Hierarchy Authorization not working on Navigational Attribute

Hello,
We have 0ORGUNIT as nav attribute in 0EMPLOYEE and 0ORGUNIT has enterprise hierarchy set.
Now we have analysis authorization based on both 0ORGUNIT and 0EMPLOYEE__0ORGUNIT (nav attr).
When an user tries to run a web report which has normal 0ORGUNIT in it, in the variable screen he is able to see the entire hierarchy tree structure as per his authorizations. On the other hand when the same user tries to run another report which has nav attr 0EMPLOYEE__0ORGUNIT in it, in the variable screen he can see only the top nodes of the hierarchy to which he is authorized. He cant see the tree structure.
Please note we are on BI 7 SPS 21 and in both the queries we are using hierarchy variable set on correct hierarchy. Also the attributes in the query have hierarchy activated on them.
Please suggest any ideas/views for the same.
Thanks!!
Regards,
Shashank

Neo - We need current info on 0ORGUNIT and hence cant go with concept of historic truth as per what you mentioned.
Bhawani - We have set it to level 1 which is perfectly fine as it works for other hierarchy's perfectly.
Regards,
SHahsank

Similar Messages

  • Hierarchy restrictons not working with Basis servicepack upgrade to 14

    Hi All,
    We recently upgraded our system with basis sp  14, and we having the below problems with out hierarchy restrictions:
    Problem #1
    We recently upgraded our system from then onwards hierarchy restrictions not working, users are getting authorization error when they execute the query. However we tried by adding aggregates now hierarchy restrictions seems to be working.
    Problem #2
    We are testing hierarchy restrictions for budget planning function, after we add aggregate its allowing the user to plan the data, but when they try to distribute or escalate the data its again throwing authorization error. When I checked error log for Orgunit hierarchy restriction, the query is looking for single values it is not considering the node restriction, the orgunit values appeared in error log all belong to the node I restricted in analysis authorization.
    We implemented note#1133674 as this was relevant to our issue with planning function. But this didnt fix the issue.
    We are now on BI SP 16 and Basis SP 14
    Just wondering If any of you came across with the same kind of issue, Any help is appreciated.
    Thanks,
    Kavitha

    Hi Kavitha,
    Please check SAP note 1229602 Error when using hierarchies: Authorization error.
    Regards
    Imran

  • BW hierarchy variable not working in Crystal Report 2008

    Hi,
    I have created BEx 7.0 report which has hierarchy on 0customer object, the report is working fine whith hierarchy variable. I have created Crystal Report by using this query as source. I have followed below link to create grouping to get data through hierarchy variable.
    http://wiki.sdn.sap.com/wiki/display/BOBJ/BWHierarchiesinCrystalReports
    But report does not work for hierarchy variable and report is blank. When I give filter of child node which has actual data then I get report output. For ex.
    Below hierarchy for 0customer
    11396
         - 737007
         - 123456
    When I run report for 11396 then no data display but when I run 737007 child node I get report output but with blank group name.
    Can anyone came accross this issue. Please guide me . Thanks in advance.

    Thanks Ingo for your reply..
    The word filter means, I have hierarchy node variable in the BEx report that has become Parameter in CR. When I give hierarchy node variable value of parent node then there is not data display but for the child node I get the data.
    For ex. In the info cube there is data for 730707 customer but in the customer hierarchy the parent node of 73707 is 11396. I am giving 11396 in the variable pop screen for hierarchy variable. I do not see any data but for 73707 I get data.
    User does not know 73707, he always enter 11396 customer no. and he gets data in BEx query that is source of CR. but crystal report is not showing data for 11396.
    One more point I want to tell here, I am saving CR at my local system not to SAP BW server.
    Hope this clear my issue.
    Harish Swami
    Edited by: hswami27 on Jan 31, 2011 8:17 PM

  • Analysis Authorization not working - Empty demarcation

    Can someone help me on this Analysis Authorization? I read many threads in SDN, it seems that I followed the correct steps. The restriction on S_RS_COMP is working well but the restriction on the Analysis Authorization is not working. Surely I'm making some mistake, but can't find what's wrong.
    I'm a User (say USER_00) in a test system, assigned to a Role (say Z:BI_USER). This is a broad role:
    - S_RS_COMP and S_RS_COMP1 have full authorization (*) to all the fields,
    - S_RS_AUTH has the BIAUTH field with Name of Authorization = *.
    Also I have an InfoArea (ZIA_TEST) and an InfoCube (ZIC_TEST). The IC has some characteristics and key figures. The only authorization relevant characteristic is ZCA_CLI (client). The IC has only 5 lines, one for each client ("CLI_01" to "CLI_05").
    Also there's a query (ZQR_TEST) on this IC, with an Authorization Variable (VAR_AUTH_CLI) restricting the characteristic ZCA_CLI.
    I'm trying to create a new User and restrict him to this IC and only to the data of client "CLI_01". If it works I'll apply to a production system.
    What I did:
    1) With tcode SU01 created a new User (USER_01) with no Role neither Analysis Authorization.
    2) With tcode PFCG copied the Role Z:BI_USER as Z:ROLE_TEST then made some changes:
    a) S_RS_COMP
    - Activity = 03 and 16
    - InfoArea = ZIA_TEST
    - InfoCube = ZIC_TEST
    - Type of report component = *
    - Name of report component = *.
    b) S_RS_COMP1
    - Kept * to all fields.
    c) S_RS_AUTH
    - I inactivated and deleted this Authorization Object.
    (I don't want to keep characteristic values restriction inside the role. The idea is to associate different users to the same role, allowing them to see the same ICs and execute the same queries. And differentiate wich characteristic values each one can see by manually associating different analysis authorization to each one.).
    3) With tcode RSECAUTH I created an Analysis Authorization (Z_AA_CLI_01) to restrict access only to client "CLI_01":
    - ZCA_CLI = "CLI_01"
    - 0TCAACTVT = "03"
    - 0TCAIPROV = "ZIC_TEST"
    - 0TCAVALID = "*".
    4) With tcode PFCG I assigned User "USER_01" to the Role " Z:ROLE_TEST" and made Complete Comparison.
    5) With tcode RSU01 I manually assigned Analysis Authorization " Z_AA_CLI_01" to User "USER_01".
    It seems to me that these steps are enough. But:
    a) When I log as USER_00 and go to tcode RSRT2, searching by InfoAreas I can see all the InfoAreas and all the InfoCubes, select and execute the query. That's OK.
    b) When I log as USER_01 and go to RSRT2, searching by InfoAreas I can see only ZIA_TEST and under it I can see only ZIC_TEST. That's OK. Then I select and execute the query.
    Wich means that S_RS_COMP is OK and each user is assigned to the correct Role.
    c) The problem is that in both cases the query brings data from all Clients.
    Under Information and Variable Values (when I run with HTML display) the message is "Empty demarcation".
    I changed the variable to be Ready for Input, just to see wich values it brings. In both cases (as USER_00 and as USER_01) in the Variable Screen it brings all the 5 Clients from the IC and I can select and execute any value.
    So the problem is with the Analysis Authorization or with the Variable, but I can't find what's wrong.
    Any help will be very appreciated.
    César

    OK Marc, it worked.
    Sorry for not answering earlier, but I could get back to this front only some days ago, then began testing your suggestions.
    1) Security Concept
    Authorization Mode was set to "Obsolete Concept with RSR Authorization Objects" (it would never work with this setting).
    I changed to "Current Procedure with Analysis Authorizations".
    Anyway, what's the function of this setting? Do old Reporting Authorizations work with "Current Procedure with Analysis Authorizations" setting?
    2) Variable Representation
    With "Multiple Single Values" it really led to problems.
    With "Selection Option" it worked well.
    3) 0TCAKYFNM
    I don't understand why, but if the AA doesn't have the char/dimension 0TCAKYFNM, when the User tries to run the query (tcode RSRT2) it accuses "You do not have sufficient authorization".
    Info Cube ZIC_VE95 has two KFs (ZKF_QTL95 and ZKF_VLT95). These KFs are used only on this IC (also in the KF Catalog, but it doesn't impact). This IC is used only on Query ZQR_VE95 (also in Transformation and DTP, wich doesn't impact).
    Well, I inserted 0TCAKYFNM and it worked, either with CP, "*" or with EQ, the two KFs.
    4) Authorization Policy Definition
    The situation I'm working on is very typical. Ex.: Some users are Administrators, Managers, Operator 1, Operator 2 and so on. Each Role needs authorization to access some queries. At the same time, they can access information only of the Cost Centers to wich they are related.
    There are many ways to implement it (I tested some of them and they worked well). My point is to define a most practical way, easy to understand and to maintain.
    I'm now sympathetic to this way:
    a) Create functional Roles (ex.: "Administrator", "Manager", "Operator 1", "Operator 2" and so on) defining only the Queries (or Info Areas, Info Providers, etc) each Role needs. No S_RS_AUTH definition.
    b) Create Char Value Roles (ex.: "CC_100_to_199", "CC_200_to_299", etc), only with S_RS_AUTH definition, each one associated with a corresponding AA (ex.: AA for CC 100 to 199, AA for CC 200 to 299 and so on).
    c) Create Composite Roles associating functional and char value Roles. Ex. Composite Role "Administrator for CC 100 to 199", composed of the Roles "Administrator" and "CC_100_to_199".
    d) Associate Users to the Composite Roles.
    Anyway, I'd appreciate if you could indicate some literature (blogs, articles, etc) on this theme.
    Well, thank you very much for your answers. Now I can go on with my studies on this subject.
    César Menezes

  • Analysis authorization not working on WAS server

    Does BI Java  required for Analysis authorization to work ?
    Can we manage with WAS server to show analyis authorization ?
    Actually we don't have BI java configured in our system...so we are executing the query on WAS server ( BI ABAP).....but on this we are not able to see analysis authorization working....system is showing all the possible values and not the authorized value in AA.....
    Regards
    Tripple k

    Jason
    1. 0BI_ALL is not assigned to the user.
    2. I have already set the Authorization scheme as "New analysis authorization" in SPRO.
    3. i am executing the report from T-Code RSRT
        A> Select the report and click on ABAP Web ( Choose query display as List or Analyzer or HTML) - System is showing entire orgunit while it should show only 3 org unit   assigned to user in RSECADMIN.
       B> Select the query and execute on Java Web - Error in connectin as BI java is not there on portal side
       C> Select the query and choose Query Display as "HTML" click on Execute button - Only 3 values restricted in RSECADMIN are appearing.
    Hope somebody can throw some light on this.
    Regards
    Tripple k

  • Attributes are not displaying in Navigational Attributes area of DSO.

    Hi Experts,
    I have created a DSO and have included Info Objects 0SOLD_TO & 0SHIP_TO. In the Navigational Attributes area, its attributes are not getting displayed even though the attributes are in the info object.
    What are the steps needed to perform for it to display there?
    Waiting for your reply,
    Thanks in advance,
    With Kind Regards,
    Shreeem

    Hi Shreem,
    If you want attributes of any master objects in navigational attributes section, you have make them navigational attributes while defining base info object.
    Please follow the below steps.
    1) goto RSA1, search for 0SOLD_TO & 0SHIP_TO info objects and open them
    2) goto edit mode of info object and goto attributes section.
    3) here you will find for every object "DIS" --- this means these attributes are display attributes.
    4) If you want to change any attribute to NAV, then click on "Pencil Mark".
    5) Now you can see text NAV instead of DIS for that attribute.
    activate the info object and goto DSO, now you will see that attribute in navigational attribute folder.
    Regards,
    Venkatesh

  • Extract function not working with tag attributes

    Hi all,
    I have an xml document stored in the db as an xmlType. I am trying to use the extract function to retrieve values. The extract will work fine on tags without attributes. Any tags with attributes or tags beyond the tags with attributes will not be accessible.
    <tag1>
    <tag2>hi</tag2>
    <tag3 att="hello">bye</tag3>
    <tag4> hi again </tag4>
    </tag1>
    In the example above I can extract tag2 values but not tag3 or tag4 values.
    here is my select statement
    works
    select e.xmlval.extract('/tag1/tag2').getStringval()
    from test_xml e;
    does not work
    select e.xmlval.extract('/tag1/tag2/tag3').getStringval()
    from test_xml e;
    does not work
    select e.xmlval.extract('/tag1/tag2/tag3/tag4').getStringval()
    from test_xml e;
    Any ideas?

    Hi all,
    Found the issue. The problem was that I was not specifying the second argument to the extract function.
    The tag attribute that I was not handling was xmlns="".
    I used this atttribute as the second argument in the extract function and now I am off and running.
    Hope this helps someone.
    Cheers

  • Value binding not working with rendered attribute

    In my jsf page i'm encountering problem with value binding it is not working for a h:inputText with rendered condition even when the rendered condition evaluates to true & the component is rendered.While trying to retrieve the value of the components with conditional rendering on submit i'm unable to retreive the value while on removing rendered condition the value binding is working perfectly
    <h:selectOneMenu id="DropDown" value="#pc_GeneralRequestInfo.objInfoDTO.State}" rendered="#pc_GeneralRequestInfo.objAddressRequestDetailsDTO.selectedAddressType == 'HOME'}">                    
    <f:selectItems value="#{pc_GeneralRequestInfo.statesList}" />
    </h:selectOneMenu>

    There is a { missing from the value attribute in the code you posted.                                                                                                                                                                                           

  • LDAP Sync is not working on custom attributes

    Gurus,
    I have installed and configured OIM 11g release 2. While configuring OIM, i have enabled ldapsync to OID.
    Created a custom attribute in OID and also on OIM. But when I change this attribute in OIM, that change is not going to OID and vice versa. There are not errors in the logs.
    Please throw some light on this.

    While creating a custom attribute in oim, you will give label, name right..At the same time there will be an option to provide ldap attribute name. You need to provide the name of the attribute that you created in OID here. Then only ldap sync will work on custom attributes. without specifying ldap attribute name, ldap sync wiill not work.
    Give a try and post your results here.

  • Customizing TREE UIBB configuretion in Item Hierarchy View not work

    Hi TM experts,
    We are working for customers TM system in TM9.1 SP03. When I set my own TREE UIBB in hierarchy type for Rail Freight Order, it does not work at all. The standard UIBB /SCMTMS/WDCC_TOR_OVW_GEN is called all the time. I checked all the other hierarchy type in the system ad find none of the customizing UIBB configuration is called in this system. I do the same in SAP internal C2T system, and it works fine.  I am thinking is there anything missed here? Or it is a bug for the new SP03? Since that system has issue on raising a ticket right now, I raie a question here for help.
    Regards,
    Cain Sun

    Hi,
    It's unclear what you want.
    Chances are, you can do what you want in a query.  If you need a view or a materialized view, the same query could be used in the CREATE statement.
    Whenever you have a problem, please post a little sample data (CREATE TABLE and INSERT statements, relevant columns only) from all tables involved, so that the people who want to help you can re-create the problem and test their ideas.
    Also post the results you want from that data, and an explanation of how you get those results from that data, with specific examples.
    Simplify the problem as much as possible.  Remove all tables and columns that play no role in this problem.
    Always say which version of Oracle you're using (for example, 11.2.0.2.0).  This is especially imporant with CONNECT BY problems.
    See the forum FAQ: https://forums.oracle.com/message/9362002
    Are you saying that the table shows row X on level 2, and row Y on level 5, and that you want to ignore the rows on levels 3 and 4 in between them, and display Y as if it were a child of X?  Yes, you can do that.  Exactly how depends on your data, your requirements, and your version.

  • XMLType extract method does not work if namespace attribute values are included

    In the example below, only the second row returns an ID from the extract function. The presence of an xmlns attribute appears to be the cause.
    SQL> drop table configs;
    Table dropped.
    Elapsed: 00:00:03.06
    SQL>
    SQL> create table configs (xml_data sys.xmltype);
    Table created.
    Elapsed: 00:00:00.02
    SQL>
    SQL> create index configs on configs (xml_data) indextype is ctxsys.context;
    Index created.
    Elapsed: 00:00:02.01
    SQL>
    SQL> insert into configs values(sys.xmltype.createxml('<config
    2 xmlns="http://www.ourcompanykscl.com/configuration">
    3 <dataformat
    4 name="F1" description="format spec" id="14082" version="2"
    5      status="started" deployed="true" lastModifiedBy="bloggsj" lastModifiedDate="2002-05-10T09:44:45">
    6 <F11Format>
    7 <SpecificationFilename>c:/formats/F1.txt</SpecificationFilename>
    8 </F11Format>
    9 </dataformat></config>'
    10 ))
    11 /
    1 row created.
    Elapsed: 00:00:01.02
    SQL>
    SQL> insert into configs values(sys.xmltype.createxml('<config>
    2 <dataformat
    3 name="F1" description="format spec" id="14082" version="2"
    4      status="started" deployed="true" lastModifiedBy="bloggsj" lastModifiedDate="2002-05-10T09:44:45">
    5 <F11Format>
    6 <SpecificationFilename>c:/formats/F1.txt</SpecificationFilename>
    7 </F11Format>
    8 </dataformat>
    9 </config>'
    10 ))
    11 /
    1 row created.
    Elapsed: 00:00:00.00
    SQL>
    SQL> BEGIN
    2 ctx_ddl.sync_index('configs');
    3 END;
    4 /
    PL/SQL procedure successfully completed.
    Elapsed: 00:00:00.02
    SQL>
    SQL> SELECT c.xml_data.extract('//dataformat/@id').getstringval(), c.xml_data.getstringval()
    2 FROM configs c
    3 WHERE CONTAINS(c.xml_data, '14082 INPATH (//dataformat/@id)') > 0
    4 /
    C.XML_DATA.EXTRACT('//DATAFORMAT/@ID').GETSTRINGVAL()
    C.XML_DATA.GETSTRINGVAL()
    <config
    xmlns="http://www.ourcompanykscl.com/configuration">
    <dataformat
    name="F1" description="format spec" id="14082" version="2"
    status="started" deployed="true" lastModifiedBy="bloggsj" lastModifiedDa
    te="2002-05-10T09:44:45">
    <F11Format>
    <SpecificationFilename>c:/formats/F1.txt</SpecificationFilename>
    </F11Format>
    </dataformat></config>
    14082
    <config>
    <dataformat
    name="F1" description="format spec" id="14082" version="2"
    status="started" deployed="true" lastModifiedBy="bloggsj" lastModifiedDa
    te="2002-05-10T09:44:45">
    <F11Format>
    <SpecificationFilename>c:/formats/F1.txt</SpecificationFilename>
    </F11Format>
    </dataformat>
    </config>
    Elapsed: 00:00:00.03

    Hi Amarnath,
    Thanks for looking into my issue.
    When I started writing the dynamic custom approver group, I did not use FND_NUMBER and it didnt work. After that I checked it in the AME Implementation Guide which says
    "Queries for number and currency attributes must select the number or currency
    amount converted to a varchar2 by:
    fnd_number.number_to_canonical"
    So that should not be a problem.
    Please correct me if I am wrong but Now I see two different possibilities :
    1. The seeded variable :transactionId which is being passed to the query is not able to get the value. In other words, the transactionId is not being passed.
    2. I am using wrong Attributes to identify the transaction which is being used in the Condition and that condition is used in a Rule. In this case, I am trying to identify that the Basic Person details are changed and I am using seeded attribute HR_IS_PERSON_BASIC_DETAILS_CHANGE_SS in condition.
    Any feedback?
    Appreciate all replies.
    Thanks,
    CAH

  • Bluetooth authorization not working (bluez-simple-agent)

    Hello
    I'm trying to connect my Sony BD remote control to my laptop. Pairing and manual connect using hcitool works fine, but when my remote control initiates the connection,  my laptop seem to deny its connection requests. (See attached hcidump output).
    I have tried using bluez-simple-agent, and I get the authorization request prompt. I enter 'yes', hit return, and I immediately get "Cancel" printed on the terminal. The remote control is still not authorized.
    I have dbus running, as well as bluetoothd, hci2hci and hidd running.
    Please help! I'm clueless at this point.
    hcidump says:
    * Connection pending - Authorization pending
    * Connection refused - security block
    * Reason: Remote User Terminated Connection
    hcidump output:
    > ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Connect req: psm 19 scid 0x0148
    < ACL data: handle 11 flags 0x02 dlen 16
    L2CAP(s): Connect rsp: dcid 0x0041 scid 0x0148 result 1 status 2
    Connection pending - Authorization pending
    < ACL data: handle 11 flags 0x02 dlen 16
    L2CAP(s): Connect rsp: dcid 0x0041 scid 0x0148 result 3 status 0
    Connection refused - security block
    > HCI Event: Number of Completed Packets (0x13) plen 5
    handle 11 packets 2
    > ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Disconn req: dcid 0x0040 scid 0x0147
    < ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Disconn rsp: dcid 0x0040 scid 0x0147
    > HCI Event: Number of Completed Packets (0x13) plen 5
    handle 11 packets 2
    > ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Disconn req: dcid 0x0041 scid 0x0148
    < ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Disconn rsp: dcid 0x0041 scid 0x0148
    > ACL data: handle 11 flags 0x02 dlen 12
    L2CAP(s): Disconn rsp: dcid 0x0147 scid 0x0040
    > HCI Event: Number of Completed Packets (0x13) plen 5
    handle 11 packets 2
    > HCI Event: Number of Completed Packets (0x13) plen 5
    handle 11 packets 1
    > HCI Event: Disconn Complete (0x05) plen 4
    status 0x00 handle 11 reason 0x13
    Reason: Remote User Terminated Connection
    Last edited by oskarn (2009-10-29 17:03:43)

    Is there any way to add a device to a list of trusted devices?
    I once read about a certain file called "trusted" in a bluetooth directory, and it almost worked when I added my device there, but once connected it disconnected and the device was removed from the trusted list.
    Any idea what is going on here?

  • AAA authorization not working

    Hi,
    Configured the switch for the AAA authentication it's getting authenticated but it's failing for authentication.
    When connected to console it worked-  Authenticated and then supplied the enable password.
    When telneted : it says "access approved" and  "authorization failed"
    Relevant switch configuration is as follows  and also debug of aaa authorization.
    +++++++++++++++++++++++++++++
    no service single-slot-reload-enable
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    service password-encryption
    hostname Switch
    aaa new-model
    aaa authentication login default group radius local
    aaa authentication enable default enable
    aaa authorization config-commands
    aaa authorization exec default group radius if-authenticated local
    aaa authorization commands 15 default group radius if-authenticated local
    enable secret 5 $lkl34579231$uK8U$B4sL3AiXAEUzZ8o.Dv34Y/
    username cisco privilege 15 password 7 05080F1C224233 
    vlan 10
    vlan 120
    ip subnet-zero
    vtp mode transparent
    spanning-tree extend system-id
    interface FastEthernet0/1
      switchport access vlan 10
      switchport mode access
      no ip address
      spanning-tree portfast
    interface GigabitEthernet0/1
      no ip address
    interface GigabitEthernet0/2
      no ip address
    interface Vlan1
      no ip address
      shutdown
    interface Vlan120
      ip address 10.12.8.70 255.255.255.240
    ip default-gateway 10.12.8.65
    ip classless
    ip http server
    radius-server host 192.168.38.169 auth-port 1812 acct-port 1813
    radius-server host 10.12.1.142 auth-port 1812 acct-port 1813
    radius-server retransmit 3
    radius-server key cisco
    line con 0
    line vty 0 4
      password 7 grrfcb7swe
      transport input telnet
    line vty 5 15
    end
    Debug output :
    Switch#
    21:45:02: AAA/AUTHEN/CONT (2947331915): continue_login (user='(undef)')
    21:45:02: AAA/AUTHEN (2947331915): status = GETUSER
    21:45:02: AAA/AUTHEN (2947331915): Method=radius (radius)
    21:45:02: AAA/AUTHEN (2947331915): status = GETPASS
    21:45:06: AAA/AUTHEN/CONT (2947331915): continue_login (user='wrrt\trial1')
    21:45:06: AAA/AUTHEN (2947331915): status = GETPASS
    21:45:06: AAA/AUTHEN (2947331915): Method=radius (radius)
    21:45:07: AAA/AUTHEN (2947331915): status = PASS
    21:45:07: tty1 AAA/AUTHOR/EXEC (284909353): Port='tty1' list='' service=EXEC
    21:45:07: AAA/AUTHOR/EXEC: tty1 (284909353) user='wrrt\trial1 '
    21:45:07: tty1 AAA/AUTHOR/EXEC (284909353): send AV service=shell
    21:45:07: tty1 AAA/AUTHOR/EXEC (284909353): send AV cmd*
    21:45:07: tty1 AAA/AUTHOR/EXEC (284909353): found list "default"
    21:45:07: tty1 AAA/AUTHOR/EXEC (284909353): Method=radius (radius)
    21:45:07: AAA/AUTHOR (284909353): Post authorization status = FAIL -------------------------#  authorization failed #
    21:45:07: AAA/AUTHOR/EXEC: Authorization FAILED
    21:45:09: AAA/MEMORY: free_user (0xDF12AC) user='wrrt\trial1' ruser='' port='tty1' rem_addr='10.12.7.71' authen_type=ASCII service=LOGIN priv=1
    Switch#
    Switch#
    Do we need to change anything on Radius server or can we change the authorization preference to local and then to radius.
    Please share the experience.
    Thanks in advance,
    Subodh

    Hi Subodh,
    I understand that you are trying to use command authorization using RADIUS.
    aaa authorization commands 15 default group radius if-authenticated local
    Command authorization is not supported in RADIUS. RADIUS does not allow users to control which commands can be executed       on a router and which cannot.
    Please refer the following link:
    http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a0080094e99.shtml
    You need to use TACACS+ for configuring command authorization for IOS and PIX/ASA.
    Regards,
    Karthik Chandran
    *kindly rate helpful post*

  • Back button not working after navigation using method navigate_to_account

    Hi,
    I have the following scenario.
    1. From Account Search navigating to one Account (Page 1 to Page 2)
    2. From Account there is a hyperlink with opens another page (Page 2 to Page 3). For this navigation I am using method  cl_crm_uiu_bp_tools=>navigate_to_account
    3. Page is opening successfully but when I am clicking on the BACK button for the first, nothing is happening. On the second click in the BACK button its navigating back to the Search page. (Page 3 to Page 1).
    So the history is not triggering for Account page (Page 2)
    Please help me with this issue.

    Hi Tapas,
    You actually need to explicitly record it using the below statement.
    RAISE EVENT history_trigger .
    Use this starement before calling the outbound plug.
    Please let me know if you still have any issues.
    Regards,
    Jotsaroop Singh

  • Authorization not working

    I have a problem with authorization - I tried to play music that my brother had bought on his computer, and was prompted to authorize (it was already authorized). After authorizing the song did not play, but when I clicked on it it prompted me to authorize again. Each time I authorized it displayed a message along the lines of "Authorization Successful, 5 out of 5 machines authorized." I went to the account and deauthorized all computers. Now when I try to authorize it says Authorization Successful, 1 out of 5 machines authorized, but when I try to play it again prompts me to authorize.
    I have recently uninstalled iTunes 7.6 and installed 7.5(.02?) because of other problems that I was having. Could this be the source of the problem? To me it doesn't seem likely and I would really hate to go back to 7.6.
    Thanks for any help

    Click here and follow the instructions.
    (29743)

Maybe you are looking for