Substitution Variable in Security Filter

Hi,
my filter looks like below.
Write : @idesc("Accounts"),Oct,"07 10 + 2",@idesc("SiteName")
here 07 10 + 2 is the version name which am using. the same version is used in so many security filters.
i want to replace this by the substitution variable name CURR_VER.
is it possible to use the substitution variable name in a security filter (s)??

What version of Essbase are you using? In System 9 (9.2 and higher I think) variables are allowable in filters and formulas. In version 7 and below, they are not

Similar Messages

Substitution variable and security

What is the minimum security a user can have in order to change substitution variable value.Apart from appman, I understand that MaxL can be used to manage substitution variables. What is required to install MaxL? Any server based solution, anyone investigated?

I believe it depends on the scope of the substitution variable. DB designers can change variables at the DB level, app designers at the app level, supervisors at the server level.As to the rest of the question I plead blissful ignorance. :)Regards,Bruce

Issue with write Security filter in ASO 9.3.1

Hello All -
I'm having a strange security filter issue in system 9.3.1 ASO cube. We've the native users for the ASO cube and created several write security filters based on cost centers in that cube.
For example, the below security filter sometime works, and sometime not:
Write "Adjustments", @RELATIVE ("S532179", 0), @RELATIVE ("S587724", 0), @RELATIVE ("S525701", 0)
There are total 8 standard dimensions in the cube. I tried all possible combinations to make it work constantly, but it doesn't. Even modified the filter like below so that it has all dimensions (using LEVMBBRS, IDESCENDANTS, RELATIVE) , still users can't load data at level 0 members.
Write @LEVMBRS ("Chart of Accounts",0),@LEVMBRS ("Full Year",0),@LEVMBRS ("Business Unit",0),@LEVMBRS ("Fixed/Variable",0),@LEVMBRS ("Source",0),@LEVMBRS ("Products",0),@LEVMBRS ("Scenario",0),@LEVMBRS ("Cost Center",0)
It looks like the user and filter association is not working. If I give the user direct write access to the cube (bypassing filter totally), the users can write fine. Please help!

I didn't know that the logs didn't work; I tested it and they are not generated for ASO updates in 9.3.1. I didn't see any other setting that would cause them to be created; my guess is that the logs are created based on block manipulations that Essbase does internally using BSO. As there are no blocks in ASO then the same algorithm doesn't apply.
We log Essbase changes in our Dodeca product but we use a different algorithm. We evaluate the update in our server before committing the changes and generate a relational log that has the datapoint information plus the old value, new value and standard 'who' information for the person making the update.
Tim Tow
Applied OLAP, Inc

Problems using substitution variable in Web Analysis

Dear all,
I have a Web Analysis report that I need to show a raking table with the current month.
For that I create a variable in Essbase that is updated with that date (E.g.: varCurrentMonth).
After that I use it as my substitution variable to filter my date dimension in a report data source (E.g.: Scr5, row: product, column: date dimension & measure):
2008 (current month)
Product $ qty.
AAA 100 10
BBB 90 7
CCC 80 5
The problem is that in our cube we need to use an alias in every dimension not to have duplicate members (E.g.: DT.Date, MS.Measure, PD.Product, etc). And when we use it we need to set up the variable in Essbase using that alias (E.g.: DT.Feb/05/08). And if we use that variable as a substitution variable in the report data source the label displayed is the DT.2008 and not 2008 as expected.
Does anybody have an idea how to solve that?
Many thanks,
Thiago Gabriel

You usually get this error message if you are trying to assign a value from a sub var to a member that does not exist.
e.g. trying to put FY08 which is a year member against a period dimension
or trying to use a sub var of FY09 which does not yet exist in the essbase, so say you added a new year in planning FY09 and used the sub var in the form but have not refreshed the database then it would fail because the year would not have been pushed down to essbase yet.
or the value of the subvar does not match a member name exactly
or using a sub var name that does not exist in essbase, e.g. using &nextYear but the sub var has not been created in essbase.
You can definitely use subsitution variables in columns in the version you are using and prior version.
Cheers
John
http://john-goodwin.blogspot.com/

Sharing complex substitution variable values between ASO and BSO databases

We have ASO and BSO Essbase database member names with spaces in, and need to store some of these member names in substitution variables. However, this has to be done differently for ASO and BSO, due to calc script syntax requiring double quotes and MDX requiring square brackets. For example:
ASO:
&CurWeek value = Week 1
MDX: [&CurWeek]
BSO:
&CurWeek value = "Week 1"
Calc Script: &CurWeek
As a result, the substitution variables cannot be shared between the ASO and BSO cubes, since the BSO variable value requires double quotes due to the space in the member name.
Is there a way to get the above to work with both ASO and BSO? Can the double quotes be escaped in calc script syntax? Or can the double quotes be removed in the MDX formula?

Hi TimG,
Apologies for such a late reponse to this, genuinely haven't had a spare second to reply until now!
Yes, I suspect a complex alias name may be the best solution here, and to remove the spaces from the actual member names.
I was not aware of the latter part at all. My colleague has confirmed as much on this too - DBAG 11.1.2.1 pp117 & 118:
"Note: If a substitution variable value is numeric or a member name starting with a
numeral or containing the special characters referred to above is to be used both
in MDX and non-MDX situations, create two substitution variables, one without
the value enclosed in quotation marks and one with the value in quotation marks."
"To ensure that a new substitution variable value is available in formulas, partition definitions,
and security filters, stop and restart the application. All other uses of substitution variables are
dynamically resolved when used."
This last paragraph is the most concerning since we were planning to be able to update substitution variables values and then access the new values from calc scripts and formulae instantaneously. This quirk is unexpected and a little inconvenient. We may have to look at scheduling a change of substitution variable value overnight, followed by a stop/start of the app ready for the next day, and to work around needing to access changed values instantly.

Substitution Variable in Data Load Rule

Hello,
Is it possible to filter selected record or rejected record from a flat file using a substitution variable ?
I use the v11.1.1.3.
Thanks
Rgds,
Pierre

A quich test on sample basic says no. I exported the data in column format and cleared the data. Then I created a load rule with selection criteria of a substitution variable and itdid not load any rows. I then changed the sub variable to an actual month and it loaded fine

Where does substitution variable meta data stored?

where does substitution variable meta data stored in the essbase folder?<BR>Thanks<BR>Arun

I believe substitution variables are stored in the Essbase.sec (Security file).

Mitigating SQL injection when forced to use substitution variables

The 3rd party software that I use has exactly one way of allowing users to specify runtime parameters: Substitution variables.
The scripts are executed using SQL*Plus. I'm looking for ways to secure this.
Please don't say "Don't use substitution variables" - read above, it's the only way this software works.
My first thought was something like this:
var myvar varchar2(30)
exec :myvar := '&user_input';That's no good. What if the user specifies "X'; execute immediate 'drop table sometable" Then we get
exec :myvar := 'X'; execute immediate 'drop table sometable';Again, no good.
I thought perhaps something like the following would work:
exec :myvar := dbms_assert.noop('&user_input');but then again, a malicious user could specify "'); execute immediate 'drop table sometable'; dbms_assert.noop('"
I'm open to suggestions.
What can I do to sanitize substitution variables?
Thank you!
Edited by: krissco on Jan 30, 2013 3:02 PM

You could use:
var myvar varchar2(30)
exec :myvar := DBMS_ASSERT.ENQUOTE_LITERAL('&user_input');For example:
SQL> exec :myvar := '&user_input';
Enter value for user_input: X';execute immediate 'begin dbms_output.put_line(''XXXX'');end;
XXXX
PL/SQL procedure successfully completed.
SQL> exec :myvar := DBMS_ASSERT.ENQUOTE_LITERAL('&user_input');
Enter value for user_input: X';execute immediate 'begin dbms_output.put_line(''XXXX'');end;
BEGIN :myvar := DBMS_ASSERT.ENQUOTE_LITERAL('X';execute immediate 'begin dbms_output.put_line(''XXXX'');end;'); END;
ERROR at line 1:
ORA-06550: line 1, column 48:
PLS-00103: Encountered the symbol ";" when expecting one of the following:
) , * & = - + < / > at in is mod remainder not rem =>
<an exponent (**)> <> or != or ~= >= <= <> and or like like2
like4 likec as between from using || multiset member
submultiset
The symbol ")" was substituted for ";" to continue.
ORA-06550: line 1, column 110:
PLS-00103: Encountered the symbol ")" when expecting one of the following:
* & = - + ; < / > at in is mod remainder not rem return
returning <an exponent (**)> <> or != or ~= >= <= <> and or
like like2 like4 likec between into
SQL>SY.
Edited by: Solomon Yakobson on Jan 30, 2013 8:28 PM

Change substitution variable

Hi !
I would like to know, how we can change a substitution variable without the EAS, and MAXL (not adapted to the environment) ?
Has anyone an idea??
Thanks

Thanks for your answers.
In the case of EAS, because some users do not have security access.
I asked this question for different reasons :
- Improve my personnal knowledge
- Limitation changes VBA scripts, drop-down list, etc
- Improved security management
To be honest, the VBA scripts to use Maxl is already ready ;)

Essbase Substitution Variables

Hi All,
I went through the docs. but not able to find an answer to the following query.
What is the maximum number of substitution variable that we can create for an application??
We use nearly 30 variables for a application to handle security. So i wanted to know whether there is a limit for the variables?
Your inputs would be of great help. Thanks!!

I can tell you in my 12 years with Essbase, I have never heard of anyone having issues using as many subvars as they need. Your best bet is to just go ahead and just try them out. To create them should not take much time at all.
John Conlee
Oracle Practice Manager - Analytic Vision

Can we use Substitution variables in MAXL?

Hi,
Can we use substitution variables in MAXL script?
I have to run this MAXL command for clearing a slice of ASO cube on V11.1.1.3.
alter database Apname.DBname clear data in region 'CrossJoin({[2009]},{[Dec]})';
I am planning to use Current_year & Current_month variables instead of hardcoding 2009 & Dec as I have to use this everymonth to clear the current months data.
If it is allowed, what is the syntax?
Is there any alternative apart from substitution variables?
Appreciate your thoughts.
Thanks,
-Ethan.

You would just use ampersand and the variable name instead of the hard coding e.g. &yearVar &periodVar.
Not tried it on aso clears but in theory it should work as ...'CrossJoin({&yearVar},{&periodVar})';
just change yearVar and periodVar for your substitution variable names.
Cheers
John
http://john-goodwin.blogspot.com/

Use varialbe as a value in substitution variable

Hi there,I incrementaly update my cube day by day.And I set a user variable in autoexec.bat to get the current date,eg '2003-06-23'.Could I use such variable as a variable's value in substition variable ?My platform is 6.5 on w2k.Regards,luau

You can use that in a MAXL script to set the substitution variable.the MAXL script would be something like:Alter database $4 drop variable $5;alter database $4 add variable $5 $7 ;where: $4 is the app.cub $5 is the substitution variable name $7 is the value of the subs. variableRich Sullivan - Beacon Analytics

[OBIEE 11g] Enforce star-schema without security filter?

I have imported my first OLAP cube using the instructions <a href = 'http://www.oracle.com/webfolder/technetwork/tutorials/obe/db/11g/r1/olap/biee/createbieemetadata.htm'>here</a> and have applied the necessary security filter to force the star join between the cube and dimension views. However, the security filter does not apply to users in the BI Administrator user group. Is there any way to do this without a security filter, or somehow apply the security filter even when the user is an administrator?
Edited by: islan on Jan 22, 2013 7:56 AM
Edited by: islan on Jan 22, 2013 7:57 AM

The link in your first posting points to the old-way of creating OBIEE metadata for OLAP objects.
Starting with OBIEE 11.1.1.5, it is much simpler as Oracle-OLAP is one of the data sources in BI-Admin Tool.
So do not use the old way.
Start with this doc:
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/bi/bi11115/olap/olap.htm
For your other issue, you need this troubleshooting doc:
http://www.oracle.com/technetwork/database/options/olap/troubleshootingbieeconnections-504856.pdf
Note that even though it says OBIEE 11.1.1.5, the above two docs are applicable to 11.1.1.6 and future releases.
For security, you should define it in OBIEE instead of doing in OLAP.
.

How to use a substitution variable in a load rule?

I need to use a substitution variable in a load rule in a column, as I will receive a parameter to fix the Month and Year values within the data loading, could somebody tell me if this is possible. I put an expresion "&Yearproc" in the column value but it is not working.

If you're a member of ODTUG (or even if not, you can sign up for an associate membership for free) you can download Glenn's presentation from 2009 Kaliedoscope "Little Used Features of Essbase (Like Data Mining and Triggers)" -- there is a section in that presentation on substitution variables -- he does a really good job in showing how this works.
Go to: www.odtug.com, then Tech Resources, then Essbase/Hyperion, and search for Schwartzberg. Currently it's the ninth presentation on the list -- I think this changes based on popularity of downloads.
Regards,
Cameron Lackpour

Error When Prompting for Substitution Variable

Hi - I'm receiving an error when I try to run the following using the substitution variable - but only when I enter a string; when I enter a numeric value it runs fine.
DECLARE
    l_SCR_Info            VARCHAR2(50) := '''SCR'||&SCR_NUM||'-'||'''';
begin
dbms_output.put_line(l_SCR_Info);
end;Here is the error I receive when I supply a string value when prompted:
ORA-06550: line 3, column 52:
PLS-00201: identifier 'AB' must be declared
ORA-06550: line 3, column 27:
PL/SQL: Item ignored
ORA-06550: line 10, column 22:
PLS-00320: the declaration of the type of this expression is incomplete or malformed
ORA-06550: line 10, column 1:
PL/SQL: Statement ignoredCan anyone shed some light on what I'm missing here?
Thanks!
Christine

Hi,
It looks like you just want one string there:
l_SCR_Info            VARCHAR2(50) := '''SCR&SCR_NUM-''';Remeber how substitution variables work: SQL*Plus replaces them with values before sending the code to the back end to be compiled.
If you give a value like AB for the variable, the code you posted is equivalent to:
     l_SCR_Info            VARCHAR2(50) := '''SCR'|| AB ||'-'||'''';by the time it reaches the compiler. AB is not inside quotes, so the compiler looks for a variable or function called AB.
If you gave a number:
     l_SCR_Info            VARCHAR2(50) := '''SCR'|| 123 ||'-'||'''';there's no problem; the compile knows what the literal number 123 is.

Substitution Variable in Security Filter

Similar Messages

Maybe you are looking for