RPD Security and Migrations

We have a Subject Area where up to 25 columns in the Presentation Layer have security applied. They are denied to the System-level Everyone group and access is provided to Group1.
The way our migrations to the environments work is the Developer provides the RPD and we do a 3-way merge. The issue is the security does not get merged correctly. So if Group1 exists in the Master RPD when we do a 3-way merge groing from the Developer's RPD to the Master it creates another security group called Group#1.
I thought I could use UDML generation to apply the security but UDML does not generate the system-level EVERYONE group so when applying the UDML (nqudmlexec) to the Master the columns have the EVERYONE group defaulted back to Read access.
I am working with Oracle on their best practice for migrating RPD security but I'd like to see how those on the forum handle the migration of RPD level security. So any permissions applied to Presentation Layer catalogs, tables, columns, Phycial connection pools, etc.
How do you maintain that security going from a DEV to a Test to a Prod environment?
Love to hear how others are doing this

Yeah..... In 11g you have separater password for RPD which is not releated to any user. Unless you share the RPD password with user they can not open it in the offline mode. But still this problem persists if a ProjectA user log in and still he could see the project B details.
You are looking at object level security on the Tables. I guess you can implement for the presentation layer.

Similar Messages

  • Migrate Rpd Catalog and User ,Groups from OBIEE 11.1.1.3.0 to 11.1.1.5.0

    hi Guys,
    I have got a setup of OBIEE 11.1.1.3.0 on windows 32bit machine and now i am planning to have a setup of 11.1.1.5.0 on windows 64 bit machine.
    please tell me the Detailed steps for Migrating the Rpd Catalog and User ,Groups from OBIEE 11.1.1.3.0 to 11.1.1.5.0
    Like
    1. Do i have to copy the RPD and Catalog Directly to 1.5 or some Upgrade Assistance is to be done
    2. If i am Using the Export Provided in the myrelam ( in 1.3) and taking it to obiee 1.5 (as it already contains some inbuilt policies and groups) does it going to give me error
    Regards
    Ankit

    Check the Oracle reference I have provided earlier. Concept goes like this:
    Important difference is that upgrading from 10g to 11g is called an "out-of-place upgrade" while upgrading to another 11g is called an "in-place upgrade," because the upgrade operates on existing files. Moving from one 11g release to another 11g release is sometimes referred to as "patching."
    http://download.oracle.com/docs/cd/E21764_01/bi.1111/e16452/bi_plan.htm#BABECJJH
    Follow patching and not out-of-place upgrade as you are required to upgrade component
    http://download.oracle.com/docs/cd/E21764_01/doc.1111/e16793/patch_set_installer.htm#PATCH789
    Hope this is clear now

  • EPMMaster.rpd Fusion Pack migration from OBIEE 10g to 11g

    We have successfully installed OBIEE 10g and 11g on Windows 2008 32bit servers. On the 10g Installation, we have applied the Fusion Pack EPMMaster RPD file and it connects successfully to our EPM warehouse. We want to migrate the Fusion pack to 11g which is also setup on the same platform. Per the instructions in the documentation, we have copied the files (RPD file and Webcat folder) to the 11g server. We run the UA.bat file and it proceeds to start copying the files over fom the RPD and WebCatalog to the new system. It completes this process, but then hangs on starting the Oracle BI server - it never gets beyond that.
    We will be purchasing the EPMMaster RPD and know it is not available yet for 11g – however we’re trying to get ahead of the curve a bit and manually fix the items in the presentation layer that will not render correctly in 11g
    upgrade exception occurred
    Unable to start process: instance1: coreapplication_obis1
    One thing that I noticed – Since the UA tool does not completely finish --
    RPD size on 10g – 42,675KB; 11g – 6,375KB
    I manually change the webcat in Enterprise Manager to the EPMMaster catalog -this actually caused additional errors on restart.
    Has anyone attempted upgrading a delivered RPD to 11g?
    Thanks in advance -

    This is a known issue that we have worked through with Oracle tech support. The Dimension Deduction.Deduction Sid causes an error that prevents the UA tool from completing the upgrade process. There are a couple of ways around this, but the fastest is to simply delete the Dimension, the two related hierarchies and the fact table that is joined to this dimension. Physical table do not need to be touched however. There are still issues once it’s moved to 11g, but those can be addressed post migration. Thanks much to the Oracle support team for helping us out with this issue!

  • How do I get rid of Norton Internet Security?  Migration assistant problem

    I have a new MacBook Pro and I used a firewire connection and migration assistant to transfer files. Unfortunately, the assistant transferred all my applications, even the ones I didn't want, like Norton Internet Security, which slowed down my old G4. I deleted all the Norton files, but there are still icons for Norton Auto protect and Norton Quick Menu on my System Preferences menu. I'm afraid they are responsible for the messages I get on booting up saying the system detects Norton but can't open the application. I'm also afraid its the reason that suddenly my new superfast MacPro is less fast. I can't figure out how to delete it from the system preferences - any ideas?

    Please let me reassure you. There are NO viruses effecting OSX to date. There was one virus effected OS9 ten years ago, but nothing since. The fear of viruses is a residual effect from using that other OS, which shall remain nameless, but not shameless. The only danger a Mac user faces is, spreading a virus through a network by forwarding junk emails with an infected attachment, not that anybody is that stupid, or are they? If you are using one of the main email providers, Yahoo, Hotmail, Gmail, etc, all he attachments are scanned automatically as these organizations cannot afford to have viruses in their systems.
    In a nutshell: Relax and enjoy the freedom of using a Mac.
    Furthermore: Most ex-users of the nameless OS feel the need to run defrag programs on Macs. Unnecessary! Just leave your Mac turned on overnight and it will do it itself.
    You may remember the Mac slogan, 'Think Differently'. Well, Macs do!
    Enjoy your clean install.

  • Using Data Integrator Migration Mechanisms and Migration Tools

    Data Integrator provides two mechanisms for migrating jobs from development to test to production :<br /><ul><li>Export/import <ul><li>Export/import is the basic mechanism for migrating Data Integrator applications between phases. First, you <em>export</em> jobs from the local repository to either a file or a database, then you can import them into another local repository. </li></ul></li><li>Multi-user development <ul><li>Instead of exporting and importing applications, multi-user development provides a more secure <em>check-in</em>, <em>check-out</em>, and <em>get</em> mechanism, using a <em>central repository</em> to store the master copies of your application elements. </li></ul></li></ul><p>Regardless of which migration mechanism you choose, Business Objects recommends you prepare for migration using one or more tools that best fit your development environment :</p><ul><li>Naming conventions <ul><li>Just as Business Objects recommends you standardize Data Integrator object prefixes, suffixes, and path name identifiers to simplify your projects internally, we also recommend the use of naming conventions externally for migration purposes. </li></ul></li><li>Datastore and system profiles <ul><li>With multiple profiles, instead of a separate datastore (and datastore configuration) for each database instance, you can associate multiple <em>datastore profiles</em> with a single datastore connection. </li></ul></li></ul><p>Each mechanism and tool is recommended for specific types of projects. For more detail, please see the <em>Data Integrator Advanced Development and Migration Guide</em> provided with Data Integrator 6.5.</p>

    Hej Fahad!
    Thanx for your valueable information but i have not any background of data migration and etc. I am mobile communication developer. So this is my first assignment between two companies. first company will give me the oracle data maybe in the shape of dump files and i will make my virtual server and there i will test that the data is valid or not and etc. If the data is valid then i will transfer it to target platform.
    So now i have no access to the source system from where data is coming. Can you please explain me little bit more about invalid objects and still export/import works same.
    Waiting for reply
    Regards
    Hani

  • Reg:rpd security

    hi,
    i have merged two repositories where one is using LDAP server for authentication,initialization block for autorization and portalpath and the second one using rpd security only.now after i merged i will be implementing LDAP authentication and authorization for the new merged rpd.
    now, my doubt is that the second rpd using the rpd security has declared some filters for some groups in the permissions in security.so,if i implement ldap server authentication and authorization where the group of an user,portalpath are authorized,the filter in permissions on the group would work normally or should i use authorization init block to get the filters?
    thanks

    i have used below link for setting authorization
    http://obieeblog.wordpress.com/
    thanks

  • Reg:rpd security vs ldap

    hi,
    i have merged two repositories where one is using LDAP server for authentication,initialization block for autorization and portalpath and the second one using rpd security only.now after i merged i will be implementing LDAP authentication and authorization for the new merged rpd.
    now, my doubt is that the second rpd using the rpd security has declared some filters for some groups in the permissions in security.so,if i implement ldap server authentication and authorization where the group of an user,portalpath are authorized,the filter in permissions on the group would work normally or should i use authorization init block to get the filters?
    i have used below link for authorization
    http://obieeblog.wordpress.com/
    thanks

    If the group names are same in both case then filter applied on grps will work normally. Just implement this and perform some unit testing inorder to validate the security after merge. Hope this is clear

  • Security and privileges loading

    We need some easy way to upload the security and privileges in the EUL...
    We need to modify the privileges of about 60k users and hundreds of responsibilities...
    Is there a best practice some of you may suggest??

    see below
    Oracle BI EE 11g – Migrating Security – Identity Stores – Part 1 - http://www.rittmanmead.com/2011/04/oracle-bi-ee-11g-migrating-security-identity-stores-part-1/
    Oracle BI EE 11g – Migrating Security – Policy Store – Part 2 - http://www.rittmanmead.com/2011/04/oracle-bi-ee-11g-migrating-security-policy-store-part-2/
    Oracle BI EE 11g – Migrating Security – Credential Store – Part 3 - http://www.rittmanmead.com/2011/04/oracle-bi-ee-11g-migrating-security-credential-store-part-3/
    also this
    http://download.oracle.com/docs/cd/E21764_01/apirefs.1111/e13952/taskhelp/security/ExportDataFromSecurityRealms.html
    http://download.oracle.com/docs/cd/E21764_01/apirefs.1111/e13952/taskhelp/security/ImportDataIntoSecurityRealms.html
    mark if it helps

  • Security  and roles while upgrading to bi7

    hi
    Guys  i ha ve question about upgrade
    what will happens to security and roles while upgrading from bi3.5 to 7 ?
    is this can be migrated into bi7 from bw 3,5 , if so how ?
    or do we need to create separate  again in Bi7 ?
    u r answer will be much apreaciated

    Hi,
    this can be upgraded but it is not a must. SAP recomend to use the new concept provided by NW 7.0...
    You can switch on/off obsolete Authorization concept with RSCUSTV23. For security and clarity reasons make a u201Ecleanu201C new setup u201Efrom the scratchu201C (much easier, less complex than in 3.x)...
    Check this upgrade guide it will give you all informations:
    [SAP NetWeaver 7.0 BI Upgrade Specifics|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10564d5c-cf00-2a10-7b87-c94e38267742]
    New BI Authorizations set in SPRO (maintenance in RSECADMIN)
    - During technical upgrade, and if you used an authorization concept in BW3.x
    switch back to u201Cobsolete Concept with RSR Authorization Objects)u201D
    - Important: After technical upgrade switch back to the new Concept and see
    note 820183 and 923176 New BI Authorizations set in SPRO (maintenance in RSECADMIN)
    - During technical upgrade, and if you used an authorization concept in BW3.x
    switch back to u201Cobsolete Concept with RSR Authorization Objects)u201D
    - Important: After technical upgrade switch back to the new Concept and see
    note 820183 and 923176
    Other links/notes which could be helpful:
    Note 923176 - Support situation authorization management BI70/NW7.0
    New Analysis Authorizations for BI Reporting:
    http://help.sap.com/saphelp_nw04s/helpdata/en/80/d71042f664e22ce10000000a1550b0/
    content.htm
    Regards
    Andreas

  • Security and/or filtering error in data form creation

    Hi,
    I am getting this error when I am trying to preview my data form.
    This is the first time I am creating an application and data form in Hyperion.
    The data form is multicurrency and plan type is Plan1.
    Row:
    Account members: Descendants(Account)
    Column:
    Year:Descendants(FY10)
    Period:Descendants(YearTotal)
    Page Dimension(s)
    Entity:Descendants(Entity)
    Scenario:Current
    Version:BU Version_1
    POV:
    Currency:USD
    Disabled all options in "Other options" and Not selected any business rukes.
    When selecting preview data form I am getting below error:
    Security and/or filtering has resulted in a required dimension not being represented on this data form
    I have not selected any security/filter settings as of now. Please suggest whats causing this.
    Thanks,

    Hi Jake,
    I did what you suggested,but I am still getting same error.
    Here I would like to point out that. I have selected my application to support multicurrency, but 'HSP_RATES' does not come in Dimension selection drop down. I can see 'HSP_RATES' in Performance settings tab, but I cant see it in Dimensions tab or Evaluation order tab.
    Is this causing problem? Should I add it manually?
    Thanks,
    Rajni.

  • Difference between upgrdae and migration about oracle database

    Difference between upgrdae and migration about oracle database
    please give the comments

    Well, the question is almost philosophic...<br>
    In 9i, there is a Migration Guide whereas in 10g there is a Upgrade Guide.<br>
    Furthermore, in 9i, there is the command line startup migrate whereas in 10g that's startup upgrade.
    Somebody think upgrade when go to new release, and migration when go to new version.<br>
    Others think upgrade when new version replace database in place, and migration when new version include a move of database.<br>
    Another point of view is : upgrade is for technical, and migration for application/data.<br>
    <br>
    Well, after these explanations, your upgrade/migratation notion will not be more clear, but I think that is not very important, only a terminology game. The most important is to know what you need : new version or new release.<br>
    <br>
    Nicolas.

  • Securing file download with standard web security and ssl

    Hi,
    I want to put some files for download in my webapp. At the same time, I want to protect these files using standard servlet security and ssl. So I added <security-constraint> in my web.xml and configured tomcat to allow SSL connection. Now I got the files protected as I expected. When I try to access the file directly from browser, tomcat shows me the login page. However, after correct login, I.E. pops up an error saying something like "Internet Explorer cannot download XXX from XXX. The file could not be written to the cache.". The log file showed the following exception:
    javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Connection reset by peer: socket write error
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1154)
         at com.sun.net.ssl.internal.ssl.AppInputStream.available(AppInputStream.java:40)
         at org.apache.tomcat.util.net.TcpConnection.shutdownInput(TcpConnection.java:90)
         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:752)
         at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:526)
         at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
         at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
         at java.lang.Thread.run(Thread.java:595)
    Caused by: javax.net.ssl.SSLException: java.net.SocketException: Connection reset by peer: socket write error
         at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:166)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1443)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1407)
         at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
         at org.apache.coyote.http11.InternalOutputBuffer.realWriteBytes(InternalOutputBuffer.java:747)
         at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:403)
         at org.apache.coyote.http11.InternalOutputBuffer.endRequest(InternalOutputBuffer.java:400)
         at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:961)
         at org.apache.coyote.Response.action(Response.java:182)
         at org.apache.coyote.Response.finish(Response.java:304)
         at org.apache.catalina.connector.OutputBuffer.close(OutputBuffer.java:281)
         at org.apache.catalina.connector.Response.finishResponse(Response.java:473)
         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:825)
         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:738)
         ... 4 more
    Caused by: java.net.SocketException: Connection reset by peer: socket write error
         at java.net.SocketOutputStream.socketWrite0(Native Method)
         at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
         at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
         at com.sun.net.ssl.internal.ssl.OutputRecord.writeBuffer(OutputRecord.java:283)
         at com.sun.net.ssl.internal.ssl.OutputRecord.write(OutputRecord.java:272)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:663)
         at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
         ... 15 more
    I've tried separating concerns, for example protect files but not require SSL, and enable SSL but do not protect files. Both works respectively but not together. I also tried using a download4j's DownloadServlet. Still doesn't work.
    Have any of you encouter the same situation? If so, could you enlight me what I did wrong? It maybe just a simple SSL configuration or something. Thanks in advance!
    Jack

    My environment setup is:
    JDK 1.5.01
    Tomcat 5.5.7
    For downloading files, I just use plain old <a href> method. I simply right-click the link and choose "save target as...".
    Thanks,
    Jack

  • Secure and non-secure access to the web application in one war

    Say we have one web application (in one war) which includes JSP, servlets and the security intercepter. There is one business requirement to have most of the JSP(s) accessed via HTTPS, but a few JSP(S) accessed via HTTP.
    My questions are:
    a. Is this possible, or a reasonable requirement or a good practice?
    b. if yes, what can we do to make it happen in the security intercepter implementation?
    c. If not, what is the technical reasons?
    Thanks much.

    a) Yes its is reasonable and good practive, there is an overhead using https, so you should only encrypt file you need to. When you use an online store, only account details / payments are https, the shop itself is http
    b) I dont really understand your difficulty. You can define a folder as 'secure' and put all your secure pages in this folder, leaving non secure files in a different folder. Whenever a page in the secure folder is accessed, https is automatically invoked.

  • After AVG PC Tune up, software update message for security and stability update is available FireFox 3.6.18. Should I Update?

    My Dell laptop (Operating on Windows XP) was hit with multiple viruses - I could not open Mozilla Firefox or any other applications for that matter. After much time and many attempts, I was finally able to install and run an AVG Scan and then an AVG PC Tune up. 4,559 problems found and repaired. After the repairs, I received the following message:
    "Software Update - A security and stability update for Firefox is available: Firefox 3.6.18 - It is strongly recommended that you apply this update for Firefox as soon as possible. - an underlined link reading, "View more information about this update" and then 2 choices - "Ask Later" or "Update Firefox." Since part of the problem was with Firefox and some error messages pointed to that, I'm hesitant to click on any of the three options above. Can you help me to get past this error message, please. I am sending this from my home computer. Thank you. Diane

    Sometimes the updater gets in a funny state - Go to http://www.mozilla.org/en-US/firefox/new/ and download the full installer. Close Firefox and run the installer

  • After upgrading to Mountain Lion I am not able to access "security and privacy" button under "system preferences". I like to activate "find my mac" but cannot access privacy setting after upgrade. Kindly advice.

    After upgrading to Mountain Lion I am not able to access "security and privacy" button under "system preferences". I like to activate "find my mac" but cannot access privacy setting after upgrade. Kindly advice.

Maybe you are looking for

  • (Solved) corebird won't start

    okay so i kind of did something i regret... i made the mistake of deleting my corebird .config files. so i thought it wouldn't be a big deal as i could always just yaourt -Rns corebird-git and then reinstall it. well it turns out it did put back the

  • Foreign trade inport /export in  vl01n

    How to remove FOREIGN TRADE/ EXPOR- IMPOT in delivery in vl01n. How to deactivate it.

  • Pdf attachment no iBooks "Open As"

    User has an iPad Air 2 running iOS 8.2 and has received a pdf as an attachment. He goes to "Open As" to open and save the pdf in iBooks but iBooks is not in the listing. Looking in the "More" shows a total of 3 items not 10, and iBooks is not listed

  • Filter function problem in Tree

    Hi All, In the below code, I am trying to put filter function on parent. Now if I type "Ratings" and then again clear the search. the Bottom node gets lost. Please let me know ho can I retin the bottom node. Please note that bottom node also contains

  • BPEL using Web Service Reliability..

    Hi, i found in Oracle Application Server Advanced Web Services Deployment Guide (B28975-01) / chapter 5 that there is a way to build webservices with guaranteed delivery and duplication elimination. Now my question: How do i have to configure the BPE