Setting up Security in Universe

Question

Hi
I am quite new to SAP Business Objects and having trouble with setting up security in Universe
I want to create Restriction on a dimension 'Country'.
For e.g if Person X belongs to 'USA', he should be seeing the value 'USA' only in the Country Dimension
and if Person Y belongs to 'FRANCE' he should be seeing the Value 'FRANCE' only.
This is because, there will be only one Revenue Report (web intelligence) and based on security, the designated person will be able to see the report for the country in which he belongs.
Similarly, someone in management level will be able to see all Countries.
Note that, Country Dimension will be in the Filter part of a Web Intelligence report.
I have done the following settings and not able to get the desired results.
1. Created a Restriction USA in the Universe
2. In the Rows Tab, added a where clause ' TableName.Country = 'USA'
3. Mapped the User X (AD user added in CMC) to the Restriction USA.
The user still sees all the country in the WebI Report.
Any help will be appreciated.

Answer 1

>
Srikanth G N wrote:
> Simon, Thanks for your input. I am not clear on how to handle security at datamart level.
> For e.g. should we have another table where you map users to countries?
> If that's the case, I am more inclined towards having security at universe level, as it makes it simpler for me.
Hi Vikas, it really depends on how your organizational hierarchy is set up. If country is part of the organizational hierarchy, you can add it to your security table instead of adding another table. In our case, we have 3000+ stores that are divided up under this hierarchy....division, region, district, store. Different country is being differentiated by different division. Each user in the security table has an org type to tell me whether he or she is at the store level or at the district level and so on. Each user also has an org name that tells me his or her store number or district number and so on.
I've found it very easy to maintain because I can run SQL query instead of doing it in dialog boxes. It also means that I can set things up programmatically...something you cannot do in the Designer without using SDK. And with 20,000+ users, you want to do it programmatically. But of course, it works only if you have a well-defined organizational hierarchy.
Just to throw another wrinkle to this issue: SAP is completely redesigning the semantic layer in XI 4.0. All the previous universe designer functions will be in a new tool called Information Design Tool. Whether they will continue to support row level security is up in the air. They may or they may not as we don't know at this time. Even if they do, how much of the old set up will migrate smoothly to the new architecture is yet another unknown. Therefore, in my humble opinion, if it is not something that has already been built previously, I will try to make the universe as "migrate-friendly" as possible. But of course, you and your management have to make that call.
Hope this helps.
If you are using the BusinessObjects tool, you should join [ASUG|www.asug.com]