Security for Business Rules on Planning Menus

We recently upgraded to 11.1.2.3.500. Planning is patched to 11.1.2.3.501. We have right-click menus that are used on our data forms to launch business rules. We are finding that users without access to the business rules are able to see the rules on the menu and run them successfully from the right-click menu.
When the user goes to Tools > Business Rules and clicks "Display only launchable rules, rulesets, and calc scripts", it shows no rules listed, yet when they use the right-click menu, they can see the items from the menu that are associated with a rule, and use that item to run the rule. If you go to Tools > Job Console, you can see the rule as executed under the user's name.
In our old version, 11.1.2.1, if the user did not have access to the business rule, then the item would not show on the menu and therefore they couldn't run the rule.
Is this a known bug in the 11.1.2.3.500? Any ways to resolve or workaround this?
Thanks in advance!

Have you had a look at the planning 502 patch to see if this has been resolved, sometimes the bugs addressed in the patch are quite cryptic so it is worth trying the patch out anyway, if you have not already it is probably worth logging with Oracle.
Cheers
John

Similar Messages

  • Planning : migration security of business rules

    Hello,
    Unfortunetly the migrator for business rules (v. 9.2.0.3) don't migrate the security. Do somebody have a solution to migrate the securtiy with the business rules ? And, is there a solution to associate the BR with the forms automatically ?
    Thank you

    It's almost easier to treat the migration of rules as text objects.
    Basically cut/paste the rules, store in a repository as you would other source code a, cut/paste to target environment. This means the security on the rules in the target environment for existing rules is retained. Now for new rules you would have to provision the rules. The XML export does have a known issue with really large business rules (those about 485k or so when in text form) whereas the cut/paste method will always work. Now if you do have large rules, you can use Macros or Sequences to break up the size.
    Your process ends up being dictated by corporate policy and the roles assigned to various individuals.
    Regards,
    -John

  • Business Rules in Planning 11.1.2.1 - Cannot connect to Planning

    Hi,
    I started experiencing some problems today in forms with Business Rules. I don't really know how it happened, but I noticed after a Refresh and after stopping CalcManager service (business rules run on this service?). Either way I restarted the EPM System and the error persists.
    When I ented in any form with business rules i get the error: An error occured, in a white background.
    In logs i have the following:
    missing property key:embedded_timeout
    missing property key:css_refresh
    missing property key:PLUGIN_DATA_REFRESH_RATE
    missing property key:MYOLAP_ENABLED
    missing property key:HBR_CACHE_REFRESHRATE
    missing property key:launch_log.filename
    missing property key:launch_log.log_calc_script
    missing property key:launch_log.log_prompt_values
    missing property key:launch_log.date_format
    missing property key:EDS_UserName
    missing property key:EDS_Password
    missing property key:EDS_Domain
    missing property key:EDS_url
    missing property key:log4j.logger.com.hyperion.hbr
    missing property key:log4j.appender.stdout.layout
    missing property key:log4j.appender.stdout
    missing property key:log4j.appender.stdout.layout.ConversionPattern
    missing property key:log4j.appender.R
    missing property key:log4j.appender.R.File
    missing property key:log4j.appender.R.MaxFileSize
    missing property key:log4j.appender.R.MaxBackupIndex
    missing property key:log4j.appender.R.layout
    missing property key:log4j.appender.R.layout.ConversionPattern
    missing property key:HBR_CACHE
    Default HBR = http://<servername>:19000/aps
    In getDBDetails()
    Found HBR product = ESSBASE_PRODUCT
    In lookupBRLWA()
    Found HBR product = ESSBASE_PRODUCT
    Found HBR product = ESSBASE_PRODUCT
    - Cache Manager initialized...
    - authenticateUser: UserName = admin, Password = password
    - Repository does not exist for poolname: nullnullnull
    - Repository does not exist for poolname: nullnullnull
    - Creating new Repository for poolname: nullnullnull
    - Invalid Database Type specified: 0. Unable to create Repository object.
    - Error while creating Repository object. Please make sure your HBR Configuration is correct.
    - COMM001
    Embedded HBR initialized.
    Seeking ESAPI.properties
    Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\ESAPI.properties
    Loaded 'ESAPI.properties' properties file
    Seeking validation.properties
    Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\validation.properties
    Loaded 'validation.properties' properties file
    Seeking antisamy-esapi.xml
    Found in 'org.owasp.esapi.resources' directory: E:\Hyperion\EPMSystem11R1\products\Planning\config\esapi\antisamy-esapi.xml
    - authenticateUser: UserName = admin, Password = null
    - Repository does not exist for poolname: nullnullnull
    - Repository does not exist for poolname: nullnullnull
    - Creating new Repository for poolname: nullnullnull
    - Invalid Database Type specified: 0. Unable to create Repository object.
    - Error while creating Repository object. Please make sure your HBR Configuration is correct.
    - COMM001
    Launching the business rules against Planning also result in the following error message:
    ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server <server name>
    - Error connecting to Planning server <server name>.
    Any advice on what might be going on?
    Thank you

    I'm still having this problem. I checked that RMI is running but whenever I try to enter in Planning the logs write that it can't connect to the eas database, and HBRPluginData relational table isn't being filled.

  • Shared Services 11.1.2 + Provisioned Roles for Business Rules not reflectin

    Hi,
    I have provisioned users to have 'Basic' role in shared services for Business rules. We are using Calc manager + classic planning app. However users are unable to see the business rules associated with the forms due to which the rules dont run on save. Is there a intermediary step which I am overlooking?
    Regards,
    N

    Please ignore this question. I guess i posted in the wrong place. Not sure how to remove the thread

  • Unable to access to Business rules from planning

    HI all,
    We are using Hyperion Planning 9.3.1, Essbase 9.3.1 and AAS 9.3.1.
    Unfortunately, we are not able to access to business rules from planning.
    All rights are set properly, the business rules are visible through AAS 9.3.1 and are accessible from all locations.
    When we go to tools/business rules and select the database, we are not able to see any business rules.
    If someone has any idea, it will help us a lot,
    Thanks for reading this post, guys.

    Thanks for your help John,
    Unfortunately, we do not have the directory \HyperionPlanning\webapps\HyperionPlanning\WEB-INF\classes\.
    We tried to put the file in the directory \HyperionPlanning\deployment\tomcat\HyperionPlanning\webapps\HyperionPlanning\web-inf\classes\
    But it still doesn't work.
    For your information, we are currently using TOMCAT as web server.

  • LCM Export not working for Business rules in 11.1.1.3

    Hi,
    I triggered an LCM export for Business rules (just 2 rules) with the admin id and its in in progress state for the past 2 hours. I don't think its making any progress as  I checked the below,
    1) No LCM logs created in the /hyperion/common/utilities/logs/LCM/ folder.
    2) No export directories are created in the Import/Export folder.
    3) No errors registered in the shared services logs.
    What could be the reason for this issue?
    Is there any other logs which I missed to check?
    Is there a way to kill this apart from recycling the services?

    This is a known issue and has to do with the http timeout settings. Usually this will happen on the 5 minute limit, but it depends what setting they have.
    Take a look at this article and see if it applies:
    Business Rules That Take More Than Five Minutes to Execute Are Re-launched Repeatedly [ID 755406.1]
    Agnete
    Edited by: Agnete on Oct 22, 2012 12:51 PM

  • Unable to associate an outline for business rule

    Hi All,
    I am not able to associate an outline (either essbase or planning) to validate a business rule. The hbrserver.log from epmsystem1/diagnostics/logs/eas
    says below output.
    2012-03-28 17:57:40,192 WARN [ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadataServerElement - Error connecting to Essbase server http://<servername>:19000/aps/Essbase?clusterName=EssbaseCluster-1.
    2012-03-28 17:57:40,193 WARN [ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadata - Error connecting to Essbase server EssbaseCluster-1.
    2012-03-29 09:57:13,209 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:7ad025f2:12202d6e25a:-7ffe,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
    2012-03-29 09:57:13,211 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
    2012-03-29 09:57:13,283 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
    2012-03-29 09:57:13,354 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
    2012-03-29 09:57:13,419 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:-1c3b8cd:11ffef2e704:-7ffc,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
    2012-03-29 09:57:13,420 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
    2012-03-29 09:57:13,725 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server ojhyperiondev01.mtn.com.ng.
    2012-03-29 09:58:25,363 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:7ad025f2:12202d6e25a:-7ffe,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
    2012-03-29 09:58:25,364 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
    2012-03-29 09:58:25,449 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
    2012-03-29 09:58:25,516 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
    2012-03-29 09:58:25,579 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:-1c3b8cd:11ffef2e704:-7ffc,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
    2012-03-29 09:58:25,579 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
    2012-03-29 09:58:25,694 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server ojhyperiondev01.mtn.com.ng.
    2012-03-29 10:00:08,562 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadataServerElement - Cannot sign on as user already signed on.
    com.essbase.api.base.EssException: Cannot sign on as user already signed on.
         at com.essbase.api.session.Essbase.signOn(Unknown Source)
         at com.essbase.api.session.Essbase.signOn_internal(Unknown Source)
         at com.essbase.api.session.Essbase.signOn(Unknown Source)
    Can anybody help me please.. I tried with newly created admin user with all the privillages.. still no luck.
    Many Thanks

    Is this 11.1.2.1 by any chance?
    We had this as well, but resolved the issue with this KB:
    Error: "Error connecting to Essbase server EssbaseCluster-1" When Trying to Connect Business Rules to Essbase [ID 1328483.1]
         Modified 25-JUL-2011 Type PROBLEM Status PUBLISHED     
    In this Document
    Symptoms
    Cause
    Solution
    References
    Applies to:
    Hyperion Essbase - Version: 11.1.2.1.000 and later [Release: 11.1 and later ]
    Information in this document applies to any platform.
    Symptoms
    in version 11.1.2.1, after switching Essbase from using host name to a cluster name, in Essbase Administration Services (EAS) it is no longer possible to navigate lower than "EssbaseCluster-1" in the tree of Locations in Business Rules. The following error occurs:
    "Error connecting to Essbase server EssbaseCluster-1".
    This happens with both pre-existing and new business rules.
    Cause
    This issue has been identified as unpublished BUG 11783671 - Unable To Select Outline For Essbase Rule If Essbase Cluster1 Is The Server
    Solution
    The current workaround is:
    1. Search for the file named 'essbase.properties' under %EAS_HOME%. Note that normally on a windows setup %EAS_HOME% points to the following path:
    ":\Oracle\Middleware\EPMSystem11R1\products\Essbase\eas"
    If it does not exist, create a blank text file and name it 'essbase.properties' and place it under %EAS_HOME%\server\bin
    2. Open it in notepad and add the following setting to the beginning of the file:
    aps.resolver.urls=http://<APSSEVERNAME>:APSPORT/aps
    e.g aps.resolver.urls=http://server1:13080/aps
    NOTE: The line is case sensitive
    3. Save the file and restart the EAS server.

  • Launch business rules from Planning

    Hi,
    I created a business rule "xyz" in EAS console with necessary validations and user/group security. I would want to associate this rule to a data form in planning.
    During data form design , the business rule "xyz" is not showing up in the available list of rules.
    What needs to be done..?
    Created planning application using classic app wizard.
    Thanks.

    One other thing to check for if you are using a version prior to 11 is that the file HBRServer.properties is in the correct folder within the planning web application.
    For example on tomcat it would be :- \Hyperion\deployments\Tomcat5\HyperionPlanning\webapps\HyperionPlanning\WEB-INF\classes
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Error in association of Business Rule to Planning

    My name is Jitendra from India. I am new to Hyperion planning 9.3.
    I am facing problem while attaching a business rule with the planning database (association step). It is showing "Unable to connect to Planning" . But same Business rule is attaching with the Essbase database.
    I have installed 9.3.1Shared Service,Essbase server,Client,cosole,planning (classic application not EPMA application). My planning engine is working fine.
    I am stuck at this point for last 2 days. I saw below guide lines in OTN forum by John.
    Can somebody guide me with this problem or tell me where I can find the doc id - 763345.1
    I saw below guide lines in OTN forum by John.
    "*Before logging into EAS, try logging into the planning application via the web first.*
    *Also make sure the RMI service is running.*
    *If you still have problems I recommend logging into My Oracle Support and having a read of doc id - 763345.1*
    *It goes through different options for resolving business rules issues*."
    Thanks
    Jitendra Padhiary

    Log into "My Oracle Support" - http://support.oracle.com/
    And search for Doc id - 763345.1
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Issue with executing Business Rules from Planning web

    Hi,
    We are using Hyperion Planning 9.3.0.1 and we keep getting an issue with the Business Rules. We get an error if we try to run the rules from Planning web. The same rules validates and executes fine if we run it from AAS. This issue gets resolved if we restart the Planning and RMI service. But this issue keeps happening randomly. Is there a permanent resolution to it? Is it a bug or I am missing something here?
    Thanks and Regards,
    Amol
    Edited by: user638718 on Apr 7, 2009 5:20 PM

    Hi,
    Have you installed any of the patches for 9.3.0.1, I think it goes up to 9.3.0.1.09
    One of the fixes was :-
    8-665086601 (6588823) – When the Business Rules connection to the relational database is lost, Business Rules does not reconnect to it. To solve this problem, an optional property, HBR_CONNECTION_VALIDATE_TIME, was added to HBRServer.properties. This property specifies a time interval for checking the connection between Business Rules and the relational database. If the connection is not valid, a new connection is established. The time interval is specified in milliseconds and defaults to 300,000 (five minutes).
    Though I know there has been more attention to fixing known issues on 9.3.1 than 9.3.0.1
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Unable to view Business Rules in Planning application

    Hi All,
    After changing the password of hypadmin i am not able to view all the business rules in my planning application and EAs console business rules wizard also doesn't shown planning when i am trying to add location.
    Please suggest how to do password change in Hyperion 11.1.2.
    Regards,
    Vasu

    Hi,
    If it's admin id(configuration id), then you need to configure all the components which is registered with shared services after changing your password.
    For example, EAS configuration, only re-configure for -> Register with shared services.
    Like the same way we need to do for all components with new password & for planning apps, need to edit datasource with new password.
    Thanks.

  • Cannot see Business Rules in Planning

    Hi,
    I am not able to see business rules in Hyperion Workspace 11.1.2.1. I have provided access to the admin group and assigned the BR to the correct planning applications and planning server.
    I am able to view them in EAS but in Planning, i am unable to do so.
    Any idea what i am missing?

    I take it you have recycling the services to rule out a communication issue, if so have you checked the logs for any errors.
    Also it is worth having a read of the following Oracle Support doc - "Hyperion Business Rules Visibility Within Hyperion Planning [ID 1110438.1]"
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • HI John: Advise for Business Rule or Calc Script

    Hi John,
    I need your Advice regarding Business Rule as earlier i took all ur advice seriously and also succeeded; This is toughest area for me.
    1) Any useful document which help me to understand Business Rule apart from HBR admin pdf ?
    1) Any Blog/Source/PDF/PPT especially for Planning Business Rule ?
    Thanks for any Help.
    Regards
    N Kumar

    Hi,
    Well business rules are really just calc scripts with a few additional features.
    So to understand business rules a good place to start is looking at calc script functions and commands, the essbase technical reference includes details on all this :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_esb_techref/techref.htm
    If you get stuck on calc scripts then the essbase forum is also a good place to ask for advice as there are many experts on there.
    I have not seen many sources for information relating to just business rules.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Business Rules in Planning 11.1.2.1

    Hi,
    I'm having a strange problem in Planning 11.1.2.1 dataforms. I added a business rule and selected Run on Save, Use members in dataform and Hide Prompt in a dataform. However when I press the save button, the Business Rule prompt appears, and the values of the prompt parameters are not filled with the current page selection (the specific business rule has 2 run-time prompt variables), while I was expecting it to simply start running without showing the prompt and ask the members to the user.
    Anyone knows what could be the problem?
    Thank you

    Its worth having a look at below link:
    http://download.oracle.com/docs/cd/E17236_01/epm.1112/hp_admin/ch06s09s04.html
    Make sure that RTPs which you have created in EAS are of type Member not Members.
    Cheers..!!!

  • How to increase the max connections for business rules.

    How and where to increase the connection to EAS.currently we have max connection as 20.Also please let me know,what is the maximum connection we can increase.
    In our system totally,we have 350 users are present.
    when more that 20 users running the business rule,EAS is stopped.

    You can find this in the application property section in planning. Just navigate to Manage Properties and update the JDBC max connections and JDBC Olap connections to your desired number.

Maybe you are looking for

  • Battery running low much faster after upgrade

    Ever since I upgraded the software, my battery life has seriously degraded. Is anyone else experiencing the same issue? And is there a solution? I've already turned off location services - which is upsetting because prior to the upgrade, I had it tur

  • Been having iTunes problems for months - now it won't work at all

    Hi there, For the last few months, iTunes has been failing to update (halfway through download it throws up an error saying the update failed. Trying to update manually threw up the errors I've linked to below). So I decided to try to fix it at last,

  • I can't unmute my iPad... Help?

    I can't unmute my iPad... Help?

  • Changeing the Transport request Attributes?

    Hi Guys,              Can anybody tell me how to Change the Transport request Text , means while creating a Request u will enter the Description for Each request.Can anybody tell me how to change that description?                Very Urgent. Thanks,

  • Language other than bash for calling external programs

    Hi, sorry for the unspecific title, I couldn't think of a better summary. The problem is this: I have written a script to encode a DVD to H264 and Vorbis. Since it basically just performs some (OK, by now: A lot of.) management and then calls a exter