Influencing query security - burning problem

Question

Hi all,
I've a burning problem that I was not able to find a solution for within 1 week so far.
I want to simplyfy a selection of variables needed to run a query. So in fact you need three different values to identify a specific set of data. In order to not have the user to enter those 3 independent values, with all the risk of selecting invalid combinations, I created a new InfoObject that holds the three infoobjects (and some more) as attributes. So the user selects only one and I'm doing the work behind the scenes using user exit variables. I've created a multiprovider to combine the two cubes and the infoobject. The value that the user is selecting fron the "dummy" object needs to be excluded from the selection otherwise he'll see no data. This works very well so far, but as soon as security comes into play I run into problems. With security activated on the dummy infobject, the F4 help screen that allows the user to select what he wants to se is restricted, so it only shows the values that he's cleared for. Which is fine. When he selects one of the values it will be excluded as I#m using a selection option variable (no authorization variable) as the default of the variable needs to
be exclusion and not include. When the query then is executed I'm getting a message that the user is not authorized to read the security object (BRAIN804). So I probably will need a security variable, but this is not working to do what I need as a authorization variable gets populated with all the values that the user is cleared for. I only want one value and that should be picked fro the list.
Also this value need to be excluded otherwise I'll see no data as the dummy infobj. is not contained in the other two cubes.  Have restricted the query to only use the two cubes and not the infobj. but as long I don't exlude the value it will retrieve no data.
Now my question - how can I influence the behavior of the security variable ? Remove some values via user exit, switch from inclusion to exclusion
or just use the security entries to read them and build the contents of the F4 help.
So any idea - answer is highly appreciated.
Bernd Dümmel
Eastman KODAK

Answer 1

Arun,
I was able to resolve the problem by adding # to the restrictions. That allowed me to be able to switch from exclude to include on the variable the user does the input. This also allowed me to switch the variable from selection option to single value. In doing this I then could add the authorization variable to the restrictions as well. Now the F4 list is restricted (based on the authorizations of the user) and all the security is working. So without the trick with the # value I would have needed to implement security within some user exits.
Thanks
Bernd