Row level access at the Group level assignments

I know the concept ROW LEVEL security or "Access Restrictions" but I haven't really implemented it before.
1. Create a Row level security from the BO -UNIVERSE designer from the TOOLS> MANAGE SECURITY>MANAGER ACCESS RESTRICTIONS.
RESTRICTION-EMPLOYEE ( If user is available in the table then only display the results)
In the where clause Employees.Employee_Name = @Variable('BOUSER') here the BO user always at the user level ID.
2. Then assign the above restriction to the USER or GROUP.
The question what I have.. if I assign the Restriction at the GROUP level, will this condition be applied for all users under that group. Do I need to do anything else.
Please confirm.

THose are two different things you are talking about here:
1) @Variable('BOUSER') is a placeholder that is replaced during the runtime with the ID of the user who is running the report accessing your universe. Adding this expresson somewhere in your universe (does not have to be necessary the where clause of an access restriction) will mean that the generated SQL statement will contain the user ID at the related place.
2) Access restrictions: You can setup access restriction for users or even groups. If you set those for groups then the restriction will be applied to ALL users being members of this group, when they run a report that uses your universe. If a specific user belongs to 2 different groups for which universe restrictions are applied, then the conflict will be solved according to the settings in your universe. Access restrictions can be used to change the where clause of the generated statements but also for using different credentilas to connect to the database (based on the group) and/or a different set of parameters eg. the maximum bnumber of rows fetched by the universe can vary among different groups.
Hope this helps.
Regards,
Stratos

Similar Messages

Row-level security at the Database level

We need Row-level security at the Database level, where the user who logs in to Crystal reports, should be able to fetch only those rows from the database that he is entitled to see. For this, the login name of the user is passed to a stored procedure which sets the context of the DB session and restricts the data retrieved.
We are not looking for row-level security where the data is first retrieved and then filtered based on the user login name. However, we are definitely looking for a way to set a context for a database session based on the user login name, even before we start fetching data. So effectively, the user who logs in will fetch only those rows which he is supposed to see.
Issue:
We face a problem of not being able to pass a variable (something like 'BOUSER' for BO which works, whereas, 'CurrentCEUserName' for Crystal Reports, which doesn't work), to the database stored procedure to set the context.
Please let us know if we can use 'CurrentCEUserName' variable in Crystal in the same way as 'BOUSER' is used in ConnectInit for BO? We would like to know how we could pass any variable in Crystal Reports which holds the user login information to a stored procedure.
Also, please suggest alternate ways to achieve this security restriction, if any.

Hi
A previous database had a personnel table with their station name, district and region, with a field holding their logon name. We also had an activity table with the fields referring to the activity, and a field of Station, district and region it occured in.
By linking the individual rows in an activity table to the personnel table on the station name field, we then used the CurrentCEUserName to filter on the personnel. This returned only the records in the activity table where the station the activity took place at was the same as the station associated with the selected personnel who has logged on.
The additional bonus was if we linked it on District or region we had the same result but at a greater level. ie all activity in the logged on personell's District or if linked on region, then their region.
The personnel table was maintained by the system administrators, so maintenance was low.
I hope this helps.
Kevin

Reporting level Currency translation and group level Currency translation

Hi All,
Could any body explain me reporting level Currency translation and group level Currency translation.Please expalin me step by step scenario.
Thanks in advance.
Setty.

Hi Jian,
In my recent implementation completed, business only had one currency to deal with i.e. USD. Data was coming from ECC and we loaded all the data in LC instead of USD using transformation *NEWCOL(LC). Next, you can maintain a rate of 1 in the rate model and run the currency conversion.
This will generate the same data values against USD. So, your statement " if we load LC and than convert it into USD, the data vulu will de double." is incorrect. In the system, you will have same set of values against LC as well as USD.
I suggest that you configure Currency Conversion for future reqmts if any.
Regarding BCF, balances from previous year (Balance Sheet Accounts) will need to be carried forward as opening balances to next year else your BS won't give true picture.
Regards,
Ashish

Issue with the site level access in the trial ac

I am following the given video to get an understanding of site level access.
SAP HANA Cloud Portal Setting Access Levels in the Site - YouTube
I could not find the option of setting the site level access to either public, restricted or private in my trial ac. in the site settings as per the given video above. Could this be some authorization issue or some settings that needs to be done.

Hello,
The site access level configuration is now under the Access Managment entry in the side panel.
Please follow the documentation in the link below.
SAP HANA Cloud Portal Documentation
Regards,
Eliel.

Problem in summarizing data in the group level

I have four groups namely
i) Year Case opened.
ii) Month Case opened
iii) Case Status
iv Case Severity
In the details section there are few details for the report to show namely Case Severity (ie., Level 1, Level2 etc) and Case Status (ie., Opened, Closed and Pending).
In the Case Severity Level i am displaying the count. Till now everything is fine.
Now, a statistics for the month has to be added. I haved the fields in the Group Footer of Month Case Opened.
I need to calculate the total Case Severity of Level 1 in opened status and total of Level 2 in opened status and so on..
Only the last Case Severity value total is shown correctly in statistics of the month.
Please let me know if there is any suggestions on this.
Thanks in Advance.

No. I havent used.
I tried using a cross tab and i am getting the correct value. But i wanted to use the same logic of crosstab in formula because in crosstab it is showing only the values available in that group.
What i needed is, even if the many case status description not able for a group it should display all the name and the corresponding value should be zero in that case.
Hope i tried to explain the problem properly. Pls let me know your comments.

How to include non-joining records from level one in the lowest level?

As an example the dimension has three levels with data coming from three source tables. The relationships between these tables are zero to many. As a result of this e.g. there are records at the first level that do not join to the second table for level two, i.e. there is a customer entry but the customer has not acquired any products. However, we would like to see in the query for the lowest level also the customers that didn't acquire any products. They are there when there is no filter for the lowest level, but that returns duplicate data. I was hoping I could accomplish this by using outer joins when loading the dimension, but it loads the same as without the outer joins. Hopefully, this trivalized example describes what I am trying to accomplish.

You won't be able to have a true "default" value in the various cascading levels, since there aren't default values in a dynamic cascading parameter. That being said, I've created a sample report in Crystal Reports 2008 that has a Command-driven DCP with '*' values for the 2nd and 3rd levels of my 3-tier DCP and have accounted for them in the record selection criteria. You can find the sample here at https://www.box.net/shared/mav5qp337j

Task level data at the Project level?

Hi all,
I have a custom date field in Project 2010 that if certain text is displayed in the task name, this field is populated by the task finish date.
Essentially this task is connected within Project Server to an external 'deliverable'.
I need to grab this date and have it at the Project Information level - is this possible?
Even using Enterprise flags, I still could not obtain the task date at a Project level.
Any thoughts much appreciated.
-CL

Rob,
Maybe my latest post on this need may be of interest. How to show Implementation Milestone Dates in Project Center. #msproject
http://aboutmsproject.com/how-to-show-implementation-milestone-dates-in-project-center/ I'm able to use formulas to bring task data up to the Project level.
Treb Gatte, Project MVP |
http://AboutMSProject.com |
@tumbleroad

Revision Level Field at the Haeder Level

Hi,
I want to see the revision level field in SUS at the header level(Am able to see it at the item level)
Please let me know how to view the same at the header level.
Best regards,
Manu

Hi All,
Could anyone please provide some insight?
Is there any userexit that I could ue or will I have to develop a call transaction to edit the PR and change the revision level??
Regards
Deepak

Oracle UCM folder level access on the fly

Our requirement is like this. We have a folder named Projects.
One user with Project Manager role will create a new folder within the Projects folder and give access to this new folder to one user from the Project Team Member role. No other member from the Project Team Member role will have access to that folder.
Hence the access is not based on role or group but to an individual who will be selected on the fly.
If someone can help me resolve the issue, that would be of immense help.
Thanks,
Deep.

Well thanks again for your support. I saw you have given some detailed steps in another of my post. I have tried the ntk meanwhile in my own way and found something is working but not exactly what I want.
Let me tell you this is for a demo that needs to shown to the client in a couple of days and I have jumped into this thing shortly to help out but I am not an expert of UCM.
The requirement is like this -
There is a virtual folder called Projects.
The project manager will create another virtual folder under Projects and will give access it's access to only one of the project team members.
There are two roles PROJECT_MANAGER and PROJECT_TEAM_MEMBER.
If a user is either of these two roles s/he will see this folder. This works.
I have installed the ntk component and set SpecialAuthGroups=restricted under the General Configuration.
Added a new metadata DisclosureQuery.
In the Content Security Configuration Information page of NTK Administration, under the Read Options section set Yes for both Use Security and Limit Access and in the script area wrote
<$if isDisclosureQuery(xDocDisclosureQuery)$>
<$isNTKReadAccess=1$>
<$endif$>
Say the user XXX has role PROJECT_MANAGER. He creates a folder say Project X under the folder Projects and mark the security group as Restricted. And in the DisclosureQuery filed wrote
(UserName like 'ABC')
Now say there are two users ABC and JKL with role PROJECT_TEAM_MEMBER. They both can see the Projects folder. The ABC can further see the folder Project X under Projects where JKL does not see any folder under Projects folder.
But when ABC clicks on the Project X folder and tries to go inside it, the error message is thrown "Can not read folder".
PROJECT_TEAM_MEMBER has RW access on Restricted security group.
I even tried to put PROJECT_TEAM_MEMBER in the Query Role and Update Role select boxes in the Hit List Roles Configuration Information page. Not sure if I really need this.
This link helped me a lot - http://selvam2day.blogspot.com/2010/10/sample-step-by-step-implementation.html
But I am not able to resolve the last part.
You can help that will be much appreciated.

How do I restrict access at the field level in vendor creation XK01

Hello All,
Does anyone know a way to restrict access to a certain group of fields or a screen in vendor create? I know it is possible in vendor change XK02 using the field groups (transactions OBAT and OBAU) but we have a requirement to have one group of users create all vendor information except the bank details and another group of users just to create the bank details.
Thanks for any help you can offer.
rgds,
ian

We have had a similar discussion some while back. please refer to the thread below as it seems to be much similar to your requirement.
[click here|Hide or Encrypt Bank Account Number]

How can I delete a row in access using the database toolkit?

I want to delete just one row of a access table using the database toolkit. Can it be done and if so How?

Take a look at page A-1 of the database connetivity manual. It has information on making a sql query that will delete. You will need to use this command with the dbtools execute query function. Look in the shipping examples for an example with this function.

Preflight settings work at the page level but not the document level?

Greetings all,
Just wondering if anyone has run into this: I'm running Acrobat 10.1.3 on Lion and I've been struggling with getting my preflight settings to work. I can get a simple fixup (convert all to grayscale, for example) to work on a page or two extracted from a large document (800 pages), but I can't get the same fixup to successfully fix the whole document.
I've tried this on several different large documents with the same results. And yes, I did try all the usual stuff...quitting, restarting, rebooting, different docs, different fixups, duplicated a known working fixup...
I'm at my wit's end with it. Any ideas?
Best,
Dave

Do your settings work on small or medium size documents? Such as, instead of 800pgs, how about a 2 page file, a 4 page file, a 16 page file? In order to diagnose, you have to start a systematized test procedure to see where it fails. FWIW, I don't use that feature, but is Preflight even supposed to work on whole documents, not just the current page?

Group Level Data Level Security not working

I'm trying to test the data level security at the group level.
Here's what I did
1. Went to the security -> Groups -> Permissions -> Filters
2. In Name added the Fact table on which I want to filter.
3. Selected "Enable"
4. In Filter Column I added a filter on a column in the dimension. (I didn't use any session variables in the filter)
When I create an answers query with the column from the dimension (Which I used in filter) and fact from the fact table where I defined the filter, the filter is not applied..
Am I missing something in the creation of filters?
Thanks in Advance.
Rama.

Hi,
If the user is member of both user defined and Administrator group no filter will be applied to them because Administrator group will take precedence and no filter can be applied to Administrator.Even if you ooen Administrator group, you will see that permission tab is disabled for Administrator group.
Hope this helps.
Regards,
Sandeep

Results row shown only at the bottom and not at each value level

Dear Experts
I have a report based on a multiprovider consisting infosets and a cube.
There are several row characteristics shown. 1 of these were set to show results row. But the results row is not shown at each value level but at across all its characteristics level, ie. at the bottom of this characteristic. So, only 1 results row shown and not 1 results row per each value of this characteristic.
Some other characteristics are showing multiple rows of results rows but at a certain grouping level and also not at per value level.
Please advise what could be the cause.
regards
Pascal

Dear Experts
Solved.
Due to the concept works like this:
To see results row for a characteristic, must set it to the char infront, not to the char itself.
But then when user re-arranges the position of the row chars, there could be an issue.
Is this a constraint of BEx?
regards
Pascal

Ms project 2010 - grouping how to show the duration between dates at the summary level

Hi we have a ms project plan where we have used grouping to present the task breakdown in a different structure.
This works great we get at the summary level the start and finish dates correctly but the duration gives us only the Maximum value for the durations of the tasks within the group. (is it possible to change the maximum calculation?)
We would like to be able to determine the duration at the summary level. Of note if we use functions such as projdatediff(start,finish) this only gives the result at the detail level and does not show at the summary level - even if we check the do the
calculation for the task and group levels 'use formula' radio button.
is this a bug???.
If we use a numeric calculation such as finish-start we get a figure that allows us to repeat the calculation at the group (summary) level. but firstly we do not actualy know what the numeric value represents. i.e (Finish-Start)*10000 for
a duration of 0.5 hours = 208.33 ,1 hr= 416.67,1.5 hrs =625, but 8 hrs is giving 10833.33 which is 24 * the 1 hour figure
duration finish-start start           finish
0.5hrs     208.33    Tue 31/01/12 Tue 31/01/12
1d          10833.33 Tue 31/01/12 Wed 01/02/12
8 hrs      10833.33 Tue 31/01/12 Wed 01/02/12
0.19d     625          Wed 01/02/12 Wed 01/02/12
1.5 hrs   625          Wed 01/02/12 Wed 01/02/12
0.13d     416.67     Wed 01/02/12 Wed 01/02/12
1 hr        416.67     Wed 01/02/12 Wed 01/02/12
Anyhow looking for suggestions on how to get a calculation of the difference in two dates as units (pref days) into the group level summary.
Many thanks Mike

Hi John ,
This is better ..... Now the Text1  column is the correct duration .. Is it possible just to display the Text 1 Column instead of Duration Column ? is it a right practice in using Microsoft Project or scheduling ? This is an alternate solution
...Do you think that there is a solution to that problem ?
Task Name
Text1
Duration
% Complete
Start
Finish
F10E ( Level 10 )
273
40d
0%
10 Apr '12
10 May '13
Hospital Admin
40
40d
0%
10 Apr '12
05 Jun '12
Hospital Move- Vacate F10E
40
40 d
0%
10 Apr '12
05 Jun '12
Eastern/Kelson
238
40d
0%
30 May '12
10 May '13
Investigate Above Ceiling Conditions
20
20 d
0%
30 May '12
26 Jun '12
Hoardings
5
5 d
0%
06 Jun '12
12 Jun '12
Demolition (All)
20
20 d
0%
20 Jun '12
18 Jul '12
HVAC- main duct Work, Fire dampers
40
40 d
0%
19 Jul '12
14 Sep '12
Layout Partitions
5
5 d
0%
19 Jul '12
25 Jul '12
Steel stud Framing & Hollow Metal Frames
30
30 d
0%
17 Sep '12
29 Oct '12
Ceiling and Bulk Head Framing
10
10 d
0%
30 Oct '12
12 Nov '12
Mechanical Rough-In to Ceiling
25
25 d
0%
13 Nov '12
17 Dec '12
Taping,Drying & Sanding
20
20 d
0%
04 Dec '12
03 Jan '13
Ceiling and Bulk Head Drywall
10
10 d
0%
04 Dec '12
17 Dec '12
Painting
15
15 d
0%
04 Jan '13
24 Jan '13
T-Bar and Acoustic Ceiling Tile With Devices
11
11 d
0%
22 Jan '13
05 Feb '13
Head Walls system
7
7 d
0%
25 Jan '13
04 Feb '13
P-Lam Corridor Canopy Ceiling
15
15 d
0%
25 Jan '13
14 Feb '13
P-Lam Corridor and Room Canopy Ceiling
10
10 d
0%
25 Jan '13
07 Feb '13
Steel Doors, Wood Doors, Hardware
15
15 d
0%
08 Mar '13
28 Mar '13

Row level access at the Group level assignments

Similar Messages

Maybe you are looking for