (NO NEED TO RESET YOUR IPHONE SETTING!)
I have the same issue for the last two weeks. But i have already managed to solve the issue all by myself. When i go to Settings > Cellular > below the tab "use cellular data for:", i turned off some apps which i didnt want to use with cellular data. As soon as i go back to Settings, and then i went back to Cellular, the apps which i had switched off earlier, automatically turned back on.
Here's the solution:
Either you're using wifi or cellular data, first of all you're gonna hafto turn on the cellular data use for App Store. Once you have turned it on, go to App Store application. Update ALL the apps which have new updates available. If it asks you to log in your App Store, just do so. If there's something wrong with your debit or credit card information, it will ask you to update to a different card. Just do what it asks. Put in a new credit or debit card info and fill in the forms provided. The card you're using must be usable and has usable balance in it. Let's say atleast $10 to $20. As soon as it confirms your card successfully, the app updates will start automatically. Continue to update all the apps. After all updates are finished, go back to Settings > Cellular. Try to switch on or off some apps for data use and recheck.
Try it yourself! Have a nice day and don't put a blame on Apple for this.
From Malaysia, with love.
Please hit LIKE button if this solve your issue. Thank you very much! (:

DP Security for certain data view

Similar Messages

Maybe you are looking for