Generic Dimension ( Security Enabled)

Hi
When I enable security on a "generic" dimension, is it possible to have the data roll up all the way to the very top ( the actual dimension name)
For example, i have this type of hiearchy
Product ?
Total Product 10 +
Alt. Product 5 ~
I would like my users to be able to see the 10 at the "Product" dimension in a pull sheet. Right now, they must change to "Total Product" to see a number. I can't
figure out how to give them access to "Product" - - - IS IT POSSIBLE?
Thanks.

John - thanks for your reply. just a couple of follow ups if you don't mind.
you say "usually" - could you give me a an idea of what some of the exceptions ? does it matter if it is dense / sparse or dynamic vs never share?
also - in the essbase add in, when you initally retrieve and it gives the template with top level of each dimension, is it possible to have it start out with the lower level so
they get a number at first, vs "no access"

Similar Messages

What are all the dimensions that have security enabled by default?

Hi,
can any one tell - What are all the dimensions that have security enabled by default in planning application
Thanks,
Kumar

Accounts, Entity, Scenario, Version
Cheers
John
http://john-goodwin.blogspot.com/

Unable to call WSS (WS-Security) enabled Web Service using UTL_DBWS

We are attempting to call a WSS (WS-Security) enabled Web Service from PL/SQL using the UTL_DBWS package (see [http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/u_dbws.htm#CHDIDGJH] ). We are doing this in similar fashion to [http://www.oracle-base.com/articles/10g/utl_dbws10g.php] with calls to utl_dbws.create_service, utl_dbws.create_call and utl_dbws.invoke.
Using this method we can successfully call an unsecured Web Service, but calls to WSS-enabled Web Services fail. We are currently using Oracle Database 10.2.0.3.
The failure we are getting is:
ORA-29532: Java call terminated by uncaught Java exception: javax.xml.rpc.soap.SOAPFaultException:
com.sun.xml.wss.XWSSecurityException: Message does not conform to configured
policy ( AuthenticationTokenPolicy(S) ): No Security Header found;nested
exception is com.sun.xml.wss.XWSSecurityException:
com.sun.xml.wss.XWSSecurityException: Message does not conform to configured
policy ( AuthenticationTokenPlicy(S) ): No Security Header found
Apparently UTL_DBWS does not support calling WSS enabled services, although this doesn't appear to be an officially recognised position. Does anyone know if Oracle are planning to support this soon (if ever)? Looking at Re: Calling WS from PL/SQL using WS-security suggests that support has been considered before, but not yet realised.
Thanks,
Tom

Having raised a Service Request with Oracle support on this, I got the following response from Oracle Development (On unpublished bug [8542959|https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=BUG&p_id=8542959]):
Development has confirmed that WS-Security is not supported through UTL_DBWS. They have also acknowledged that this is not documented and they will change the official Oracle documentation will reflect this fact. From what is being stated, it would appear that there is no plan to support the use of WS-Security through UTL_DBWS in any release in the near future.
So, in short, without developing your own home-grown SOAP request, there is no way to call a WSS enabled web service from within PL/SQL.
-Tom

How to connect my IPad to a security enabled wifi

how to connect my IPad to a security enabled wifi

iPad not connecting to a Secure Wi-Fi signal
Turn OFF your wifi hub so the network is not broadcasting (or go out of range) so the
iPad can no longer see the SSID
Choose another network
Type in the SSID (WiFi Network name)
Select the security type
Enter the password
At this point, you will not be able to join the network (it is not turned on or you walked out of range, remember?)
Turn ON your network hub and wait for the DSL or Internet to get connected, (30 secs to 1 minute in my case) or walk back in range
Then click the Join button on the iPad
Voila, as they say in Texas

Server errors result in blank pages with security enabled

I have been working to security-enable my ADF 11 application using JDeveloper 11.1.1.0.0. Users, roles and grants all appear to be working as expected. However, I have discovered that server errors no longer appear once I put security in place.
For example, take a simple JSPX page with one button, and attach an actionListener to the button. In the actionListener, throw an exception. When no ADF security is in place, this results in a 500 server error page, and the exception stack trace (or part of it) is written to the Weblogic console inside JDeveloper. Once ADF security is in place, the behavior changes. The result is a blank page (absolutely no content). Even worse, the exception stack trace is no longer written to the Weblogic console.
I have tried to work around this by setting an <error-page> in web.xml, but it doesn't seem to make a difference. I do know that my <error-page> configuration works in general, because I have a "not authorized" error page set up to catch the ADF AuthorizationException, and that is displayed properly. I have also seen the error page invoked for errors that happen earlier in the rendering process (for instance, if I forget to set a default page in my bounded task flow).
I don't have any idea where to start on this. Google hasn't been much help, possibly I don't know what I'm looking for.
Anyone have any suggestions?
Thanks,
KEN

We have found a solution to this problem, which we are going to go with until something better pops up.
In the main unbounded task flow (adfc-config), we added a method call marked as the error-handler. In the method call, we log the exception, something like this:
    public void handleException() {
        Exception e = ControllerContextImpl.getInstance().getCurrentViewPort().getExceptionData();
        e.printStackTrace(System.err);
    }Then, the method call forwards to a JSP to display the error:
<af:inputText label="Error" value="#{controllerContext.currentViewPort.exceptionData.message}"/>That gets us the equivalent of the old behavior.
I still find it kind of strange that errors aren't displayed once security is enabled, but at least there is a workaround.
KEN

Dimension Security causing SSAS cube to slow down

Hi,
Experiencing problems with with the SSAS cube once its processed. Sometimes takes around 20 mins for the excel to load once you drag down any dimension.The cube has got no calc scripts/named sets etc.It has around 17 dimensions and one dimension(Employer)
has got 46 attributes and another (member)17.Others are pretty small.The Employer dimension is used twice as role playing and the both employer/member have got dimension security applied to it.There are about 6 roles have been set up to restrict access to
members in these dimensions.
The SQL profiler shows multiple "Query Dimension" (mostly for Employer dimension)followed by a lot of "Calculate Non Empty Current"s .Suspect that the delay is due to the dimension security expression evaluation.This only happens
during first access of the cube within a role and it's relatively quick when I'm accessing via a role which doesn't have dimension security applied to it.Is there anyway to automatically trigger this process right after the cube has been processed so that
it doesn't cause agony to the first user?

You could build a cache warmer that connects with EffectiveUserName=YourDomain\user1 on the connection string and loop through each user. But what is your dimension security expression? Maybe we can speed it up.
http://artisconsulting.com/Blogs/GregGalloway

Dimension security is not working if user have two roles in SSAS while connecting from Excel

Hello Genius,
I am facing the issue when user trying to connect the cube from excel if user have more than one role in ssas db.
Role 1: Countryuser, I have implemented the dimension security with country
dimension and countrycode attribute.
Role 2: CityUser, I have implemented the dimension security with
city dimension and citycode attribute.
If user is mapped to any one of above role dimension security is working perfectly according to the logic but mapped to both role, cube is exposing all the data in this case dimension security is not working.
Please give me the solution to fix this issue or incase I am wrong kindly advice.
Thanks
Ganesh

This is the expected behaviour as allowed sets in roles are unioned together.
This is not a problem when your roles are restricting across a single attribute.
eg.
US_role = {[Geography].[Country].[USA]
France_role = {[Geography].[Country].[France] }
as someone in both roles ends up seeing {[Geography].[Country].[USA], [Geography].[Country].[France] }
But when you have different attributes:
NY_role = {[Geography].[City].[New York] }
France_role = {[Geography].[Country].[France] }
The first role is unrestricted on countries and the second is unrestriced on cities which is effectively:
NY_role = {[Geography].[Country].AllMembers , [Geography].[City].[New York] }
France_role = {[Geography].[Country].[France], [Geography].[City].AllMembers }
And when you union those two sets together you end up with:
{[Geography].[Country].AllMembers , [Geography].[City].AllMembers }
Which means that someone in both roles can see everything.
So if you want to restrict someone to City = New York and Country = France you have to create a
single role where both attributes are restricted. So if you have a lot of these combinations you will either have to create a lot of "combination" roles or look at dynamic security.
The other thing that might work is make sure that you only give some users access to certain cities and others access to certain countries. It's the mixing of the two for a single person that causes the issues.
http://darren.gosbell.com - please mark correct answers

Memberlist for generic dimension in HFM 11.1.2.2.300

What is the syntax for making a memberlist for a generic dimension in HFM. Trying to write it the "old" way which works for all the none generic dimensions does not work.
The dimension is called C3Network, Dimension Alias:AllNetworks, Short Name: NTW
This is what I tried:
Sub EnumMemberLists()
Dim aC3NetworkLists(1)
Select Case HS.Dimension
Case "C3Network"
aC3NetworkLists(1) = "Test"
HS.SetMemberLists aC3NetworkLists
End Select ' Case HS.Dimension
End Sub ' EnumMemberLists()
Sub EnumMembersInList()
Select Case HS.Dimension
Case "C3Network"
Select Case HS.MemberListID
Case 1 'Test
HS.AddMemberToList "R16"
HS.AddMemberToList "W16"
HS.AddMemberToList "D1"
HS.AddMemberToList "R15"
End Select ' Case HS.MemberListID
End select 'Case HS.Dimension
End Sub ' EnumMembersInList()

You'll want to use the Alias for this.

Airport Extreme- PC users cannot connect to security enabled Wifi

I have an Airport Express and have setup a security enabled Wifi network. It works perfectly for me, but my PC user roomates cannot access it. I don't know much about the difference between WPA and other settings, so maybe I need to change the security. Please help. Thanks!

DrVenture:
Thank you. Yes, this did indeed work. The MacBook now connects just fine. I had one moment of panic when the Vista laptop referred to it as a "security key" rather than a passphrase / password, but I tried it anyway and that worked just fine too. So I'm happy again.
Any idea why WEP doesn't work this time?
Thank you for your help.
Message was edited by: JTeagle

Connect to Azure SQL DB with Security Enabled Access required using SSMS

I'm looking to connect to an Azure SQL DB with Security Enabled Access required using SQL Server Management Studio 2014. I have tried checking off "Encrypt connection", but still errors out with "Cannot open database 'db name' on server 'hostname'
requested by the login. Access to the database is only allowed using a security-enabled connection string."
Thanks,
Scott

Hi Scott,
Sorry, I missunderstood your initial question and the documentation I referenced is not updated appropriately. You have to change the connection string to <server-name>.database.secure.windows.net when you enable the security/auditing features.
Documentation for this can be found
here
Thanks,
Jan

Search itens with item level security enabled

Hi,
I have a page that "item level security" enabled.
I am doing a select to get itens...
How can I get only itens that current user have view permission?
select wv.title,
wvt.numbervalue,
wv.description,
'/pls/portal/url/ITEM/'||wv.guid link
from portal.wwv_things wv,
portal.wwv_thingattributes wvt
where wv.siteid = 271
and wv.itemtype = 'basefile'
and wv.subtype = 498194
and wv.active = 1
and wv.language = 'us'
and wv.id = wvt.masterthingid
and wv.siteid = wvt.siteid
and wvt.attributeid = 1354
and wvt.attribute_siteid = 0
and wvt.valuetype = 'number'
order by wv.title;

I found the view. Thanks
portal.WWSBR_ALL_ITEMS

Jdev11 unexpected severe error on graph preview when security enabled

Graphs on jdeveloper 11 are realy cool
The wizard to create them is very helpfull, especialy the preview tab that you can see the results
Yet when you are working on an application that is Security Enabled then when you click preview tab you always get:
An unexpected severe error has ocurred in Jdeveloper.
Anyone else using Graphs?
details:
[http://adfbugs.blogspot.com/2009/10/unexpected-error-on-graph-preview-when.html]

You didn't mention your JDev version.
But if you search Oracle support, you'll find an existing bug logged for this problem (for 11.1.1.5.0):
Search: NOT ABLE TO IMPORT SCHEMAS IN JDEVELOPER
in Oracle support...

Shared Members in Dimensions - security question

Within the dimension security, do shared members take the security based on their base member or on the parent member?
For example, if we have a base member setup under "Homes" like this:
Homes > examplehome
and then a shared member for "examplehome" setup like this:
Region1 > examplehome(shared)
And the "Homes" and "Region1" folder have different security setup for iDescendants, will "examplehome(shared)" take the security from "Homes" or "Region1"?

I've never investigated this but does it really matter? The data for examplehomes is only stored in one place. The share just gives you alternate aggregation paths. My guess is that once you set security for one all instances of the member share the security. After all, if you place examplehomes on a form with no parent, planning has no idea which parent to use.
Dave

Ws security enabled in soap

Hi Everyone,
Am trying SOAP to RFC scenario where i want to send the SOAP request with ws security enabled. In the SOAP header of request am sending username and password
as below
" <soapenv:Header>
      <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <wsse:UsernameToken wsu:Id="UsernameToken-30094810" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsse:Username>username</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Password>
         </wsse:UsernameToken>
      </wsse:Security>
   </soapenv:Header>    "
i want the specified username and password to be validated in XI.
Am getting "ERROR:java.net.SocketTimeoutException: Read timed out" error when i tried to send the request.
Can any one tell what configuration i need to do to make it work.
Thanks & Regards,
Sakthi

Have a look at SAP Note 856597
Q. Can I configure the timeout value of my receiver adapter?
U can increase the timeout parameter there
Regards,
Prateek

A member was added or deleted to a security-enabled local group. (4732 and 4733)

Hi Team,
We are getting below alerts continuously. it is specifying that user is adding and removing from security group. But it is happening automatically and we've checked no one is performing such operation. And we read on some site it happened on domain controller
but also our share point farm server is not on domain controller. Please find the alert below and suggest what we should do so that we'll not get this alert again. Thanks in advance.
A member was added to a security-enabled local group.
Subject:
Security ID:
POSTEN\s-sharep_farm
Account Name:
S-ShareP_Farm
Account Domain:
POSTEN
Logon ID:
0x8a121
Member:
Security ID:
NETWORK SERVICE
Account Name:
Group:
Security ID:
BUILTIN\IIS_IUSRS
Group Name:
IIS_IUSRS
Group Domain:
Builtin
Additional Information:
Privileges

Hi Kamal,
Per my knowledge, SharePoint does not have the function to audit the changes in domain groups.
What is “From” email address of the alerts?
Please check if you have configured Windows System Resource Manager to send e-mail notifications when an event is logged firstly.
https://technet.microsoft.com/en-us/library/cc732728.aspx
And it seems that the System Center Operations Manager(SCOM) can set the alert for auditing the changes to the local group membership.
Please also check if you have installed SCOM and set rule to send the alerts in SCOM.
http://blogs.technet.com/b/nzdse/archive/2009/11/10/audit-alert-scenarios-system-center-operations-manager-opsmgr-2007-r2.aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Generic Dimension ( Security Enabled)

Similar Messages

Maybe you are looking for