SQL to show a given users rights in the various hyperion modules

Hi All,
We need to create a Business Objects security report to outline the User access in HFM ,Essbase and Planning . We can't use the Hyperion Security report , since we use the BO report to mointor user access across all applications we have.
I need to provide the BO report writer with the SQL that will show all users access rights within HFM,Essbase and Planning.
Please help.

I'm also curious about this. I would like users to be able to view objects from other schemas through the object viewer.
Any help would be much appreciated. Thanks!

Similar Messages

TS1362 some songs quit in the middle of the track even though there is time showing. It goes right to the next song.

Songs quit in the middle of the track even though there is time showing. It goes right to the next song. Can I fix this or recover the full song?

I just found out how to solve the problem today
Go to the original location of the song. Meaning, if the song file is on the desktop then go there and individually click the songs and they'll play on Itunes perfectly fine
I'm not sure why this happened but I hope that works for you!

IRM / web services / check user rights to the document by login

Hellow,
How to check if user can read sealed document?
Sealing Server can be used to get Classification (Peeking http://download.oracle.com/docs/cd/E21764_01/user.1111/e12326/isvsealedcontent001.htm#DAFHIHIH)
"The classification is used by the Oracle IRM Desktop to determine whether the *authenticated user* can access the sealed content".
How can I do the same if i know the login user name?

Thanks!
My example
// get document context id
var sealedDoc = File.ReadAllBytes(_SealedFileName);
string contextId;
using (var srv = new SealingServicesClient())
srv.ClientCredentials.UserName.UserName = _ContextAdminName;
srv.ClientCredentials.UserName.Password = _ContextAdminPass;
var data = srv.Peek(sealedDoc);
contextId = data.classification.id;
// get user rights
string userName = "BillGates";
AccountRef account = new AccountRef();
account.uuid = string.Format("urn:user:{0}", userName);
DocumentRight[] rights;
using (var srv = new DocumentRightOperationsClient())
srv.ClientCredentials.UserName.UserName = _ContextAdminName;
srv.ClientCredentials.UserName.Password = _ContextAdminPass;
rights = srv.ListRightsByAccount(account);
// check if user can read
bool canRead;
var right = rights.FirstOrDefault(rr => rr.context.uuid == contextId);
if (right == null)
return;
canRead = (right.role.features.FirstOrDefault(ff => ff.id == "oracle.irm.generic.Open") != null);

Local Repository User Rights for the Data Designer

Hello,
we are using the Data Services with 4 users and one local repository stored on the server.
Is it possible to hide in the Data Designer foreign objects and projects from other users in the local repository? What's the best practice for that, for every user a seperate repository or to restrict the repository rights with the cmc?
Our system:
Windows Server 2008
Data Services 4.0 SP1
IBM DB2 9.7 (Repository)
Thanks for some tips and hints!

Hi Alexander,
At any point in time, you should only have one user connected to one repository in Designer.
If two users are using the same repository at the same time, then there is a risk of corruption of repository objects.
Best practice is to have a repository for each (concurrent) developer and a central repository for version management.
Depending how testing is organised, you might also need to have repositories for unit test / QA (UAT) and finally a production repository.
For good measure, an additional central reposotiry for production can be valuable:
- if development for new project start before the 'previous' project has gone into live.
- You can prepare go-live by checking in all the objects required for live into central-production first.
- It's the final safety measure, if objects in production are corrupted and dev/test systems have modified versions.
So, a typical landscape would look like this:
DEVELOPMENT:
n number of development repositories, one for each developer
1 test repository (local)
1 dev central repository
TEST
1 UAT repository (local)
PROD
1 PROD repository (local)
1 central repository
Jan.

User Details in the Check FM Module SWB_2_CHECK_FB_START_COND_EVAL

Hi All,
While triggering the Workflow, I have to do some validations based on the user who created the Purchase Order. We are using standard workflows.
How exactly to get the user details (Details of the user who created Purchase Order) from the check FM SWB_2_CHECK_FB_START_COND_EVAL.
Import Parameters were
1. SENDER
2. EVENT
3 .RECTYPE
4. EVENT_CONTAINER associated type is IF_SWF_IFS_PARAMETER_CONTAINER
I am able to get the user details from the check FM SWB_CHECK_FB_START_COND_EVAL from EVENT_CONTAINER.
The associated type in this FM is SWCONT.
Regards,
Venky

Hi
Please go through the SAP OSS Notes and their relevant Correction instructions (to implement the FM - BBP_2_CHECK_FB_START_COND_EVAL) for detailed source code in this case ->
Which SRM version are you using ?
Note 1049146 BBP_2_CHECK_FB_START_COND_EVAL does not start workflow
Note 993753 BAdI Workflow cannot be started using standard tools
Note 853360 Unclear error message when you evaluate the start condition
Hope this will answer your queries. Do let me know.
Regards
- Atul

Can't update apps because it always shows a past user id as the current ID and it's not.

Help me update my messages. This is stupid.

clogbrad wrote:
This is stupid.
Nope, not "stupid". Means you have an app or apps, on your phone, that were obtained with that ID. All apps are FOREVER tied to the ID used to obtain them, & can only be updated using that ID.
Your only solution is to delete this content, then re-purchase using your ID.

Show / Hide DOWMLOAD link in classical report based on user rights

Hi,
using apex 4.1.
How i can display or hide download link in classical report based on user rights .
The User who has download rights ,can download the data from classical report Otherwise it should hide.
I have passed the code in authorization scheme in shared component as named "VIEW"
DECLARE
VNAME VARCHAR2(1000);
BEGIN
SELECT PAGE_NAME INTO VNAME FROM APEX_APPLICATION_PAGES WHERE PAGE_ID = :APP_PAGE_ID AND APPLICATION_ID = :APP_ID;
return GET_ADMIN_STATUS_VIEW_NEW(:APP_USER,VNAME);
END;How i can call "VIEW'' name in download link.

Right click on the export link, select copy url. Create a button with redirect to URL. Use that URL (or at least everything with and after f?p). Bind rights to the button.
Or create a second identical report with different rights, give one export enabled and one disabled. The first is better, the second is easier :)
Edited by: Joni Vandenberghe on 8-feb-2013 5:08

Checking User rights in CMC 3.2 : How to search for a user ?

Hello,
We are in XI 3.2, and the rights applied on Public Folders are based on user groups, not individuals (hopefully).
In the CMC, when we want, for support purpose, to check what is the results of these rights for a given user, the "Select" panel for users shows the full list of users in the CMS, by pages, without any search option.
This is hardly usable when several hundreds of users are declared.
Scenario :
- In CMC, Folder Entry, select a folder, contextual menu + user security
- The list of groups with rights applicable on this folder appears, select any of them and then click on "View Security" Button
- The panel Permissions Explorer appears
- On top-left hand side, select Browse button after "Principal"
- Panel "Select User or Group" shows up and in users list, I find the full list of users of the CMS, based on dozens of pages without any way to search for a given user except browsing the pages.
How can we check rights of a specific user for a given folder without having to browse the full users list ?
Thanks for helping.

I think you might have to run a security query for what you are looking for.
Its this way:
-In the Users and Groups area, in the Details panel, select the user or group that you want to run a security query for.
-On the Manage menu, point to Tools and click Security Query.
This should list everything.
Some correct me if I am wrong.
Thanks

How do I find out if Sql server Agent's login has rights to a DB?

How do I find out if the SQL server Agent's login has rights to the target DB, that is the DB on which I will be executing a query ? Is there a query for this ?
Thanks.

The job will run with the permissions of owner of the job and only be modified by the owner
or sysadmin role members.
you need get the owner of the job and for example 'ABC' is the owner of the job then pass value in the below query
DECLARE @DBuser_sql VARCHAR(4000)
DECLARE @DBuser_table TABLE (DBName VARCHAR(200), UserName VARCHAR(250), LoginType VARCHAR(500), AssociatedRole VARCHAR(200))
SET @DBuser_sql='
SELECT ''?'' AS DBName,a.name AS Name,
a.type_desc AS LoginType,
USER_NAME(b.role_principal_id) AS AssociatedRole
FROM ?.sys.database_principals a
LEFT OUTER JOIN ?.sys.database_role_members b ON a.principal_id=b.member_principal_id
WHERE a.sid NOT IN (0x01,0x00) AND a.sid IS NOT NULL AND a.type NOT IN (''C'')
AND a.is_fixed_role <> 1 AND a.name NOT LIKE ''##%'' AND
''?'' NOT IN (''master'',''msdb'',''model'',''tempdb'')
ORDER BY Name'
INSERT @DBuser_table
EXEC sp_MSforeachdb @command1=@dbuser_sql
SELECT * FROM @DBuser_table ORDER BY DBName
--SELECT * FROM @DBuser_table where username='ABC' ORDER BY DBName
Useful links
http://www.mssqltips.com/sqlservertip/2317/running-sql-server-agent-with-a-least-privilege-service-account/
http://www.brentozar.com/blitz/jobs-owned-by-user-accounts/
-Prashanth

Archive directory user rights?

Hi all: I recently migrated our GW2014 SP1 server over to new hardware. The migration went smooth and our domain and postoffice seem happy. My users are reporting an 8201 error when starting up their client and I have traced it to a user rights issue with our archive folder on the server. I have given full rights to everyone as a temp measure, but I want to get the proper rights set up. BTW, the archive directory is on an NSS volume.
So, what are the proper user rights to the archive directory? Thanks much, Chris.

Hi Chris,
They need Read, Write, File Scan, Create, Erase, Modify, Delete - all except Access Control and Supervisor.
Hope that helps.
Cheers,

How to get default langauge for a given user

Hi,
I am trying to find the default language for a given user. Is the ICX:Langauge profile option right one to look for as below query?
select fpo.profile_option_name, applvl.profile_option_value
from fnd_profile_option_values applvl,
fnd_profile_options fpo,
fnd_application fa
where applvl.level_value = 1544 -- fnd_user id
and fpo.profile_option_name like 'ICX_LANGUAGE'
and fa.application_short_name = 'FND';
Thanks
Saikrishna

Krr1sh wrote:
Thanks for the reply Helios,
I am into a specific situation where I get the username an input and I need to find out what is the default language set to that user at user level, if nothing set at user level then Resp level and propagate it till Operating unit level.
Thanks
SaiPlease run the query in (How To Find All Users With A Particular Profile Option Set? [ID 367926.1]) referenced above.
Please replace this line in the query:
and n.user_profile_option_name IN ('&User_Profile_Option_Name')With:
and n.user_profile_option_name IN ('ICX: Language')Thanks,
Hussein

Pdf file not able to perform the user rights getting failure message

Hi All
i am using a trial version of Livecycle ES.
I am facing a issue while providing the user rights to the PDf file (dynamic file created in livecycle Designer 7.0). After uploading the file and providing the user right to embedded the file attachment. I am getting a failure message. Don’t know what the reason is.
Please kindly guide me on
Getting the Error logs, where I can specify and analysis the problem in detail.
On what are the case’s that I will be prompted for such error
Thanks in Advance
Sreekesh Anand.S

We had issues with attachments in version 7.0. You might try opening the LiveCycle 7.0 form in 8.1 or higher and then saving it.

Acrobat 8 Form - "This Operation Not Permitted" error when enable user rights and open Reader X

I have a form which is causing me fits. It was created from an existing PDF form to which I added data fields using LifeCyele Designer.
When I enable user rights to the document and try to open it in either Adobe Reader X or Acrobat 8 Pro I get the message "This operation is not permitted" twice. Once I get rid of the messages the form works fine.
Is there a way to upload the form to this forum for someone to look at it?
With my limited knowledge, I did try to investigate embeded font issues and hidden object issues. But after much work I've not gotten much closer to a resolution.
Best,
David

You cannot upload the file to the forum, but you can use Acrobat.com or Dropbox if you have an account. If you ha e no other options I'd be happy to take a look: acroscript at gmail dot com

Saving Extended User Right Forms

Hi,
I'm attempting to bring my office up to date by using forms on computers. Currently we still the type writer for some forms. I fought to get Adobe Acrobat Pro and now that I have it I'm not sure it's doing what I want. Suggestions on how to use this program better or get the 'right program are appreciated' (no disrespect to the Adobe Team). I converted a form that was created from Word Document into a PDF. I then Extended User rights. I have the form made but everytime I go to save the form, I have to Save As: that is to say I just can't save the stuff I filled-in, in the same file and a new file is created. With MS Word, even though I can't tab between forms, I don't have to make a new file. Am I doing something wrong, is it possible to just hit Save in a fillable form and not have to create a new document or version?
In the office, I am the only one with Adobe Pro 9 and the other people in the office mainly have Adobe Reader and not acrobat, so I want to save the forms using Adobe Reader.
Thank you for your insights. I've been researching this but no answer has come my way.
Ricardo
P.S. I am not trying to collect data from them, I just need forms to fill out and print and also save in the computer.

You should apply the Extended User Rights as the last step in the process
of creating the file. Once you do that, it creates a sort of signature on
the file which prevents you from editing it further, unless you remove
those rights. So get the file working the why you want it, apply the
rights, and then save it under a new name. You can then publish the version
of the file with the Reader rights, and continue working on the one without
them.
On Sat, Feb 11, 2012 at 2:01 AM, New at AdobeAcrobat Pro

User Right

Hi friends,
i want to apply authorization in my application.
here i want to difine all pages in a table and difine User right to the pages like
if i have two option, one is ACCOUNT and Second is Oppourtunity, here i user A Can't create or Insert New record into Account But he can Create or Insert new Oppourtunity .
please tell me how i can manage user A ,that are insert into Oppourtunity but Not have right to create new Account.
How to manage All Application pages via table.
how to implement custom Authentication / Authorisation schemes within their applications.
How can i do this.
Edited by: Vedant on Apr 14, 2011 11:06 PM
Edited by: Vedant on Apr 17, 2011 10:02 PM

Hi Vedant,
Please check this thread for it tackled the same issue:
Enable and disable buttons depends on user login?
For more details, you can watch this:
http://www.mandsconsulting.com/oracle-apex-tutorial-10-access-control-part-1-video-training
http://www.mandsconsulting.com/oracle-apex-tutorial-10-access-control-part-2-video-training
For Documentation:
http://download.oracle.com/docs/cd/E14373_01/appdev.32/e13363/acl.htm#CHDEEDJB
Best Wishes,
Fateh
Edited by: Fateh on Apr 17, 2011 10:14 PM

SQL to show a given users rights in the various hyperion modules

Similar Messages

Maybe you are looking for