Restricting access to reports for certain users

Hi,
We have few reports on a Multicube with Reporting unit authorization object. A certain group of users has this authorization. Now, we want a few of these users not to have access to one particular report on this multiprovider.
Can anyone suggest a way to achieve this?
Thanks,
Abhishek.

Abhishek,
Use S_RS_COMP authorization object to restrict by queries. You can create 2 roles based on this object, one role with access to all the queries. The second one will have access to all but one. You can assign this role to relevant people.
Although, this is slightly more maintenance intensive as every time a new query is created, someone has to add the query to one fo the roles based on security required.
-Saket

Similar Messages

  • How to restrict data in reports for different users...

    i created a monthly_sales report on XYZ_SALES_FACT table
    i have to give restriction on reports based on the users.
    i.e. user_1 will access only NORTH region sales info on monthly_sales report
    user_2 will access only SOUTH region sales info on monthly_sales report etc.
    Note: my client is not agreeing to create multiple reports based on the user/region.
    how i have to give user restriction on report based on the users?

    Hi,
    You can create a VPD policy and then create a login trigger and pass SSO client_indentifier or database session_user (use if/then/else to protect both)
    You can check here for the VPD/login trigger.
    Disco Config Guide
    http://download.oracle.com/docs/html/B13918_03/security2.htm#sthref1002
    OTN articles
    http://www.oracle.com/technology/obe/10gr2_db_vmware/security/vpd/vpd.htm
    http://www.oracle.com/technology/oramag/oracle/04-mar/o24tech_security.html
    You can also use secure views, mandatory conditions in the EUL, etc.
    Some other related forums entries:
    Re: Using VPD with Oracle Discoverer without SSO
    Re: Restrict Data for a user without VPD
    May want to search, likely many others on the subject.
    Should give you a good place to start.
    Regards,
    Steve.

  • How to restrict access to views for some users in the app?

    Hi SDN!
    I have an WD application wich embedded in the portal. Appication has 2 iViews (and 2  pages respectively). These iViews consist several views connected with each other (e.g. one view provide list data, second view is add/edit form for this data). I need to restrict access for some users for view with add/edit form. I can't make separate page for this view.
    What I've done:
    1) create yet another UIContainer for this view in main window and embed view to this container. It was be done for create separate iView for form.
    2) in the portal I create iView for this form but don't embedd in any page.
    When I try to call my form from list data (that is one iView from another) I get exception:
    <b>com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: duplicate usage of view .MyCarRentalAddCity</b>
    Is there a way to get needed functional?
    Thanks,
    Lev

    Hi,
    do you need to remove the IView from the portal menu or do you just want to make a View container in your WD application invisible if the user doesn't have the rights to see it.
    If so, you could create your own roles on the app server:
    You need to create a new class that extends NamePermission like:
    import com.sap.security.api.permissions.NamePermission;
    public class ApplicationAccessPermission extends NamePermission {
               * @param name
              public ApplicationAccessPermission(String name) {
                   super(name);
               * @param name
               * @param action
              public ApplicationAccessPermission(String name, String action) {
                   super(name, action);
    Also, you have to create an Action.XML file that looks like this:
    <BUSINESSSERVICE
         NAME="com.vendor.administration">
         <DESCRIPTION
              LOCALE="en"
              VALUE="actions view usage"/>
         <ACTION
              NAME="View Permission">
              <DESCRIPTION
                   LOCALE="en"
                   VALUE="Show view"
                   />
              <PERMISSION
                   CLASS="com.vendor.utilities.ApplicationAccessPermission"
                   NAME="ShowView"
                   />
         </ACTION>
    </BUSINESSSERVICE>
    If you have created these to files in your packages, you can access this function like:
    IUser user ;
    try {
              user = WDClientUser.getCurrentUser().getSAPUser();
              if(user.hasPermission(new ApplicationAccessPermission("Show view"))){
                   wdContext.currentV_UIElement().setViewVisibility(WDVisibility.VISIBLE);
              }else{
                   wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
         }catch (WDUMException e1) {
              wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
                    e1.printStacktrace();
    You have to bind the ViewVisibility attribute of the context to the View Container you want to hide.
    The applicationAccessPermission you defined in the XML File will be visible in the UME Manager of you J2EE engine. With this action you can create a new role and group that you can map to the users that should see you view.
    But, the exception you get is because you have embedded one view twice, which is not possible.
    Hope this helps.
    Regards,
    Dennis

  • Accessing SSRS report for Domain Users

    Hello,
    I have created the SSRS report and deployed it on report server. I would like to add browsing credential to all the users in the User Domain. so i have added the domain name on report server but even domain users are not able to access these report.
    Please help me to resolve this issue.

    what error they are receiving while browing the reports?
    Hope you have provided the permissions on the reports as mentioned in below links:
    http://technet.microsoft.com/en-us/library/ms157363(v=sql.105).aspx
    http://technet.microsoft.com/en-us/library/aa337471(v=sql.105).aspx
    http://technet.microsoft.com/en-us/library/aa337385(v=sql.105).aspx
    http://technet.microsoft.com/en-us/library/aa337494(v=sql.105).aspx
    Please click the Mark as answer button and vote as helpful if this reply solves your problem

  • Restricting User defined Field  for certain user

    Hi experts
    I have a field name U_JobNumber at header level of Item Master Data. Can we make visible for certain user ?
    Is this possible .
    Thank you in advance
    Bishal

    Hi Bishal,
    There is a standard feature in SBO that allows you to enable and set the visibility of UDFs. This works on a user/company level. To do this, log in as the user, open the Item Master form and make sure that the UDF tabs is showing then choose Tools-Customisation Tools--Settings from the top menu. You'll then see a separate window that allows you to set the visibility or any UDFs on this form.
    I don't think this feature is currently exposed via the DI API or UI API so you'd need to set these manually.
    Kind Regards,
    Owen

  • How to Block Account member in input reporting for some users?

    Hi experts, i need to know if is possible to block input of values for some Users in the Account Dimension so that some users can input value in the report but other user cant do it.
    I try to do this from "member access profile" but this option only allow you to define access right for one specifict parent o member.
    I mean, is posible to asigned to Account Dimension a Propertie type "OWNER" like ENTITY?
    For example: one user must to input value for the Account member "CASH", but other user dont, however i have to show the same input reporting for both users.
    I hope understand the question, im sorry about my english
    thank you in advance
    Ignacio Vazquez

    I would think you could do one of the following:
    Either set account as a secured dimension.  You would then define security profiles for all account groups and assign those to your users / teams as appropriate.  Would take a while to setup initially, but if your users don't change that much it shouldn't be too difficult to manage once it's done.
    Setup different input templates that only showed the accounts you wanted each group of users to see.  Put the templates in different site folders and assign access to those sites as required.  users would then only have access to open the template applicable to them.  Would require that you basically make duplicate copies or your current template, modify and save to different site folders which could become a pain if the template requires changes (since you would now have to make the same change multiple times).
    Setup a macro in the current template so that you need to enter a password to unlock the send commands for the respective accounts.  I don't know if it can be setup to support multiple passwords - assuming it can, password 1 would unlock all accounts, password 2 would only unlock CASH accounts, password 3 would only unlock LIABILITY accounts, etc.  You then distribute the passwords to the users as appropriate.
    Hope that helps.

  • BI 7.0 version report  for  anonymous user

    Dear Gurus,
    Greetings for the day!
    I want to display the BEX BI 7.0 version  report on Portal 7.0 for anonymous user. But I am not able to do the same. Can somebody please help me to achieve my task. Thanks.
    Regards,
    P.Swarna

    HI,
    Thanks for your reply,
    Its already configured and the reports working perfectly with login user ids( like end user).But when we assign same report
    to anonymous user with authentication scheme = anonymous in iview properties still its redirecting to logon page.
    Please suggest how to configure BI 7.0 report for anonymous users.
    Regards,
    P.Swarna

  • Default cost center not appearing for certain users

    Hi Gurus,
    We are on SRM 4.0 classic scenario.
    For certain users when they create SC in SRM the default cost center is not automatically taken into account even if they change it to it. The default cost center was changed for these users and some of them still refer to the old cost center no. which was maintained for them.
    The users are not defective and the except the cost center all other attributes work fine. I have tested by deleting & recreating new BP no. for the users but it still doesnt help. Please advise.
    BR,
    Sambit

    hi
    check if the users are correctly mapped into org structure (ppoma_bbp)
    than check if theri Position are correctly mapped with the default cost center (ppoma_bbp; tab attributes; cost center
    regards
    andrea

  • How to set different default interactive reports for different user groups?

    I'm probably overlooking an obvious solution, but how do I set different default interactive report for different user groups?
    For the same interactive report, I want one set of users to see a default where the default filter is based on column X. However, another group of users doesn't have authorization to see that column so I need to set the default filter to something else for them.
    Thanks

    You can set a filter on a report in a URL - would that help? I think with apex 4.x you can also link to a saved default report or alternative report...

  • Possible to make an item editable for certain users and read only for other

    Is it possible to make an item editable for certain users and read only for others?
    I've been able to accomplish this by taken the select statement that I used to define an authorization scheme, placing it in the Read Only condition of the item. However, I would like to simply reference the authorization scheme to utilize caching, and to help keep things cleaner for future maintenance.
    Is it possible to reference an authorization scheme in an item condition similar to the way another item can be referenced by preceding it with a colon (i.e. :P1_First_Name)?

    Thank you, your suggestion worked.
    It would be nice on a future release of APEX if a drop-down box existed under the Ready Only section that would allow an existing Authorization Scheme to be selected or negated when applying the Read Only attribute to a form item.

  • Can OneDrive for Business be disabled for certain users?

    Is it possible to disable OneDrive for Business for certain users? If so, how? Thanks.

    you can remove the OneDrive for Business client for the certain users from their computers so that they cannot use it.
    http://community.office365.com/en-us/f/156/t/192252.aspx
    http://www.askvg.com/what-is-skydrive-pro-option-and-how-to-remove-it-from-context-menu-after-installing-microsoft-office-2013/
    My Blog- http://www.sharepoint-journey.com|
    If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

  • Password protect/disable printers for certain users under ML 10.8

    I am looking for a solution to prevent my youger pupils to print everything without asking me. Is there a solution to protect/disable printers for certain users under ML 10.8 ?

    Ok. The sharing interface is not robust enough (by itself) to password challenge print jobs. You may need to look at another printing technology known as CUPS. Apple created this for advanced print configuration, and it does offer Kerberos security with printing password challenges. I do not know if OS X server offers more granularity in configuration.
    I won't be able to help you with the following as I do not use the CUPS printing solution here.
    In Safari, type in the following and press return.
    localhost:631
    You will see a tabbed browser interface. And a bit of light reading ...

  • How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR

    Hi,
    How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR
    Regards
    Anil Kumar

    Hello there Anil,
    A simple way to quickly get a overview is to look at the request history within the portal environment (note that this will expire in a few day based on your environment, after that you would need to FIM Reporting Module - but you could increase this to
    maybe 60 days to so, watch the DB size).
    To do this you could create some custom search scopes of do some custom queries. The creator of the SSPR activities always has the same GUID so you can use that so search.
    In your search scope you can use the following XPath to play with.
    - All Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and Operation='Put']
    - All Completed Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and RequestStatus=‘Completed']
    You can play with the "RequestStatus".
    Hope this helps.
    Almero Steyn (http://www.puttyq.com) [If a post helps to resolve your issue, please click the "Mark as Answer" of that post or "Helpful" button of that post. By marking a post as Answered or Helpful, you help others find the answer
    faster.]

  • Forward mail to MS Exchange for certain users

    Hello.
    We have a "master" Oracle Messaging Exchange Server and we have recently installed a Microsoft Messaging Server. We need certain users to use MS Exchange. The idea is changing mailHost LDAP attribute for those users (let's take [email protected] as an example), setting the MS Exchange HUB server, let's say hub.domain.com (mailHost: hub.domain.com). Doing so, mails sent to [email protected] are sent to hub.domain.com using lmtp channel. Everything works fine except for an issue: MS Exchange sees the from address like "user@lmtpcs-daemon", so we have to configure MS Exchange to use "lmtpcs-daemon" as secondary domain of domain.com, otherwise it doesn't know what to do with those mails.
    Is there a way to not do that rewrite for certain users? Or maybe can we create a new channel to forward mails to Exchange? Could we define a channel depending on mailHost value or something like that?
    Any thoughts?
    Thank you very much.

    Thank you very much for your inputs.
    It's being quite difficult for me to understand this whole mail routing thing. According to the documentation:
    "The handling of a missing mailhost attribute is different depending on whether the entry is a user or a group. In the case of a user, a mailhost is essential, so if no mailhost attribute is present a new address of the form
    @smarthost:user@domain
    is constructed using the smart host for the domain determined by the LDAP_DOMAIN_ATTR_SMARTHOST MTA option"
    Sounds good, it seems that I just need to delete mailHost attribute for the users who need to use Exchange and set LDAP_DOMAIN_ATTR_SMARTHOST in option.dat. I've tried that but I get a "4.0.0 temporary error returned by alias expansion" when I send a mail to the test user.
    I've deleted the LDAP_DOMAIN_ATTR_SMARTHOST line and I've set mailRoutingSmartHost LDAP attribute for the user but I get the same result.
    I'm not even sure about the mailRoutingSmartHost format. This is what I have:
    mailRoutingSmartHost: correoweb.saludcastillayleon.es
    root@MTA1 # imsimta test -rewrite -debug [email protected]
    Initializing mm_.
    Initializing mm_ submission.
    Checking identifiers.
    *** Debug output from initializing MM for submission:
    09:49:06.60: Debug output enabled, system MTA1.domain.com, process 41f0.1, message enqueue routines version V6.3 compiled Mar 14 2008 17:07:19
    09:49:06.60: mmc_winit('l','[email protected]','[email protected]') called.
    09:49:06.60: Address reversal invoked on [email protected], force reverse URL 1, capture 1
    09:49:06.60: Rewriting: Mbox = "postmaster", host = "mta1.domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.60: Rewrite: "$*", position 0, hash table -
    09:49:06.60: Found: "$A$E$F$U%[email protected]"
    09:49:06.60: Rewrite failed, not forward.
    09:49:06.60: Rewrite: "$*", position 1, hash table -
    09:49:06.60: Failed.
    09:49:06.60: Rewrite: "$*", position 0, rewrite database -
    09:49:06.60: Failed
    09:49:06.60: Rewriting: Mbox = "postmaster", host = "mta1", domain = "mta1.domain.com", literal = "", tag = ""
    09:49:06.60: Rewrite: "mta1.domain.com", position 0, hash table -
    09:49:06.60: Found: "$U%[email protected]"
    09:49:06.60: New mailbox: "postmaster".
    09:49:06.60: New host: "mta1.domain.com".
    09:49:06.60: New route: "mta1.domain.com".
    09:49:06.60: New channel system: "mta1.domain.com".
    09:49:06.60: Looking up host "mta1.domain.com".
    09:49:06.60: - found on channel l
    09:49:06.60: Routelocal flag set; scanning for % and !
    09:49:06.60: Checking reverse URL cache for: [email protected]
    09:49:06.60: Applying reverse URL pattern ldap:///$V?$N?sub?$R to: [email protected]
    09:49:06.68: URL generation failed, status = 0
    09:49:06.68: Mapped return address: [email protected]
    09:49:06.68: from_access mapping check: ||MAIL|l|[email protected]|
    09:49:06.68: Queue area size 145940970, temp area size 21837182
    09:49:06.68: 36485242 blocks of effective free queue space available; setting disk limit accordingly.
    09:49:06.68: 10918591 blocks of free temporary space available; setting disk limit accordingly.
    09:49:06.68: - passed.
    09:49:06.68: Rewriting: Mbox = "postmaster", host = "mta1.domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.68: Rewrite: "$*", position 0, hash table -
    09:49:06.68: Found: "$A$E$F$U%[email protected]"
    09:49:06.68: Rewrite failed, not forward.
    09:49:06.68: Rewrite: "$*", position 1, hash table -
    09:49:06.68: Failed.
    09:49:06.68: Rewrite: "$*", position 0, rewrite database -
    09:49:06.68: Failed
    09:49:06.68: Rewriting: Mbox = "postmaster", host = "mta1", domain = "mta1.domain.com", literal = "", tag = ""
    09:49:06.68: Rewrite: "mta1.domain.com", position 0, hash table -
    09:49:06.68: Found: "$U%[email protected]"
    09:49:06.68: New mailbox: "postmaster".
    09:49:06.68: New host: "mta1.domain.com".
    09:49:06.68: New route: "mta1.domain.com".
    09:49:06.68: New channel system: "mta1.domain.com".
    09:49:06.68: Looking up host "mta1.domain.com".
    09:49:06.68: - found on channel l
    09:49:06.68: Routelocal flag set; scanning for % and !
    *** Debug output from rewriting a forward header address:
    09:49:06.68: Rewriting: Mbox = "user", host = "domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.68: Rewrite: "$*", position 0, hash table -
    09:49:06.68: Found: "$A$E$F$U%[email protected]"
    09:49:06.68: Rewrite failed, not envelope.
    09:49:06.68: Rewrite: "$*", position 1, hash table -
    09:49:06.68: Failed.
    09:49:06.68: Rewrite: "$*", position 0, rewrite database -
    09:49:06.68: Failed
    09:49:06.68: Rewriting: Mbox = "user", host = "saludcastillayleon", domain = "domain.com", literal = "", tag = ""
    09:49:06.68: Rewrite: "domain.com", position 0, hash table -
    09:49:06.68: Found: "$U%[email protected]"
    09:49:06.68: New mailbox: "user".
    09:49:06.68: New host: "domain.com".
    09:49:06.68: New route: "mta1.domain.com".
    09:49:06.68: New channel system: "mta1.domain.com".
    09:49:06.68: Looking up host "mta1.domain.com".
    09:49:06.68: - found on channel l
    09:49:06.68: Routelocal flag set; scanning for % and !
    09:49:06.68: Rewriting: Mbox = "user", host = "domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.68: Rewrite: "$*", position 0, hash table -
    09:49:06.68: Found: "$A$E$F$U%[email protected]"
    09:49:06.68: Rewrite failed, not envelope.
    09:49:06.68: Rewrite: "$*", position 1, hash table -
    09:49:06.68: Failed.
    09:49:06.68: Rewrite: "$*", position 0, rewrite database -
    09:49:06.68: Failed
    09:49:06.68: Rewriting: Mbox = "user", host = "domain", domain = "domain.com", literal = "", tag = ""
    09:49:06.68: Rewrite: "domain.com", position 0, hash table -
    09:49:06.68: Found: "$U%[email protected]"
    09:49:06.68: New mailbox: "user".
    09:49:06.68: New host: "domain.com".
    09:49:06.68: New route: "mta1.domain.com".
    09:49:06.68: New channel system: "mta1.domain.com".
    09:49:06.68: Looking up host "mta1.domain.com".
    09:49:06.68: - found on channel l
    09:49:06.68: Routelocal flag set; scanning for % and !
    09:49:06.68: Rewrite rules result: [email protected]
    09:49:06.68: Checking reverse URL cache for: [email protected]
    09:49:06.68: Applying reverse URL pattern ldap:///$V?$N?sub?$R to: [email protected]
    09:49:06.69: Resulting URL: ldap:///o%3Ddomain.com?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
    09:49:06.69: mmc_open_url called to open ldap:///o%3Ddomain.com?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])), flags = 384
    09:49:06.69: URL with quotes stripped: ldap:///o%3Ddomain.com?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
    09:49:06.69: LDAP URL identified
    09:49:06.69: URL context #1 will be used
    09:49:06.69: Performing URL search on: ldap:///o%3Ddomain.com?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
    09:49:06.70: mmc_read_url result: [uid=user, ou=People, o=domain.com]
    09:49:06.70: URL resolution returned: [uid=user, ou=People, o=domain.com]
    09:49:06.70: mmc_read_url result: [preferredlanguage] en
    09:49:06.70: URL resolution returned: [preferredlanguage] en
    09:49:06.70: Attribute index: 0
    09:49:06.70: LDAP URL produced preferred language en
    09:49:06.70: mmc_read_url result: [mail] [email protected]
    09:49:06.70: URL resolution returned: [mail] [email protected]
    09:49:06.70: Attribute index: 0
    09:49:06.70: LDAP URL produced address [email protected]
    09:49:06.70: mmc_read_url result: [mailalternateaddress] [email protected]
    09:49:06.70: URL resolution returned: [mailalternateaddress] [email protected]
    09:49:06.70: Attribute index: 0
    09:49:06.70: Alternate address [email protected]
    09:49:06.70: No more results to return
    *** Debug output from rewriting a forward envelope address:
    09:49:06.70: Rewriting: Mbox = "user", host = "domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.70: Rewrite: "$*", position 0, hash table -
    09:49:06.70: Found: "$A$E$F$U%[email protected]"
    09:49:06.70: Match, pattern = "domain.com", current = "(*domaincheck*)"
    09:49:06.70: old state = not checked.
    09:49:06.70: Domain check on domain.com.
    09:49:06.70: Added domain result 1 to cache for domain.com.
    09:49:06.70: new state = succeeded.
    09:49:06.70: New mailbox: "user".
    09:49:06.70: New host: "domain.com".
    09:49:06.70: New route: "mta1.domain.com".
    09:49:06.70: New channel system: "mta1.domain.com".
    09:49:06.70: Looking up host "mta1.domain.com".
    09:49:06.70: - found on channel l
    09:49:06.70: Routelocal flag set; scanning for % and !
    address channel = l
    forward channel = l
    channel description =
    channel caption =
    channel user filter =
    dest channel filter =
    source channel filter =
    channel flags #0 = BIDIRECTIONAL MULTIPLE IMMNONURGENT NOSERVICEALL
    channel flags #1 = NOSMTP DEFAULT
    channel flags #2 = COPYSENDPOST COPYWARNPOST POSTHEADONLY HEADERINC NOEXPROUTE
    channel flags #3 = LOGGING NORESTRICTED RETAINSECURITYMULTIPARTS
    channel flags #4 = EIGHTBIT HEADERKEEPORDER NOHEADERREAD RULES
    channel flags #5 = TRUNCATESMTPLONGLINES
    channel flags #6 = LOCALUSER REPORTNOTARY
    channel flags #7 = NOSWITCHCHANNEL NOREMOTEHOST DATEFOUR DAYOFWEEK
    channel flags #8 = NODEFRAGMENT EXQUOTA REVERSE NOCONVERT_OCTET_STREAM
    channel flags #9 = NOTHURMAN INTERPRETENCODING USEINTERMEDIATE RECEIVEDFROM VALIDATELOCALSYSTEM NOTURN
    defaulthost = domain.com domain.com
    linelength = 1023
    channel env addr type = SOURCEROUTE
    channel hdr addr type = SOURCEROUTE
    channel official host = mta1.domain.com
    channel after params =
    channel user name =
    urgentnotices = 1 2 4 7
    normalnotices = 1 2 4 7
    nonurgentnotices = 1 2 4 7
    channel rightslist ids =
    local behavior flags = %x7
    expandchannel =
    notificationchannel =
    dispositionchannel =
    saslswitchchannel =
    tlsswitchchannel =
    backward channel = l
    unique identifier = [email protected]
    header forward address = [email protected] (route (mta1.domain.com,mta1.domain.com)) (host domain.com)
    header reverse address = [email protected]
    envelope forw address = [email protected] (route (mta1.domain.com,mta1.domain.com)) (host domain.com)
    envelope rev address = [email protected] (route (mta1.domain.com,mta1.domain.com)) (host domain.com)
    name =
    mbox = user
    Extracted address action list:
    [email protected]
    Extracted 733 address action list:
    [email protected]
    Address list expansion:
    *** Debug output from alias expansion:
    09:49:06.70: Inner expand, level = 0, mailbox = [email protected]
    09:49:06.70: Rewriting: Mbox = "user", host = "domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.70: Rewrite: "$*", position 0, hash table -
    09:49:06.70: Found: "$A$E$F$U%[email protected]"
    09:49:06.70: Match, pattern = "domain.com", current = "(*domaincheck*)"
    09:49:06.70: old state = not checked.
    09:49:06.70: Using result 1 from domain match cache.
    09:49:06.70: new state = succeeded.
    09:49:06.70: New mailbox: "user".
    09:49:06.70: New host: "domain.com".
    09:49:06.70: New route: "mta1.domain.com".
    09:49:06.70: New channel system: "mta1.domain.com".
    09:49:06.70: Looking up host "mta1.domain.com".
    09:49:06.70: - found on channel l
    09:49:06.70: Routelocal flag set; scanning for % and !
    09:49:06.70: Reparsed mailbox: user
    09:49:06.70: Reparsed host: domain.com
    09:49:06.70: Variant #1 = [email protected]
    09:49:06.70: Variant #2 = *@domain.com
    09:49:06.70: Alias magic value 8764
    09:49:06.70: LDAP URL template identified
    09:49:06.70: URL determined to be: ldap:///o%3Ddomain.com?*?sub?(|([email protected])([email protected])([email protected]))
    09:49:06.70: URL context #1 will be used
    09:49:06.70: Performing URL search on: ldap:///o%3Ddomain.com?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,uid,preferredLanguage,mailRoutingAddress,mailMsgMaxBlocks,mail,mailAlternateAddress,mailEquivalentAddress,mailDeliveryOption,vacationStartDate,vacationEndDate,mailConversionTag,mailhost,mailQuota,mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,mailDeliveryFile,mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,mailAutoReplyTimeOut,mailSieveRuleSource,mailForwardingAddress,mailDeferProcessing,mgrpMsgRejectAction,mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,mgrpDisallowedBroadcaster,mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,mgrpMsgMaxSize,mgrpAuthPassword,mgrpModerator,mgrpDeliverTo,memberURL,UniqueMember,mgrpRFC822MailMember,rfc822MailMember,mgrpErrorsTo,mgrpAddHeader,mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,mgmanMemberVisibility,expandable?sub?(|([email protected])(mailAlternateAddress=user@09:49:06.72: Scanning LDAP result.
    09:49:06.72: Attribute: objectclass
    09:49:06.72: Attribute index: 0
    09:49:06.72: Attribute: inetuserstatus
    09:49:06.72: Attribute index: 1
    09:49:06.72: Attribute: mailuserstatus
    09:49:06.72: Attribute index: 2
    09:49:06.72: Attribute: uid
    09:49:06.72: Attribute index: 5
    09:49:06.72: Attribute: preferredLanguage
    09:49:06.72: Attribute index: 19
    09:49:06.72: Attribute: mail
    09:49:06.72: Attribute index: 31
    09:49:06.72: Attribute: mailAlternateAddress
    09:49:06.72: Attribute index: 32
    09:49:06.72: Attribute: mailDeliveryOption
    09:49:06.72: Attribute index: 34
    09:49:06.72: Attribute: mailQuota
    09:49:06.72: Attribute index: 51
    09:49:06.72: Attribute: mailAutoReplyMode
    09:49:06.72: Attribute index: 55
    09:49:06.72: Attribute: mailForwardingAddress
    09:49:06.72: Attribute index: 64
    09:49:06.72: Attribute: mailDeferProcessing
    09:49:06.72: Attribute index: 65
    09:49:06.72: Scanning complete, begin actions
    09:49:06.72: Possible user object classes: inetLocalMailRecipient+inetmailuser
    09:49:06.72: Possible group object classes: inetLocalMailRecipient+inetmailgroup
    09:49:06.72: Object class: top
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: person
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: inetuser
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: organizationalperson
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: inetorgperson
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: ipuser
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: inetmailuser
    09:49:06.72: Object class match, reference value 1
    09:49:06.72: Object class: inetlocalmailrecipient
    09:49:06.72: Object class match, reference value 18
    09:49:06.72: Object class: userpresenceprofile
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: inetsubscriber
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: icscalendaruser
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: iplanet-am-managed-person
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: iplanet-am-user-service
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: iplanetpreferences
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: inetadmin
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: sunamauthaccountlockout
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: sunUCPreferences
    09:49:06.72: Object class didn't match
    09:49:06.72: Object class: mailDomain
    09:49:06.72: Object class didn't match
    09:49:06.72: User/group index = 1
    09:49:06.72: Domain is active
    09:49:06.72: Mail domain is active
    09:49:06.72: User status = active
    09:49:06.72: User is active
    09:49:06.72: Mail user status = active
    09:49:06.72: User is active
    09:49:06.72: User UID user found.
    09:49:06.73: Delivery option: mailbox
    09:49:06.73: Delivery options value: 1
    09:49:06.73: Processing mailhost attribute
    09:49:06.73: Mailhost not set for user
    09:49:06.73: Adding result to cache.
    09:49:06.73: Status for this address = -10
    09:49:06.73: LDAP URL template identified
    09:49:06.73: URL determined to be: ldap:///o%3Ddomain.com?*?sub?([email protected])
    09:49:06.73: URL context #1 will be used
    09:49:06.73: Performing URL search on: ldap:///o%3Ddomain.com?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,uid,preferredLanguage,mailRoutingAddress,mailMsgMaxBlocks,mail,mailAlternateAddress,mailEquivalentAddress,mailDeliveryOption,vacationStartDate,vacationEndDate,mailConversionTag,mailhost,mailQuota,mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,mailDeliveryFile,mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,mailAutoReplyTimeOut,mailSieveRuleSource,mailForwardingAddress,mailDeferProcessing,mgrpMsgRejectAction,mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,mgrpDisallowedBroadcaster,mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,mgrpMsgMaxSize,mgrpAuthPassword,mgrpModerator,mgrpDeliverTo,memberURL,UniqueMember,mgrpRFC822MailMember,rfc822MailMember,mgrpErrorsTo,mgrpAddHeader,mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,mgmanMemberVisibility,expandable?sub?([email protected])
    09:49:06.75: Search succeeded but 0 entries returned
    09:49:06.75: No matching entries were found that were valid
    09:49:06.75: Status for this address = 0
    0 expansion total.
    *** Debug output from submitting an envelope address:
    09:49:06.75: mmc_wadr(0x08103050,'[email protected]','[email protected]') called.
    09:49:06.75: Copy estimate before address addition is 1
    09:49:06.75: Parsing address [email protected]
    09:49:06.75: Rewriting: Mbox = "user", host = "domain.com", domain = "$*", literal = "", tag = ""
    09:49:06.75: Rewrite: "$*", position 0, hash table -
    09:49:06.75: Found: "$A$E$F$U%[email protected]"
    09:49:06.75: Match, pattern = "domain.com", current = "(*domaincheck*)"
    09:49:06.75: old state = not checked.
    09:49:06.75: Using result 1 from domain match cache.
    09:49:06.75: new state = succeeded.
    09:49:06.75: New mailbox: "user".
    09:49:06.75: New host: "domain.com".
    09:49:06.75: New route: "mta1.domain.com".
    09:49:06.75: New channel system: "mta1.domain.com".
    09:49:06.75: Looking up host "mta1.domain.com".
    09:49:06.75: - found on channel l
    09:49:06.75: Routelocal flag set; scanning for % and !
    09:49:06.75: Address [email protected] requires local processing.
    09:49:06.75: Variant #1 = [email protected]
    09:49:06.75: Variant #2 = *@domain.com
    09:49:06.75: Alias magic value 8764
    09:49:06.75: Checking for [email protected] in the system alias file
    09:49:06.75: - not found
    09:49:06.75: Checking for *@domain.com in the system alias file
    09:49:06.75: - not found
    09:49:06.75: Checking [email protected] with URL template ldap:///$V?*?sub?$R
    09:49:06.75: LDAP URL template identified
    09:49:06.75: URL determined to be: ldap:///o%3Ddomain.com?*?sub?(|([email protected])([email protected])([email protected]))
    09:49:06.75: URL context #1 will be used
    09:49:06.75: Using cached LDAP result for URL info: ldap:///$V?*?sub?$R|[email protected]|[email protected]
    09:49:06.75: Scanning LDAP result.
    09:49:06.75: Attribute: objectclass
    09:49:06.75: Attribute index: 0
    09:49:06.75: Attribute: inetuserstatus
    09:49:06.75: Attribute index: 1
    09:49:06.75: Attribute: mailuserstatus
    09:49:06.75: Attribute index: 2
    09:49:06.75: Attribute: uid
    09:49:06.75: Attribute index: 5
    09:49:06.75: Attribute: preferredLanguage
    09:49:06.75: Attribute index: 19
    09:49:06.75: Attribute: mail
    09:49:06.75: Attribute index: 31
    09:49:06.75: Attribute: mailAlternateAddress
    09:49:06.75: Attribute index: 32
    09:49:06.75: Attribute: mailDeliveryOption
    09:49:06.75: Attribute index: 34
    09:49:06.75: Attribute: mailQuota
    09:49:06.75: Attribute index: 51
    09:49:06.75: Attribute: mailAutoReplyMode
    09:49:06.75: Attribute index: 55
    09:49:06.75: Attribute: mailForwardingAddress
    09:49:06.75: Attribute index: 64
    09:49:06.75: Attribute: mailDeferProcessing
    09:49:06.75: Attribute index: 65
    09:49:06.75: Scanning complete, begin actions
    09:49:06.75: Possible user object classes: inetLocalMailRecipient+inetmailuser
    09:49:06.75: Possible group object classes: inetLocalMailRecipient+inetmailgroup
    09:49:06.75: Object class: top
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: person
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: inetuser
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: organizationalperson
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: inetorgperson
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: ipuser
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: inetmailuser
    09:49:06.75: Object class match, reference value 1
    09:49:06.75: Object class: inetlocalmailrecipient
    09:49:06.75: Object class match, reference value 18
    09:49:06.75: Object class: userpresenceprofile
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: inetsubscriber
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: icscalendaruser
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: iplanet-am-managed-person
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: iplanet-am-user-service
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: iplanetpreferences
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: inetadmin
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: sunamauthaccountlockout
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: sunUCPreferences
    09:49:06.75: Object class didn't match
    09:49:06.75: Object class: mailDomain
    09:49:06.75: Object class didn't match
    09:49:06.75: User/group index = 1
    09:49:06.75: Domain is active
    09:49:06.75: Mail domain is active
    09:49:06.75: User status = active
    09:49:06.75: User is active
    09:49:06.75: Mail user status = active
    09:49:06.75: User is active
    09:49:06.75: User UID user found.
    09:49:06.75: Delivery option: mailbox
    09:49:06.75: Delivery options value: 1
    09:49:06.75: Processing mailhost attribute
    09:49:06.75: Mailhost not set for user
    09:49:06.75: Status for this address = -10
    09:49:06.75: Temporary alias URL failure; reprocess later
    09:49:06.75: - adding address [email protected] to channel reprocess
    09:49:06.75: Good address count 1 defer count 1
    09:49:06.75: All addresses deferred - treat as general temporary error
    09:49:06.75: Copy estimate after address addition is 2
    09:49:06.75: mmc_waend(0x08103050) called.
    09:49:06.75: Copy estimate is 2
    09:49:06.75: Queue area size 145940970, temp area size 21837154
    09:49:06.75: 36485242 blocks of effective free queue space available; setting disk limit accordingly.
    09:49:06.75: 10918577 blocks of free temporary space available; setting disk limit accordingly.
    Submitted address list:
    Address list error -- 4.0.0 temporary error returned by alias expansion: [email protected]
    Submitted notifications list:

  • SimpleSearch can only retrieve documents(reports) for enterprise users!!

    Good Day Everybody,
    i'm using SimpleSearch to retrieve all reports for specific users, the problem is that i'm only able to retirve reports for enterprise users and i can not get reports for domain users, anybody knows why?? or there is another way to do so??
    GetDocumentList is working fine but it's only retirves reports for the loged in user only....
    also i would like to extacrt all useres which has permession to reports, so would you please give me a hand of help and send me how to do!!!
    kindly find below the code i'm using to retrieve all reports for specific users:
    //After creating connection, seesion and login using administrator enterprise user
            SimpleSearch mySearch = new SimpleSearch();
            mySearch.InAuthor = txtUsername.Text;//.Trim();
            //mySearch.InName = "";
            mySearch.BeginDate = System.DateTime.Now.AddYears(-2);
            mySearch.BeginDateSpecified = true;
            mySearch.ObjectType = "documents";// "documents";
            BusinessObjects.DSWS.BICatalog.SortType[] mySort = new BusinessObjects.DSWS.BICatalog.SortType[1];
            mySort[0] = BusinessObjects.DSWS.BICatalog.SortType.NAMEASC;
            BICatalogObject[] searchResults= null ;
            searchResults = boCatalog.Search(mySearch, mySort, null, null, InstanceRetrievalType.WITHOUTINSTANCE);
            if (searchResults != null)
                foreach (BICatalogObject myBOCatObject in searchResults)
                    Response.Write(myBOCatObject.Name + "----" + myBOCatObject.UID + "" + myBOCatObject.CreationDate + "--" +"<BR>");
            else
                Response.Write("no documents");

    Which version  are you using?
    BICatalog is pretty limited, and has been deprecated for more recent versions.
    Sincerely,
    Ted Ueda

Maybe you are looking for