SAP BI 7.0 Transport issue with HR Structural Authorization DSO

Hi,
I am trying to transport HR Structural Authorization DSO Objects in BI 7.0 from Dev to QA system. The Data sources are 0PA_DS02 and 0PA_DS03. ( I am sure that there are lots of changes in Authrorization concept in BI 7.0),.
1. Please suggest me if I need to make any changes and tests before moving these authorization objects to QA system.
2. Also, do I need to take any pre-cautions while activating business content objects 0TCTAUTH and 0TCTAUTH_T (Datasources look like are from 3.x) as I am getting issue with the activation of the transfer structure for these objects?
Thanks a lot for your valuable inputs.
Regards
Paramesh
Edited by: paramesh kumar on May 5, 2009 12:45 AM

Hi Paramesh.
You can use the DSOs 0PA_DS02 and 0PA_DS03 in BI7.0 as well. You just need to use the new generation of analysis authorizations in transaction RSECADMIN.
You can use 0TCTAUTH and 0TCTAUTH_T in BI7.0, however we have experienced som problems with the 0TCTAUTH_T extractor, which dumped because of a poorly designed SELECT statement that was unable to cope with 10000 records. We have replaced it with a generic data source that uses table RSECTEXT directly.
Regards,
Lars

Similar Messages

SAP BW 7.31 - Transport Issue with Generated Objects

Team,
We have two landscapes, Business As Usual (BAU on SAP BW 7.01SP8) and Project Landscape (on SAP BW 7.31 SP10). The Project landscape Development system is a copy of BAU landscape development System and got upgraded to 7.31. Same case with QA System also.
Issue: We are trying to collect InfoProviders (which are created in 7.01 SP8) in to a transport request in 7.31 System, it’s not allowing to collect in a transport request. Getting the below message.
Object CUBE 0FIGL_R10 is generated and cannot be transported
Message no. RSO887
Diagnosis
The object CUBE 0FIGL_R10 is generated (for example, for a semantically partitioned object) and cannot be transported.
System Response
The object is not written in a transport request.
Procedure
You do not need to do anything. The main object (the semantically partitioned object) simply needs to be transported. Here the object CUBE 0FIGL_R10is automatically created in the target system.
Could you please let me know if you come across the above situation and solution.
Warm Regards,
Surya

Hi,
you are not yet collected the cube CUBE 0FIGL_R10.
go to RSA1 -> select the transport connection -> select the object types -> select the info cube -> expand the node -> double click on the select object -> give the cube name CUBE 0FIGL_R10 -> select the transfer selection.
collect the dependent objects like info package, ds, dso, cube, dtp, transformations.
now click on the truck symbol form standard tool bar.
now it will collect.
then do transport to target system.
Thanks,
Phani.

Does SAP or Oracle have an issue with these type of processors?

Does SAP or Oracle have an issue with these type of processors?
Intel Xeon X5260 & E5450 vs Intel Itanium PROCESSORS
I want a Sales / Marketing URL link or white papers that talks about processor recommendations.
SAP GUI 7.20

> Does SAP or Oracle have an issue with these type of processors?
>
> Intel Xeon X5260 & E5450 vs Intel Itanium PROCESSORS
>
> I want a Sales / Marketing URL link or white papers that talks about processor recommendations.
SAP does neither "recommend" nor "deny" any processors.
If you check http://service.sap.com/benchmarks then you get a lot of machines with different CPUs/operating ssytems and database combinations.
Choose the one that suits best for you.
Markus

An issue with authentication and authorization on ISE 1.2

Hi, I'm new to ISE.
I have an issue with authentication and authorization.
I have ISE 1.2 plus patch 6 installed on VMware.
I have built-in Windows XP supplicant and 2960 cisco switch with IOS c2960-lanbasek9-mz.150-2.SE5.bin
On supplicant I use EAP(PEAP) with EAP-MSCHAP v2.
I created authentication and authorization rules with Active Directory as External Identity Source. Also I applied authorization profile with DACL.I login on Windows XP machine under different Active Directory accounts. Everything works fine (authentication, authorization ), but only for several hours. After several hours passed , authentication and authorization stop working . I can see that ISE trying authenticate and authorize users, but ISE always use only one account for authentication and authorization . Even if I login under different accounts ISE continue to use only one last account.
I traied to reboot switch and PC,but it didn’t help. Only rebooting of ISE helps. After ISE rebooting, authentication and authorization start to work properly for several hours.
I don’t understand is it a glitch or I misconfigured ISE or switch, supplicant?
What should I do to resolve this issue?
Switch configuration:
testISE#sh runn
Building configuration...
Current configuration : 7103 bytes
! Last configuration change at 12:20:15Tue Apr 15 2014
! NVRAM config last updated at 10:35:02 Tue Apr 15 2014
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname testISE
boot-start-marker
boot-end-marker
no logging console
logging monitor informational
enable secret 5 ************
enable password ********
username radius-test password 0 ********
username admin privilege 15 secret 5 ******************
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 172.16.0.90 server-key ********
aaa session-id common
clock timezone 4 0
system mtu routing 1500
authentication mac-move permit
ip dhcp snooping vlan 1,22
ip dhcp snooping
ip domain-name elauloks
ip device tracking probe use-svi
ip device tracking
epm logging
crypto pki trustpoint TP-self-signed-1888913408
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1888913408
revocation-check none
rsakeypair TP-self-signed-1888913408
crypto pki certificate chain TP-self-signed-1888913408
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
ip ssh version 2
interface FastEthernet0/5
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/6
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/7
interface Vlan1
ip address 172.16.0.204 255.255.240.0
no ip route-cache
ip default-gateway 172.16.0.1
ip http server
ip http secure-server
ip access-list extended ACL-ALLOW
deny icmp any host 172.16.0.1
permit ip any any
ip radius source-interface Vlan1
logging origin-id ip
logging source-interface Vlan1
logging host 172.16.0.90 transport udp port 20514
snmp-server community public RO
snmp-server community ciscoro RO
snmp-server trap-source Vlan1
snmp-server source-interface informs Vlan1
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move
snmp-server host 172.16.0.90 ciscoro
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server vsa send accounting
radius-server vsa send authentication
radius server ISE-Alex
address ipv4 172.16.0.90 auth-port 1812 acct-port 1813
automate-tester username radius-test idle-time 15
key ******
ntp server 172.16.0.1
ntp server 172.16.0.5
end

Yes. Tried that (several times) didn't work. 5 people in my office, all with vers. 6.0.1 couldn't access their gmail accounts. Kept getting error message that username and password invalid. Finally solved the issue by using Microsoft Exchange and "m.google.com" as server and domain and that the trick. Think there is an issue with imap.gmail.com and IOS 6.0.1. I'm sure the 5 of us suddently experiencing this issue aren't the only ones. Apple will figure it out. Thanks.

SAP DS 1.3: Performance issues with crosstab planning (IE only)

Hi everyone,
because im currently developing a custom component for DS 1.3, I got in touch with the planning feature of design studio. Planning currently only works in a crosstab.
Here I recognized a significant performance issue with the internet explorer:
If you simply type in a new value into a cell in a crosstab, it takes ~10s to confirm it (not constant! Sometimes it takes 2s, sometimes 15s). During this 10s, it seems like the IE crashed - no response at all. Sometimes there is also a warning message on bottom ('... script is slowing down the application ...').
Tested the same scenario with Chrome and FF - takes less than 1s to confirm.
Whats going on here ...? Anyone experienced the same issues?
My testing environment:
Windows 8.1
IE 11 (also tested emulated Ie 10 and IE 9 - same problem)
DS 1.3.0.3.201405141058
Local mode
Application only contained a simple crosstab, data source based on BW 7.3 query
Of course I deactivated all custom components while testing...
Kind regards
Wladimir

Hi Tammy,
Thanks for your reply. Of course, my IE is updated to latest version (11.0.9600.17207).
Hopefully SP1 will fix this bug...
Kind regards
Wladimir

Issue with context specific authorization object P_ORGINCON.

Hello Experts,
The context specific authorization object doesn't evaluate the
structural profile it is assigned to when more than one structural
authorization is assigned to a user.
Please read the below scenario for issue description as follows:
User ZHR_ACT13 is assigned two roles namely ZHR_HRD and ZHR_DEPT_HEAD.
He is the manager for employee ID 167 and is not the manager of employee ID 17.
Role ZHR_HRD has no read/write authorization for Infotype 6. ZHR_HRD is also assigned to structural authorization ALL which is meant for viewing all the objects with no restriction of any relationship.
Role ZHR_DEPT_HEAD has read authorization for infotypes 6 for only the subordinates i.e. the structural authorization ZDEPT_HEAD of viewing only the subordinates data is assigned to this role. Also this structural authorization ZDEPT_HEAD is assigned to infotype 6 using
authorization object P_ORGINCON.
But now the manager ZHR_ACT13 is able to read infotype 6 data for employee ID 17 who is not his subordinate even though only structural authorization ZDEPT_HEAD is assigned to infotype 6 using P_ORGINCON. We
expect that user ZHR_ACT13 must be able to read infotype 6 data only for employee ID 167 and not for employee ID 17.
Please kindly help resolve this issue.
Thanks & Regards,
Roshan.

This has been resolved.

Transporting issue with Enhancement spot

Hi All;
Now i have an issue when transport the enhancement spot, we have two clients, one is for developpment, and one is for testing, i found that there is an enhancement spot exists on the testing client but not exists on the developping client. And i found that the enhancement spot is deleted by myself. Is there anyone who can help me to transport the deletion from the developping client to testing client?

Hi Vincent,
In SAP BI, queries are compound of wide range of objects of "Query element" type (R3TR - ELEM).
Please, check if all associated Query elements are actually being transported. One way of making sure of this is preparing the transport through the "Transport connection" in RSA1 transaction. You can choose "Only necessary objets" in the Grouping type, drag and drop the query to the right pane and then make sure all necessary objects are checked.
Regards,
Maximiliano

Transport issue with SLD

Hi,
On PI 7.1 EHP 1.
Trying to transport an interface to Production, Prod has its own SLD. When the Basis team import the change on the Integration Builder it is failing and giving error:
Communication Component | SEDCLNT316: Obligatory transport target for business system SEDCLNT316 not found in System Landscape Directory
I have checked the SLD for the Business System SEDCLNT316 and it is there, also the transport groups for Quality and Production are set up on it. I can't see anything wrong with the SLD.
Can someone help me out?
Thanks
Gareth

Hi,
I have seen this behaviour before. We fixed it by making sure the transport target is complete for the business system both in the source-SLD and the Prod-SLD (that it contains both Dev, Tst and Prod business system name in both the SLDs). Then export your objects again, and it should be able to import correcly to target system.
I usually find it easiest to have all systems available in all SLDs, not just the systems relevant for the spesific SLD environment (i.e. Dev or Tst or Prd).
-Kenneth

Sender SOAP Adapter issue with webservices for authorization.

Hi All
Issue:
As we are developing a Web Service to fetch account balance from SAP(upon receiving the account no from client) and have given the wsdl file to J2EE application to call or make use of the service. But as a part of that service they expect userid/password to be entered manually from client pop-up. At this point of time, we don't want to enter userid/password manually but we want this to be hardcoded/embedded in Webservice so that there is no need of manual intervention upon calling this service.
Actual Requirement:
From Webservices to R/3-ECC6.0-IS-Banking-RFC (Synchronous Interface)
Sender: SOAP Adapter synchronous
Receiver: RFC Adapter synchronous
Note: Requesting a account number and getting response from RFC is account Balance and Date to webservice
Regards
Kiran kumar.s

Hi praveen,
Thanks for ur reply.What you said is exactly right but for time being i have to make the client not get the authorization(password--Username and password(pop-up)) when he invokes the WSDL into webservice for that u told that to write some hardcode in J2EE application,but i don't know that where to write and what to write.so, if possible can u give me the code and procedure.
This is the URL:
http://hcl3sap:50000/XISOAPAdapter/MessageServlet?channel=:BS_WEBSERVICE:CC_SOAPSENDER
Regards,
kiran kumar.

Fade Effect Issue with table structure

I have an existing HTML page with a table framework that uses
CSS divs in some of the table rows. My SPRY data is currently
wrapped in DIV tags within the table. I've discovered that the
table is screwing up the fade effect in IE7. Is there any way I can
get around this without removing the table and recoding the whole
page in CSS? FYI...I using version 1.4. I'm not sure if 1.5 will
fix this issue.

Essentially the fade in fade out effect isn't working at all
in IE. It's setup as a slideshow and uses the fade effect as a
transition between the spry data. The slideshow works fine just
without the fade effect. Everything works perfectly in Firefox
though. I know this code will work as we have used it before, the
only thing different is that I have my DIV with the SPRY content
wrapped within a table cell and row. I've read that the TR tag
cannot be used, but it's not exactly using the TR as an ID. Once I
comment out the table, tr, and td tags, the effect works no problem
so I know it is the table. I can't give you the URL because it's on
our local network.

Issue with project structure...

Hi all,
Our projects are created from sales order through assembly processing. All wbs are of first level..the user By mistake manually made changes to the structure by dragging the wbs and dropping it under another wbs in the project thus making it a subordinate wbs I.e second level wbs. Now during the running of the result analysis for the first level wbs the system is giving an error to delete the ra data of the second level wbs before proceeding with the first level wbs and now the user has realized that project structure is changed. Can we go ahead and delete the ra data of the lower wbs and change the project structure back at this point? What implications will changing the structure have at this point?

Hi
Besides above suggestion, you can reorganize your structure by executing "Derive structure" in CJ20N.
Go to menu bar Project > Check/Derive Structure.
Note that this is possible before saving changes to system. in you case, when WBS element was dragged and placed under another WBS element, level of WBS also got changed.
These kind of issues are user induced and avoidance is very difficult. But we can still control implementing User Status. Try this option which will default at initial level and stays there till the closing of project.
You can select the object "Change Structure" and option - Forbidden.
Thanks,
Sudhakar
Message was edited by: Sudhakar Pappu

Issue with the Structure urgent please.

Hi guys,
Hope every one doing great...
I am creating a report in that v r having month/year char on this v have created a variable of type user entry.
I had created the structure with many selection for the current year along with this my requirement is to restrict the data in the structure for the prior year as one of the selection.
suppose the user enter the value in the variable = 05.2008
then i need to restrict the data for the prior year= 05.2007.
thanks in advance
KK

Hello KK,
               Create a customer exit variable on 0calmonth characteristic , it must be with single option.
here just for example i have given your new variable as test1 and the user entry variable as var1.
then check the following code if it works.
data: year1(4) type n,
      mon1(2) type n,
      mon2(6) type n.
when 'test1'.
    if i_step = 2. "after the popup
      loop at i_t_var_range into loc_var_range
      where vnam = 'var1'.
       clear l_s_range.
        year1 = loc_var_range-low(4).
        mon1 = loc_var_range-low+4(2).
        year1 = year1 - 1.
        concatenate year1 mon1 into mon2.
        endif.
        l_s_range-low = mon2.
        l_s_range-sign = 'I'.
        l_s_range-opt = 'EQ'.
        append l_s_range to e_t_range.
        exit.
      endloop.
    endif.
hope it helps,
regards,
karthik.

Issue with Planning sequence authorization in WAD

Hi,
There is a planning sequence which I can execute through Modeler without any issue. However I am not able to execute the same from WAD. It says 'You are not authorized to execute planning sequence....'
Please advise.
Regards,
SSC

hI,
You need to create one role in which add planning related authorization object ie
S_RS_PLSE     Planning Function
S_RS_PLSQ     Planning Sequence
S_RS_PLST     Planning Service Type
S_RS_PPM     Authorization Object for BI Planning Process Management etc....
and attach to your id.
I think you do not have authorization for S_RS_PLSQ.
try this.
Regards,
Ganesh

Rfc to jdbc --issue with import structure

Hi
I am doing asynch RFc to jdbc scenario, for which I followed the below blog,
/people/swaroopa.vishwanath/blog/2006/12/28/send-rfc-to-sap-xi-150-asynchronous
(My abap code is as per the blog)
But one doubt ,as per the blog, my imported rfc structure in IR doesnot conatin those fields(table structure) then how this mapping is going to happen?
Else all the configurations are ok and success in runtime n in sxmb_moni,
Please can anyone help in understanding this,
Thanks

Hi,
What is the problem which you are facing ?
You cant see the fields after importing in XI ?
If so where are you trying to see the fields ?
>>wanted to know as to how to code in R/3 so as to trigger the RFC in background.
This is what is mentioned in the blog.
>>i am not able to understand the blogs logic (R/3 code)
Which part of the code you are not able to understand ?? theres hardly any code .
Any part/word of the code which you cant understand ..just click on that word and press F1.
Regards,
Sumit

Structural Authorizations Issue

Dear all,
We are involved in a HCM OM project and we have an issue with the Structural Authorizations.
We have more than one user who must acces to the same Organizational Unit. This is suppose to be easy because we assign this object code to an user profile (T77pr)
The problem is that, the users doesn't have to have acces to the same objects which belongs to this Org Unit. (Objects positions in example).
I.E.
User 1 acces Org Unit 1
User 2 acces Org Unit 1
User 1 create Positions in Org Unit 1
User 2 create positions in Org Unit 1
User 1 cannot acces to positions created by user 2.
Any idea? how can we restrict this access?
Thanks in advance,
L.

let me take a shot at this by drawing an analogy with a std sap scenario in hcm.
my-scenario-1:
1. position to position relationship is maintained for the sake of line managers A/B-002 relationship to be specific & in the absence of chiefs because in an org unit there are 3 line managers with 10 people reporting to each of them
2. this means
manager-1 has 10 people reporting to him/her
manager 2 - has 10 other people
manager-3 has 10 other people.
3. the above means manager-1 cannot view people reporting to manager-2 and 3 respectively,.. and extrapolates this to each manager.
4. how do you handle this via str.auths in sap std?
now compare the above to your scenario:
1. I would create a z-relationship for each user and restrict access based on that using a functional module in the structural profile.
worth a shot .....not very complex if you ask me :-0
cheers

SAP BI 7.0 Transport issue with HR Structural Authorization DSO

Similar Messages

Maybe you are looking for