To restrict a object to a particular Group at the Universe level

Hi,
I have a object which should be restricted only to a particular group at the universe level.So when i define the universe we have to have explicit security that will restrict access to this object information from reports and from ad-hoc queries.I should restrict the object only to the particular group by a role based security.
Please help me out in this case.
Thanks in advance,
Madan

Hi Madan,
Please follow the below steps:
(In Designer)
1) Open Island Resort Marketing universe or any universe in Designer.
2) Goto Tools -> Manage security -> Manage Access Restrictions.
3) Click on New option - > Give the Restriction name - >click on Rows tab - > Click on Add button (New Row Restriction window comes) -> give table name For example:"Resort_Country" in the Table text box, under the Where Clause "Resort_Country.COUNTRY = @Prompt ('Which country?u2019,u2019 A',, MONO,FREE)"-> Click OK -> Click Ok.
4) Click on Add user or group - >Select the user ->Ok.
5) Click on Apply -> Click OK.
6) Save the universe and export it into the repository.
7) Cretae the new report (webi/deski) from the user the one who belongs from this group.
Hope above steps will helps you.
Regards,
Deepti Bajpai

Similar Messages

To restrict a object to a particular Group in the Universe

Hi,
I have a object which should be restricted only to a particular group.So when i define the universe we have to have explicit security that will restrict access to this object information from reports and from ad-hoc queries.I should restrict the object only to the particular group by a role based security.
Please help me out in this case.
Thanks in advance,
Madan

Hi Madan,
U can restrict the Object to Particular group or User
In designer go to tools menu and click on manage security and
manage security restictions here u can add new restriction and
as well as add user or group.

Some objects are no longer available in the universe.(Error: WIS 00001)

We are in the process of upgrading BOXI R2 to R3.1 SP3. Setup, configuration of BOXI R3 on new machine is done. And migrated the reports, universes, users, groups and all repository objects with Import Wizard. everything seems good except few Webi reports pointing to wrong universes and getting the below error message.
"Some objects are no longer available in the universe. See your Business Objects administrator. (Error: WIS 00001)"
1) I deleted the particular report from destination and re imported it but still same issue.
2) deleted the file from Input file store and re imported it still same error I'm getting.
Gurus, Please help me..
Thanks,

if the issues is with one or two reports i would've tried manually editing each report, but here we've this issue with 20+ reports so far..
Just pointing it to right universe won't work, I've to add the missing objects as well. So Its like developing new report.
Thanks!

Error : WIS 00001 - Some objects are no longer available in the universe.

Hi ,
I have performed some manual actions in OLAP universe i.e move and rename of objects. Object works fine when i drop them in "Result Objects" pane.If the same object i drop in "Query filters" and if i select filter option -'value(s) from list' i get the below error:
Error - "Some objects are no longer available in the universe. See your Business objects administrator. (WIS-00001)".
Is it something to do with manual action performed in universe? Please help me ....
Regards,
Pallavi

Hi,
For the objects which you are getting error, do the following in designer
1.select the objects -> go to properties ->check for LOV options i.e if it is disabled then you want get those values so click on edit -> it goes to lov query panel -> run the query and check the lov's for the object-> check export with unv-> save the object n unv & Export the unv->then try it in your report creation.
Cheers,
Suresh Aluri.

Restricting data entry to a particular language in the form

Hi,
I created a multilingual form in which all the fields of the form are in a particular language . Now am trying to restrict data entry in the form to that language at the client side only . Say if it is a form in french, can we restrict the data entry to french only . The approach i was trying to implement was adding a script against the change event of all data fields and see if the characters lie in the range of the language unicode character set . But have not been successful in it yet . Can anybody help me find some way or provide any sample for it ?
Thanks

Hello, I'm German
Probably you can restrict the characters used for text entry, so for example ü is allowed in the German form but not in French.
But you will NEVER be able to restrict the users staying only writing French in French forms 100%.
1) You sometimes, not often, do encounter letters that are not typical for the language. (Though it can appear in any kind of word, it's quite regular for names.)
2) Let's say I fill the French form. I encounter a problem when I type in the word "Müller". This word wouldn't be French at all. The text will be delted and probably given an error message. Well... I learn out of this error message. Next time I'll type Mueller. ^^
(I knew several pages were people were restricted to talk English by forbidding letters that were not used in English very often... That didn't stop us violating that rule. The only error that really bugged us wasn't the restriction in not using letters that don't exist in English but the "please don't swear or insult so." error that kept appearing for ex. when we used the German word for "that" (= "dass"). They just didn't like the last 3 letters.)
3) Many countries have the same or include other countries unicodes. For example English could be written in the German form or in the French form.
4) You can't get out the syslanguage as far as I know. This would be a great hint which language the person is using.
5) I don't think you can use the spellcheck in any way... great violation against spellchecking could also be a hint for another language.
I know a quite big internetcommunity which did try to accomplish the same as you do. After about 2 years and a lot of experiments they stopped their efforts and were content by popping up the random error-messages warning that you don't have to insult, just like those other communities mentioned above. ^^ (Though they tried to restrict the insulting parts to the language used that didn't work out. Too many people knew how to insult in other languages ;D or which words were similar to insults.)
People just never do what they are supposed to do and are quite nasty finding workarounds...
My advice to you would be:
Don't make the effort.
Sorry for not being able to provide you with a solution, but the opposite.
Lisa

How to avoid seeing data for a particular member in the row level

Hello,<BR>I am using Essbase. In that i am having members like taks n/a, demand n/a. Purpose of these members are, if i load data for demand, task wont have data so i am mapping to task n/a.And same for the task loading.I am using alphablox for reporting and report script for retriving the data.So, if i select the task n/a and demand n/a then some value will be existing for this. Is there any possibility to remove this from report.I mean while seeing in the report, it should not get this member and respective value for display and also avoid taking this data for any manipulation.I know RESTRICT for column level data. Is there anything for row level restrictions.<BR>Please help me on this.<BR>Regards<BR>R.Prasanna

Hi,
Into the rule containing the Color metadata, you can restrict the values of the list.
In "Has restricted list and pane", list the values 1, 2 and 3 (new line for each value) :
1
2
3
Romain.

Group at Universe level

Hi,
How do I group on a field at the Universe level? I created a derived table in the Universe and need to group by a database (SQL) field. I added ORDER BY clause and the field name at the end of my select and it throws errors when I parse. Please advise. Thanks in advance for the help!

What is the exact error you get? Exception: DBD, [Microsoft][ODBC SQL Server Driver][SQL Server]Statement(s) could not be prepared.State:42000
Which kind of database do you fetch data from? SQL DB
Is it possible to post the SQL statement of the derived table here? I changed the table, database name, and field names as an example, and the select parses ok - it's when I added the Order by clause.
SELECT TestTable1.number, TestTable1.open_date,
TestTable1.completed_date,
TestTable1.level,
TestTable1.group,
TestTable1.description,
TestTable1.region,
TestTable2.type,
TestTable2.update_date,
TestTable2.update_desc,
TestTable2.ID
FROM Test.dbo.TestTable2 TestTable2 INNER JOIN Test.dbo.TestTable1 TestTable1 ON TestTable2.number=TestTable1.number
WHERE
(TestTable2.update_date>=DATEADD(mm,DATEDIFF(mm,0,getdate())-1,0)) AND TestTable2.update_date<DATEADD(mm,0,DATEADD(mm,DATEDIFF(mm,0,getdate()),0))

How to Apply Row level restrictions On objects

Hi All,
I am working on universe designer(BO 3.1) .....
I would like to apply row level restrictions on a cloumn of table based on the user who is running the report .
can any one please help me on this..
Thanks in Advance.............

Hi
Universe access and row-level security can also be managed at the group or individual user level from within the design environment.
Find the below video row level restrictions
http://www.youtube.com/watch?v=6yM0OLK6QlI
Create a data security profile that restricts access to specific rows: Information design tool 4.x - YouTube
Implementing row level security in IDT using Data Security Profile
And You cannot set row-level security authorizations in an OLAP universe.
User security can be defined at the most granular level for the following content objects.
Folders and sub-folders
Reports
Categories
Events
Program Files
Publications

Restricting People Picker of "Person or Group" column to Site Groups only

Hi,
I am working on SharePoint Online 2013 and I have created a column - DocOwner with "Person or Group" type in document library. In the site collection there are 4 groups lets say - A,B,C,D. When user creates a new item (document set), in newform.aspx,
I want to restrict the people picker of "Docowner" column to only Site groups, as currently it is showing all users who are there in SharePoint online.
I read this article - http://office.microsoft.com/en-in/sharepoint-server-help/site-column-types-and-options-HA010302196.aspx#_Toc277149829.........where they are saying that we can limit the people picker to site users only.
How this can be achieved using OOTB in SharePoint 2013 Online ?
Vipul Jain

You can create a workflow to execute CSOM which will verify group membership details and update it to choice column
http://stackoverflow.com/questions/23432665/sharepoint-online-csom-associated-site-groups-associatedmembergroup-associatedow
http://sundarnarasiman.net/?p=497
namespace GetUsersInGroupCSOM
class Program
static void Main(string[] args)
//Replace it with the url of your tenant or your site-collection
string SiteUrl = "https://yoursite.sharepoint.com";
System.Uri oUri = new System.Uri(SiteUrl);
using (ClientContext oClientContext = new ClientContext(SiteUrl))
//Replace it with your user id for SharePoint Online
string UserName = "[email protected]";
//Replace it with your password
string Password = "yourpassword";
//Create a SecureString object from password string, needed for SharePointOnlineCredentials class
SecureString SecurePassword = GetSecureString(Password);
oClientContext.Credentials = new SharePointOnlineCredentials(UserName, SecurePassword);
//Load the site-collection groups using CSOM
oClientContext.Load(oClientContext.Web.SiteGroups);
oClientContext.ExecuteQuery();
GroupCollection oSiteCollectionGroups= oClientContext.Web.SiteGroups;
Console.WriteLine("List of groups in the site collection");
Console.WriteLine("-------------------------------------");
foreach (Group oGroup in oSiteCollectionGroups)
Console.WriteLine(oGroup.Title);
Console.WriteLine("\n");
//Load the users collection in the Group 1
oClientContext.Load(oSiteCollectionGroups[1].Users);
oClientContext.ExecuteQuery();
Console.WriteLine("List of users in the first group of site-collection");
Console.WriteLine("-------------------------------------");
foreach(User oUser in oSiteCollectionGroups[1].Users)
Console.WriteLine(oUser.Title);
Console.WriteLine("\n");
Console.ReadLine();
private static SecureString GetSecureString(String Password)
SecureString oSecurePassword = new SecureString();
foreach (Char c in Password.ToCharArray())
oSecurePassword.AppendChar(c);
return oSecurePassword;
http://the-north.com/sharepoint/post/Update-Choice-Field-using-CSOM-%28Client-side-Object-Model%29
using (ClientContext
ctx = new ClientContext("http://MyServer/MySite"))
Field genericField = ctx.Web.Lists.GetById(listID).Fields.GetById(fieldGuid);
FieldChoice fldChoice = ctx.CastTo<FieldChoice>(genericField);
                ctx.Load(genericField);
                fldChoice.Choices = “MyChoice1;MyChoice2;MyChoice3”.Split(";".ToCharArray());
                fldChoice.Update();
                ctx.ExecuteQuery();
If this helped you resolve your issue, please mark it Answered

Restriction for objects Products, BPs and Activities

How experts,
I have the following objects Products, BPs and Activities which I have to restrict the access to be visualize. For example, a user that belongs to another Org.Unit can not see the BPs, Produtct,Activities from the other Org.Unit.
1. How can I structure the solution to restrict group of users to visualize those objects ?
2. Each of these objects should I have to assign the Org.Unit allowed to be displayed ?
3. For BP, territory management is the best solution ?
Best regards,

Hi
U can restrict and make display etc in creating/modifying the roles and authorizations
go to Tcode PFCG, select ur role and do necessary settings there according to ur requirement.
Rewardif helps
Regards
Manohar

Find object name of particular tcode

hi, i am new in sap security so i am very confused with object relation with tcodes. like when we give su01 tcode in pfcg then in profile generator we hav to give activities for that role like for su01 in which object we will hav to give activities like create,change, delete, display for that role only? how can we find out which object reflects that particular tcode?
like another example in se38 if i want to restrict a user for change option and allow only display option then in profile generator how can i find out under which object activity does it works?
like i tell earlier im new in this field so please help me out from this confusion.
Thanks
Jimmy Batra

Sorry I misunderstood your question.
But there is no easy way to find the authorization object used for particular transaction unless you debug the program.
Generally it is mention in the documentation of that particular functionality.
For example if you want to find out the authorization objects checked in pfcg then you need to go through the following document http://help.sap.com/saphelp_nw70/helpdata/en/ce/17533e5ff4d064e10000000a114084/frameset.htm and set the activity based on your requirement.
Same for function transactions, either you need to find the related document or need to consult the functional consultant to get the required value for that particular object.
Hope this will help.
-Pinkle

Restrict an iview for a particular set of users

Hi,
I would like to restrict an iview for a particular set of users.
Please let me know how to do that
Points will be rewarded for sure for the helpful answer
Thanks
Bala Duvvuri

Hello,
Option 1: create a separate role and assign to those set of users.
Option2: if its custom developed iview(PAR/Webdynpro java), by using (UME service AP)java code we can find those users and we can restrict content of iview(create a uinique group and while executing iview , if the user belongs to this group show a message u don't have authorization to execute this iview).
To me option is good and easy.
Regards
malli.....

How to get the connected Adapter Object for a particular BDoc Type?

Hi All,
I have a scenario in which CRM system is connected to ERP system.
In SMW01 transaction, I can see one BDoc with BUS_TRANS_MSG as the BDoc Type in CRM.
Now, how do I get to know if this one BDoc is a SALESDOCUMENT or SALESCONTRACT.
Is there any way thorough which I can get to know the Adapter Object for this particular BDoc.
Regards,
Madhuri

Hi Madhuri,
Happy new year.
In Transaction : R3AC1.
You can observe the Linked BDOC for the adaptor objects. For example Sales docuemnt and Sales contrcat will have the same linked BDOC as "BUS_TRANS_MSG".
If you see an error in SMW01, you want to find whether it is salesdocument or contract.
1. Please take the Queue name from SMW01.
from the queue name you can find whether it is sales contract or sales document.
Queue name is customized in tables: SMOFQFIND.
I hope this helps you.
regards,
Sri...

How to create a new object for a particular class?

Hi,
Can anybody please tell the steps for creating a new object for a particular class.
Thanks,
Sreeja

Declare the object as TYPE REF TO the class and use the CREATE OBJECT statement to create an object.
DATA <obj_name> TYPE REF TO <class_name>.
CREATE OBJECT <obj_name>.
Please mark points if the solution was useful.
Regards,
Manoj

Pulling particular attributes from the XML Object

Hi !
My requirement is onChange of a value from the first drop down, particular values needs to load in the second drop down. Values that needs to pull are designed in XML Object as Map entries Key,Pair Values.
We can pull the first drop down values from the XML Object using Rule library and find the following code snippet ;
<block>
<set name='appData'>
<invoke name='getExtension'>
<invoke name='getObject'>
<ref>ctx</ref>
<invoke name='findType' class='com.waveset.object.Type'>
<s>Configuration</s>
</invoke>
<s>Config_SDD_ReferenceData</s>
</invoke>
</invoke>
</set>
<ref>appData</ref>
</block>
Here, Config_SDD_ReferenceData.xml is the file where the map entries are written and the ref name is appData. Later in BPE the code "appData.units" are referred in ValueMap property.
But we are stuggling to populate the second drop down values based on the valu selected in the first drop down.
Please find the XML Object also;
<Attribute name='units'>
<Map>
<MapEntry key='1' value='units1'/>
<MapEntry key='2' value='units2'/>
<MapEntry key='3' value='units3'/>
</Map>
</Attribute>
Thanks in advance.

u could use removeChild() method of the node interface....get the parent node named 'xxxxxx' from the DOM and perform a removeChild operation on it specifying the senderID, receiverID and dateTimeStamp Nodes as arguments to the method....
Hope this helps
VP

To restrict a object to a particular Group at the Universe level

Similar Messages

Maybe you are looking for