Security Filter Refresh in Hyperion planning

Hi,
I tried to refresh security for planning through workspace, and the process got finished in veryless time which is unusual, can any one please tell me that where can i check a log for this seurity Flters refresh in hyperion planning
i have gone through the essbase log but didn't find any info
Thx

One example is a user clicking on a report (logging into the workspace directly) and then getting an error that say 'Login fails due to invalid login credentials'. He appears to have the same access as other users that are able to access this report without problem. Also, we have users that are set up exactly as other users who aren't having problems and but aren't able to see the data in the report and then when exporting in query mode into SmartView the user gets #noAccess.

Similar Messages

  • Planning Security Filter refresh and Essbase is Crashing

    Hi,
    I am on System 9.3.1 and I am doing a Planning security filter refresh and Essbase is Crashing. Please advise in this case.
    Security is fine on this cube. It used to work fine earlier. Now from few days we are facing this issue.

    We see same issue in 9.2.0.3, but only with 1 of our 5 applications. Was never able to get support to identify a cause, our resolution is to push users in small groups and save the essbase.sec file. Real pain. You could try stopping essbase service, using essbase.bak file and restarting then try to push and see if it works. I did identify issues with our openLDAP which I felt was the cause, I was able to clean it up in TEST and it works, but did same in Prod and worked once, then reverted back to crashing again, unless we push users in really small groups. Interested to see if you get a 'fix' from someone...

  • Failed to refresh user's security filter

    Hi - I'm having an issue with a user ID. User was having a lot of problems doing Essbase retrievals in Excel, so tried refreshing their security filter in Hyperion Desktop. I get a 'security filters were created successfully except for: username."
    So I recreated her ID in Planning, removed her ID in Essbase and removed her filters in Essbase. I added back all the groups that she belongs to in Planning, now I am back in Hyperion Desktop trying to do a push down for her ID and I still get the same error message.
    Then I went to some other people's ID, highlighted their name and did a refresh, some of the say successful, some of them give me the same error message about security filter refreshed except for: username".
    What in the world can be causing this?
    Planning 3.5.1
    Essbase 7
    Edited by: CLAU on Feb 25, 2010 7:29 AM

    also<BR><BR>DISPLAY PRIVILEGE USER ALL; will list all privileges granted to a user directly. Any line that isn't "no access" means that the user has privileges assigned outside a group. I periodically do ann audit on our systems to ensure we have't got any direct users that have privileges granted outside groups.<BR><BR>Of course anyone tagged individually as a supervisor will come up on this check.

  • Improve web form performance of Hyperion Planning

    Hi all,
    I am not sure whether anyone has tried the recommended method from Oracle to compress the web forms used in Hyperion Planning so as to improve the network perfromance?
    http://download.oracle.com/docs/cd/E12032_01/doc/epm.921/html_hp_admin/frameset.htm?/docs/cd/E12032_01/doc/epm.921/html_hp_admin/hpamin-19-17.htm
    Slow Performance When Opening Data Forms Using a Dial-Up Connection
    Scenario:
    Opening a data form using a slow network connection (for example, with a modem) takes a long time.
    Solution:
    You can significantly increase the network bandwidth when opening data forms by modifying the web.xml file, as described in this section. This solution compresses by approximately 90% the data stream sent from the Planning server to the client.
    Note: If you are using a WebLogic (all supported versions) Web application server, complete the second procedure, which is specific to WebLogic. If you are using any other Web application server, complete the first procedure, which contains general instructions.
    To modify the web.xml file to improve performance, for any Web application server except WebLogic:
    1 With a text editor, open the web.xml file, located in HyperionPlanning.ear or HyperionPlanning.war.
    2 After the tag </description> and before the tag <listener>, insert the following lines:
    <filter>
    <filter-name>HspCompressionFilter</filter-name> <filter-
    class>com.hyperion.planning.HspCompressionFilter</filter-class>
    <init-param>
    <param-name>compressionThreshold</param-name>
    <param-value>2048</param-value>
    </init-param>
    <init-param>
    <param-name>debug</param-name> <param-value>1</param-value>
    </init-param>
    </filter>
    <filter-mapping>
    <filter-name>HspCompressionFilter</filter-name>
    <url-pattern>/EnterData.jsp</url-pattern>
    </filter-mapping>
    3 Save the web.xml file.
    If you are using WebLogic, you must manually modify the .ear file and redeploy it for the Web application server.
    To improve performance with a WebLogic application server:
    1 Unzip the HyperionPlanning.ear file to C\:ear, for example.
    2 Unzip Hyperion.war under C:\ear to C:\war.
    3 With a text editor, open the C:war\WEB-INF\web.xml file and modify it using the instructions in step 2 in the preceding procedure.
    4 Compress the content in C:\war to C:\ear\HyperionPlanning.war.
    5 Compress the content in C:\ear into C:ear\HyperionPlanning.ear
    6 Deploy the new HyperionPlanning.ear for the WebLogic Web application server.

    Hi,
    Yes we did this with a bank which had branches connected to the servers via dial-up. They were complaining about the amount of data being transferred in between branches and servers. This has worked well over there and increased the data transfer performance considerably. However, nowadays the performance bottlenecks are not generally due to the amount of data being transferred over the network but the javascript components that should run on client and heavy calculation/data and report creation processes.
    Cheers,
    Alp

  • Can't log in to Hyperion Planning - User provisioning requires CSS

    After configuring Hyperion Planning Installation (9.3.1) can't login Hyperion Planning Classic Application Administration.
    Here is HP log:
    INFO: Server startup in 2431 ms
    java.util.MissingResourceException: Can't find bundle for base name HspMsgs, locale ru
    java.util.MissingResourceException: Can't find bundle for base name HspCustomMsgs, locale ru
    java.util.MissingResourceException: Can't find bundle for base name HspImgs, locale ru
    java.util.MissingResourceException: Can't find bundle for base name HspCustomImgs, locale ru
    java.lang.IllegalStateException: User provisioning requires CSS as the security provider.
         at com.hyperion.planning.appdeploy.HspManageAppSession.<init>(Unknown Source)
         at com.hyperion.planning.appdeploy.HspManageAppSession.<init>(Unknown Source)
         at HspCreateApp.Handle(Unknown Source)
         at HspCreateApp.doPost(Unknown Source)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
         at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
         at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
         at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
         at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:300)
         at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:374)
         at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:743)
         at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:675)
         at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:866)
         at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
         at java.lang.Thread.run(Unknown Source)
    Thank's in advance.

    Hi all,
    You have forgotten some configuration steps. Run the configuration utility again and select product instance registration under planning options.
    Good Luck!

  • Security filter couldn't refresh to Essbase from Planning but could create

    Please kind help on look at this issue.
    I updated some dimension access in Planning,and did a security refresh in management database menu.But the access didn't refresh to Essbase filter.
    Then created filter in management security filter menu,it refreshed to Essbase successfully.
    I would grateful if someone could tell me why the first way unsuccessful.
    Thanks,

    If you go to Oracle Support and search on "planning security refresh" you will see lots of articles on this subject.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Planning security filter got corrupted

    Hi Hyperion Gurus,
    We are using Hyperion 9.3.0 and recently found that security filter of one of the Planning user has been corrupted, whenever that user logs in Excel addin or Smart view the essbase service goes down and when I try to open the security filter through AAS it again brought the service down, this led me to think that the filter has been corrupted.
    I have deprovisioned the user from Shared Service and after that refreshed the security in AAS to sync with Shared Service this removed the user from Essbase system now I tried to delete the filter through aas and also by running maxl script but am not able to delete it and every time I try to delete this brings the service down. I was planning to refresh the security from Planning apps now but am bit scared to do that as am not sure if this will corrupt essbase security file.
    So my questions to you all are
    1. How to delete this corrupted security filter.
    2. Will refreshing the security from Planning can remove this filter as the user has been deprovisioned from Shared Service.
    3. What all steps need to be taken before refreshing security from Planning so that if there is any serious issue system can be restored back.
    Thanks in advance.

    Hi,
    We had the same issue with a corrupted security filter. Any time the filter was referenced it would bring down essbase. In 9.3.1 you can export security (right click the security object). What we saw ws when the export hit the bad filter it would shut down essbase. We discovered which filter was bad because the output from the export would stop right before the bad filter.
    The bad news is there is not a way to delete the bad filter AAS or Maxl. So you need to find a backup security file that is good and will export. Once you do that i would think that you could create or refresh the security filters from the planning web and it would re-create the users/filters in essbase.
    Keith

  • Refresh fails in Hyperion Planning 9.3.1

    Hi,
    Two users were removed from LDAP, they still show up in Planning. Now refresh of Security Filters is failing. How can I remove these users from Planning and complete the refresh?
    Thanks,
    Rinky

    Does this article from Oracle Support help
    Deleting User and Security Filter in Hyperion Planning [ID 1211654.1]
    Applies to:
    Hyperion Planning - Version: 9.3.1.0.00 to 11.1.1.3.00 - Release: 9.3 to 11.1
    Assume the user is 'test'.
    * Remove user 'test' from any Groups it may be a member of.
    * De-provision user 'test' from Shared Services. Make sure 'Server Access' for Analytic Server is also removed.
    * Log into the Planning application as an administrator.
    * Refresh the database to Essbase from Administration > Manage Databases with the “security filters” option checked.
    * Under Administration > Manage Security Filters you will still see the de-provisioned user 'test'. Select this user in the list by checking the checkbox.
    * Click the “Create” button at the foot of the list. This will re-create user filters and remove the de-provisioned user 'test' from the list. They are now removed from the Planning relational database too.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Security filter setup missing in one of the planning applications

    We noticed recently that our users in one of the planning applications were not able to access any data.
    Then we noticed that the entire security filter setup went missing/wipped out for that application and had to set up manually and then a security refresh had to be done to restore security.Any suggestions about the root cause for this issue.We have not been able to find out much about this
    Thanks

    jts wrote:
    It would have been curious if you would have gone to Essbase and sync from Shared Services in the security section to see if the security filters would have repopulated in planning.Filters are stored on the essbase side (essbase.sec) and not in shared services so I wouldn't of thought syncing from HSS to essbase would make any difference
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Hyperion Planning migration error while refreshing/creating Essbase cube

    Hi,
    I'm migrating a Hyperion Planning application (11.1.1.4) to a complete other environment (due to the split of the companies). I have read most post on otn, but unfortunately nothing that helped me to solve the issue, yet... I hope someone can help me. Thanks in advance!
    I have executed the following steps:
    1. Create a new Oracle database
    2. Create a datasource to the Oracle database and to Essbase (both tested succesfully)
    3. Create a fresh planning application (I have used a native Admin account and not the original owner)
    4. Go into the database tables for the planning app and look at table HSP_USERS, store the SID value against user 50001
    5. Go into the database planning system tables and HSPSYS_APPLICATION, clear out the version field for the application you have created - I did not do this since I could not delete this value. null is not accepted.
    6. Stop Planning
    7. Restore the planning application database over the one created in the first step (I had to drop the existing tables first)
    8. Go into the HSP_USERS table and update the SID for user id 50001
    9. Start planning
    10. Log on to planning and I did see the webforms, etc as expected.
    11. Now, when I try to refresh the database, I receive an error:
    Cube refresh/create in progress
    Status failed
    Step 4 Adding dimensions
    java.lang.NoSuchMethodError: getAttributeType
    Does anyone has an idea? Hope someone can help me since the deadline is getting closer and closer.
    Thanks!
    Kind Regards
    Martin

    Hi John,
    Thanks for your reply.
    I have exactly done what you have described. I droped the schema and recreated it with an impdp to import.
    But, in the meantime I have been investigating the dimensions and there's indeed something very wrong. Some dimensions have been mixed up. In the 'old' environment I have 10 stored dimensions and 4 attribute dimensions (as well as in EAS as in Planning, offcourse as you expect). In the 'new' environment, two stored dimensions have been mixed up with two attribute dimensions.... How is that possible?
    I have never seen that. Could this be caused by the reason that we use a different version of Oracle (11G release 2 vs 10G (10.2.0.4))? Or went something wrong with exporting the schema...? Can you tell me what I can do to investigate this?
    Thanks!
    Kind Regards,
    Martin

  • Com.hyperion.planning.olap.EssbaseException (1060122) Error during refresh

    Hello,
    We recently upgraded our Hyperion environment from 9.3.1 to 9.3.3 and we are getting this error
    com.hyperion.planning.olap.EssbaseException (1060122) when trying to refresh a database. What does this error mean? Any help in this regard is greatly appreciated.
    Thanks
    Sri

    The error stands for :-
    1060122 - Name [%s] too long for Non-Unicode mode server
    Not sure why you are getting the error though.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Planning v11.1.2.1  Manage Security Filter "Create" blew away security

    Was testing security for a Native Directory user id and as 'admin'. Did the following within a Planning application (we have several apps):
    Administration > Manage Security Filter
    - checked the box for the Native Directory ID.
    Here it comes.... clicked "Create".
    I have a Shared Services window that was already opened. I can see that all groups are blown away.
    Other symptoms are that that ADMIN id can no longer see any applications with Workspace, or anything else.
    Also Admin id cannot log into EAS
    O_o.
    We have some old LCM dumps available, but still checking as to whether they have everything.
    Solution ideas.

    Do you not backup the planning applications schema/db, just revert back to a previous back up.
    Then if you can recreate the security being wiped and prove it is nothing wrong with your process then log it with Oracle.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Create Filter in Hyperion Planning

    I have created a Data Form using Classic Hyperion Planning Application. I want to have few cells in this data form having Read only access while others have Write access. How can I do this?
    For ex: I have 10 users, some of them will have write access to some of the "Accounts" and "Period(Q1, Q2)" Dimension members while they will have read access to all the other members.
    I have externalised my Essbase Server to Shared Services. I don't know how to assign filters to users using User Management Console.
    Thanks in advance.

    HI RahulS
    Wont this feature will make a particular cell read-only for all the users? My requirement is to make the Data Form Read-Only for some specific users.
    Hi John,
    I cant find the Assign Access option in my Accounts or Time Period dimension which were created by default.
    Is there any way to enable the security for the built-in dimension?
    Open Question:
    While i was trying RahulS's suggestion i came across an error which i cant resolve myself. Requesting you to help me out in this regard........when i try to open the data form i come across this message "Unable to obtain a connection to Hyperion Essbase. If this problem persists, please contact your administrator".
    I checked the hspsys_properties table in the database and the info are correct but when i try to query the table it says "The table or view does not exist"
    When i check the Essbase log it says "Database Plan1 does not exist" though i have changed the name of the Plan1 database.
    Please help....I am badly stuck.

  • Security on Year dimension in Hyperion Planning.

    Need to enable security on Year dimension on Hyperion Planning for below requirement. I know that we cannot enable security on year dimenison in Hyperion Planning, but want know if there is any custom solution.
    Requirement:
    IT users to have write access to Scenario: FY12FCSTJUN for year FY12 for period JUN to DEC & FY13 for Period OCT to SEP. (Calender year starts at OCT of every year)
    Normall users they want to have read access to Scenario: FY12FCSTJUN for year FY12 for period JUN to DEC and write access to Scenario: FY12FCSTJUN for Year FY13 for Period OCT to DEC
    1)we can modify the start period, end period, start yr and End yr for FY12FCSTJUN Scenario dimension to make FY12 FY12FCSTJUN as read/write for Specific year, but it won't meet the requirement.
    2)I have already tried making modification to the Planning respository table ( changed the value for ENFORCE_SECURITY parameter to 1 for DIM_ID 38 for Year in the HSP_Dimension table)on one of VM environments,but it won't enable security on the Year dimension.
    3)We can create a Budget scenario to achieve above, but it involves too many changes accross all the webforms and B rules, so we want to see if there is any custom solution available.
    Any suggestion/workaround to resolve the issue?

    Oracle will be releasing a patch in dec 2012 to fix/enable the security on year dimension. this patch is applicable for 11.1.2.2 version.

  • Security Filter Problem

    Hi ,
    I am facing one problem related to security Filter for one user. We are on the Hyperion Version 11.1.2.1 Fusion Edition.
    We had one user created in Shared Services with ID : TESTUSER and added in the group. Initially access for this user was working fine. Later on we deleted this user from shared services as we no longer needed this.
    As per new requirement we are supposed to create a same user with same user name so we created again new user 'TESTUSER' and added into the same user group then we refreshed security from Planning Application through " Administration -> Application -> Refresh Database->Security Filters ". Refreshing security Filters created filter for above user and we checked this from EAS consol.
    However when we log in to the Application through Smart View we are getting the below Error.
    Cannot Open cube View.Essbase Error ( 1054060 ):Essbase Failed to select
    Application APP1, because TESTUSER@Native Directory is not\
    completely Provisioned by Planning.
    Could you please advice how could we resolve this issue.

    Check whether the user is only an Essbase user. (I don't think that is the case, but in case)
    Try changing the access type using
    alter user username add application_access_type Planning; (don't know whether this works in latest release)
    Try the stepsRAvery and _RahulS_mentioned.
    Tried that in 11.1.2.2 access_type Planning is defered.
    Regards
    Celvin
    http://www.orahyplabs.com

Maybe you are looking for