SR 3-1748274801: EGRCM: BIP Users have no Authorization to Reports

http://myforums.oracle.com/jive3/thread.jspa?threadID=573417&tstart=0
Had a session with Mumu and team.
We are able to login to BIP using a WLS user. BUT.......
We do not have access to any reports. Mumu indicated this was Authorization. I submitted the above SR in the subject line.
We did try several things and it still did not work:
We added roles... all the XMLP roles and still; no access

Hi Anca,
The simplest solution would probably be to add in a WHERE clause to the report's SQL statement. I would also use a SQL function that returns the access rights (similar to the authorization SQL).
Assuming that you have such functions in place, you could do something like:
SELECT ...
FROM ...
WHERE (isUserLevel2() = 'Y')
OR (isUserLevel3() = 'Y' AND ....)
OR (isUserLevel4() = 'Y' AND ....)
isUserLevel2() would be a function that looks at your user table and checks if the user is set as Level 2 - if so, then it returns 'Y'. You could pass in to this function whatever ID you use to get the current user or use v('APP_USER '). As the Level 2 user can see everything, this return all records. For Level 3 or 4 users, the principle is exactly the same but you then add AND to the statement to get their own tasks or the tasks for their region/country.
An alternative would be to have several reports on the page and use Conditional Display settings to only display one of them.
Regards
Andy

Similar Messages

  • I have itunes on a mac with 2 users but the library only shows on the main user how can both users have the same library?

    i have itunes on a mac with 2 users but the library only shows on the main user how can both users have the same library?

    Hi,
    Have a Look at these Links on Home Sharing:
    http://support.apple.com/kb/HT4620
    http://support.apple.com/kb/HT3819
    Could be what you need...
    Cheers,

  • After userA check out a page, edit the page and save, Sharepoint prompt userA have checked out the page

    In one of site collection at our SP2013 farm, we have "SharePoint Server Publishing" site feature and "SharePoint Server Publishing Infrastructure" site collection feature activated.
    One of user (UserA) create a page in a page library. The new page is marked as "checked out by UserA". It is fine.
    Then UserA open the page -> edit page -> key in something and "save". Then the page prompt him "The file Pages/subfolder/test001.aspx has been modified by i:0#.w|test\userA on 8Aug2014 xx:xx:xx" and ask him to choose "Leave
    this page" or "say at this page".  The date time is exactly the time he was editing the page.
    Whatever he choose will save the page and return to "View" mode (non-edit mode).
    It is not the only problem. When userA want to edit the same page again and save, it prompt him that "The page could not be saved because your changes conflict with recent changes made by another user. If you continue, your changes will be lost."!
    When userA choose continue or "check out". Follow screen show up:
    What can we do? In summary, userA cannot edit a page because userA have checked out! We have tried for different users have exactly same issue.

    We are having the same problem, the one thing we have found is if we use the Save Icon on the top right hand side of the page in the ribbon (next to follow), that Save works just fine.  What is causing the issue is when trying to use the Save Icon on
    the left hand side of the ribbon that has the dropdown options to 'Save', 'Save and Keep Editing' or 'Stop Editing'.  It doesn't matter if you just click on the main Icon or choose any of the dropdown options, they all cause issues with the pages.  
    Thoughts?
    Nick Hurst

  • T006-Decan change after users have used the TO unit of measure

    Currently in our system for TO (tonnes) it has T006-Andec as 3 and T006-Decan as 0 and it issues the users a warning message "Order quantity violates rounding rule" if they type in decimals in the purchase order quantity.  We have been asked to change T006-Decan to a 3 and do away with the warning message.  What happens if you change T006-Decan from 0 to 3 after users have already used the unit of measure (TO) in the R/3 SAP_APPL 470 system on materials, purchase orders, sales documents, receipts, etc...?  I don't want to impact our users in production since I do not where this unit of measure has been used.  Any advice is welcomed.  Thank you.

    Hi
    If you are changing the decimal places in T006 - DECAN , the number which was 1000 would show as 1,000... so previously it was 1000 tonnes now it will show as 1 tonne.... such things happen....Check with SAP before doing changes to the Standard UOM's...
    I am not able to find the correct SAP note for this.... but its there hope you get it
    Thanks & Regards
    Kishore

  • How many users have been logged on by this month

    I need to do a list of the users have been logged on by this month in the central instance and in the application servers. Someone can help me? I will apreciate your answers.
    Best Regards.

    Hi Reynaldo,
    transaction SUIM > Users >users with complex selection criteria
    Fill in the right parameters.
    Regards,
    Jeff

  • HT1198 If I share an iPhoto library between multiple users, will the Faces, Events, and Places be automatically usable by all users, or will each user have to tag all the photos (e.g. if a user tags a face, will a different user have to do it in their own

    If I share an iPhoto library between multiple users, will the Faces, Events, and Places be automatically usable by all users, or will each user have to tag all the photos (e.g. if a user tags a face, will a different user have to do it in their own iPhoto application??

    Have you read this Apple document regarding sharing a library with multiple users: iPhoto: Sharing libraries among multiple users?
    OT

  • Can users have one iTunes library deriving from two drives?

    Hi everyone,
    I keep my 4 & 5 star songs on my C drive and the rest (all stars, 1,2 3, etc.) on my exhternal hard drive.
    Whenever I want to listen to my music, all I can readily play are the tunes on my C drive.
    I'm guessing the issues having one library for tunes stored on separate drives is insurmountable?
    I say that because I'm guessing that my iPod (4th gen) is only capable of importing from one library?
    I think the biggest issue is either I don't know how to (or maybe users can't) list a second drive so that iTunes can load all songs from both drives whenever I do have the second drive up and running.
    Adding to the second drive library issue, I can't figure out how to permanently tag my external HD's (I've got 6) so that their drive letter is not automatically defaulting to their order of prescence.
    I can deal with that issue by simply not opening iTunes while I the second drive has been assigned a drive letter other than what iTunes (hopefully) is set to (i.e.; hopefully C and F drives).
    But can users have one iTunes library deriving from two drives?

    Seems I've over come what is something I'd hoped/expected iTunes would be capable of (ie; reinitiating the pathway for external HD music files when their drive letter is the only thing that changed).
    I tried the obvious by going to iTunes's Edit>Preferences>Advanced and clicking the change button for "iTunes Music folder location", then entered the current drive and pathway (as the drive is currently assigned, F as opposed to the original G) and of course iTunes still couldn;t find the missing tunes.
    Giving up on the hope that iTunes was designed smarter than it is (ie; each and every single missing tune req's manual redirection of pathway, as opposed to a preferable tick box for something like 'use the last redirected pathway').
    And I finally figured out how to properly changed drive letter assignments, but still uncertasin if that means permanently tags my EHD's with that drive letter.
    For that to be permanent, maybe I need to name each drive regardless that Windows already has unique inforamtion on each HD. Suppose I'll soon find out if the drive at this point has fianlly stored its drive name and whether or not Windows will contiue to change the EHD drive letters simply by the order which I am introducing them to the os.
    No real luck with rats nest USB hubs as they crash my os alot, so I'm left to trying to find an easy way of managing the EHD drive assignments. THe following is the closest I've yet to come to doing that:
    Click Start>Control Panel>Administrative Tools>Computer Management, and then in the left pane, under Storage, click Disk Management.
    Right-click the drive, partition, logical drive, or volume for which you want to assign a drive letter, and then click Change Drive Letter and Paths.
    Click Change.
    Click Assign the following drive letter (if it is not already selected), click the drive letter that you want to use, and then click OK.
    Click Yes when you are prompted to confirm the drive letter change.
    Again, too bad iTunes doesn't afford a 'find' feature for 'missing' files such that one might be afforded a tick box for 'do not prompt again, instead use the last indicated location for "iTunes Music" folder as the base storage location'.
    This drive renaming thing is a real hassle. Not like somebody couldn't have guessed it and Windows and/or iTunes can't afford some script, etc. to better manage 'tagging' EHD's and/or re-locating 'missing' tunes.
    But then what would we have to complain about, not that they listen anyway.

  • How do you know if users have a history of marking answers?

    In Stack Overflow, you can easily see if a user is going to acknowledge your help by looking at their acceptance rate. I am finding it frustrating, however, that my answers on the Adobe forums are often ignored in favor of answers I feel are leading the user in a wrong direction, simply because the other person giving an answer had more red "bars" under their name.
    I have helped many users, and many of them have come back and thanked me.  However, none have marked my answers as correct or even helpful.  I would like to concentrate on helping users who are willing to mark answers as correct or helpful, so that those bars reflect the amount of help I am actually giving.  Where can I look to find out which users have a history of marking answers?
    Thanks;
    Amy

    Hi, Amy. I'm not sure why I'm persisting in this, but:
    This thread seems to have wandered off a bit.  Just so it's clear, I was asking a technical question (how to see who does and does not mark answers as correct)
    That wasn't clear...just to be clear in return:
    This forum provides no summary reporting of a user's marking of answers.
    However, if you are truly inspired, there are some things you can do.
    If you look at a user's page, under Stuff > Discussions, you will find a tabulation of the threads started by that user. E.g: http://forums.adobe.com/people/Amy%20Blankenship?view=discussions
    Those are, of course, the only threads that a user could have awarded points in. The tabulation shows which threads are designated as Answered () and which are not (). Whether a user marks a question as Answered is not the same as whether they award points, but I think you will find that there is a reasonable correlation.
    If you are even more interested, a script to open all those threads and determine whether they have offered Helpful or Correct answer designations is not very difficult, if you are experienced at writing tools that scrape web pages. Given that most users have less than 100 threads, it is probably not a violation of this site's terms of service (either implicitly or explicitly) to suck down those threads in an automated fashion, and certainly should have no appreciable effect on the server (a question one should always ask when considering automated retreival of data from someone's web server).
    So, to summarize: I) This forum software does not keep a running total of this information that is available to us II) You can get a pretty good proxy for it by taking a quick look III) You could write a simple script to calculate it for you with a little bit of work.
    Also, there is a moral hazard: Users who do not mark answers as Correct or Helpful are no less deserving of help than those that do. Many are unfamiliar with the cultural/social protocols of this site, and that should not be held against them. That is, however, merely my opinion, and certaily it is arguable.

  • I am a new ipod touch user; have gone through all the dowload/install stuff, plugged the device into my computer but ipod screen still shows plug in to tunes.  I am totally computer useless - how can I get my ipod to work, please?  Charles Jones.

    I am a new ipod touch user; have gone through all the dowload/install stuff, plugged the device into my computer but ipod screen still shows plug in to tunes.  I am totally computer useless - how can I get my ipod to work, please?  Charles Jones.

    You did install the latest iTunes (10.5) right?  If the problem was that iTunes does not see the iPod try:
    iPhone, iPad, or iPod touch: Device not recognized in iTunes for Windows
    or
    iPhone, iPad, iPod touch: Device not recognized in iTunes for Mac OS X

  • How can I see which roles or users have access to a table?

    How can I see which roles or users have access to a table?
    For a given table, how can I see the grants, who and what?
    Many thanks

    dba_tab_privs.
    Grantee can be a role or an user, as roles are fake users.
    Sybrand Bakker
    Senior Oracle DBA

  • Javascript with window.location.href no longer working in Content Editor in Sharepoint 2010 where users have IE8

    I have recently found that when using a Sharepoint 2010 Content Editor web part to house some Javascript that the window.location.href (or window.location) is not working when the end users have IE8 installed on their PC's.  We have confirmed
    that the window.location.href is working if the users are on IE7 or Google Chrome with the same Javascript.  In addition, we added alert() to the javascript to ensure that it was infact running, which the alerts appeared on the screen with no issues. 
    The result that I am receiving in IE8 is that when the window.location.href is set to the url that the user should be directed to, it simply refreshes the current page and leaves the user where they originally were.
    I have seen the posts to have my site setup as a Trusted Site, but this is not an option for our company as they defined all internal Sharepoint sites as trusted already.  Besides this, having all users go into their Internet Options is not really a
    solution but a means to annoy your users.
    What I am looking for is a permanent solution that I can make within my javascript that will work for both IE7 and IE8 users within a Sharepoint 2010 environment.  If anyone has any suggestions, please let me know.  Thanks in advance.
    Below is a snipet from my javascript code for review:
    <script type="text/javascript">
    function RedirectUrl() {
    alert('button pressed');
    var tb = document.getElementById("tbSearch").value;
    var cs = document.getElementById("sfield").value;
    var url = "";
    if (tb != "") {
    url = "FilterName=" + cs + "&FilterMultiValue=*" + tb + "*";
    if (cs == "Request%5Fx0020%5FID1"){
    alert("Request%20ID%20Search.aspx?" + url)
    window.location.href = "Request%20ID%20Search.aspx?" + url;
    else {
    window.location.href = "All%20Requests.aspx?" + url;
    else {
    return false;
    function ClearUrl() {
    window.location.href = "All%20Requests.aspx";
    </script>
    <br/>
    <span style="font-family: calibri; color: #000066; font-size: 14pt; font-weight: bold">Search</span>
    <br/>
    <span style="font-family: calibri; color: black">Search Field: </span>
    <select id="sfield" style="font-family: calibri; font-size: 10pt">
    <option value="Request%5Fx0020%5FID1">Request ID</option>
    </select> &#160;
    <span style="font-family: calibri; color: black">Search Text: </span>
    <input id="tbSearch" onkeypress="if (event.keyCode == 13) document.getElementById(&#39;btnSearch&#39;).click()" style="font-family: calibri"/>
    <button id="btnSearch" onclick="return RedirectUrl();" type="submit" style="font-family: calibri">Search</button>
    <button id="btnClear" onclick="return ClearUrl();" type="submit" style="font-family: calibri">Clear Search</button>
    <br/>
    <br/>
    <span style="font-family: calibri; color: #000066; font-size: 14pt; font-weight: bold">Search Results - All Requests</span>
    <br/>

    Hi,
    According to your post, my understanding is that the window.location.href not worked in IE 8.
    I think the issue
    is likely due to the value of your variables. If they contain special or invalid characters, those needs to be passed through
    encodeURIComponent before being assigned to window.location.href.
    http://stackoverflow.com/questions/18278777/window-location-href-not-working-on-ie
    http://stackoverflow.com/questions/6297291/window-location-problem-in-ie
    You can also use the following methods to check whether it works.
    Window.navigate();
    Winodw.history.back();
    Self.location.href;
    Top.location;
    Thanks & Regards,
    Jason
    Jason Guo
    TechNet Community Support

  • How many users have logged in the Enterprise portal

    Hello Expert,
    Please suggest..
    Feature required to monitor as how many users have logged in the Enterprise portal 7.0(Portal is Implemented with MDM), so that utilization can be known.
    Regards,
    Vidhanshi

    Hi,
    You can wirte the following code to get the logged in user's ID
    try {
          IWDClientUser wdClientUser = WDClientUser.getCurrentUser();
          IUser sapUser = wdClientUser.getSAPUser();
          IUserAccount[] acct = sapUser.getUserAccounts();
          String str = acct[0].getDisplayName();
          wdComponentAPI.getMessageManager().reportSuccess("user "+ str);
         } catch (WDUMException e) {
         // TODO Auto-generated catch block
         e.printStackTrace();
         } catch (UMException e) {
         // TODO Auto-generated catch block
         e.printStackTrace();
    You need security api for using it make sure that is present.
    [Find out who is login into the Portal|http://forums.sdn.sap.com/thread.jspa?threadID=1723807]
    Hope This is Help full for you!!!
    Best Regards
    Vijay K

  • Dimension security is not working if user have two roles in SSAS while connecting from Excel

    Hello Genius,
    I am facing the issue when user trying to connect the cube from excel if user have more than one role in ssas db.
    Role 1: Countryuser, I have implemented the dimension security with country
    dimension and  countrycode attribute.
    Role 2: CityUser,   I have implemented the dimension security with
    city dimension and  citycode attribute.
    If user is mapped to any one of above role dimension security is working perfectly according to the logic but mapped to both role, cube is exposing all the data in this case dimension security is not working.
    Please give me the solution to fix this issue or incase I am wrong kindly advice.
    Thanks
    Ganesh

    This is the expected behaviour as allowed sets in roles are unioned together.
    This is not a problem when your roles are restricting across a single attribute.
    eg.
    US_role = {[Geography].[Country].[USA]
    France_role = {[Geography].[Country].[France] }
    as someone in both roles ends up seeing {[Geography].[Country].[USA], [Geography].[Country].[France] }
    But when you have different attributes:
    NY_role = {[Geography].[City].[New York] }
    France_role = {[Geography].[Country].[France] }
    The first role is unrestricted on countries and the second is unrestriced on cities which is effectively:
    NY_role = {[Geography].[Country].AllMembers , [Geography].[City].[New York]  }
    France_role = {[Geography].[Country].[France], [Geography].[City].AllMembers }
    And when you union those two sets together you end up with:
    {[Geography].[Country].AllMembers , [Geography].[City].AllMembers }
    Which means that someone in both roles can see everything.
    So if you want to restrict someone to City = New York and Country = France you have to create a
    single role where both attributes are restricted. So if you have a lot of these combinations you will either have to create a lot of "combination" roles or look at dynamic security.
    The other thing that might work is make sure that you only give some users access to certain cities and others access to certain countries. It's the mixing of the two for a single person that causes the issues.
    http://darren.gosbell.com - please mark correct answers

  • Getting S.M.A.R.T. when trying to install Mountain lion. Hard drive works pretty well. I understand that many users have been facing the same issue. Has apple patched it yet?

    I'm getting S.M.A.R.T. error when trying to install Mountain lion. Hard drive works pretty well despite the Failing status. I understand that many users have been facing the same issue. My hard drive was/is working perfectly. Has Apple patched it yet?
    Has someone found a solution which is not replacing the hard drive which works just fine? Or Is anyone aware of a procedure that can force the installation despite the S.M.A.R.T error? Below details of my hard drive
    Thanks
    ST31******ASQ:
      Capacity:          1 TB (1,000,204,886,016 bytes)
      Model:          ST31000528ASQ                          
      Revision:          AP24   
      Serial Number:                      6V***5JR
      Native Command Queuing:          Yes
      Queue Depth:          32
      Removable Media:          No
      Detachable Drive:          No
      BSD Name:          disk0
      Rotational Rate:          7200
      Medium Type:          Rotational
      Partition Map Type:          GPT (GUID Partition Table)
      S.M.A.R.T. status:          Failing
    <Edited By Host>

    If you haven't done so, run Disk Utility  /Applications/Utilities
    to run a live verification.
    The drive may be ok at the moment, but that's not to say the drive may fail at anytime.
    Hopefully you have all your important data backed up just in case.

  • The user or users have been added successfully, but there was an error in sending the e-mail message. The server may not be set up correctly to send e-mail. To verify that e-mail is configured correctly, contact your server administrator

    I got this problem when I tried to configure out-going email and add an account to farm administrator group.
    I configure out-going email according to this website http://technet.microsoft.com/en-us/library/cc288949.aspx
    Here are the screen shots.
    The SMTP server and email accounts work out OK when I use Outlook 2010 to test.
    Anyone can help me about it? Thanks.
    Here is the log.
    09/20/2012 09:21:00.36 w3wp.exe (0x1F7C)                      
    0x1138
    SharePoint Foundation         E-Mail                        
    8gsf
    High    
    #160008: The e-mail address 'admin3.sharepoint@domain' contains illegal
    characters. df98555c-612f-4a58-9443-ab6e9a4fcc53
    09/20/2012 09:21:00.36 w3wp.exe (0x1F7C)                      
    0x1138
    SharePoint Foundation         General                      
    8kh7 High    
    Cannot complete this action.  Please try again.
    df98555c-612f-4a58-9443-ab6e9a4fcc53
    09/20/2012 09:21:00.36 w3wp.exe (0x1F7C)                      
    0x1138
    SharePoint Foundation         E-Mail                        
    7946 Critical
    Cannot complete this action.  Please try again.
    df98555c-612f-4a58-9443-ab6e9a4fcc53
    09/20/2012 09:21:00.36 w3wp.exe (0x1F7C)                      
    0x1138
    SharePoint Foundation         Runtime                      
    tkau Unexpected
    Microsoft.SharePoint.SPException: The user or users have been added successfully, but there was an error in sending the e-mail message. The server may not be set up correctly to send e-mail. To verify that e-mail is configured correctly, contact your
    server administrator.    at Microsoft.SharePoint.ApplicationPages.AclInv.SendEmailInvitation(EntityEditor picker, String subject, String message)     at Microsoft.SharePoint.ApplicationPages.AclInv.BtnOK_Click(Object sender, EventArgs e)
        at System.Web.UI.WebControls.Button.OnClick(EventArgs e)     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)     at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String
    eventArgument)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStage...
    df98555c-612f-4a58-9443-ab6e9a4fcc53
    The e-mail address I have tested it for several times and there is no problem.
    Anyone has any clue about this error?

    Hi.
    This I have seen before...
    It can be that the SMTP relay server is configured to only allow certain IP ranges or addresses.
    It can be that the firewall on the SP server does not allow for SMTP traffic (normally 25, for example for Exchange).
    It can be that there is an Antivirus on the SP server(Client AV) that prohobits the Timer service to send email from this server. I have seen MacAfee do this. Needed an policy change.
    If, its the builtin SMTP service you are using, check this link:
    http://blog.sharepointrx.com/2010/11/18/setting-up-the-iis-smtp-server-for-sending-email-from-sharepoint-2010-on-server-2008-r2/
    Check that and try again.
    Regards
    Thomas Balkeståhl - Technical Specialist - SharePoint -
    http://blog.blksthl.com
    Download the SharePoint Branding Project here
    Download the SharePoint 2010 Site Settings Explained here

Maybe you are looking for

  • Error while saving a policy retention

    I've created a SP 2010 workflow with SharePoint Designer. That way I could link it to a specific content type. Via a retention policy I'd like to start the workflow on a certain date. When I go and save the policy, I get an error. Just the standard "

  • For each help in JSP ?

    Hi all Does JSP support for each statement ?? Actually i need to cycle through each post variable like this in ASP for each tempvarname in request.form value1 = request.form(tempvarname) pass=pass&value1 next I am unable to do this JSP... Can somebod

  • Factory restore

    hi, I'm holding on to the above mentioned.(forgot is it 8930/8390) i do not know if there is still warranty or not. as i bought it 2nd hand. i did notburn any back up too. i am facing problem with system factory restore. tried F11 upon startup.(could

  • OBYA Settings for Intercompany Customers and Vendors

    Hi SAP folks, I have a small question on TC: OBYA We have 2 co codes (CC10 & CC20) . We have customer and vendor account with the same number 900CC10 in Co Code CC20 and  customer and vendor account with the same number 900CC20 in Co Code CC10 The re

  • How to automate the purging of archivelogs on primary when backing up from physical standby?

    Hi, When configuring archivelog backups to run from my Active Standby database (11.2.0.3) I am running into an issue where the archivelogs on the primary database are not getting purged. This is resulting in the archiver hanging on the primary. run {