Publisher Permissions on the CMC in XI 3.1 SP2
We have a Developers group (with a Developers custom access list) within the CMC. Aside from universe and report development, we would also like to have the developers create publications. The permissions have been set so a developer can create a publication, however, they cannot see any users or groups in the Enterprise Recipients list. I've tried updating the settings through the CMC to allow for this, but haven't been able to find the right combination. The Administrator, of course, has no issue seeing the Enterprise Recipients list. Does anybody know what settings should be used to bring this list back?
We are using XI 3.1 with SP2 on a Windows 2008 server. The 3.1 Publisher Guide hasn't been all that helpful. It gives the generic "View right on users and groups intended as recipients" rights that are required. I have tried updating settings in Users and Groups, Publications, Profiles, General, etc.
Any help would be much appreciated!
The client would like to send content (PDF mostly) to users outside of the BusinessObjects environment. As an FYI, we are using Active Directory authentication.
I tried a couple of things. The first was including the Enterprise Recipients and then adding additional users in the Destinations section by appending additional email addresses after the %SI_EMAIL_ADDRESS% parameter in the To: text field. This resulted in the non BusinessObjects users receiving emails multiple times (the number of Enterprise Recipients). As a workaround, we added these two additional users to the Active Directory group so we could include them in Enterprise Recipients.
My test with the Dynamic Recipients included creating a WebI report that included a Project ID, Full Name, and Email and using that report as my source for Dynamic Recipients. I continued getting the following error, which I sent to SAP Support:
ERROR [PublishingService:HandlerPool-96] BusinessObjects_PublicationAdminErrorLog_Instance_27585 - [Publication ID # 27585] - Scheduling document job "Materialized View Freshness Report" (ID: 27,592) failed: An internal error occured while calling 'submitReport' API. (Error: ERR_WIS_30270) (FBE60502) [3 recipients processed.]
Both WebI reports refresh correctly through InfoView - the dynamic recipient source document and the source document specified for refresh.
Similar Messages
-
Where is the Manage Object function in Crystal Reports 2013 for the CMC?
I recently upgraded to Crystal Reports 2013 after upgrading our Crystal Reports server to SAP Business Objects Platform 4.1. Before the upgrade, I could publish reports from Crystal Reports XI to the CMC then right-click on the report title in the Repository Explorer (in Crystal Reports) and I had the option to select Manage Object where I could set the default settings for the CMC. I am not seeing this option in the new version of Crystal Reports. Is there something I need to do to see this option or has this option been removed from Crystal Reports 2013?
Hi Kelley,
You're right, the option doesn't exist in CR XI R2 and above.
All the options now need to be set in CMC.
-Abhilash -
Publisher permissions and BI integration
I have switched to Oracle BI Server Security Model in publisher so I can log in with users stored in an external Database. The presentation works just fine, but when I try to use Publisher I cannot access the Catalog and also get the following issues/errors.
1. "No input xdo file path is specified" When creating a new Data Model.
2. If I ignore this error and create a new Data Set - Oracle BI Analysis, I can only see the folders in the catalog initially (Shared Folders, Users), and all sub folders, but no reports.
3. If close out, or click back on the breadcrump the folders no longer show up (from issue 2).
I've already tried this: Error integrating publisher and BI but no luck.
Could I be missing another security policy?
The user I am testing with has the BIAdministrator Role with all the publisher permissions I can find.
Edited by: 844667 on Aug 4, 2012 5:08 PMI added the default Oracle BI EE datasource awhile ago. All this did was allow me to click refresh when creating a new data model and it shows up in the Default Data Source list (not sure why I have to click refresh Data Source List but if I do not it is empty)
The only other error in the logs I can find is this
[2012-08-06T14:49:44.000-04:00] [OBIPS] [WARNING:16] [] [saw.securitysubsystem.authenticationutils.addauthenticatedusertocatalog] [ecid: 7eee1bf15b0dff8d:-4dbe3b88:138fcdc54a4:-8000-0000000000001aa4,0:1:1] [tid: 8792] Empty ROLE or ROLEGUID session variable received for the user admin. User may not have
access to many features in Oracle Business Intelligence[[
File:authenticationutils.cpp
Line:191
Location:
saw.securitysubsystem.authenticationutils.addauthenticatedusertocatalog
saw.securitysubsystem.checkauthentication.runimpl
saw.threadpool.asynclogon
saw.threads
ecid: 7eee1bf15b0dff8d:-4dbe3b88:138fcdc54a4:-8000-0000000000001aa4,0:1:1
ThreadID: 8792
Still looking into this but not finding much. -
We have a project being migrated from CQ4 to CQ5. We are trying to understand how people manage their permissions on the publisher.
In CQ4, the permissions were associated with the user/group and replicated easily from author, so we could define the rules in author and just activate them.
In CQ5, the permissions are associated with the content, but when you activate the page, the permissions are not replicated.
Adobe says the reason for this is :
"Page permissions are not replicated because they are stored under the nodes to which access is granted, not with the user.
In general page permissions should not be replicated from the author to publish and are not by default. This is because access rights should be different in those two environments. Therefore it is recommended to configure ACLs on publish separately from author."
See http://helpx.adobe.com/cq/kb/PagePermissionsNotReplicatedWithUser.html
However, they don't say how exactly one should "configure ACLs on publish separately from author"
So what to do ?
1) One way would seem to be to create a package of just the permissions and then manually install this package on each publish instance.
Just activating the package would appear not to work
This has the disadvantage that the sys admin has to log in directly to each publisher to install the packages, and it becomes a "deployment" task to change permissions
2) Login to the publishers and apply the access rights directly on each publisher.
This has similar problems to the one above, and might have timing issues, e.g. when a page is activated by a user
3) we could use Closed User groups.
Whilst this would seem to work for a limited extent, it seems the limitations might be too much for us.
E.g. If we have a Closed User Group for the intranet, and then within the intranet we have a section for HR only, we would want 2 groups, one
for "intranet-users" which would have access to
/content/intranet/en
and one for "intranet-hr-users". which would have access to
/content/intranet/en/hr
From what I can tell a member of "intranet-users" automatically gets access to everything underneath /content/intranet/en so would have access to all the HR content too
Also with Closed User Groups, how do I get an overview of what permission a particular user or group has ?
4) There is a utility package to create packages based on an XPATH which might help with 1) but still has the same issue of direct deployment to publish.
TBH, I am not sure really why the permissions cannot be replicated.
Normally we would just assign users to groups and assign groups permission to read the pages, on publish users would not be members of the "authoring" groups so there wouldn't be a problem.
Is there a workaround or hotfix ?
Dev.Hi Dev,
For 1 See alternative [1] works for you. AFAIK there is no hotfix & as a alternative need to develop a custom component implementing EventListener, EventHandler and set acl accordingly based on properties.
[1]
https://helpx.adobe.com/crx/kb/HowToInstallPackagesUsingRepositoryInstall.html
Thanks,
Sham
@adobe_sham -
WebElements: What should the default URL be in the CMC
Hi,
Had issues with displaying the HTML output on update and refresh of a given report selecting specific categories. Current, using CR 2008 and Central Management Console(CMC) Product 12, 2008.
Cannot view the report's output using webElements like SelectDuo, SelectLink etc. When one clicks on a filter from the formula passed to the SelectDuo
the report redirects to the SAP Business Objects info-view Logon page.
Here is the default URL, in the CMC: Does it need to be tweaked to view the result of the same report refreshing itself without prompting for a login.
https://internal_servername:8443/OpenDocument/opendoc/openDocument.jsp?sIDType=CUID&iDocID=%SI_CUID%
Thanks,
-RpIn order to use OpenDocument without getting a login screen, one of two things need to happen:
1. If you have single-sign-on enabled for BI Launchpad, it can also be enabled for OpenDocument. See the Platform Administrators Guide for more information about how to configure this.
2. If you don't have any type of single-sign-on, you'll need to have a valid session/logon token that you can add to the end of the OpenDocument URL. For more information about how to build an OpenDocument call, go to help.sap.com/bobip. This will bring up the list of help docs for BI 4.1. If that's not your version, find your version on the left side of the screen and click on it. Then go to the "Development Information" for that version and find something like "Viewing Documents Using OpenDocument...". If there is no link for that (it wasn't updated and published for every SP), try the next earlier SP. Keep trying until you find it. This will give you information about how to add a logon token to the URL.
-Dell -
DVD player 5.4 keeps crashing. I have seen here that a number of other people have had this problem. I recently started one DVD, and when I went back to it, it opened to a black screen twice. It also crashes with other DVDs after I scroll ahead or back. It gives an error message that it is skipping damaged areas, or sometines error 69889. Playing this on a PC, however, there is no problem. I repaired the permissions, verified the disc, and installed the OS 10.6.8 combo update, all to no avail. Techs told me that it is usually the hardware, so I bought a LaCie external combo drive. Still crashes. Looked on Apple downloads and they don't list a 5.4 to replace this version. Mac informer.com offers a free download for DVD 5.5- should I try this? Why doesn't Apple fix this problem?
Your suggestions did not help. I repeated them again after the first try did not succeed. Any other ideas?
Would installing another copy of DVD 5.4 help? How can I get another copy of DVD player 5.4, since Apple does not seem to offer it? I do have the disc for Snow Leopard, but am not extremely tech savy (and maybe it is the same corrupted version). -
Schedule a Webi report from the CMC
Hi, ALL
Is there a way to schedule a Webi report from the CMC without using an email account in the
'from' box? There are other placeholders that can be used but I don't know how
to use them please advise.
Thanks.Hermant,
You need to make sure you configure the proper email server. Go to the CMC - Server > AdaptiveJobServer>Destination>Email. You may need to enable Email as one of the Destinations.
You must configure all the HIGHLIGHTED options.
Regards,
Ajay -
Store XML Publisher report in the database
Hi all,
Is is possible to generate an XML Publisher report in the background and store the report as a blob in the database. I have an APEX application that needs to generate the report when the user clicks an 'Update' button. This report can then be accessed at a later date (via a hyper-link on another page) and will show the report that was stored on that date. Basically the report needs to be point in time.
Thanks
GrantHi,
you might have your reasons to want to store the entire report in the db as an object ... But wouldn't it be simpler to just add an extra DATE column to filter, and generate the report at runtime?
What if the data changes in the meantime?
Just, an idea ...
Grtz. -
Error when scheduling a cmd file (program object) via the cmc
Hi,
I have added a program object which is a cmd file in the BO repository.
When I try to schedule it through the cmc, I'm receiving the following error message:
"Could not capture output for the program". The credentials to execute this program object are correct.
I'm using SAP BI 4.1 SP4
Does anyone has any clue to solve this problem?
ThanksWe are on SAP BI 4.1 SP3 patch3 (not sp4 as mentioned above)
Yes I did enter the user name and password to run the program object.
It has never worked before on SAP BI 4.1 but the same program object works well on BOXI 3.1 SP3.
If I try with an other program object, it's also failing.
I checked the sap notes and I did some adjustments.The domain user account has now all the requested rights.
But I still have the same error message when I try to schedule a program object -
can we control the PDF file name that is generated by BI Publisher based on the content in the input PDF?
No, there isn't. The way you're using the file is not recommended. You
should use a review tracker to avoid getting in the way of one another. -
How to set up same timezone in BI Publisher for all the USERS?
Hi Experts,
My OBIEE version is 11.1.1.6.6 and any user can go into the My Account and then preferences and set the timezone.
But as an admin, i see they are too many users and wanted to setup common timezone for all of them.
How do i setup common timezone in BI Publisher for all the users?
Thanks
AshishCheck
Time Zone Specification from http://docs.oracle.com/cd/E12844_01/doc/bip.1013/e12187/T421739T481157.htm#4535403
just in case https://blogs.oracle.com/xmlpublisher/entry/how_to_keep_your_dates_from_go -
I recently purchased an external hard drive to back up my iMovies. When I try to open the movies on the backup I get a message "you may not have permission to modify that folder" How do I change permissions on the backup?
Hi
One Must NEVER move or alter any folders named
• iMovie Event's - or -
• iMovie Projects - or - alike
on DESKTOP/FINDER - Ever ! - ONLY Within the iMovie Program ! else all connections are broken and hard to impossibly to mend !
but rather do as described here under
Moving Event's and Project's
Connection - Either connect one Mac in Target mode to the other via FireWire. Or use an external hard disk !
(Target-Mode - Start one Mac e.g. laptop - BUT keep T-key down during full up-start - Now a FW-symbol is jumping around the screen and it will work as an external hard disk when connected to the other Mac)
A. The External Hard Disk - MUST BE - Mac OS Extended (hfs) formatted to work for Video. UNIX/DOS/FAT32/Mac OS Exchange works for most other things but not for Video whatever program is used (iMovie or FinalCut)
B. Should be a FireWire one as USB/USB2 performs badly to me and especially when filling up
C. Do never Move or Alter any folder named
• iMovie Event's - or -
• iMovie Project's
on DeskTop/Finder - as this will result in iMovie losing connections to them and repair can be anything from hard to impossibly
D. Moving and Copying must be done within iMovie application and Events to Events - and - Project's to Project's.
E. Moving Project's to Event's - Do not work for me - I have to export project as a QuickTime movie then Import this into Events.
Event's window can show two faces
Like this
or like this
from one hard disk Event - You can move it to the other hard disk
You can not (at least not me) move Event to Project or other way around only
Event to Event and Project to Project
Yours Bengt W -
Can I set new shared folders to inherit permissions from the parent folder?
Am running file sharing on an OS 10.9.5 machine. This is not an OS-X Server.
9 users connect to this machine. They create folders and store files on it. All the users who connect are in a group which has read and write permissions on the volume in which they store files. But when they create new folders, the permissions on the new folder is 755. I have changed the umask to 002 and this works for users who might create a folder locally but does not work for network connected users. All users are AFP and, if it matters, are on 10.8.5. The OS versions are held back for good reason.
Is there a way to enable Inherited Permissions for new network created folders on the standard client OS?
If not, can I do so on the server OS? I have several older OS-X Server machines where this is a possibility.
(Sorry if this is a duplicate but most posts like this seem to concern locally created files and folders and not network shared folders.)It can be done more easily with OS X Server, but you can do it anyway if you're familiar with the shell. See the section headed "ACL MANIPULATION OPTIONS" in the chmod(1) man page.
-
Appropriate permissions for the custom list
Hi,
Recently
I have taken up SharePoint 2013 exam and I got bit confused for one of the question i.e.
Case Study: Consolidated Messenger
You are the lead architect developer and web administrator of SharePoint 2013 for your company.
Consolidated Messenger is a national company with hundreds of franchises
Consolidated Messenger sells franchises to franchisees. Franchisees have three user types
User and its Role
Franchise Manager- Response for managing the franchise
Franchise Employee- Responsible for managing accounts and setting pick-up and drop-off locations for couriers
Courier- Responsible for picking up and dropping off packages
You need to set appropriate permissions for the franchise employees
customer list and customer sub site access. What should you do?
A) Add franchise employees to the Members group in the CorporateSiteCollection site collection.
Break inheritance at the
franchisee sub site level.
Create a custom role definition at the
franchisee sub site level.
Add franchise employees to the custom role.
B)
Create a custom role definition in the CorporateSiteCollection site collection with the limited access to the customers list.
Add franchise employees to the custom role at the CorporateSiteCollection site collection
Break inheritance at the
sub site level.
Add franchise owners to the Owners group
at the
sub site level.
C)
Create a custom role definition in the CorporateSiteCollection site collection with the limited access to the customers list.
Add franchise employees to the custom role.
Add full inheritance of the role definition and permissions at the site level
D) Add franchise employees to the Visitors group in the CorporateSiteCollection site collection.
Break inheritance at the
franchisee sub site level.
Create a custom role definition at the
sub site level with Full Control permissions.
Add franchise employees to the custom role.
I feel that both options B and C are applicable but I couldn’t come to conclusion.
Please
share your opinion the same.
Regards,
Sudheer
Thanks & Regards, Sudheer@Naga, As per non disclosure agreement that you have signed / agreed with Microsoft, I think you should not share confidential exam questions or answers. That would amount to violation of NDA.
Hope this helps!
MCITP: SharePoint 2010 Administrator
MCTS - MOSS 2007 Configuring, .NET 2.0
| SharePoint Architect | Evangelist |
http://www.sharepointdeveloper.in/
http://ramakrishnaraja.blogspot.com/ -
How to find out the BI Publisher Version from the Excel output file
Hi,
Can any one tell me How to find out the BI Publisher Version from the Excel output file generated using BI publisher.Take a look at it in notepad or a text viewer... it's just a MIME/HTML file...
Example:
From: "Created by Oracle BI Publisher 10.1.3.4.0" <>
Subject: Created by Oracle BI Publisher 10.1.3.4.
Maybe you are looking for
-
Just a few days ago, I noticed that when I start Firefox it goes to a blank page, despite the fact that I have several times checked and rechecked under "Options" and my home page is in there. Also the back button has stopped working. I have made sur
-
XML Publisher Arabic Report Display and missing header problem
Hi All We are in apps. 11.5.9 with English and Arabic language support.Even though we have all our data and reports in English we are in need of an Arabic Invoice report. Since Titles cannot be typed in oracle report builder we decided to build the r
-
I cant see my family sharing on my macbook. how do i set it up to where i can see it?
How do i set up my family sharing account on my Macbook Pro with retina display. i have it set up on my phone but i cant figure out how to get it on my macbook.
-
SMSes sent through PC Suite are corrupt
Windows XP Pro w/ SP2 Nokia PC suite v. 6.85.14.1 Phone - Nokia 2360 (connected via Bluetooth adapter) If I send SMS using Nokia Text Message Editor in Nokia PC Suite, Lithuanian letters with diacritics (ąčęėįšųūž) are replaced by "corresponding" let
-
How to center MBP pointer on startup (relocated)?
Following someone's advice (S.U. wrote: "I have no idea myself, but if you don't get an answer here, you might try your question in the Leopard forum which is where there might be more software experts. Good luck!"), I decided to relocate my previous