Security class cross validation

Hello
One of the dimensions of the application is Country (customer location).
User A - works with legal entity A, needs to see managarial data for region North America
User B - works with legal entity B, needs to see managarial data for region Brazil
I need to set security class as follows:
User A to see its legal entity A with all members of Country dimension (so the user would see all the data of its entity)
AND
User A to see the consolidated data (i.e. all legal entities) for region North America
If I grant user A with TopCountry, he would be able to see all the data in the consolidation, which is not what I want.
Does anyone know how to do it, if it's possible at all?
Thanks
Lilach

why would user A see all the data in the consolidation if you grant him with TopCountry security class? If every entity below TopCountry is assigned a different security class then he would only see the consolidated data for TopCountry

Similar Messages

Cross validation & Security rules

Hi,
In a typical business scenarios which are the code combinations recommended for
i)Cross Validation rule
ii)Security rule
to have better control?
Thanks

Hello.
It depends on your needs. Suppose you have 2 (01, and 02)companies sharing the same Chart Of Accounts. In order to avoid entering journals from company 01 into company 02 you should create a security rule to reject all code combinations starting by 01 when a Responsibility from company 02 is being used.
Cross validation rules are used to avoid the creation of code combinations that you may think as inappropriate within the company itself. For example, to use the Cost Center segment when the Account segment is not a cost or a revenue.
Octavio

Cross Validation Rules

I accidentally defined a cross validation rule (CVR) wrongly. My intention was to ensure that cost centre values other than 999 couldnt be combined with balance sheet accounts.
It appears to work initially, except that it prevents me from posting to any non-balance sheet accounts codes, because in the journal entry window the only cost centre segment value that I see is 999, and in the account code segment, the only values that I see are balance sheet account codes.
I need to see other cost centre values and account code values so as to post to P&L account codes, but they are not showing in the journal entry window. I have tried many times to disable the CVR but it hasnt help. I tried to change the CVR and saved it but it hasnt help either.
Can someone let me know how to remove this annoying cross validation rule altogether so that I will be back to where I started?

hi colin,
obviously it is not the CVR problem, coz CVRs will not effect the LOVs. check the security for the responsibility you are using.
thanks,

Dimension Member Cross Validations

Hi,
Can we setup a combination validation between multiple Dimensions ? So that when users selects a member from one Dimension it automatically decide particular values only in another Dimension.
Example: Balance sheet Accounts members from Account Dimension should have combination with only one "0000" member of Cost centre Dimension, this is something like Cross Validation in Oracle Financials. So, user selects Balance sheet accounts from Account Dimension and then he finds only "0000" member in Cost centre Dimension list even though Cost Centre Dimension contains many children.
Thanks,
Ravi

There are usually two aspects of this question.
One is the "can I populate one drop-down based on a value selected in another dropdown". I saw this done at Cadbury in their IT planning application, but it involved a LOT of custom Java, and was very difficult to maintain. The cross-validation rules were maintained in separate custom text files and the planning app had to be recycled for any changes to take effect. They ended up walking away from this solution due to the maintenance issues.
The other aspect of this quesiton usually relates to security. "Can I have access to one account if I select a specific member, but then NOT have access to that account if I select another member?" This is similar to Oracle's cross-validation rules. Hyperion Planning doesn't support this type of security. Security for each dimension is maintained independent of other dimensions. Essbase itself doesn't have this limitation, however Planning does. Hopefully this will get addressed soon - it's usually in the top two or three complaints my clients have regarding Hyperion Planning.
Take Care,
- Jake

Missing security classes

Hi all,
I have updated Security Class dimension via EPMA (added but also removed some classes). Deploy was successful and the application is in sync with EPMA.
When I wanted to update security class access via HSS, I couldn't find new classes and old ones (which I removed via EPMA) were still there.
How is that possible? I don't see any problem in interconnection between HFM and HSS but this seems that security classes haven't been refreshed in HSS.
Could anyone help me with this please?
BR
Vladino
EDIT
I can see newly added classes but I can see also old ones. This is really weird... I have duplicated the application, cleared all data and metadata but old classes are still there. :-/
Edited by: Vladino on Jul 11, 2011 1:49 PM

Solved.
The issue was because of migrating the old application into new one with different security classes. After clean deploy everything was fine but the migration (using command-line utility) replaced security settings with that coming from the old application.
Vladino

Cross-Validation Rules: How to re-validate segments all ready enabled?

Is it possible to call one of the APIs to re-validate the code combinations againts the Cross-Validation Rules? If the enabled flag is set to 'Y' then the CVR is ignored. I am aware of the Cross-Validation Rules Report which is helpful, but I need to go a step further. I'm looking to loop through the gl.gl_code_combinations tables, re-validate the combinations that are enabled, if CVR fails then determine if there are any amounts that need to be moved prior to disabling the combination.
I have a routine that:
1. creates temp table of all enabled combinations
2. loops through gl_code_combinations
3. deletes record from gl_code_combinations, do not commit
4. calls API fnd_flex_keyval.validate_segs
5. updates status of temp table
6. rollback deleted record
7. repeat 2 - 7 until done
8. query gl_balances using temp table combintions that have failed.
I'm a little nervous to run such a routine, because of the delete.
Does anyone have any ideas or suggestions?
Thanks,
Jamie
Edited by: jmdavis on Dec 15, 2008 6:17 PM
Edited by: jmdavis on Dec 15, 2008 6:18 PM

Use where clause for that UDA's in attribute that refer to other attributes data source. the where clause may required use Lookupcodes, these lookup codes may have to be configure in the source attribute values table column.
Edited by: user11979254 on May 13, 2010 2:49 AM

[svn:bz-4.0.0_fixes] 20651: Some MBean tests needed flex.management. jmx stuff in the allow classes list for the class deserialization validator so adding it in on BlazeDS 4 .0.0_fixes.

Revision: 20651
Revision: 20651
Author:   [email protected]
Date:     2011-03-07 12:21:11 -0800 (Mon, 07 Mar 2011)
Log Message:
Some MBean tests needed flex.management.jmx stuff in the allow classes list for the class deserialization validator so adding it in on BlazeDS 4.0.0_fixes.
Modified Paths:
    blazeds/branches/4.0.0_fixes/qa/apps/qa-regress/WEB-INF/flex/services-config.mods.validat ors.xml

Thank you very much!
I cant believe this little comment has been so helpful!
But yes it is:
I explain, despite my efforts to find, googled it, forums, faqs, etc...
no where it mentionned the manifest.fm file is... INSIDE the .jar!
Your comment "a zip" made me attempt to open it with winrar, and I found a manifest.fm file inside!
So far I was editing the one at the "source" of my project and rebuilding it with netbeans.
I am going to try that now.
Actually.... :( no its mentionning my main class!
Manifest-Version: 1.0
Ant-Version: Apache Ant 1.7.0
Created-By: 10.0-b19 (Sun Microsystems Inc.)
Main-class: courseworkjava3d.Simple3D
Class-Path:
X-COMMENT: Main-Class will be added automatically by buildWell I have no problems uploading you the .jar, it is for a coursework it is not a private project or whatever:
http://www.uploading.com/files/CM2LKWYU/BetaCourseworkJava3d_Final.jar.html
Oh and I felt on your comment "dont ask us" as if I was suppose to know... i'm a beginner, I did not know that! And I tried to give you so many infos so you dont lose your time if you want to help, especially as after my own research I found many, many results for this "main class" and I tried a few solutions!
Edited by: CupofTea on Apr 13, 2008 3:28 AM

[svn:bz-trunk] 20650: Some MBean tests needed flex.management. jmx stuff in the allow classes list for the class deserialization validator so adding it in on BlazeDS trunk .

Revision: 20650
Revision: 20650
Author:   [email protected]
Date:     2011-03-07 12:20:03 -0800 (Mon, 07 Mar 2011)
Log Message:
Some MBean tests needed flex.management.jmx stuff in the allow classes list for the class deserialization validator so adding it in on BlazeDS trunk.
Modified Paths:
    blazeds/trunk/qa/apps/qa-regress/WEB-INF/flex/services-config.mods.validators.xml

Thank you very much!
I cant believe this little comment has been so helpful!
But yes it is:
I explain, despite my efforts to find, googled it, forums, faqs, etc...
no where it mentionned the manifest.fm file is... INSIDE the .jar!
Your comment "a zip" made me attempt to open it with winrar, and I found a manifest.fm file inside!
So far I was editing the one at the "source" of my project and rebuilding it with netbeans.
I am going to try that now.
Actually.... :( no its mentionning my main class!
Manifest-Version: 1.0
Ant-Version: Apache Ant 1.7.0
Created-By: 10.0-b19 (Sun Microsystems Inc.)
Main-class: courseworkjava3d.Simple3D
Class-Path:
X-COMMENT: Main-Class will be added automatically by buildWell I have no problems uploading you the .jar, it is for a coursework it is not a private project or whatever:
http://www.uploading.com/files/CM2LKWYU/BetaCourseworkJava3d_Final.jar.html
Oh and I felt on your comment "dont ask us" as if I was suppose to know... i'm a beginner, I did not know that! And I tried to give you so many infos so you dont lose your time if you want to help, especially as after my own research I found many, many results for this "main class" and I tried a few solutions!
Edited by: CupofTea on Apr 13, 2008 3:28 AM

Asset Class to Class Code Validation

Is there a way to export Asset Class to Class Code Validation? I would like to export this in excel file for my year-end analysis.
(It’s under SPRO: Financial Accounting > Asset Accounting > Master Data > Define Validation)

Hi,
you can select the validations and print them. The printout previev can also be saved as a file. The format is not the best but it might help you.
Kind Regards,
Steffen

Shared Services Security Classes

Hello,
I wanted to know what the real value of having Security classes set up? I understand that having Security Classes on Shared Services is not mandatory. Under which circumstances should you use Security Classes and as I am involved in setting up Shared Services, I was wondering if I should use this option or not. We are currently in the development phase of HFM and Planning.
If anyone can shed light on this issue, it would be greatly appreciated. Thank you.
-- A

Hey guys,
I really appreciate the response.
The fact that Security Class may be assigned at the Entity level does ring bells. We do want to ensure that certain entities can only see their own data and not others.
I believe I will use Security class at the entity level for our company.
Can you give me some examples of assigning Security classes for HFM?
Wintee's suggestion of assign - ready only and stuff like that is okay but seems a bit generic. Thank you very much for your suggestion though Wintee.
I also wanted to know the exact difference between an administrator, delegated administrator, application administrator. Who assigns who?
If you had to make a hierarchy of users for Shared Services, what would it be: Admin, Delegated Admin, App. Admin, Provisioning Mgr, Directory Mgr? Who comes at the top? Thanks so much for your help so far guys...much appreciated.
-- A

Securing class files

Hello,
I read all these topics about securing class-files,
and about encryptors and stuff like that
so I tought this could be possible :
I've made an application and you can run it by using an exe-file.
In the same directory you find the class-files.
Now I archived the class files with winrar, and set a password on it.
I tried to use the exe-file to run the application, but it can't.
Obvisiously, it can't find the mainclass.
So I was wondering if there is a way to make clear to the exe -file, that the main class is in that zip-file, and that you need <this password> to get in to the zip-file.
I think it's possible, but I don' know how to do it.
I thought Google would know it, but he don't.
...

The collision wasn't "stumbled" across it was found
because the researchers
found a way (from your link) to "reduce the search
space".I didn't say "the collision was "stumbled" across"...
>
This means that, under certain circumstances, inputs
producing the same hash
can be found for other inputs + hashes.That is what I said...
>
Did you have a look at the PDF ?
http://eprint.iacr.org/2004/199.pdf
This doesn't damage the use of MD% for verifyingthat
file contents are unchanged, so to OP - go aheadand
use it.Well, it does because it means that there is the
potential for another
file that is not the same to return the same
sum - hence the program
won't realise the difference.And the situation is no worse now that before the duplication was found. Any encryption/hashing routine can create duplicate hashes - because none of them have an infinitely large numberspace.

Can applet load own security class, class loader

i tried this own security class extends SecurityManager class but exception thrown as applet cannot initate new security manager class.
i have done throw policy file entry to allow applet to write file in client machine.
i feel this extra burden novice user...
what is alternative way....
plz..

An applet should never be allowed to install its own security manager. That is why it is burdensome.

Cross Validation Rules logic back to front.

Hi All,
We have a cross validation rule to: "Cost/Profit Centre must be 0000 for this Balance Sheet natural account."
It is setup to Include: 0000.000000.0000.000.00.000.0000.00.0000 - ZZZZ.ZZZZZZ.ZZZZ.ZZZ.ZZ.ZZZ.ZZZZ.ZZ.ZZZZ
and Exclude: 7281.302623.0001.000.00.000.0000.00.0000 - 7281.303419.ZZZZ.ZZZ.ZZ.ZZZ.ZZZZ.ZZ.ZZZZ.
This rule allows us to control which accounts can post to cost centres and which cannot. So using these rules, any accounts in the range 302623 till 303419 cannot accept postings to a 0000 cost centre. So if we try to use 7281.303410.1234, we will get the message pop up and tell us we cannot use this combination, and that it must be 7281.303410.0000.
Now, we want to change this rule so we can start to accept postings by cost centre to account 303410. So that in future, postings to 7281.303410.1234 will be accepted and will not throw up the warning message.
Seeing our setup above though isn't 7281.303410.0000 already EXCLUDED from the rule?
To actually exclude it from the rule we have had to create a new exclusion: -
EXCLUDE: 7281.303623.0001 - 7281.303409.ZZZZ
EXCLUDE: 7281.303411.0001 - 7281.303419.ZZZZ
So now our combination 7281.303410.1234 exists between these two exclude ranges. Only this way it works. But it seems back to front logic.
Can you please advise if our understanding is correct or not?

Perfect! This is how you define cross validation rules. It's not back to front but from R11.0.3, Oracle standard is to use the cross validation rules like this.
- Kiran

Cross validation on cost allocation flexfield

We have setup a cost allocation ff with the option to cross-validate segments. We have correctly defined cross validation rules. Yet, when entering costing information for an element entry, the system allows us to enter a combination which violates our cross-validation rules. We have already checked that this combination was not existing before we created the rule so we do not understand why the rule is not working. Any ideas?

did u try with the below error message
ID HRD for the flexfield segment Profit Centre does not exist in the value set PROFIT_CENTRE.
checking value set which is is referring

Filter data by cross validation rules

Hi all,
Is there any way to build report that filter out data by cross validation rules ?
For e.g:
Acc. Flex -> Company.CC.Natural.Future.
The cross validation rules are excluding CC -> 01 and 05.
So all the combination_id that contains CC 01 and 05 will be filter out.
TIA,
Fendy

Perfect! This is how you define cross validation rules. It's not back to front but from R11.0.3, Oracle standard is to use the cross validation rules like this.
- Kiran

Security class cross validation

Similar Messages

Maybe you are looking for