Suppressing Authorization-Relevant Values in Variables

When a report has authorization relevant characteristic values, the values that have been assigned to that person are populated when the report is launched in the BI portal. For certain characteristics, this could be in the hundreds of values assigned to a person. What can be done to suppress these values?

Dennis
When you use a variable, ensure that it has an initial/default value. So when you execute your layout only the value [default] relevant to that characteristic first gets populated on the layout.
Then, Ensure that you have the variable as a drop down box in your WAD template so that the user can select other values if he desires so.
Srikant

Similar Messages

Users Authorization- Restrict value of one variable corresponding to other.

Dear Experts,
I have query regarding BEx Authorization for the given selection screen of any variable for any report :
I have two parameters/variables( Category and Sub Category) which needs to be passed from User. I want to restrict the value of second variable corresponding to the values passed in first variable. For e.g. : if i passed Category value -Engineering ,Sub Category variable should only show the value related to engineering only other than all the values in sub category field in the selection screen for the user.
Please suggest.

Hi Shikhar,
E.g. Category: Engineering , Arts , Commerce
Sub Categories for Engg. ECE, IT , CSE.
                               Arts : sociology philosophy etc
                               Commerce: economics, accountancy etc
Now Maintain authorization for Char. related to Engineering and create Auth. variable, follow this steps:
Transaction Code- RSECADMIN
Steps to create Authorization based on Division e.g. InfoObject    is 0DIVISION.
Check for 0DIVISION, it must be Authorization relevant checked, if not then maintain 0DIVISION and check Authorization relevant box.
Step 1: Create Analysis Authorization Maintenance using RSECADMIN T-Code, in that add 3 special characteristics i.e. 0TCAACTVT , 0TCAIPROV and 0TCAVALID, these are the mandatory Char. along with that add 0DIVISION for which you want to create Authorization, 0DIVISION details restrict value as 01 (EQ 01).
Step 2: Again goto RSECADMIN -> User tab-> Assignment, enter username (e.g. User1) which you want to restrict. insert Auth. obj. from step1.
Step 3: Now in Query designer, create Authorization variable for 0DIVISION, i.e. process type Authorization.
Execute That query with restricted user (e.g. User1) it will only show the data for Division = 01.
For reference: [http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9315]
Hope this will meet your requirement, let me know if further explanation required.
Regards:
Avinash

Authorization Relevant Infoobject restriction for particular value

Hi All,
We have infoobject - 0COMPCODE which is authorization relevant. In query designer authorization variable - ZAUTH1 has been created.
Now users want to restrict one particular Company Code (Ex- RU10) globally, so that none of the users will view this particular company code.
We can't restrict this in query designer. Users can select among the company codes in the input selection of the report.
Authorisations have been mantained in BW3.5 version
Need help on this urgently.

Hi Asish,
Two ways.
1. You can exclude the company code in the default values section, so that they would be able to view it in the list they see.
2. You can exclude it in the authorizations assigned to the roles of the users. Give all the company code values in the authorization, except this company code, so that since the auth variable is createed in the query, you woulld view only the company codes that are authorized.
Hope this helps.
Regards
Snehith.

Abort Could not determine a value for variable 0DAT from the authorizations

Hi All,
I encountered an error '/ Abort Could not determine a value for variable 0DAT from the authorizations\' when executing my query on a multiprovider in BW 3.5.
Can anyone help me in finding a solutionn to this issue.
Thanks,
Kartik.

Hi Kartik,
I am sorry as that note is for NW2004s. Please check if 0DAT variable installed from a business content? if not then I think thats the cause of the problem.
Hope this helps,
Bye...

Authorization Relevant Info Objects

Hi Experts,
In my Business scenario,Profit center infoobject is
authorization relevant for FI reports.In my FI reports,I have used profit center authorization variable.FI reports are working fine according to the authorizations.
In sales Report,users should be able to see all profit
centers(No Authorization needed for sales report)
In my sales Report,I have used value based non authorization variable.When I run the sales report,I am getting authorization error
How can I make profit center authorization relevant for only FI
Info Area?
Can Some one help me in solving this problem?
Thank you in advance.
Reward Points expected

Hi Senoy,
I suggest the following steps,
1. You should list all of Sales Report, after that you need identify all of InfoProviders of this sales scenarios.
2. In base of the InfoProviders sales scenarios, you need list all of InfoObejct authorization relevant of this scenario. In case of the "0PROFIT_CTR" is part of the InfoProvider sale scenarios, you need include in your authorization with the follow value "*" (total access) or ":" (acess agregation).
3. For avoid future problem, the InfoProviders sales scenario have to be different of InfoProviders FI scenario. Otherwise, you will have the same condition in both scenario with the 0PROFIT_CTR.
I hope help you,
Luis

Error-Specify a value for variable

Dear All,
We upgraded our BW system to BI 7 SP 15. We are getting following error when executing queries in Bex.
Specify a value for variable Company Code
    Message no. BRAIN629
Diagnosis
    The variable cannot be empty. You must make an entry in the variable
    maintenance for variable Company Code.
System Response
Procedure
    Enter a value. Use the search help (F4) if necessary.
Procedure for System Administration
Interesting thing is that this error is faced by only 2 users in all upgarded systems.
We created test user with same roles and we are getting error for these test users as well. All other users can run these queries without any problem. When we gave them sap_allprofile, it worked but I dont think this an authorization issue as these user can execute reports in web without any error.
Second interesting thing is that, I applied note 1085822. This solved the problem. But on next day while closing this issue formally we found it is not working again and giving the same error.
I checked other notes but these are not suitable for SP15.
Any pointer/help will be well appreciated.
Regards,
Niraj

Hi All,
Resolved this issue by giving authorization obj S_BDS_D value display.
Regards,
Niraj

Filter value for variable selection screen

Hi & help !,
This could be a tricky or an easy question, but it seems too hard for me !
I'm storing version in my cube, and have a report which shows informations for the version you select (with a variable = ZVERSION01).
ex : Version :
V01
V02
V03
V04
When report is executed i have my variable selection screen (for variable ZVERSION01) which give all version [V01 -> V04]. But i want users have no access to version V01 & V02.
Variable ZVERSION01 is "single selection", i tried to filter with Default Values screen or Characteristic Restriction screen but it doesn't work.
ex : caracterisitic restriction screen : VERSION = !V01 / !V02
default value screen : variable VERSION = ZVERSION01
Any idea?
Thx

Hi,
In BI 7.0 there is Anaylysis authorisation RSECADMIN transaction. That you can use here or normal role concept will also do.
What you need to do is grant authorisation to the users for V03 and 04 version only and create 'Authorisation' type variable on version in the query. (type of variable - it asks while creating the variable). This way users will only be able to see authorised versions only.
Note you have to make version infoobject as Authorisation relevent infoobject. ( in infoobject properties).
Let me knw if you have any doubt.
Regards,
Viren

Updating users profile when infoobject marked as authorization relevant

Hi All,
Consider a scenario where there are some projects in which perticuler infoobject is not authorization relevant but in some upcomming project the same infoobject needs to be authorization relevant.but when i marked this infoobject as authorization relevant then i need to manually insert this new authorization infoobject in each user profile. If there are more than 200 users available then it is not very good idea to include this infoobject in each profile manually. Is there any other way through which we can insert this infoobject in all user profile automatically.
Regards,
Deepak

Hi again.
Go to transaction se38 and create a program with the name ZCHANGE_APPEND_AUT.
Insert the following code:
REPORT ZCHANGE_APPEND_AUT                             .
TABLES RSECVAL.
DATA: T_RSECVAL TYPE RSECVAL OCCURS 0 WITH HEADER LINE,
      T_RANGE TYPE RSEC_S_AUTH_VALUES_RANGE.
SELECT-OPTIONS: ZAUT    FOR RSECVAL-TCTAUTH NO INTERVALS.
PARAMETERS:     ZOBJN   LIKE RSECVAL-TCTIOBJNM DEFAULT '0TCAIPROV'.
SELECT-OPTIONS: ZVALUES FOR RSECVAL-TCTLOW NO INTERVALS.
LOOP AT ZAUT.
   LOOP AT ZVALUES.
      T_RANGE-IOBJNM = ZOBJN.
      T_RANGE-SIGN = 'I'.
      T_RANGE-OPT = 'EQ'.
      T_RANGE-LOW = ZVALUES-LOW.
      CALL FUNCTION 'RSEC_INSERT_FLAT_AUTH'
         EXPORTING
            I_AUTH = ZAUT-low
            I_RANGE = T_RANGE.
       CLEAR T_RANGE.
    ENDLOOP.
ENDLOOP.
Activate the program.
Now when you run this program you'll be prompted for 3 parameters.
The first is a list of Analysis Authorizations names that you wish to change.
The second is the name of the InfoObject you want to insert to those authorizations, by default is 0TCAIPROV but you can change it to whatever you want
The third is a list of values that will be inserted for those InfoObject.
Therefore imagine that for authorization ZZZA, ZZZB and ZZZC you want to insert the object 0CUSTOMER with the values xpto, yyyy, and wwww.
You would in this case run the program with the following parameters:
AUT:
ZZZA
ZZZB
ZZZC
OBJN:
0CUSTOMER
VALUES:
xpto
yyyy
wwww
Please assign points,
Diogo.

SAP BI authorization relevant

All,
I tried to create a custom authorization object for an infoobject otcaactivity (just for eg) .Before that I used RSD1 to make that infobject authorizartion relevant.But after that I inserted the infobject which is made as auth.relevant to the custom object and tried to assign value for the intervals.I got an message as the characteristic value is not authorization relevant...why is that?I tried in sand box..is it any way related to info cube which is not yet created for the particular info object in the sand box thats the reason I get error message ?
Whats the reason to secure characteristics and key figure values?

Hey,
Activating business content mean making authorization relevant?
For BW3.5 there is no need of the mandatory info objects?(0TCAACTVT ,0TCAIPROV ,0TCAVALID ,0TCAKYFNM)
Whats the difference between securing through reporting authorization object and securing through BI specific object??
Thanks

Value for variable *** hierarchy Version is invalid

hi ALL
for one Of the user, when he tries to run the report he is freequently facing this situation. he is getting the error like : "Value for variable *** hierarchy Version is invalid" . but the same report is working for other users.
The starange part is . those variables are not mandatory selections, they are userentry optional values.
we tried with authorization team also . that is not the probelm.
how can i solve this...
any ideas?
Praveen.
Message was edited

Praveen,
Please check if there is any "Personalization of variable" setting for that variable.
Raju

Authorization Relevent Scenarios

Hi All,
I need a help of your suggestins to get a proper way to write my thesis over New Bi Authorization topic.
I want to ask you what are the possible authorization scenarios you can think according to your experience.
for example
I have few of them
1.Restriction to the one value of an InfoObjects.
2.User has access to two projects in one project he has access to few material plant while in other project he has access to all material plant.
3.You have for an InfoObject the checkbox authorization relevant has activated. What are the effects of this on other projects.
4.How Authorization to the hierarchy nodes are defined.
5.How combination of value authorization restriction and hierarchy authorization is working.
can you think more of such scenarios.
Please forward me as meny possible authorization scenarios you can think.so that i can implement these scenarios as an prototype and it will be helpful to me to write my master thesis.
Hope for the positive and quick answer from your side.
With Best Regards And Thanks,
Deepak

Well,
User has access to one key-figure for one project and all key-figures for another project;
User has automatic filled authorization while executing a query;
User has his/her authorization automatically filled in a user exit while executing any query;
User has access to company code has a navigational attribute authorization with for example 0PLANT__0COMP_CODE instead of 0COMP_CODE and even for example 0PLANT is not marked as authorization relevant;
User has access in one project to view the data (executing queries) and in another project he/her has access to plan the data (write data);
Diogo.

List Database Table Infoprovider, InfoObject, Flag Authorization Relevant

Dear Expert,
Im working with SAP BI 2004s user management & authorization. I have several objects that Ill have check. I dont like check one by one, I like to check for the SE16 transaction, for this reason, I need to know what is the database table have content Infoprovider by InfoObject (Characteristics) which each have the flag authorization relevant.
Moreover, in the same idea, which database has content Queries by Infoprovider which authorization variable?
Thank for all,
Luis

For your first question:
In addition to be above mentioned table, RSDCUBEIOBJ will give the information about Infoprovider and all the Infoobjects within this infoprovider.
1. Find all the authorization relevant Infoobjects from RSDCHA table and copy them.
2. In the table RSDCUBEIOBJ, paste all the Infoobjects obtained from 1 in the field "Infoobject". The result will be list of Infocubes and their corresponding authorization relevant Infoobjects.

Mark InfoObject authorization relevant

Dear Community,
we've activated "authorization relevance" in one of our frequently used InfoObject and added it to an authorization object.
We've the situation that the field information of this InfoObject disappears in reports.
(The authorization object is nowhere marked as relevant for a DataProvider)
Am I right that this isn't an expected bw system behavior??!
Thx for some tips or remarks in advance.
br, michael

Sounds very peculiar...
Did you add the authorization object to any roles? Did you specify any restrictions on values?
For an overview of how we chose to implement security, see the following thread:
Re: Auth Relevancy Not Working
Hope this helps...
Bob

BPS: Value of variable Current variable cannot be determined

Hi
I have a BPS app. where I need to get current month. I've created a variable with replacement type User Exit and developed a function module that returns current month based on sy-datum.
However when I use the variable in a planning function it returns the error
'Value of variable Current Calendar year/month ( ZHCCURM ) cannot be determined' and in the diagnosis is says 'The replacement type 'user-specific values' is set up for the variable, but no values are maintained for your user ID. In addition, the indicator 'Input allowed by user' is not set for the variable. This means the variable cannot be used'
So it seems that the system think I have a variable w. replacement type 'User sepcific values'. We're on SAP NW 7.0.0 and I looked for notes but cannot find any relevant.
Anyone seen and solved this problem please let me know.

Import
I_AREA     TYPE     UPC_AREA-AREA                               Planning Area
I_VARIABLE     TYPE     UPC_VAR-VAR                               Variable
export
ETO_CHARSEL         TYPE      UPC_YTO_CHARSEL             Characteristic Selections
FUNCTION XXXX.
""Local Interface:
*" IMPORTING
*"     REFERENCE(I_AREA) TYPE UPC_AREA-AREA
*"     REFERENCE(I_VARIABLE) TYPE UPC_VAR-VAR
*" EXPORTING
*"     REFERENCE(ETO_CHARSEL) TYPE UPC_YTO_CHARSEL
DATA: wa_charsel     TYPE upc_ys_charsel,
              v_curr_month    TYPE NUMC4,
                 v_subrc          TYPE sy-subrc,
                 i_varsel          TYPE TABLE OF upc_ys_api_varsel,
            wa_varsel          TYPE upc_ys_api_varsel.
CALL FUNCTION 'API_SEMBPS_VARIABLE_GETDETAIL'
    EXPORTING
      i_area     = i_area
      i_variable = 'ZCURRYR'
    IMPORTING
      e_subrc    = v_subrc
    TABLES
      etk_varsel = i_varsel.
IF v_subrc = 0.
    READ TABLE i_varsel INTO wa_varsel INDEX 1.
    IF sy-subrc = 0.
      v_curr_month = month from system date.
      wa_charsel-chanm = '0calmonth'.
      wa_charsel-sign = 'I'.
      wa_charsel-opt = 'EQ'.
      wa_charsel-low = v_curr_month.
      APPEND wa_charsel TO eto_charsel.
    ENDIF.
ENDIF.
ENDFUNCTION.

Value of variable cannot be determined

Hi Guys,
We are using authorization values for the BPS planning template. The user gives the value for COSTCENTER, the background checks the authorization and fills the rest of the values.
The variable is set with check on restrictions of values required by the user.
The variables are working in the UAT system but not in the development for a ID with similar authorizations. The error message says
===================================================================
Value of variable ZCOSTCNT cannot be determined
Message no. UPC_FW149
Diagnosis
You are using variable ZCOSTCNT, but the system cannot determine the value of variables. The replacement type 'user-specific values' is set up for the variable, but no values are maintained for your user ID. In addition, the indicator 'Input allowed by user' is not set for the variable. This means the variable cannot be used.
System Response
The action desired by you cannot be executed.
Procedure
Contact your administrator in order to have one of the following changes carried out:
Input of values for variable ZCOSTCNT and your user ID.
Set the indicator 'Input allowed by user' for variable ZCOSTCNT. This means you can enter the desired values yourself when you call up the function. You can possibly also use another variable for the characteristic.
====================================================================
I dont see any difference in the systems excpet the hierarchies used in the authorization object.
CaValue of variable ZCOSTCNT cannot be determined
Message no. UPC_FW149
Diagnosis
You are using variable ZCOSTCNT, but the system cannot determine the value of variables. The replacement type 'user-specific values' is set up for the variable, but no values are maintained for your user ID. In addition, the indicator 'Input allowed by user' is not set for the variable. This means the variable cannot be used.
System Response
The action desired by you cannot be executed.
Procedure
Contact your administrator in order to have one of the following changes carried out:
Input of values for variable ZCOSTCNT and your user ID.
Set the indicator 'Input allowed by user' for variable ZCOSTCNT. This means you can enter the desired values yourself when you call up the function. You can possibly also use another variable for the characteristic.
====================================================================
I dont see any difference in the two systems, excpet the hierarchy for cost center used in the authorization object. When I checked RSECADMIN, I can see the ID is properly authorized
Appreciate if anyone can throw some light on the issue.

RSECADMIN will not help with this issue: the system is complaining about User-specific authorization within BPS.
You can check the athorization from the Planning Workbench: look at the entries for the ZCOSTCNT in your planning area for the required user. If necessary add the required authorization; though you need exclusive access to the planning area to do it from the workbench.
You can also check the assigned values by browsing the table (from Tcode SE16) UPC_VAR_CHA_SEL . It possible also to maintain the values from text file uploads using program Z_BPS_VAR_UPLOAD (from "How to ... Upload User-specific Variable Selectins in BW-BPS)., which is useful in the live environment when there are many settings to maintain.
Stephen

Suppressing Authorization-Relevant Values in Variables

Similar Messages

Maybe you are looking for