Security on Subject Areas
All,
I've seen a direct way to limit access on Sub Areas in the RPD....but is there a way to do this making use of external tables to set up security?
Or do you always have to create the groups in the rpd as well and limit access to Sub Areas that way?
Txs for your help!
Kr,
A
If you want to make things easy then just follow the following rules:
For subject areas:
1) Create one group for each subject area in the security manager of the repository.
2) Assign explicit access for the group on the subject area in the presentation layer of the repository.
3) Set up a table which holds the relation between users and groups.
4) Use the GROUP session variable to assign users to groups, by using an external table.
For dashboards:
1) Create one webgroup for every dashboard in the Manage Presention Catalog on the Presentation server.
2) Assign explicit access for that webgroup on the dashboard.
3) Set up (another) table which holds the relation between users and webgroups.
4) Use the WEBGROUPS session variable to assign users to the webgroups.
In this case you have divided your security between subject areas and dashboards, but still both types of security can be maintained in external tables.
Regards,
Stijn
Similar Messages
-
Security for subject area in obiee 11.1.1.6
Hi every one,
I have installed obiee 11.1.1.6 and applied the patches 13794002,13884769,13887566,13892934,13916045,13926409,13932572
Here the problem is when i am setting permission as denied to r subject areas for users,still they are able to view that subject area and able to fetch data.
For rest of the components security is working fine. But for subject areas it is not working as expected.
Do anyone else faced this problem or is there any other patch i need to apply to overcome this.
Thanks in advance.Hi Devarasu,
Thanks for your reply.
I have waited for 3 hours and even restarted the obiee services.
But even then users who are denied with permission for some subject areas can able to access them.
Thanks you very much.
Edited by: MKC on Jul 25, 2012 12:35 PM
Edited by: MKC on Aug 8, 2012 7:18 AM
Edited by: MKC on Aug 8, 2012 7:59 AM -
Subject area security validating users and groups from external table
Hi all.
I don't have practice to put question here, but there is one problem, that seems don't work correctly in OBIEE.
I'm trying to put users in groups within external table and this works fine.
I put security on the subject area level like this:
SA1 -> GroupA allow, Everyone not allow
SA2 -> GroupB allow, Everyone not allow
External table:
User----------Group
A---------GroupA;GroupB
B---------GroupB
Users A, B and GroupA, GroupB exists in the RPD, but I didn't put users inside them, I want this from table.
From the init block, external table I'm taking users and join them in the group. Same name users and groups are also in the presentation service.
When i connect with user A i don't see any subject area, when go to My Account i see in Group Membership/GroupA and GroupB, so it's readed from the external table.
Why in this case the subject area permission is not working?
It works if I explicitly put users in groups, in the RPD.
I have read this blog entry http://kpipartners.blogspot.com/2009/07/groups-webgroups-and-delivers.html and it is said that this works, but I'm interested how.
What should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?
This doesn't work or something is missing:
Re: Security on Subject Areas
Regards
Goran
http://108obiee.blogspot.comWhat should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?Yes, you should remove Everyone and add the relevant groups to each Subject Area. You don't need to set privileges in the RPD, in fact that's probably why it doesn't work for you. Leave your RPD Presentation Catalog as "Everyone" = Read as you will controlling access from the Presentation Services and it should work.
-
11g-Multiple subject area feature.
Hi,
I am new to 11g,In 11g we have anew feature like creating Analysis from multiple subject areas so,
1)Is there any limitation on this Multiple subject areas usage.
2)any configuration or settings needs to be done in RPD for querying related subject areas..
3)what is the limit of using this subject areas.. maximum from How many SA we can build a report..
any other limitation for this feature...
please share your thoughts.Hi ,
Its possible to add/remove subject areas , while creating a analysis , in OBIEE 11.1.1.6 .
refer this link :
http://www.rittmanmead.com/2012/03/obiee-11g-security-week-subject-area-catalog-and-functional-area-security-2/
but , I'm not sure whether same is possible in 11.1.1.5 .
Thanks . -
Subject Areas are inaccessible in OBIEE 11g
Hi,
We are facing a peculiar issue in our OBIEE environment. Some times when we update RPD in online mode and check in the changes, other developers are not able to access few Subject Areas though they have Read access for Everyone group. Today we faced this issue even when RPD is not updated.
Any help/suggestions on this will be helpful
Thanks,
Vijayours is a simple security model. we had issue with some new roles created for POC purpose. After removing those roles we are not facing issue anymore
-
Presentation Layer model not appearing in Subject Area (OBIEE 11g)
Hi All
I have created the OBIEE metadata for an OLAP cube using the following steps:
1. Created and Maintained a single OLAP cube using AWM (5 measures and 3 dimensions).
2. Created new OBIEE metadata repository using BI Administrator.
3. Exported CUBE metadata to OBIEE Administrator using OBIEE Plug-in for AWM.
4. Saved the new repository after checking for global consistency.
5. Uploaded the new repository to BI server using BI Enterprise Manager (http://localhost:7001/em).
6. Restarting all BI services from Enterprise Manager for repository changes to take effect.
7. Create a new user using Weblogic Console in Security Realm 'myRealm' and assigning it to group 'BIConsumers' using (http://localhost:7001/console).
8. Logging into BI Analytics as new user using (http://localhost:9704/analytics)
But for some reason, the cube is still not showing up under the 'Subject Area Contents'. Am I missing any step in between?
My platform is as folllows:
- Oracle Business Intelligence EE v. 11.1.1.3.0
- AWM 11.1.0.7.0B
- Windows 2008 Server (32-bit)
Any assistance will be appreciated.This would be a better forum for this
Business Intelligence Suite Enterprise Edition
Business Intelligence Suite Enterprise Edition -
Secure SIP lines are not supported on the CME
Hi,
I was looking for the configuration of Secure SIP lines on the CME and found in the link bellow that "Secure SIP lines are not supported on the Cisco Unified CME mode", only Secure SCCP lines is supported:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmeauth.html
In my opinion, security is an important subject nowadays and SIP is what Cisco is investing more and more ... it's awkward that Secure SIP lines is not supported on the CME.
Does anyone knows if this will be implemented in future versions of CME?
Thanks.Just to described the answer that I received from Cisco ... there is a roadmap for FY16.
Regards. -
Hi
I login administrator account only but i am not able to see subject area for all the report.(it shows Either you do not have permission to use the subject area CERSTA within Answers, or the subject area does not exist.)
How to give privileges for that.I never implemented any RPD level security.
Thanks
GramHi,
If you have not implemented any Subject area level security in the RPD,
the problem might that the subject area has been renamed. Kindly log on to the RPD in online mode and check if the subject area is proper.
Thanks,
Vineeth -
Hi,
I am trying to restrict access to certain subject areas in answers. I would like specific groups/users to have access to certain subject areas.
Is this performed in rpd or in answers?
ThanksHi ssk,
Here are the steps to do define the security in RPD level security/groups/permissions and can give access as per your need.More you can ifnd out in this below link on 6th point screens are also provided http://www.biblogs.com/2010/01/18/obiee-10g-web-catalog-%E2%80%9Cbest-practices%E2%80%9D/
hope helps you.
Cheers,
KK -
Javax.security.auth.Subject and weblogic.security.acl.User
Hello,
We are trying to move some old authentication code (Weblogic 5.1) to JAAS
which comes with Weblogic 6.1. Here is my problem:
I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
Any suggestions?Hello,
We are trying to move some old authentication code (Weblogic 5.1) to JAAS
which comes with Weblogic 6.1. Here is my problem:
I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
Any suggestions? -
Historical Suibject Area & Reporting Subject Area
Hi,
At the Company Profile Level I can see the Option of Reporting Subject Area and Historical Suibject Area at the Company Profile level and also at the user profile level.
However, not clear what these checkbox are used for, Are they being used for Reports (Available on Reports, Dashboard ) ?
Thanks :)They are used with manager's visibilty and Book of Business security to help give or revoke access to the different subject areas.
regards
Alex -
Google Map Issue in OBIEE - Subject area not getting associated
Hi Gurus,
We are trying to integrate Google map and OBIEE via mapviewer. We have done the following already -
1. Loaded World Sample data from Navteq.
2. Configured mapviewer source and added Google map as a tile layer with the API KEY.
3. Imported one layer (e.g. M_STATES_ABRV) in OBIEE and linked it with BI subject area (tried this step with importing other layers as well)
4. Added background map.
Now , in this step when we add the layer in the map, we select M_STATES_ABRV and change zoom levels. But Once we come back to main screen after Clicking OK, we see the background map is not associated with the subject area. Hence any map view report creation with this subject area fails.
We have the tried the same theme with Oracle Maps (internal type like WORLD MAP or DEMO MAP), it works fine. only Google Map gives this issue.
This was not expected. Please suggest what we missed. We tried with cache clear, tile delete and recreation, service restart almost everything .
We looked into other threads in this community, different oracle support documents - Doc ID 1485088.1,Doc ID 1346805.1 etc and in different internet blogs - where it's easy as child's play, but we are still out of luck.
OBIEE version - 11.1.1.7.140527
Environment- windows server 2008 R2
Please suggest.
Regards,
KrishI have found the solution: You need to *select* zoom levels for the BI Layer. When a BI Layer is added to a background map, by default no zoom layers are selected. Once a zoom level is selected, the BI Layer will save.
-
Need Help to develop a Funnel Graph Report using Multiple Subject Areas.
Hi Everybody,
Did any body developed Funnel based graph report in Answers..
Scenario: I need to develop a report which is based on 4 Facts(4 Subject Areas) Report is sectioned with 4 block one blovk with one Fact Metrics like this four blocks.
If any idea on such scenario it will be huge benefit for me.
Thanks in advance.
Thanks,
GovardhanaYes, i can see datatype and number of columns is same in both queries.
i have challanges to copy message but Error message seems to general. Error says (near to FROM) and I checked there are three FROM in query and all seems to be ok
Query is something like as below
select SA1.col1 saw_0,
SA1.col2 saw_1,
SA2.col1 saw_2,
SA2.col2 saw_3,
FROM
(select col1 saw_0, col2 saw_1 from "subject area1") SA1
FULL OUTER JOIN
(select col1 saw_0, col2 saw_1 from "subject area2") SA2
ON SA1.col1 = SA2.col1
I can't see any issue in the query...please comment. -
Report using colmns from 2 subject areas
Hi,
I have to buld a report as below
Product ForecastRevenue(A) ActualRevenue(B) Variance
A 200 100 100
B 200 200 0
ForecastRevenue(A) comes from 1 subject area and ActualRevenue(B) comes from another subject area. Using these 2 columns from different subject area I have to create
a calculated column variance which is the difference of two columns. How can I create this report. Any idea?can be done in two ways;
1. Using Union report
Create a union report with two request.
Request1 - product Forecast_Revenue Actual Revenue
Col expression "product.name" "Fact.Revenue" 0
Request2 - product Forecast_Revenue Actual Revenue
Col expression "product.name" 0 "Fact.ACTUAL_Revenue"
In the result tab create a pivote report and set the aggregation of fact column as sum.
Add a calculated column and write the expression as
Farecast_Revenue - Actual_Revenue
You are done.
2. Use the advance tab in the report and write a custom SQL to join these two subject area.
eg.
select product, A.forecast_reveneu, B.Forecast_Reveneue, A.forecast_reveneu-B.Forecast_Reveneue
from SA1 A join SA2 B on (A.product=B.PRODUCT)
You are done.
Best of Luck,
Kashi -
How to find total report based on a particular subject area in OBIEE?
Hi Everyone,
I am new to OBIEE. I want to find out all the reports based on a particular subject area as there are many subject areas and lot of reports in OBIEE.
Please help me out in this issue.
Thanks
Regards
Sohail DayerSohail,
Check out the catalogue manager reports :
http://oraclebizint.wordpress.com/2007/11/19/oracle-bi-ee-catalog-reports/
If you want this kind of thing automated, I personally am very fond of the ODI -> OBIEE Data lineage solution as provided in Oracle By Example tutorials :
http://www.oracle.com/technology/obe/fusion_middleware/odi/OBI-ODI_Lineage/OBI-ODI_Lineage.htm
Maybe you are looking for
-
Display malfunction- vertical lines on screen - blue, green, and white lines
My 3 week old passort shut down after running out of battery. After recharging, lines appeared on the display and won't go away. I tried serveral restarts. There are blue and green vertical lines on the left edge of the display and four our so whit
-
I have a mac g4 OSX.4.11 with 400mhz. Is there a download for this?
<blockquote>Locking duplicate thread.<br> Please continue here: [[/questions/871700]]</blockquote> Downloading firefox for my MAC G4 400mhz OSX.4.11
-
Intego Internet Security Barrier X6 and OS X's firewall
Hi! This may be the wrong place ot ask this question, but I coundn't find any better. I'm wondering if the internet security program Intego Internet Security Barrier X6 works well with OS X's built-in firewall... I also wonder if it is recommended/ne
-
How do i get shift f3 to work like it does in my windows machine?
In Word for Windows, the shift-F3 command toggles case. It doesn't in the Mac version of Word. How do I accomplish that? TIA Adam Rodman
-
In the last weeks when surfing with safari on my mac I see the ads for "MacKeeper" appearing unusually often on the pages I visit, even on pages where they don't make much sense (Food or gardening pages for example). To doublecheck I opened the pages