Lost Webform / Task List / Dimension security

Hi all
Running 11.1.2.1 - Classic Planning App with Shared Services, Essbase etc.
Mysteriously (or maybe not so), one of our two applications has lost all of its artefact level security - ie there are no longer any native groups assigned to Dimensions, Webforms or Task Lists when looking at these through Workspace. This is confirmed when users log in with their id's, as they have no access to anything.
IT team inform me that they were having some database issues this morning, during which I inadvertently carried out a refresh of this application (including security filters). This is the only thing that I can put it down to, although I still cant fathom why this would have the affect it did. Unfortunately (slaps own hand), I didnt take a backup of anything (ie security through SS) before running the refresh.
After a little testing in our development environment it looks like if I use the 'Security'/'Access Permissions'/'Groups' and 'Users' (when looking at the application through Application Groups / Default Application Group within Shared Services), I can Migrate this from a file backup over the problem application and reinstate the security to webforms etc.
However I do not have a recent file backup taken manually available to do this.....
We schedule backups of everything nightly. Is there a particular file we could pick up from last nights backup that would in essence have the same affect as doing the above?
Thanks for any advice given.
JB

John
Thanks for your response, I have asked our IT team exactly what is backed up and will see what their response is? Is it certain files that we will need to restore if doing this?
As an update, I tried the method that worked in Dev, in Prod using just a singular group. This failed with this error:
Errors occured during syncrhonization: [
com.hyperion.planning.
HspRuntimeException: An error accurred
while adding user to Essbase. Please
check the Essbase log for details., com.
hyperion.planning.HspRuntimeException:
A snippet of this log: /Hyperion/Oracle/Middleware/user_projects/epmsystem2/diagnostics/logs/essbase/essbase_0/Essbase.log
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1112987968/Info(1051164)
Received login request from [xx.xxx.x.xx]
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1112987968/Info(1051187)
Logging in user [admin@Native Directory] from [xx.x.x.xx]
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1115093312/Info(1051001)
Received client request: Get Application FrontEnd Type (from user [admin@Native Directory])
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1110882624/Info(1051001)
Received client request: Create External User With Type (from user [admin@Native Directory])
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1110882624/Error(1051205)
Single Sign On function call [css_getUser] failed
[Wed Sep 5 16:39:29 2012]Local/ESSBASE0///1110882624/Warning(1051003)
Error 1051205 processing request [Create External User With Type] - disconnecting
Does this shed any light on the problem?
Thanks
JB

Similar Messages

Web Form in Task List and Security

Hi,
I have a couple of specific questions regarding Task List; below is a simplified example of my questions
1. Say, I have a 2 web forms (X,Y) that are part of a Task List 1. Group A has been given access to both web forms X and Y. Group A also has access to Task List 1. Group B has been given access to only web form X. Group B also has access to Task List 1. Now, everything is good for users belonging to Group A. However, users belonging Group B has a specific issue. They still see the "Web form Y" in the Task List Selection on the left. However they cant open the web form Y on the right side which is good.
My question is, is there a way to prevent users from even seeing this "Web Form Y" in the selection list? The problem is they shouldnt even see that particular web form as a choice and moreover this web form that they havent been given access to becomes part of the Task List completion status, forcing them to click on "Complete" for an empty web form.
Is there some setting that could prevent unassigned web forms based on security from showing up in the Task List for various groups (similar to security restricted members not showing up in web forms)? Or is creating several different Task List the only work around?
2. I have started a WorkFlow via FILE->WORKFLOW->MANAGE PROCESS and defined required Scenario and Version members. This seems to work just fine for my created Task Lists with Web Forms. Is there another intermitent process to connect the WORKFLOW with the created Task Lists? Or does Hyperion Planning automatically assume the Task List belong to available WorkFlow?
Another question I have is in the Task List creation menu, when creating an individual Task, there are several options for "Task Type", one of which is WorkFlow. What is the difference between this WorkFlow option and the WorkFlow under the File menu? Is is that the WorkFlow created as Task becomes part of a Task List? Is that the only difference, ie make WorkFlow creation part of Task List versus not part of a Task List?
Appreciate all your inputs
Thanks

Hi,
1. Probably you may try "Manage Security filters", but im not sure. If it doesnt work then no way other than creating two tasklists.
2. FYI, workflow will not promote either tasklist nor the webform. it only promotes the "DATA". u shud be careful creating forms for different level users ex: A basic user entry form cant be created for Next level user say manager. he l want to see only his entity level data not the level 0 in our terms.
3. File->Workflow : will be used to start the workflow by the administerator.
Tasklist Type-> workflow : Will be used by the "users" to promote their subsequent data entered or loaded at their level
Regards

Business rules security in task lists

Hi experts,
I have question regarding security in business rules, the problem is that we have, lets say, 10 users who have all access to a tasklist, but not all of them have access to the same forms / business rules. The ideal would be that if a user has no access to a form, it doesnt show in the tasklist, but he gets to see the form in the tasklist and when he opens it he receives an error message. We can get the user to accept that. But with business rules, the case is different: when a user clicks on a business rule on the tasklist he has no access to, instead of receiving a message denying access, he gets a screen with all the business rules he does have access to, and checkboxes to select the plan type the BR will run on, which is unacceptable and confusing. There are many users and creating custom tasklist for each one of them would be too hard to mantain. Is there a way to achieve a better solution for the user? Thanks in advance for your comments.

Hi,
I don't think of any other way.
The user have access to task list so it will show all tasks, and if the user don't have access to any particular web form it will throw an error informing same only once user open the web form.
For Business Rule it will show all rule/calc scripts for which user have access too, if the user don't have access to rule attached to that task.
I had same requirement and then after trying for some time, we provided education about the same to the users.
Regards,
-SM

Task list not visible

I am working with Planning 9.3.1 and access to task lists is granted through groups in Shared Services. Recently I added a user to a group which should have given him access to a task list in planning, but when he signs in to Planning it is not visible from the drop down at the top of the page. I restarted the Planning service then restarted all services to try to fix this issue - neither one worked. Any thoughts on what I can do to resolve this?
Thanks,
Ed

Hi,
Have you tried migrating identities? Simply go to any form, task list or dimension member security setting. I can't tell on top of my head but where you see users and groups, you should see a button which says something like "Migrate identities". When you click on this button, Planning re-reads users and groups information and will eventually refresh the security setting.
Alternatively, try synchronizing users and groups information in Shared Services (Administration)
Cheers,
Alp

LCM issues with Workflow, Task Lists, etc.

I have found several issues with migrating certain artifacts using LCM v11.1.1.3. Note that I have admin rights in all systems, and that there are no special characters involved. So...
1) Workflow: when migrating Planning Units all of them migrated, including their statuses. But not all PU comments (<annotation>) and logs (<log>) nodes migrated. It happened to almost all users - some who had 1-2 comments in the source system haven't got any in the target one, some got migrated only few (e.g. out of 5 in source, they got 3 in target). Since it happened to all users, it doesn't seem to be security. I have also checked (for those who partially failed) some other nodes, sequence, action, process state - they all seem to be OK. One curiosity I've spotted in few cases, is that in source LCM file (.xml) "priorOwner" node has the name of the user I am investigating, while in the target file (taken after the migration), for that same PU, that node is empty, actually says "null".
Any ideas why this might be happening?
2) Task Lists: when exporting TLs (in LCM) on occassion <dataForm> node in XML file would be missing for the task that actually has it attached. Again, no special characters are used, and I am admin. Then I tried to use TaskListDefUtil, and even if that list has required node, when I try to import, the task is still not attached to the form. I had to delete all TLs, then use Util files to reimport.
Anyone with similar experiences?
smilo

I had issues with tasks lists using LCM in instances where parent task name was same as child task or a task has same name planning web forms. You might also find issues with exporting webforms with business rules attached to forms where form is on plan type A and business rule is on plan type B. In this case, after LCM import, plan B business rule will lose location reference to correct plan type and get associated with web form plan type. In this case you will need to attach business rules again.

Use of user define field in Task list

Hi,
Please give the solution for the strange requirement of the client as:
My client wants to define the operation for preventive maintenace in two parts like
check temperature : 45 deg celcius.
check temperature should be like operation and rest what he has to check to be defined in other field i.e. both should not be together.
so i find the solution as user defined fields in the task list where i can define this second parameter.
But the problem is that system is not proposing this second field in the preventive order, only operation field is proposed.
Please suggest some solution, how can this requirement can be mapped.

Both operations of the inspection lot will need to be completed at some point. They are in the same lot so they belong together. Both operations should be available to the user. (Unless you used workcenters and security to limit users to specific workcenters).
Once set up, it will only be available to new inspection lots. Few things in SAP are retroactive.
Craig

Task List Access Manager Role in Shared Services

Hi
The documentation says this role "Assigns task lists and tasks to other users". I have assigned this role to a group (in Shared Services), I have given that group Manage and Assign access to the Task List (in Planning), and have even done a security Refresh.
Yet, when I go in as a user who is in that group, I do not see the Assign Access button in Manage Task Lists.
Is this a bug or have I missed a step?
We are on 11.1.2.1
Thanks!

Hi,
Have you tried generating a provisioning report in Shared Services, have a read of :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/provrep.htm
If that doesn't suit your requirements then you could always have a look at using CSSImportExportUtility to export provisioning to a csv file. The utility is located in hyperion\common\utilities and has a pdf on instructions how to use it.
Cheers
John
http://john-goodwin.blogspot.com/

Got the Exception in ADF page while getting BPM task list

Hi,
My requirement is i,n ADF page i need to display BPM human task list in ADF region.
while Deploying my applciation server got the below exeption and it's taking the more time too.
Please find details of Exception below.
06:56:08 PM] [Deployer:149192]Operation 'deploy' on application 'ADFResources_application1 [Version=V2.0]' is in progress on 'AdminServer'
[06:56:09 PM] [Deployer:149193]Operation 'deploy' on application 'ADFResources_application1 [Version=V2.0]' has failed on 'AdminServer'
[06:56:09 PM] [Deployer:149034]An exception occurred for task [Deployer:149026]deploy application ADFResources_application1 [Version=V2.0] on AdminServer.: .
[06:56:09 PM] Weblogic Server Exception: weblogic.application.ModuleException:
[06:56:09 PM] Caused by: java.lang.ClassNotFoundException: oracle.bpm.web.security.faces.AuthenticationPhaseListener
[06:56:09 PM] See server logs or server console for more details.
[06:56:09 PM] weblogic.application.ModuleException:
[06:56:09 PM] #### Deployment incomplete. ####
[06:56:09 PM] Remote deployment failed (oracle.jdevimpl.deploy.common.Jsr88RemoteDeployer)
is any thing i missed out to include the jar files.?
Thanks,
madhava

Search which library you are missing from Jdeveloper ->Tools -> Manager Libraries by using the missing class name
oracle.bpm.web.security.faces.AuthenticationPhaseListener

Tasks List not sending email to AD Groups

Hello,
I have several Tasks list on my farm and all behave the same way.
If I assign a task to an individual person, he will receive email notification.
However, if I assign it to an Active Directory group, no email notification is sent. The AD group does have an email address associated. Using outlook it can receive email.
The email notifications for the task list is enabled. If I check the SharePoint logs, I don't see that SharePoint is trying to send mail to the group's email. If I assign the task to a single person, he receives the mail and I can see in the logs that the
email has been sent.
I have no idea where to continue the troubleshooting.

Try the following:
Verify that the group is an AD security group (not a distribution list) and double check that the AD group is email-enabled.
Check that the group had been explicitly added to a SharePoint group (such as the default Viewers group) with at least read permission to the site and to the list on which the alert was created.
Verify that the SharePoint group’s membership is set to “Visible to everyone.” (People and Groups>SharePointGroupInQuestion > Settings>Group Settings)
Would also be worth checking on the Exchange server to see if there any 'Message Delivery Restrictions' for the AD group:
Exchange Management Console -> Recipient Configuration
Right-click on the problem group and choose properties.
On the Mail Flow Settings tab, double click on Message Delivery Restrictions.
Uncheck the check box “Require that all senders are authenticated”

Task List for RCA

Hi Experts: I stuck into some issues while installation of the SolMan and configuring the RCA.
I like to start fresh with the installation- We are installing SolMan EHP SP 20 and Oracle- I am using the instalaltion guide in the service market place. But I am looking for step by step task list in sequence. And any lesson learnt while implementing will be help.
Can you pls provide me with Steps for Installation and Configuration of RCA functionality- which includes all the Java and ABAP stack monitoring which includes- Trace, Workload, DB Cokpit, Host Analysis etc . We plan to install the Willy and BMC Appsight.
Appreciate your help.
Regards
Bob C

Bob,
Here is my experience in config RCA.
Read all documents from [http://service.sap.com/diagnostics]
Install Solman with latest SPs available.
Finish basic post install activities as per installation guide.
Run T-Code "SOLMAN_SETUP" and go through each step.
Install Wily Introscope Enterprise Manager.
Assign proper security roles to RCA Work center
deploy Introscope Agents.
create Autoprobe
Configure E2E RCA scenerio
- Digesh

Issue linking external URL's in task list

When I link a URL to a task list, a pop-up at the bottom of the screen saying "Only secure content is displayed" with a button saying "Show all content"
When I select "Show all content" an Internet Explorer pop-up appears asking to either "Leave this page" or "Stay on this page."
Selecting "Stay on this page" does nothing, but selecting "Leave this page" logs me out of Planning. When I log back in, the web page appears when I click on the task list.
When I log off and close my browser, I have to go through the same steps.
Is there any way to have the URL task list work without having to go through those steps? Is this an IE security setting?
Thank you in advance for any input.
Tiffany

What URL are you using, is that an FR or WA report? If so check this Oracle - Hyperion Labs......: Generate Smartcuts for all objects under a folder
Regards
Celvin

Task List issue

I have two end users in the same plant, with the exact same security roles and user parameters. When one user creates an SM03 the system assigns a general task list created for there plant. When the other user does exactly the same thing, the system displays a pop up to choose the task list, then a pop up to choose the operations. What is causing this? This happens to various users in various plants.

Table TPMUS must be populated with user ID. No entry needs to be maintained only an entry with user name created. This table has no configuration or defaults in parameters. Steps to be taken by end user: Pull up any SM0x in IW32
1. Extras u2013 Settings u2013 Default values
Order Type field:
1. Enter SM03
2. Click the save icon u2013 DO NOT click the GREEN CHECK
3. Remove SM03
4. Click save icon
5. Exit IW32
Background table is now maintained for user

Activate Save as Template in collaboration task list

Hi all,
I have created one task list and assigned to some users, now i want to use this task list as a template for my room. But in the default task list "Save as Template" button disabled. Now i want to activate this button then only i have save this task list as a template. How can i activate it. I am using EP7 and SP13. Help appreciated.
Regards,
Senthil k

There is no magic button. You're not missing anything.
In CP4 you were able to open a .cp file and Save As .cptl. That's been the way it worked from version 1 to 4.
But Cp5 doesn't work the same way. You can't save a .cptx file as .cptl template in Cp5.
The workflow now is File > New Project > Project Template. You have to begin each new template from scratch.
I find it annoying too, but I think it's been done this way because Cp5 templates have some extra functionality built in that just isn't present in the normal .cptx files (e.g. placeholders). I'm hoping we can get the old workflow re-instituted for Cp6.
If your Cp4 designer is still using Cp4, he/she can turn them into cptl files and then send them to you to upgrade them straight to Cp5 template format.
The other workaround you can do in Cp5 is simply to create a new .cptl file at the same dimensions as your .cptx and then copy/paste the slides you want over into the template. A bit more work than Save As perhaps, but at least it then means you can end up with a template file for future use.
Hope this helps.

Outlook Task List on iPhone???

Is there a good task list manager app available that can sync with Outlook's task list? Will it sync with Outlook task lists on multiple PCs?

Strange as it sounds, I have yet to find an App that will simply sync with Outlook Notes or Tasks. The native Notes program on iPhone is very limited, it will sync Notes from Outlook but has no flexibility for organizing notes and I do not see how to edit the notes on the phone, it basically transfers Notes from Outlook and puts them in date order. Programs that claim to give more functionality for Notes or Tasks want to sync through a website, doesn't sound very secure and seems unnecessarily cumbersome.

Tasks re-sorting in the MPP file when synching with SharePoint task list

When synchronizing the MPP file with the ShPt task list, we have seen tasks re-sorting in the MPP file. Very annoying, especially with schedules with a large number of tasks. Just wondering if anyone has experienced this issue, and if you
could point me in the right direction for solving it. FYI, listing below my signature the columns we are synchronizing (in case you know of an issue with one or more of these).
FYI, we are using MS Project 2013 Pro and SharePoint 2010. We tried using the synch feature with MSP 2010 and it did not seem to be available.
Greatly appreciate your help on this topic. Sincerely,
Michael.
Columns to map:
Text30
Text15
Baseline Start
Baseline Finish
Duration
Baseline Duration
Baseline Work
% Work Complete
Flag8
Critical
Number5
Text19
Work
Actual Start
Actual Finish
Columns to uncheck:
Priority
Task Status

Hi,
The resource is created as a new resource with no security group and no loggin account, meaning it is strictly a resource and not a user. So this resource can be assigned on others projects but cannot connect to PS in any way (thus does not consume a CAL)
unless you convert it into a user by adding a valid account and a security group.
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

Lost Webform / Task List / Dimension security

Similar Messages

Maybe you are looking for