Report data restriction based on SAP ID - Authorization in BI 7.0

Hi Friends,
In our project the requirement of restriction of report is as follows.
There are two reports
1. Carrier View Report
2. Carrier Drilldown Report
Carrier View which is on Multiprovider is main report and Carrier Drilldown report, which is on DSO (ODS) is RRI report.
Carrier Vendors (these are vendors taking care of transporting the goods to customer locations from plant) will be viewing these reports. We have a master data maintained for Carriers as Carrier ID. The report has this Carrier ID in rows. Each carrier vendor would be given a SAP ID for logging into BW WEB reports.
Security Requirement: When a carrier execute report, the data in the report should be restricted to Carrier ID associated with the SAP ID which he is using.
Kindly suggest us the steps to do it, I am not basis person, but I need to help him.
Thanks and regards,
Balaraj

Hi Balaraj,
You can use <a href="http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm">Analysis Authorizations</a> in BI.  Use transaction RSECADMIN to create authorizations and user assignments.
You need to declare Carrier ID Infoobject as Authorization relevant. Analysis authorizations are not based on authorization objects. Instead, you create authorization for each carrier that include Carrier ID characteristic and some restricted value(s) for the characteristic. You can then assign this authorization to one or more users(SAP IDs). When ever a query with Carried ID is executed, It checks for the analysis authorizations and hence he can acess only those values that are assigned in his own authorization.
Instead of assigning the corresponding Carrier IDs values for each authorization manually, you can create a single authorization for Carrier ID and fill in the values of the authorization using <a href="http://help.sap.com/saphelp_nw70/helpdata/en/91/a62c42fb6fdd2ce10000000a1550b0/frameset.htm">Authorization  variables</a>. In this case in the customer exit you need to use the master data maintenance of SAP ID and CARRIER ID and fill in the values of E_T_RANGE depending on the user name SY_UNAME.
Assign points if you find it helpful.
Regards, Uday

Similar Messages

  • Crystal Report Date Prompt  Query from SAP BW

    Dear Support,
    Using Crystal Report 2008 and Query is design In SAP BW
    Date Prompt is made mandatory in Query at Query Designer.
    Problem:  Requirent is that Date promt shoud take value currentdate-1
    when report is excuted first date prompt will show in that prompt value should have today date - 1 which is yesterday date.
    how to pass formula to date prompt?
    Thanks

    If the prompt value should always be CurrentDate -1, then there is no need to use a prompt at all. Just put the formula to the selection criteria.
    If you want the prompt to default to CurrentDate -1, while allowing the user to change the prompt to another date if they wish... That won't work. CR won't allow you to use a formula as the default value in a prompt.
    If there is a BO Universe between you and the tables... IE, you're building against the universe, you'll need to get with the universe designer and have them make an alternate field available that has the formula hard coded in the SQL as opposed prompting.
    HTH,
    Jason

  • Need to find All Custom Reports which are based on SAP standard reports

    Hi Specialists,
    I would like to find out all the customized reports which are a copy of SAP standard reports in the client's system.
    For Eg. RPCP11G0 is the SAP standard report which has been customized & it's code has been re-written into a Custom report i.e. ZGBPPYMP001_P11D.
    I would like to know all such occurences in the system.
    Steps already done:
    1) Tried searching with RPR_ABAP_SOURCE_SCAN & RS_ABAP_SOURCE_SCAN.
    Please suggest .
    Thanks
    Abhinav.

    it's only possible with an tool-program
    when your developers have not change the line with the REPORT-command.
    e.g.
    standard-report is RAGITT01
    copy is ZC_RAGITT01 or sth like this
    but report line is unchanged in copy:  "REPORT RAGITT01 MESSAGE-ID AB..."
    solution:
    select all reports from TRDIR/TADIR  from your Z/Y-device classes
    and analyse the reports with
    read report ZC_RAGITT01 into wa.
    and use find for searching 'report-command'.
    and check whether the result of that finding is an standard abap
    hope that helps
    Andreas

  • Column data restriction based on join condition

    All,
    SELECT e.ename,
      d.dname,
      e.job,
      e.comm, e.sal
    FROM emp e,
      dept d
    WHERE e.deptno=d.deptno
    AND e.empno   =7788
    AND e.comm   IS NOT NULL;
    In this query, if the comm for the empno=7788 is not null, then i am able to retrive the record, If comm is not null, display the entire record along with comm details, if it is null, display the entire record without comm value(may be as null).
    If commission is not null, then display the entire record, if it is null, then for e.comm, e.sal I want to display null values.
    PS: I am in a situtation like this kind of. Kindly give me some idea.
    Thanks

    Thank you Frank and Sorry for not so clear in explanation.
    SQL> desc demois_wo_routing
    Name                                      Null?    Type
    ORG_ID                                             NUMBER
    ASSIGNED_TO                                        VARCHAR2(10)
    COMMENTS                                           VARCHAR2(55)
    DUE_DATE                                           DATE
    ENTER_DATE                                NOT NULL DATE               -- is the APPROVED_DATE
    ENTER_USER                                         VARCHAR2(30)       -- is the APPROVER_NAME
    PRIORITY                                           NUMBER
    START_DATE                                         DATE
    STATUS                                    NOT NULL VARCHAR2(10)
    WO_NUMBER                                 NOT NULL VARCHAR2(10)
    SQL> desc demois_sr_routing
    Name                                      Null?    Type
    ORG_ID                                             NUMBER
    ASSIGNED_TO                                        VARCHAR2(10)
    COMMENTS                                           VARCHAR2(55)
    DUE_DATE                                           DATE
    ENTER_DATE                                NOT NULL DATE
    ENTER_USER                                         VARCHAR2(30)
    PRIORITY                                           NUMBER
    REQ_NUMBER                                NOT NULL VARCHAR2(10)
    START_DATE                                         DATE
    STATUS                                    NOT NULL VARCHAR2(10)
    SQL> select enter_user,wo_number,enter_Date,status from demois_wo_routing where wo_number='WO000853';
    ENTER_USER                     WO_NUMBER  ENTER_DAT STATUS
    E60075334                      WO000853   14-MAY-13 APPROVED
    C10000001                      WO000853   09-APR-13 OPEN
    C10000001                      WO000853   09-APR-13 ASSIGNED
    E60075373                      WO000853   09-APR-13 PND APPRVL
    SQL> select enter_user,req_number,enter_date,status from demois_sr_routing where req_number=(select req_number from demois_req where wo_number='WO000853');
    ENTER_USER                     REQ_NUMBER ENTER_DAT STATUS
    E60075373                      SR000818   09-APR-13 SCHEDULED
    E60075334                      SR000818   14-MAY-13 SCHEDULED
    C10000001                      SR000818   09-APR-13 SCHEDULED
    C10000001                      SR000818   09-APR-13 SCHEDULED
    SQL> SELECT fm.first_name || ' ' || fm.last_name AS approver_name,
      2         fpc.communication_value AS approver_cell
      3    FROM demo_person fm, demo_person_communication fpc
      4   WHERE fm.person_code = 'E60075334'   --ENTER_USER from FSR/ FWR table
      5     AND fm.person_id = fpc.person_id
      6     AND fpc.communication_type = 'Telephone';
    APPROVER_NAME
    APPROVER_CELL
    Nicy Varghese
    44952937
    SQL> SELECT fm.first_name || ' ' || fm.last_name AS approver_name,
      2         fpc.communication_value AS approver_cell
      3    FROM demo_person fm, demo_person_communication fpc
      4   WHERE fm.person_code =
      5                         (SELECT enter_user
      6                            FROM demois_wo_routing
      7                           WHERE wo_number = 'WO000853' AND status = 'APPROVED')
      8     AND fm.person_id = fpc.person_id
      9     AND fpc.communication_type = 'Telephone';
    APPROVER_NAME
    APPROVER_CELL
    Nicy Varghese
    44952937
    ACTUAL QUERY :---- If i run the below query i will definitely get a record of WO_NUMBER along with the other details.
    SELECT   w.wo_number,
             DECODE (NVL (p.print_wo_barcode_flag, 'N'),
                     'Y', '*' || w.wo_number || '*',
                     NULL
                    ) barcode_wo_number,
             INITCAP (w.maint_type) maint_type, INITCAP (w.wo_status) wo_state,
             w.priority, w.modify_date, w.start_date, w.due_date,
             INITCAP (w.description) description, w.method, w.crew,
             INITCAP (w.craft) craft, w.assigned_to, w.est_hours,
             DECODE (w.req_type,
                     'S', 'Service',
                     'P', 'PM',
                     'W', 'Project',
                     'T', 'Standing WO'
                    ) req_type,
             w.req_number, INITCAP (w.requestor) requestor, w.telephone,
             w.mail_code, w.department, w.cp_number, w.site, w.building,
             NVL (w.phase, 0) phase, w.FLOOR, w.room, w.equipment,
             INITCAP (w.close_comments) close_comments, w.alt_requestor,
             w.alt_telephone, w.alt_department, w.alt_mail_code, w.schedule_user,
             DECODE (w.equipment,
                     NULL, NULL,
                     '*' || w.equipment || '*'
                    ) equip_barcode,
             INITCAP (e.NAME) employee_name, w.schedule_date, w.pl_number,
             INITCAP (q.nomenclature) nomenclature, INITCAP (q.mfr) mfr,
             INITCAP (w.nonavailable_time) nonavailable_time, w.enter_user,
             a.asset_class_code, INITCAP (a.description) asset_class_description
        FROM demois_emp e,
             demois_equip q,
             demois_req w,
             demois_fmm_config p,
             demois_asset_class a
       WHERE w.wo_number IS NOT NULL
         AND NVL (w.asset_type, 'N') = 'N'
         AND w.equipment = q.equipment(+)
         AND w.assigned_to = e.employee(+)
         AND (w.assigned_to = :p_assigned_to OR :p_assigned_to IS NULL)
         AND (   (:p_marked_to_print = 'Y' AND w.print_ticket = 'Y')
              OR (:p_wo_number IS NOT NULL)
         AND (w.site = :p_site OR :p_site IS NULL)
         AND (w.crew = :p_crew OR :p_crew IS NULL)
         AND (w.craft = :p_craft OR :p_craft IS NULL)
         AND (w.maint_type = :p_maint_type OR :p_maint_type IS NULL)
         AND (w.req_type LIKE NVL (:p_req_type, '%'))
         AND (w.wo_number LIKE NVL (:p_wo_number, '%'))
         AND q.asset_class_id = a.asset_class_id(+)
    ORDER BY wo_number;
    The above is the sample data for my logic. The last one is the original query which am modifying with the tables listed above. The last query will return a record based on WO_NUMBER. Now i have to passing the WO_NUMBER to FWR table checking whether it is in APPROVED status or not. If not need to in FSR table with the associated SR ( req_number) for that WO_NUMBER.
    If there is a record in 'APPROVED' state, need to display the approver name from FP and FPC tables by passing value of the ENTER_USER from FSR /  FWR. Till now it is fine , if the STATUS is 'APPROVED'.
    The problem here is, there may a situation where the WO_NUMBER ( or respective SR number) will not be in 'APPROVED' status in both the tables. In this case also i need to get the record as usual like if i run the last query (ACTUAL QUERY).
    There is no direct relation between the FSR and FWR tables here. Only DEMOIS_REQ table has REQ_NUMBER (SR000818) and WO_NUMBER ( WO000853 ).
    Again sorry, If i am not clear enough.
    Thanks in advance.

  • How to creat a Data provider  based on different fields in SAP BW ?

    Hi,
    Experts,
    There are  20 fields  of  Plant Maintainace  like : 
    SWERK
    BEBER
    STORT
    TPLNR
    EQUNR
    INGRP
    QMDAT   ---peroid
    STTXT
    QMDAT  - Date of Notification
    QMNUM
    QMTXT
    QMART
    AUSVN
    AUZTV
    AUSBS
    AUZTB
    AUSZT
    ERNAM
    QMDAB
    AUFNR
    I  want to creat a  Report based upon these fields  ?
    For that I h'v  checked the relevant Fields to the   existing standard  Datasource  in Bw side   &
    Checked  cubes   created  based upon these Datasource  in Bw side !
    i h'v found  some fields are  existing different cubes & some are  missing .
    How to creat a Data provider  based on different fields in SAP BW ?
    plz suggest      !!!!!!!
    Thanx,
    Asit
    Edited by: ASIT_SAP on Jul 15, 2011 6:25 AM
    Edited by: ASIT_SAP on Jul 15, 2011 6:27 AM
    Edited by: ASIT_SAP on Jul 15, 2011 12:37 PM

    Hi Lee, Please see below..
    DECLARE @Machine2 TABLE
    DispatchDate DATE
    INSERT INTO @Machine2 VALUES ('2014/02/01'), ('2014/02/02'), ('2014/02/03')
    DECLARE @DateFrom DATE
    SELECT @DateFrom = DATEADD(D,1,MAX(DispatchDate)) FROM @Machine2
    SELECT @DateFrom AS DateFrom
    Please mark as answer, if this has helped you solve the issue.
    Good Luck :) .. visit www.sqlsaga.com for more t-sql code snippets and BI related how to articles.

  • Multiple Universes (based on SAP BI Query) & single WebI Report

    Hi,
    We build OLAP Universes on SAP BI Queries. One of the ways to consume multiple universes in a single WebI report is to "add query" from another universe into the same WebI page / another WebI tab for the report.
    Is there a possibility to pick and choose fields from different Universes (based on SAP BI Queries), into a single WebI report ... of course respecting their technical linkage.
    regards,
    Rajesh K Sarin

    Hi Ingo,
    We have created multiple subject Area Universes (based on SAP BI Queries). Is there a possibility to select a particular object from one of the Universe and another object from another Universe into the same grid eg. Notification Number from Work Management Universe (SAP BI Query based on Customer Service Data Flow / Multiprovider) and Invoice Number from Invoicing Universe (SAP BI Query based on Invoicing Data Flow / Multiprovider). Common aspects for both of these could be say a Customer Account Number.
    As per my understanding, we cannot do this if we have created Universes on SAP BI Queries.
    Nearest possible option is to display two tables on the same WebI report - one from Work Mgmt Universe and other from Invoicing Universe.
    Please guide.
    regards,
    Rajesh K Sarin

  • AUTHORIZATION ISSUE: cube level data restriction in BI

    Hi all,
    I have few cubes and ODS which are containing data. The requirement is to restrict the cube level data.
    Eg : we have option to see the cube data in RSA1( ADMIN WORKBENCH).Right click on cube manage data.
    the requirement is to restrict to see the data company code = 111(only)
    Likewise for few users only company code = 222.
    If they try to see other than 111, they should get u201Cno authorization messageu201D.
    Cube data               
    company code         distribution channel         account     amount
    111                         10                                   10002     100
    222                        20                                      10002     200
    333                        30                                       10002     300
    444                        10                                      10002     400
    1111                20                                       10002     500
    1111                30                                      10002     600
    2222               30                                           10002     700
    Thanks in advance.
    Jo

    Hi MaikI,
    Thank for the inputs.
    Actually i want restrict the data based on the ANALYSIS AUTHORIZATION - 0TCAIPROV.
    I want to give s_rs_comp-provider value *, and i want to control the query (data) access through analysis authorization. i want to create zanalysisauth which contains 0TCAIPROV = $variable.
    variable is populated with one/two provider values at runtime .
    based on the runtime variable population user should get access.
    But with this implementation user is able to open all queries.where i am going wrong? how can i do this?
    Regards,
    Joseph

  • Crystal Reports Based on SAP Function Module and Transperant Tables

    Hi,
    I need to develop reports based on SAP trasperant tables and to filter the records I require to use one of the function module in SAP.
    I have created parameters in Crystal reports that are required for the function to execute and are included in the where clause of the query. This helped the fuction to get those parameters and execute it.
    The thing is that the fuction works fine with one set of parameters and gives accurate results both in SAP and Crystal Reports.
    But fails for other set of parameters.
    It works fine when we directly execute function in SAP produces a record set. But, when we pass those parameters from Crystal Reports it fetches no data.
    Can anybody tell me the exact procedure to use function module and transperent tables together in Crystal Reports ?
    Thanks in Advance.
    Niwas Joshi

    Hi,
    This is going to be hard to explain, however you need to recognize that the function has input and possibly output (export) parameters.  Crystal Reports is able to work with these parameters.  However it is up to you to figure out how these parameters are used effectively to give you the correct results when joining the function with other data sources such as transparent tables.
    If you're using transparent tables and functions in a Crystal Report, then you need to link these objects in such a way so that a left outer join for example is using the function's output parameters to join to the transparent table equivalent fields.  However if the table is the starting point then the joins from the table should join the Input parameters of your function.
    you can set these joins in the Database menu | Database Expert | Links of Crystal Reports.

  • SAP Crystal Reports data source connection problem using sap business one

    Hi,
    I m facing a problem regarding: SAP Crystal Reports data source connection problem using sap business one
    I am trying to create a Crystal report but when I try to configure a new connection it does not work.
    I select Sap Business One data source and try to complete the information required to connection but it does not list my companies databases, what is the problem?
    Our Current SAP related software details are as follows:
    OS: Windows Server 2008
    SAP B1 Version: SAP B1 9 (902001) Patch 9
    SAP Crystal Report Version: 14.0.4.738 RTM
    Database: MS SQL Server 2008 R2
    I have also added some screenshots of the issues.
    Please have a look and let me know if you have any questions or any further clarifications.
    I m eagerly waiting for a quick and positive reply.

    Hi,
    There is problem with SAP Business One date source.
    I had faced same problem, I used OLEDB Data-source, and it worked fine for me.
    So, try to use OLEDB.
    Regards,
    Amrut Sabnis.

  • SAP Infoset Query Reporting Set Restriction by Org. Structure

    Dear Experts,
    I am giving some new users a demo on using Infoset Query on an IDES server.
    I am using the user group Personnel Administration (PA) and the HRDATA infoset.
    As per my understanding, I should be able to restrict the reporting set according to organizational structure as the infoset is based on logical database PNP. However I am only seeing "No. of hits" in the restrict by drop-down (as can also be seen in the screenshot).
    What am I missing to be able to see the restrict by option of "Persons along organizational structure"?
    All assistance in this regard is really appreciated.
    Regards,
    Talha

    Dear Azury,
    Thankyou for your response.
    Your solution is perfectly sound for fulfilling the purpose.
    However, because I am conducting a demo, I thought a reporting set restriction on the main screen would be more appealing, than an additional selection screen.
    In a demo screenshot I have seen that the restrict by option "Persons along organizational structure", is listed right under "No. of hits" like in my screen shot. Can you shed some light on that. I am attaching the demo screenshot I am talking about for reference as well
    Thanks,
    Talha

  • Is there exist report to check the job start date restriction calendar ID?

    Hi There,
    In SM37, there are many jobs list there. If we choose one job of them, and click Jobchange, then we access in the screen for change the job status. Then click button Start condition, and there is a dialog which name is Stat time will pup up. And click button Date/Time, there will be a new button appears in the bottom. Click Restrictions, You will see a new dialog box which name is Star Date Restrictions. There is a field which name is Calendar ID in selection portion Factory calendar.
    Is there exist one report to check all the jobs calendar ID instead of to check one by one?
    Thanks!

    Hi,
    please have a look into table TBTCO, restricting by field CALENDARID.
    I hope this helps. Kind regards,
    Alvaro

  • How do you set up a default Date To based on Date From for report parameter

    I'm working on a report. I have been asked to set up a default Date To based on Date From for the report parameters. I mean when running a report, if an end user selects a value for parameter Date From, system will automatically populate the Date To parameter based on the Date From + 6 days.
    I guess there's gotta be something to do with Value Set. Do any of you guys know how to go about this?
    Any suggestion is greatly appreciated.
    Dennis

    You should be able to retrieve the value of other valueset using :$FLEX$.<valuesetname> I'm not sure about the exact syntax, it's been a while since i worked with applications.

  • Restriction in event reported date and time

    Dear All,
                We have a requirement where we want to keep check on all the reported events such that none of the events are reported with future date and time.
              We have some 25 reporting events and we have an option to keep the check in Preprocessing  FM but then i have to add the customizing of each of the reported events.
      Do we have any possibility to keep a validation via customizing on Actual Reported Date and time event to be within current date and time i.e. no future event is possible without using preprocessing functionality.
    Thanks,
    Shubh.

    Dear Steffen,
                       Thanks for your reply but what i meant to ask is as below :
                       For an event which I am reporting , I have actual date and time as a field. In this field user  can enter any date and time and this will be treated as reported date and time for that event.
       What I need is the restriction that none of the reported date and time is in future from the time when user is actually reporting the event. I am not considering planned date and time as the criteria for restriction.
    Thanks,
    Shubh.

  • Automation of "pulling SAP report data" into BW

    Hi,
    I need to upload standard SAP R3 report data into BW at the end of every month.
    I'm looking for something like this. Is this possible?
    --> run SAP R3 report automatically
    --> save the report into a CSV file
    --> save the file onto a application server
    --> if successful, raise an event & schedule a process chain to load CSV file into ODS.
    Please remember that, i can't use any standard extractors as this report is complicated.
    I can't even use generic extractors as it is not a single table but many tables (I can't even create joins out of the tables to get the report).
    Appreicate any help on this.

    Hi Hari,
    Your approach looks reasonable. I see no problems with that.
    But still look at the possibility of using the report program code to create a generic function module extractor.
    Bye
    Dinesh

  • Problem with R/3 Data Source based on Function module in SAP BI

    Hi,
    We have a data source based on functional module. When we load data from R/3 to BI we face the following error.
    " No end-confirmation arrived in the Warehouse from the source system."
    We are getting data but due to no end confirmation from the source system, the load become timed-out and status becomes "RED". When we change the status to be "GREEN" and proceed tha load further, load is fine.
    Please suggest us a suitable solution.
    Thanks in Advance,
    Geetha

    Hi Geetha Devi Ramalingam.
    I faced the same problem since yesterday. I just resolve the issue.
    So here is my solution :
    try this code :
        FETCH NEXT CURSOR s_cursor
                   APPENDING CORRESPONDING FIELDS
                   OF TABLE e_t_data
                   PACKAGE SIZE s_s_if-maxsize.
        IF sy-subrc <> 0.
          CLOSE CURSOR s_cursor.
          RAISE no_more_data.
        ENDIF.
    if you add your
    bold
    IF sy-subrc <> 0.
          CLOSE CURSOR s_cursor.
          RAISE no_more_data.
        ENDIF.
    bold
    than the sy-subrc may be equal and than your CLOSE CURSOR s_cursor. will have no effect
    it work for me hope it will for u
    Hard luck!
    Salah
    Edited by: idrissi salaheddine on Jan 19, 2012 12:24 PM

Maybe you are looking for

  • Help! I need to downgrade Mountain Lion to Snow Leopard

    Hello, I know this seems to be a major issue, but i'm going to try to see if someone can help. Here's my scenario I have an iMac i purchased in October 2010, and i have all of the original install discs, since owning the computer i've installed Lion

  • How do I install MS Silverlight on my iMac?

    How do I install MS Silverlight on my iMac? Netflix requires it to view streaming video.

  • How can I get the Evernote added to Firefox

    I changed to Firefox recently but can't copy things to Evernote. The icon for Evernote is not in the list under custom toolbar tab. How can I add this?

  • Using deployment descriptor authentication

    Hello, I'm working on a web application and want to have a login for anyone that accesses the service. Is it possible to use the deployment descriptor to implement security but using my own authentication method? What I want to do is something like t

  • Editing Tabular Data on the iPhone

    Any suggestions on how to edit tabular data on the iPhone? I dont need a full-blown Excel, just something simple. Basically, I keep all my long term goals, plans, and tasks on a spreadsheet. It is tabular, as each is characterized with importance, ar