Outline access permissions in Planning

Is there any way of having a report of the permissions than are given to the outline members in Planning 9.2.0.3 (via Administration->Dimensions->Assing Access).
We want something like:
Product
100 user1: read, user2: write
100-10 user2: none
100-20 user2: read
100-30
200 user3: none
Or something like:
Product
100 user1: read(idescendats), user2: write(idescesdants)
100-10 user2: none(member)
100-20 user2: read(member)
200 user3: none(idescendats)
...

Hi,
Here is an example of SQL query that retrieves permission information, just run it against you planning database.
It has been wrote for SQL server but can easily be modified for Oracle.
SELECT usr.object_name as Username,mem.object_name as Member,
'Access Rights' = CASE acc.access_mode
WHEN -1 THEN 'None'
WHEN 1 THEN 'Read'
WHEN 2 THEN 'Write'
WHEN 3 THEN 'Write'
ELSE 'Unknown' END,
'Relation' = CASE acc.flags
WHEN 0 THEN 'Member'
WHEN 5 THEN 'Children'
WHEN 6 THEN 'Children (inclusive)'
WHEN 8 THEN 'Descendants'
WHEN 9 THEN 'Descendants (inclusive)'
ELSE 'Unknown' END
FROM
hsp_access_control acc, hsp_object mem, hsp_object usr
WHERE acc.object_id = mem.object_id
AND acc.user_id = usr.object_id
-- AND mem.object_name = 'optional by member name'
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

  • Filter and general access issues from planning to essbase

    Hi all,
    V 9.3.1 Planning
    I am working on a planning system where the business owners would like to restrict the lock and sending of data via smartview. Basically, users are bypassing parts of planning and going directly to essbase rather than forms. They had individual user filters setup but they would like to move to groups. I am using the importsecurity utility to try and achieve this. However, the access granted and filters are producing the following behaviour
    1)Group has essbase write access - if this is enabled there appears to be unrestricted access via smartview. Take it away and #NoAccess appears despite security being applied to certain members using the importsecurity utility. I have read that this can be a bit of a loose canon when granted and conflicts with filters.
    2) Cannot create filters - I wish to remove all user filters from within planning. However, the importsecurity sl_clearall command doesn't clear them (as I thought it would but appear to be wrong). I cannot create any filters. An error appear saying 'Failed to create Security Filters for the following users: xxxx' Is it possible to delete the filters?
    3) If I refresh the security filters I get errors saying 'the following filters could not be created' but they are in EAS (I deleted all filters before hand). I have run the updateusers utility which tidied up msad users but still errors are reported.
    The objective is to restrict each group to be able to write to the permitted part of the application and read where necessary. The permissions in planning need to match essbase.
    I would appreciate any help.
    Thanks,
    Nathan
    p.s this is the same app relating to the thread about the application owner posted yesterday for those who viewed or commented :)

    Knowledge base had some useful articles on this.
    Edited by: NathanG on 07-Jan-2011 03:14

  • READWRITE VS WRITE Access Permissions - Dimension/Dataforms

    Hi,
    From what I know there are 3 types of access permissions for dimensions, dataforms etc - READ, WRITE, NONE (none is the default). I wanted to know if there is any difference between READWRITE and WRITE access permission.
    The thing is when I exported the security using the ExportSecurity.cmd utility I observed that dimensions set manually in Planning were showing READWRITE as access permission where as, those dimension/members that were given access permission using a security file were showing WRITE.
    Ofcourse in security file we did mention it as WRITE so it showed up but for dimensions set manually it was showing READWRITE - why is this difference? Is READWRITE the right way of mentioning the access permission?
    Please let me know.
    ~ Adella
    Edited by: Adella on Sep 16, 2011 6:49 AM

    The correct values to use for security import files are READ, READWRITE, or NONE as defined in the documentation - http://download.oracle.com/docs/cd/E17236_01/epm.1112/hp_admin/frameset.htm?ch03s07.html
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Provisioning varying admin access levels by Planning plan types

    How can I provision admin access levels by plan types? For example, I'd like to grant a user full admin access to one plan type, but limit their access for another plan type within the same application? The plan type I want to limit them to is basically a workforce plan type which I do not want to allow them to have any admin access to. Anyone know how to do this?

    I took a look at the blog and my current setup design mostly follows what is on the blog. I too have a workforce plan type along with other plan types in the Planning application. What I'm trying to see if it's possible is to setup a user with admin access to manage and modify the member outlines for 2 out of the 3 plan types in Planning, but not give him access to the workforce plan type as that has sensitive compensation information. But it appears that if he's granted admin access to modify the application outline, then he would be able to grant himself access to the workforce members, which then means I can't provision him with limited admin rights while also preventing him from access to the workforce information.

  • I am trying to import developed images from LightRoom 5 in o Photoshop 6.  I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, you do not have necessary access permissions or another progra

    I am trying to import developed images from LightRoom 5 Photoshop 6 for further editing.  I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, or you do not have necessary access permissions or another program is using the file.  Use the 'Properties' command in the Windows Explorer to unlock the file. How do I fix this?  I would greatly appreciate it if you would respond with terms and procedures that a computer ignorant user, such as me, will understand.   Thanks.

    Have you tried restoring the Preferences yet?

  • I am trying to import developed images from LightRoom 5 into Photoshop 6.  I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, you do not have necessary access permissions or another progra

    I am trying to import developed images from LightRoom 5 into Photoshop 6.  I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, you do not have necessary access permissions or another program is using the file.  Use the 'properties' command in the Windows Explorer to unlock the file'.  This has not happened before.  How do I change this?

    Could not open a scratch file because the file is locked or you do not have the necessary access privileges. (…) | Mylen…
    Mylenium

  • I have PS 6 and just purchased an iMac and am running OS 10.10.1 (Yosemite).  When i try to Save or Save As a file I get the following message:  Could not save as "Whatever.psd" because this file is locked, you do not have necessary access permissions, or

    I have PS 6 and just purchased an iMac and am running OS 10.10.1 (Yosemite).  When i try to Save or Save As a file I get the following message:  Could not save as "Whatever.psd" because this file is locked, you do not have necessary access permissions, or another program is using the file.  Use the Get Info command in the Finder to ensure the file is unlocked and you have permission to access the file.  If the problem persists, save the document to a different file or duplicate it in the Finder.  Any suggestions?  Thanks.

    Photoshop: Basic Troubleshooting steps to fix most issues
    Look under Troubleshoot User Permissions.
    Gene

  • When I close Photoshop CS6, the following message appears: "Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file.

    When I quit Photoshop CS6, the following message appears:
    " Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
    If I try to change the Workspace in PS6 from Essentials to any other Workspace, the following messsage appears:
    "Could not apply the workspace because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
    I have checked the Sharing and Permissions section of the "Get Info" panel accessed from the Finder and I have set Read and Write Privileges for my user account for Photoshop CS6. System and Admin are also set to Read and Write.
    I have a MacBook Pro with OS X Version 10.9.5 and have all available updates for Photoshop CS6, Lightroom 5 and Bridge CS6.
    I tried uninstalling the program and downloading it again and reinstalling, but nothing changed.
    Can you help?
    Thanks,
    cjpnm

    You may get better help in Photoshop General Discussion
    The Cloud forum is not about using individual programs
    The Cloud forum is about the Cloud as a delivery & install process
    If you will start at the Forums Index https://forums.adobe.com/welcome
    You will be able to select a forum for the specific Adobe product(s) you use
    Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll
    If FINDER means Mac, read below (and try to give more information when asking a question)
    Mac 10.9.3 workaround https://forums.adobe.com/thread/1489922
    Enable Mac Root User https://forums.adobe.com/thread/1156604
    -more Root User http://forums.adobe.com/thread/879931
    -and more root user http://forums.adobe.com/thread/940869?tstart=0

  • Photoshop won't start: Could not open a scratch file because the file is locked, you do not have necessary access permissions, or another program is using the file.

    Adobe Photoshop CS6 Extended
    "Could not open a scratch file because the file is locked, you do not have necessary access permissions, or another program is using the file."
    I've tried finding and checking and fixing permissions but no success.
    This happened from one day to the next. I think it has to do with the sn attached to the disk rather then the motherboard. I have the suite co-installed with Symphony 5.05. I've tried reinstalling.
    What's to b done? The rest of the Creative Suite 6 (AE, AI etc.) works fine.
    Anyone...?
    Loui

    Have you tried restoring the Preferences yet?

  • Read-only access permissions for new files/folders?

    System:
    Clean Install on new intel Xserve
    10.4.8 Server w/ Open Directory
    Windows clients can read/write completely fine...
    Clients connecting using AFP (whether Standard or Kerberos authentication) can access files, but when new files/folders are created on the server, they register as full permissions for the user who created them, but not for the rest of the group.
    The share(s) in question are set using POSIX from WGM: Full access for owner/group/everyone (changed it to this thinking it would help, but it does not). Of course, no one can make changes to a newly-created/deposited files/folders, which is just plain silly.
    I can chmod the permissions recursively from a script (which fixes the problem, of course) on a regular basis so that its not (as much of) an issue, but there is still a 5-minute lag for the script to kick in, since we don't want to bombard the server with chmod requests every minute....which is unnecessary in the first place!
    I have plenty of other setups which are identical but have no such issue...
    Any reason why POSIX permissions on the share are being ignored from every user account?
    Thanks,
    k

    "That's default posix behaviour no matter what access permissions you set on the sharepoint."
    I'm afraid this is dead wrong. What matters most is how you set permissions on the share, not if you've chosen to inherit vs. using POSIX. POSIX is still used in inherit functions, though you can use ACL's to override them. In this case, ACL's are not being used on those shares (though we tried it).
    After all, why would Apple (let alone anyone else) even offer the ability to change POSIX permissions on a share if it didn't have any effect? That would be somewhat contradictory in nature.
    Like I said before, I have several other installations which are identically setup that have no such issues.
    As for Windows, it is also not set to inherit permissions; we're setting those explicitly. And they work fine.
    Any other ideas?
    Thanks,
    k

  • Check in new documents in DMS with specific access permissions

    Hi,
    we have an RFC which creates new documents in DMS.
    This calls one after another these FBs:
    - CVAPI_DOC_CREATE
    - CVAPI_DOC_CHECKIN
    - BAPI_DOCUMENT_CHANGE2 for a additional classification of the new document
    Now we have a new request from our customer: to give the document specific access permissions.
    We try the following:
    - manually check in a document template with the necessary permissons.
    - the permissions are given in a classification  ("O,MW-T-D*,IB,02/03/52/53")
    - This is named "authority characteristic" and is checked somewhere else, I do not really know how this works in detail ( but it works)
    - check in a new document with a reference to the template and in expectation that the new document has the same classification and therefore the same access permissions
    - If I do this manually in CV03N is does work
    - We do this with CVAPI_CHECK_IN_WITH_TEMPLATE - but this FB does not copy the classification ( only the description and the attached original documents , and the documentnumber of the new document is an mandatory parameter which is not allowd in our case since we use internal creation of document numbers)
    My question is: Is this a possible way to create new documents with specific permissions
    Is there a possibility to give the permissions to the documenttype instead of give them to every single document of this documenttype ?
    Thanks
    Kerstin

    My guess is that at some point you propagated the ACL entry for "everyone deny delete" to all your folders and sub-folders and their contents by selecting Apply to All in a GetInfo window. Try doing a search in the Leopard forums for
    ACL chmod
    and you'll find a whole raft of discussions about the problem and suggestions for fixes.
    Francine
    Francine
    Schwieder

  • When using Migration Assistant to transfer files from my pc, I get an error message saying that an attempt was made to access a socket in a way forbidden by its access permissions.  How can I fix this?

    When using Migration Assistant to transfer files from my pc, I get an error message saying that an attempt was made to access a socket in a way forbidden by its access permissions.  How can I fix this?

    You followed:
    http://www.apple.com/support/switch101/

  • When I try to sync my IPOD (3rd gen) on ITunes, I receive the following error message - you don't have enough access permissions to perform this operation

    When I try to sync my IPOD (3rd gen) on ITunes, I receive the following error message - you don't have enough access permissions to perform this operation..can anyone assist?

    See:
    iPhone - not enough access privileges: Apple Support Communities

  • Issues using the outline load command on Planning Version 11.1.2

    Hi All
    I am trying to add members into the Account dimension using the outline load utility within Planning version 11.1.2 and I am getting the following error message:
    Unable to obtain dimension information and/or perform a data load: Unable to create print writer for log file. “D:Oracle\Middleware\user_projects\epmsystem1\Planning\planning1\Data\Log” is a directory. Exception in thread “main” java.lang.NullPointerException at com.hyperion.planning.utils.HspOutlineload.loadAndPrintStatus<Unknown Source> at com.hyperion.planning.utils.HSPOutlineLoad.main<Unknown Source>
    The command synatx I am using is:
    Outlineload /A:Plan01 /u:admin /I:D:\Oracle\Middleware\user_projects\epmsystem1\Planning\Planning1\Data\account.csv /D:Account /T
    Where the headers of the csv import file I have used are:
    Parent,Account
    and
    Account,Parent
    I am e studio enviroment so not sure if this will cause issues.
    Any help would be greatly appreciated
    Regards

    Hi All
    I am trying to add members into the Account dimension using the outline load utility within Planning version 11.1.2 and I am getting the following error message:
    Unable to obtain dimension information and/or perform a data load: Unable to create print writer for log file. “D:Oracle\Middleware\user_projects\epmsystem1\Planning\planning1\Data\Log” is a directory. Exception in thread “main” java.lang.NullPointerException at com.hyperion.planning.utils.HspOutlineload.loadAndPrintStatus<Unknown Source> at com.hyperion.planning.utils.HSPOutlineLoad.main<Unknown Source>
    The command synatx I am using is:
    Outlineload /A:Plan01 /u:admin /I:D:\Oracle\Middleware\user_projects\epmsystem1\Planning\Planning1\Data\account.csv /D:Account /T
    Where the headers of the csv import file I have used are:
    Parent,Account
    and
    Account,Parent
    I am e studio enviroment so not sure if this will cause issues.
    Any help would be greatly appreciated
    Regards

  • Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the 'Get Info' command in the Finder to ensure the file is unlocked and you have permission to access the file.

    I have this massage every time close ps cc
    Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder.

    You may get better help in Photoshop General Discussion
    The Cloud forum is not about using individual programs
    The Cloud forum is about the Cloud as a delivery & install process
    If you will start at the Forums Index https://forums.adobe.com/welcome
    You will be able to select a forum for the specific Adobe product(s) you use
    Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll
    If FINDER means Mac, read below (and try to give more information when asking a question)
    Mac 10.9.3 workaround https://forums.adobe.com/thread/1489922
    Enable Mac Root User https://forums.adobe.com/thread/1156604
    -more Root User http://forums.adobe.com/thread/879931
    -and more root user http://forums.adobe.com/thread/940869?tstart=0

Maybe you are looking for