Manage security for a report that lives in multiple folders

Post Author: EricE
CA Forum: General
I am using Crystal Enterprise 10. (we are about to upgrade to BO XI if
it matters in the answer)
As we consider the migration to XI we are thinking about problems with our
existing system that we have never solved adequately.
The problem is how to manage
security of a given report that shows up in multiple places in the tree.
Example:
I have a report lives in the Sales folder but also needs to be in a folder at
the same level called Marketing.
I want the report to
exist only once so that if I update it, it gets updated both places.
To solve that I could put the real report in a folder called u201Call reportsu201D and
then create short cuts to it in both of the other folders.
The problem with that method is that
the users who have rights to the u201CSalesu201D folder donu2019t get rights to the
shortcut (because the rights don't seem to work on shortcuts). The rights
would have to be granted to the real report objectu2026which quickly becomes a mess
trying to manage rights to each individual report object.
So I want to manage rights/security
at the folder level but I also want a given report to live in more than one
location (but have one real report object) and have its rights administered by the folder it is in.
Is there any way to do that?

Post Author: EricE
CA Forum: General
yangster:When you set permissions at the folder level all reports within the folder and any subfolder that exist should inherit the parent folders rights.So putting in your report into the sales folder and creating a shortcut to the marketing folder should be fine as long as you have not set any specific right on the actual report itself.Please clarify per my post above this one. I tried doing exactly what you said to do. What happened is that the user could SEE the report but could not execute it. User had "view on demand" rights to the folder via a group.

Similar Messages

I refuse to pay for a one year automatic subscription for Cosumer report that was charged to my account today without me noticing. How can I cancel that and get reimbursed now?

I refuse to pay for a one year automatic subscription for Cosumer report that was charged to my account today without me noticing. How can I cancel that and get reimbursed now?
Patrick

First turn off auto-renewing subscriptions:
iTunes Store: Purchasing and managing auto-renewing subscriptions
Getting a refund won't be as simple. For that you will have to contact iTunes Store Support.

I would like to buy an ipad for a gift for a friend that lives in Santiago,Dominican Republic. What do I need to do to make the ipad function efficiently and properly in Santiago,Dominican Republic?

I would like to buy an ipad for a friend of mine that lives in Santiago,Dominican Republic. How and what do I need to do as far as set up of the ipad to make sure that it functions efficiently and properly in Santiago,Dominican Republic? The availability of wi-fi is not very good, so should I buy an ipad model that has wi-fi and cellular capability? I am quite new to all this technology so I would appreciate it very much if someone can explain step by by step and in simple terms how the ipad needs to be set up to work in this country.

The Smart Cover only protects the front screen. You'll get scratches on the back plus it provides no protection for a small drop.
I added a screen protector as it was cheap insurance protection.
For my iPad 2, I bought an Adesso case/keyboard model WKB-2000CD http://www.adesso.com/en/component/content/article/49-coming-soon/455-wkb-2000cd .html Works great & looks good. The keyboard is easier to use than Apple's on-screen keyboard. Do a Google search using the model number to get the best price. About the same price as Apple's covers & it covers the whole iPad. Although the new iPad is slightly thicker, it should fit this case.
 Cheers, Tom

How to define roles for the reports that i have created using WAD?

Hi all,
Can anyone let me know how to define roles for the reports generated using WAD. And what is the procedure for creating and defining roles. Is this process take care of Bw consultant nor the basis guys.
Can anyone let me know the entire procedure about the roles in bw 3.5
thanxs
haritha

Following links might helps you
create a role
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&

Anyone know of an app that will merge multiple folders with files inside them without duplicates or losing any files???

I have two large iTunes folders that have thousands of folders within them and thousands of .mp3 files within those folders.
I need to merge them without duplicating or replacing files.
Suggestions?
Prelude/backstory:
I just got back one HD (HD1) from a recovery place that recovered close to 45,000 mp3s in addition to the thousands of mp3s that were already there.
My second HD (HD2) has the same mp3 files that did not need to be recovered, but also has additional mp3s that I added in the time HD1 was away at recovery.
I want to end up with one iTunes folder that has all the files in it, without duplicating them and without losing any.
Thanks in advance!
*I'm running OSX Lion on a brand new MacBook Pro

You can see if there is anything useful in this thread:
https://discussions.apple.com/thread/3196617?start=0&tstart=0
Other possiblities:
http://www.addictivetips.com/mac-os/macmerger-merge-files-content-of-any-two-fol ders-into-one-mac/
MacMerger

How to setup security for Forms, Reports, and Discoverer11g on WLS 10.3.5

I am trying to setup simple security on my WebLogic server (linux OS) using a Windows Active Directory Server. I have an LDAP authentication provider created that links to a central Active Directory server, but I am unclear on where to go next.
I want the user to login to the network from their PC but not have to login again if they decide to run an application like Discoverer, all of the authentication would be handled by the Windows AD server. Has anyone else done this before on WebLogic?
Are there white papers out there that would explain the steps required to accomplish this? Thanks for any help.

Soooo...I need to install OID on top of my Forms, Reports, and Discoverer install? Would it be better to install the SSO and OID before installing any other middle ware products like Forms, Reports, and Discoverer? Then extend the domain to include Forms, Reports, and Discoverer?
Can you point me to documentation that would help me get this issue worked out?
Thanks.

Firefox is asking me to add an exception for security for a website that has told me its certificate is valid.

I am running Firefox 31.0 on a Windows 8.1 o/s. When I attempt to access my email provider in its' "secure" mode, I am advised that the connection is untrustworthy. (Parenthetically, this does not occur on my other two systems running respectively, Windows 7 and Windows XP.) I am asked to provide an authorization for an 'exception' prior to completing the connection. The option of making the exception permanent is NOT available, so I go through this every time I begin a new internet session. I have contacted the email provider and been advised that their digital certificate is valid. So, as I see it there are three problems: (1) if the certificate is valid, as is suggested by the provider, why does Firefox not recognize this, (2) why does the exception window not allow me the option to make the exception status enduring, and (3) why is this problem present only on my Windows 8.1 system?

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file to remove intermediate certificates that Firefox has stored.
If that helped to solve the problem then you can remove the renamed cert8.db.old file.
Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previous intermediate certificates.
Firefox will automatically store intermediate certificates when you visit websites that send such a certificate.
If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

What security for the form that customer sends via email?

I made a form and posted the link for patients to request new appointment. When they send the form back, is that HIPAA appropriate?
I understand that my login as user is secure but is the transmission of the completed form to the assigned email secure?
How can it be made secure?
thanks

You can add links to any text within a form. You can, for instance, add a Formatted Text field and add the text "Adobe FormsCentral Security Information". You would then select the part of the text you wanted to add the link to the select menu item Insert->Link. In the resulting dialog you can add the link and modify the text it is associated with.
FormsCentral does not support add a link to an image (icon). If this is something that you would like to see added to the product you can add it to the list of feature ideas at:
http://forums.adobe.com/community/formscentral?view=idea
If you need to add a new idea click "Create an idea" under "Actions" in the top right.
-Jeff Canepa

Aggregate function for a report that has sets

My report combines similar analysis into sets. I need to apply aggregate function such as Max() to the resulting columns. I tried but Analytics doesn't like that. Can someone tell me if this is supported or not? If not, what would be a workaround?

Have you tried placing the results into a pivot table then assigning this to display MAX results

Looking for calendar app that can sync multiple calendar colours in outlook

I Have multiple colour categories in my calendar but need a calendar app that can sync with outlook. Do NOT want to sync with google calendar. Any suggestions? Thanks

Hi ron1098,
Try my application Dates to iCal. it runs on the Mac, but you can sync the calendar to your iOS device.
See more about Dates to iCal here. It is £4 shareware with a 2 week demo.
Best wishes
John M
As I sell software on my site and ask for donations, the Apple Support Communities Use Agreement requires that I state that I may receive some form of compensation, financial or otherwise, from my recommendation or link.

Create organis'l level field for auth. field that occurs in multiple object

Hello,
When trying out PFCG_ORGFIELD_CREATE I ran into a problem:
I want to have an organisational level field for BEGRU in C_STUE_BER (Auth.grp in BOM-header);
there are other auth.objects that also have a field called BEGRU (eg M_MATE_MAR, M_MATE_MAT, F_BKKA_BPG);
we have roles that have several of these objects.
Running PFCG_ORGFIELD_CREATE leads to problems in those roles that have several of the objects with a field BEGRU. In general the values to be assigned to BEGRU in different objects is not the same.
The only solution i can think of is to have per role only one object with field BEGRU.
This would mean a serious redesign of our roles :-(.
Is there another option?
Thanks for your contributions.
John Hermans

Another option is to create transactions for the BEGRU and maintain SU24 for them.
But that is not scalable for large BEGRU values and has an implication for menus and number of transactions, in addition to the number of roles...
But BEGRU fields should be used with caution, as the objects which use them are mostly not intended to be scalable (like P_PERNR is scalable....) so Su24 or well documentented "Maintained" authorizations might be an option to switch to.
Cheers,
Julius

How to make Management of row level restrictions easy for webi reports?

Hi all
Our BO Product version is 12.3.0.601 (BO 3.1)
We are applying row level security for webi reports at universe level...
Since Universes are more in Number we have to create same restrictions and apply it to the users lets take a restrictions on region....which is common across all universes.
So the problem lies with the management of restrictions created at universe level.
Can we have a setup in where we can centralized the restirctions at a place so that management would be easy ......???
Shall we have to import the roles(restrictions) from R/3 or BW or Database level...?
Then how we will restrict our report (webi) to a region?????
So basically webi reports should run with the restrictions lets say region....How we will achieve this?/
Thanks and Regards
Ritu Raj

Hi,
what is your Datasource?
If its SAP BW i would highly recommend you use the SAP Authentication in your BOE XI 3.1 So the users log into BOE with their SAP Username and Password and than the Data restriction of your BW takes place when the users run their Reports.
Informations on how to confiure the SAP Authentication you will find in the installation Guide of the SAP ITK.
Regards
-Seb.

Security for report group 6OBU (transaction S_ALR_87013019)

I have a situation where a user with access to the transaction S_ALR_87013019, does not return any data during execution. Another user with much lesser access can return data with the same selection criteria.
A security trace doesn't display any authorization failure. I believe there is a user exit EXIT_SAPFGRWS_001 which can be used to add some extra security for this report group but its not implemented.
Are there any special user specific configurations which control display of data for this report?

Hi Aninda,
I agree. Authorization trace might not be appropriate in this situation.
Also, user parameters are only to pass on specific values, such as company code, default layout etc and doesn't restrict the user from viewing a report.
As mentioned in my earlier reply, the issue could be with a user exit where the user ID should be maintained in a table or the restriction is applied at the table level.
The other issue could be with the version of SAP GUI. You may ask the user who has issue with viewing the report to login on a different system to identify if the issue is with the authorizations or the SAP GUI.
Hope this helps!!
Regards,
Raghu

Creating management accounts for protected accounts and groups in Active Directory

I'm following step-by-step instruction for creating management accounts for protected groups that I found in Microsoft book "Best Practise for Securing Active Directory", published april 2013.
What is confusing me is the "Enabling management accounts to modify the membership of protected groups" step. When I use DSACLS command:
Dsacls "CN=AdminSDHolder,CN=System,DC=MyDomain,DC=com"/G
[email protected]:RPWP;member
what I have to type insted of "member".
When I use previous command with simple "member" at the end I dont get this:
Verify that the account has been granted only Read Members and
Write Members permissions on the DA group, and click OK.
My account have flag on all properties.
I hope You understand me.

The last field is for the attribute to delegate. You can read about it here: https://technet.microsoft.com/en-us/library/cc772662%28v=ws.10%29.aspx
You can also refer to this for updating AdminSDHolder container: http://social.technet.microsoft.com/wiki/contents/articles/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Hi, i am trying to open and view a report that comes from another server with different odbc connection

hi, i am trying to open and view a report that comes from another server with different odbc connection
i created a crystal report for a mysql database on my machine and everything works great
but we have other reports that come from other machines with different odbc connection
and this its not working when opens the report asks for credentials
and i cannot use the remote ip for these reports that come from other machine
question
if i cannot connect to remote ip to open the report
for each report i have to create a database the report database on my machine and then open the report ?
or there is some other way to open the report ?
i am using visual studio 2013 and mysql and
<add key="MYSQLODBCDRIVER" value="{MySQL ODBC 5.3 UNICODE Driver}"/>
thanks

short
i have a report that it was created on another server with a specific dsn
now i am trying to open the report on my machine
the database from the other server does not exist on my machine
the server machine where the report was created the ip its not accessible
question ?
can i open the report on my machine or its impossible ?
thanks

Manage security for a report that lives in multiple folders

Similar Messages

Maybe you are looking for