User level privileges to discoverer reports

Hi All,
I am facing a very strange problem.
One of my users is running a discoverer report. He complains that he cannot see a particular row.
When I open the report with the same responsibility but using my user name, I can see that row.
Does it depend on the user name? Is it because, I am using the 'Owner Name' ?
I know that we can set the privileges at responsibility level...but can we set them at user level?
I will appreciate any idea/solutions on this.
Thanks,
Yogini

Sounds like the view it's accessing at the database level has security built-in (as Rod alluded to).
Is it a BIS view (ie: prefix is something like: xxFG_ (like ARFG_ or GLFG_))? If so, view security could well be the situation.
Alternatively, the only way you could see 'more' info in the report if it wasn't a database level view thing, VPD, etc., would be that your Oracle Apps username in the EUL had more 'power' than his. Discoverer will connect an Apps user with their Oracle Apps name and / or responsibility AND always take the method that gives the connectee with the most 'power'. That's why I always recommend to only set privs, security, and report sharing with responsibilities and not Oracle Apps usernames.
Russ

Similar Messages

  • USER UNABLE TO REFRESH DISCOVERER REPORT IN DISCOVERER DESKTOP 10g

    Dear All,
    HELP!!!
    A new user is unable to refresh discoverer Reports in Desktop. All priviledges have been granted to username in Disco Admin and Usre is able to log into oracle Apps.
    On the PC the user logged into someone else can log into Discoverer Desktop and run/refresh discoverer reports without any issues. Hence Ithink neither the PC nor the Discoverer installation is the problem.
    Can anyone help? What setup/profile needs to be completed in order for the user to be able to run Disco reports.
    Pls note that the following has been completed:
    1. Business Areas Assigned to user and his responsibilities.
    2. Desktop/Plus Privileges assigned.
    3. Allow administration - DISABLED - NOT TICKED
    Many thx
    DI

    Does this person just need to run reports? Or does this person also need to create reports? If the person just needs to run reports, try using Viewer for that person, rather than Desktop. This may be something that you need to log a service request with Oracle to get resolved. Pretty strange that can bring items into a new worksheet, but it won't run. Maybe there is an Oracle applications security issue (since logging in as another person does work)? You may be beating your brains out trying to find a Discoverer problem when it might be an application security problem. Though this is a wild guess on my part.
    John Dickey

  • How to find which user has access to Discoverer Reports?

    I need to find users having access to Discovered reports using a script. How can I do that?

    Hi,
    You need to give more details...
    Are you using oracle applications? are the users database users?
    If you use oracle application you can use the following:
    SELECT DISTINCT Disco_Docs.Doc_Name "Discoverer Workbook"
    ,Trunc(Disco_Docs.Doc_Created_Date) "Workbook Create Date"
    ,CASE
    WHEN Instr(Disco_Docs.Doc_Created_By
    ,'#') = 0 THEN
    Disco_Docs.Doc_Created_By
    WHEN Instr(Disco_Docs.Doc_Created_By
    ,'#') > 0
    AND Instr(Disco_Docs.Doc_Created_By
    ,2) = 0 THEN
    (SELECT Fu.User_Name
    FROM Fnd_User Fu
    WHERE Fu.User_Id = Substr(Disco_Docs.Doc_Created_By
    ,2
    ,5))
    ELSE
    NULL
    END "Workbook Owner/Creator"
    ,Disco_Users.Eu_Username
    ,CASE
    WHEN Instr(Disco_Users.Eu_Username
    ,'#') = 0 THEN
    Disco_Users.Eu_Username
    WHEN Instr(Disco_Users.Eu_Username
    ,'#') > 0
    AND Instr(Disco_Users.Eu_Username
    ,2) = 0 THEN
    (SELECT Fu.User_Name
    FROM Fnd_User Fu
    WHERE Fu.User_Id = Substr(Disco_Users.Eu_Username
    ,2
    ,5))
    ELSE
    (SELECT Resp.Responsibility_Name
    FROM Fnd_Responsibility_Tl Resp
    WHERE Resp.Responsibility_Id =
    Substr(Disco_Users.Eu_Username
    ,2
    ,5))
    END AS "Shared Name / Responsibility"
    FROM Eul_Us.Eul5_Documents Disco_Docs
    ,Eul_Us.Eul5_Access_Privs Disco_Shares
    ,Eul_Us.Eul5_Eul_Users Disco_Users
    WHERE Disco_Docs.Doc_Id = Disco_Shares.Gd_Doc_Id(+) AND
    Disco_Users.Eu_Username(+) NOT IN ('EUL5', 'PUBLIC') AND
    Disco_Users.Eu_Id(+) = Disco_Shares.Ap_Eu_Id
    Tamir

  • User Level SOD Report - Batch

    Hi GRC Experts,
    Every day my company runs a User Level SOD analysis against every user in ERP or HRP.  Here is the criteria for ERP (there is a connector):
    System:  Our defined ERP connector
    Risk Level:  All
    Rule Set:  Global
    User is not DDIC
    User Type:  Dialog
    Format: Detail      Technival View
    Access Risk Analysis at the Permission Level
    Show All Object
    This job is run in Background, and the report output is downloaded from Background Jobs.
    Is there a way to schedule this job using SE38 and a variant?  We would like to start using a automated scheduling tool.
    The program run is GRFN_BP_SCHEDULER with variant &0000000001569
    I looked at the variant, and it looks for I_PLANID and I_UPDTSK.
    Is all the criteria I selected stored in a table as a PLANID?
    Thanks in advance.
    Donna Wiley

    Hello Plaban,
    Thank you for the info!  How do you set up the variant for the "Report" options?  We need two reports for "User Level".  In the Report Options section, we need one report with a Format = Detail and one with a Format = Management Summary. Both reports should be in the Format = Technical View.
    Thank you and kind regards,
    Janice

  • Rename users and transfer Discoverer reports

    I hope someone can help. We are running Discoverer 10g with a database EUL. The reports have been operational for several years and users have edited and saved their own versions of standard reports. However it has been decided that a large number of these users (~100) should have their accounts renamed to bring them in line with other corporate usernames. User access to their reports needs to be preserved so that their new accounts look like their old (other than account name / password). These users are Viewer only users so they cannot share reports.
    Does any one know of an alternative way of doing this other than the labour intensive way of: creating a new set of Discoverer users (in the new format), logging into each old account in Desktop and sharing all the reports to the equivalent new user. Then repeating this for all 100 users? Please help save my sanity.
    I don't suppose that there is a simple solution of renaming Discoverer users.
    But I am hoping that maybe the Desktop admin command line (which I am not very familar with) may be of some help.
    Or possibly the more scary option of tinkering with the EUL tables on the EUL owning schema.
    Any advise welcome.
    Duncan

    Hi,
    There is no way to rename database users created with a CREATE USER command. You would have to use a database import and export and remap the schema. However, if you have if you have two database users, USERA and USERB where USERA is a Discoverer user who as saved Discoverer reports in the database, then you can move the reports from USERA to USERB by updating the EUL.
    Assuming that USERB has not used Discoverer then only USERA will have a record in the EUL5_EUL_USERS table. You can update the table change EU_USERNAME from USERA to USERB so that USERB has a user record in the EUL. USERB will then have access to USERA's workbooks. The workbooks are all held in the EUL5_DOCUMENTS table, the owner of the workbook is found using a lookup in EUL5_EUL_USERS table.
    Rod West

  • How many users and how often a particular discoverer report is being run?

    Hi there,
    We run discoverer(4i) reports from portal. The question is:
    How to find out the number of users and how often a particular discoverer report is being run?
    Many Thanks in advance.
    Naren

    I know in the 9 versions of discoverer is there is a Discoverer v5 Business Area that is included out of the box. You have to have the stats turned on inside of the pref.txt. But that BA has all of the information to create queries about who, what, parameters, etc. You'll have to check and see if its part of 4i.
    Matt Topper
    Senior Consultant
    TUSC, The Oracle Experts.

  • Any way to have email address of the user in user level analysis report?

    Hi,
    Is their any way to get the users email address column in User Level Analysis report Result..??
    Any way or settings to add custom columns or the email address column in the displayed columns of the report ??

    Hi Pranjal
    If it's not an option to add the column from the screen you would need to look at customising the scren
    Below is an example for a different screen layout scenario
    Customizing Access Control Screens
    Regards
    Colleen

  • Tracking The Discoverer Report Session and Users

    Hi
    Is there a standard process or a query which helps us to monitor the list of Discoverer reports running (or scheduled) and the users who are running it,
    Please let me know
    thanks for the time
    Regards
    Ramesh Kumar S

    Can anyone provide some lite on this
    Regards
    Ramesh Kumar S

  • Tracking Discoverer report and the Users

    Hi
    Is there a standard process or a query which helps us to monitor the list of Discoverer reports running (or scheduled) and the users who are running it,
    Please let me know
    thanks for the time
    Regards
    Ramesh Kumar S

    Hi,
    You can use the following query to identify distinct Discoverer 10g Viewer / Plus users in the E-Business Suite database:
    select distinct(substr(module,10,instr(module,':',1)-10)) from v$session where module like 'Disco10%';
    Alternatively, you can use the following query to see all Discoverer 10g connections in the database:
    select sid,serial#,osuser,terminal,module from v$session where module like 'Disco10%';
    Rgds,
    Rakesh.

  • User level settengs for Report Painter GR55

    HI All,
    When user is trying to extract a cost center report from Report Painter GR55. User is not getting the values for few line items for last FI year (2010) and he is able to see the values for current year (2011).
    Tried with parameters, authorizations and settings with other user (able to see the report) who is having same roles authorizations.
    Please suggest if there are any user level setting related to above.
    Regards,
    Hamed

    did you check in transaction RPC0?
    Maybe you have some value at user settings level.
    br, Guido

  • Management report doesnt show violations at user level.

    Dear all,
    I have a problem that the management report in 5.3 SP04 doesnt show violations at user level. At role level it works fine.
    I've tried full sync and generated a new management report. The problem remains.
    No. of Users Analyzed 859
    Users with no Violations 859 100%
    Users with Violations 0 0%
    Number of Roles Analyzed 2,986
    Roles with no Violations 2,510 84%
    Roles with Violations 476 16%

    Hi Vit,
      Follow both the notes mentioned by Sahad. Check the data in virsa_cc_prmvl table. Run the following script and see if you can see any data:
    select * from virsa_cc_prmvl where genobjtp=1
    If you don't have any data then there was some issue with user analysis so you will have to run the analysis again. If there is data then run the management report again and you should see the data.
    Regards,
    Alpesh

  • Debug privilege - is it at object level or user level or both?

    Just want to know at what level Debug privilege can be granted? At object level or user-level or both?
    I'm under the impression that if an user say 'A' is given this privilege, then he can debug all the procedures/packages/objects in his schema . I guess it's like granting the privilege at user level.
    On the other hand when we say 'grant debug on proc_name to xyz' , it's at object level.
    Please check and correct my assumptions.

    in order to debug (i.e, activate dbms_debug) in a session you need:
    debug connect session
    in order to debug objects that you are not the owner you need:
    debug any procedure
    or
    grant debug on procedure from the user that own the pl/unit
    hope it helps,
    Amiel Davis

  • Check package/procedure level privileges for a user

    hi gurus,
    how to check the package/procedure level privileges for a user? like dba_tab_privs for tables.
    for eg: grant execute on dbms_scheduler to user1.
    now, i need to verify that user1 has execute privilege on dbms_scheduler or not.
    what's the view for this?
    thanks in advance,
    charles

    SQL> select privilege, count(*) from dba_tab_privs group by privilege order by 1;
    PRIVILEGE                       COUNT(*)
    ALTER                               19
    DEBUG                              256
    DELETE                              131
    DEQUEUE                            3
    EXECUTE                           19315
    FLASHBACK                          52
    INDEX                               14
    INSERT                              137
    MERGE VIEW                          36
    ON COMMIT REFRESH                     52
    QUERY REWRITE                          52
    PRIVILEGE                       COUNT(*)
    READ                                7
    REFERENCES                          54
    SELECT                                3752
    UNDER                                3
    UPDATE                              111
    WRITE                                5
    17 rows selected.DBA_TAB_PRIVS is for more than just tables.

  • Tracking Discoverer Report and User

    Hi
    Is there a standard process or a query which helps us to monitor the list of Discoverer reports running (or scheduled) and the users who are running it,
    Please let me know
    thanks for the time
    Regards
    Ramesh Kumar S

    Additionally, If using Discoverer 10g, then you can use Enterprise Manager Application Server Control to monitor information as well.
    Click on the Discoverer link, then the performance link.
    Check out:
    http://download.oracle.com/docs/html/B13918_03/maint.htm#sthref307
    5.7.1 How to monitor summary metrics for all Discoverer client tier components

  • API to share users and responsibility for a discoverer report

    Hi Everyone,
    Is there any API exists to share users and responsibility for a discoverer report from the database?
    Thanks
    Pramil

    Hi,
    You can use the Discoverer EUL command line for Java interface (EULAPI). This is a java utility then runs on the Apps server so you can use it with a shell script. For example,
    eulapi –connect <connect string> -grant_privilege –workbook_access rodw.myworkbook –apps_responsibility Financials
    See the documentation at http://download.oracle.com/docs/html/B13919_03/ref.htm#sthref120
    Alternatively, you could create your own API that added new records to the EUL5_ACCESS_PRIVS table. However, this is not a supported approach and you need to understand the structure of the EUL tables to do this.
    Rod West

Maybe you are looking for