Visual Totals and users in multiple roles

Hello,
I have a few questions regarding dimension security and visual totals enabled.
The infrastructure:
 - multiple roles
 - users are members of multipe roles
1) if I have multiple roles and the user is member of multiple roles  - if I set "Visual Totals" to true on one role it does not work?
2) same as "1" but if I set the visual totals on all roles it does not work?
is this the intended behavior? - does it only work if the user is only in one role? or do I do something wrong?
We want to have on two roles visual totals and on the others not - if possible. And if the users is member of other roles it would be OK if he sees all values..
3) How would Visual Totals work if I allow some nodes but deny all children of the node?
4) Is there some advanced documentation - which extens the information from "ms-help://MS.VSCC.v80/MS.VSIPCC.v80/MS.SQLSVR.v9.en/uas9/html/b028720d-3785-4381-9572-157d13ec4291.htm"
Thanks for your help.
HANNES

Years after I am going to search for the same answer I was looking 7 years ago....
Maybe someone out there can answer them now?
http://www.hmayer.net/

Similar Messages

  • One db and user for multiple tablespaces or schemas per server?

    Hello again.
    I installed Oracle 11g on server_1 and created one database db_1.
    Using Enterprise Manager, I did the following:
    Created a tablespace myname_1.
    Created a user myname_1.
    Logged in as myname_1 and created a table into the default tablespace myname_1.
    When creating this table, the schema field defaulted to myname_1.
    Created another tablespace myname_2.
    My confusion about the relationship between tablespaces, users, and schemas starts here:
    When I try to create a new table for tablespace myname_2, I get an error:
    "user myname_2 does not exist"
    I am seeking some clarification on these levels of organization in Oracle.
    My goal is to setup my server with one database each and one user each per database.
    Then, I think I want to create multiple tablespaces and organize objects per tablespace.
    Or should it be per schema?
    Eventually each tablespace will be moved to a separate server.
    Any comments and suggestions are greatly appreciated.
    Thank you for helping.

    Hello,
    This error means user MYNAME_2 doesn't exists and you have to create one.
    Example 1:
    CREATE USER MYNAME_2
      IDENTIFIED BY "my_password"
      DEFAULT TABLESPACE MYNAME_1
      TEMPORARY TABLESPACE TEMP
      PROFILE DEFAULT
      ACCOUNT UNLOCK;
      -- 4 Roles for KLONDIKE
       GRANT RESOURCE TO MYNAME_2; ---> This privs give unlimited quota on all the tablespaces
      GRANT CONNECT TO MYNAME_2;
      ALTER USER MYNAME_2 DEFAULT ROLE NONE;
    Then create your table (you were missing "AS" )
    create table myname_2.mytable_1 as
    select * from source_table@dblink_2;Example 2: If you want to create table mytable_1 in tablespace myname_2 then you have to create tablespace myname_2 first. To create table in different tablespace than user default tablespace
    create table mytable_1 tablespace myname_2 as select * from source_table@dblink;Regards
    OrionNet

  • Powershell script for security groups and users for multiple share folders

    Hi scripting team,
    I need your help with powershell script for the below queries 
    1. List out the security groups for more than one server share path and output it to a file ( csv ) 
    For eg.
    If the are are two share paths 
    \\servername\foldermain\folder1
    \\servername\foldermain\folder2
    So I needs the list of security groups for each share path
    And the output needs to be under each any every path.
    2. Grab the users belongs to main security groups and it nested groups for more than one security group and listed the users under each and every group. No need to display nested groups. Just users belongs to main group and users under nested.
    Your teams help is much appreciated 
    Thank you.
    Thilochana kumararatne

    Hi Braham,
    Thanks for your quick reply.
    Are we able to do this on two stage method
    1. grab the security groups from the share paths
    if can grab the share path from a separate txt file than copying it to the <your path> location
    so i can modify the txt file
    once run the script
    if can the output like below to a CSV file
    \\servername\foldermain\folder1group 1group 2group 3\\servername\foldermain\folder2group 1group 2group 3then i know which groups belongs to which share paththen i can remove the duplicate groups and keep the common groups to grab the users belongs to itso with the second script same as the first copy the security groups to a txt file and the out put as below.what I needs is the users full name and the samaccount name ( user id )group 1user1user2user3
    group 2user1user2user3looking forward your help on thisThank you.Thilo

  • IsUserInRole fails if user has multiple roles

    I'm using 6.1 and the RDBMSRealm.
    I have two groups and Weblogic console tells me (correctly) that my
    user is a member of both groups.
    My weblogic.xml file maps the two groups to two roles with equivalent
    names.
    Having logged the user on HttpServletrequest.IsUserInRole works for
    one role but not the other.
    Anyone have any ideas?
    Thanks in advance Frank Tuttle

    I stepped on this rake too ;) You are confusing roles and groups. Roles are the
    things you describe in bean deployment descriptor (IMHO good idea with bad implementation),
    and groups is what you have in WLS's realms, different from EJB's roles.
    If you want to use groups as roles (that's what we do) you'll have to write your
    own method that'll take a group name, get all groups the current user belongs
    to and find out if isCallerInRole(). or inGroup(), if you want to ;)
    -- ME
    [email protected] (Frank Tuttle) wrote:
    I'm using 6.1 and the RDBMSRealm.
    I have two groups and Weblogic console tells me (correctly) that my
    user is a member of both groups.
    My weblogic.xml file maps the two groups to two roles with equivalent
    names.
    Having logged the user on HttpServletrequest.IsUserInRole works for
    one role but not the other.
    Anyone have any ideas?
    Thanks in advance Frank Tuttle

  • How to restrict login for multiple users having same Role

    Our Web Application is deployed on Tomcat 5.5
    The requirement is ?
    There are roles in application like "operator", "admin"?
    There are multiple users created for each of the above role.
    When one user of "operator" role is logged in, then
    It should not allow to login for another user of "operator" role.
    Also, if user did not log out & application gets close, then
    It should not allow to login for another user of "operator" role.
    Also, it should not allow to login for multiple requests of same user
    (using another browser instance...)
    Is it possible using session object?
    But, using session object, it will create separate objects for different users,
    So here I will not be able to restrict session object creation rolewise.
    Also, how to retrieve these multiple session objects created for different users on server?
    If anyone is having the solution please reply as soon as possible,
    Thank you.

    To tell you the truth, this is a stupid requirement. It must be an extremely fragile application.
    In any case, you will have to write your stuff for that. Probably a filter that on login, logout, and session expiration checks, makes, or removes entries in a DB (using a synchronized resource to prevent race conditions) or possibly even simply in an application context object.

  • How to add multiple users to a role in ECC 6.0

    How to add multiple users (say 1000) to a role in ECC 6.0?

    Hi
    You can actually add multiple users to a role using transaction SU01. From SU01, use the menu Environment->Mass Changes.
    Here you can manually add the users, select them by address or authorisation data. Once you have your user list, you can then add or remove roles and/or profiles.
    Secondly , You can use SU10 to do mass changes to multiple users including role assignments per logical systems
    Also check the following link:
    http://www.sap-img.com/bc021.htm
    I hope this should do it
    regards
    Chen

  • Best Practice in maintaining multiple apps and user logins

    Hi,
    My company is just starting to use APEX, and none of us (the developers) have worked on this before either. It is greatly appreciated if we can get some help here.
    We have developed quite a few applications in the same workspace. Now, we are going to setup UAT and PRD environments and also trying to understand what the best practice is to maintain multiple apps and user logins.
    Many of you have already worked on APEX environment for sometime, can you please provide some input?
    Should we create multiple apps(projects) for one department or should we create one app for one department?
    Currently we have created multiple apps for one department, but, we are not sure if a user can login once and be able to access to all the authenticated apps.
    Thank you,
    LC

    LC,
    I am not sure how much of this applies to your situation - but I will share what I have done.
    I built a single 700+ page application for my department - other areas create separate smaller applications.
    The approach I chose is flexible enough to accomdate both.
    I built a separate access control application(Control) in its own schema.
    We use database authenication fo this app - an oracle account is required.
    We prefer to use LDAP for authentication for the user applications.
    For users that LDAP is not option - an encrypted password is stored - reset via email.
    We use position based security - priviliges are based on job functions.
    We have applications, appilcations have roles , roles have access to components(tabs,buttons,unmasked card numbers,etc.)
    We have positions that are granted application roles - they inherit access to the role components.
    Users have a name, a login, a position, and a site.
    We have users on both the East Coast and the West Coast, we use the site in a sys_context
    and views to emulate VPD. We also use the role components,sys_contexts and views to mask/unmask
    card numbers without rewriting the dependent objects(querys,reports,views,etc.)
    The position based security has worked well, when someone moves,
    we change the position they are assigned to and they immediately have the privileges they need.
    If you are interested I can rpovide more detail.
    Bill

  • Multiple roles assigned to an user

    Hi folks,
    My question sounds to be something weird, but wanted to be cautious. I see a lot of users in my environment with multiple roles assigned to them. When i checked the roles of an user who has three roles assigned to him, i noticed that all the roles have some tables in common with the same grants in all the three roles, and all these three roles are assigned to the same user. Will there be any problem?
    An example to explain my senerio...
    User scott has three roles A,B and C assigned to him. All the three roles have execute on xy.abc procedure and select,insert,update,delete on xy.xyz table. Will there be any problem to the user who is assigned all these three roles. Will there be any confusion from oracle to chooose from which role?
    Thanks

    This sounds to be something new. So When a oracle
    tries to hold all the privileges does it do a
    distinct on the table grants, so that i will have
    just one entry of the privilege of an object, though
    it exists in all the roles assigned to that user.No, the table objauth$ looks like this,
      1* select * from objauth$ where rownum < 100
    SYS@etest> /
          OBJ#   GRANTOR#   GRANTEE# PRIVILEGE#  SEQUENCE# PARENT                OPTION$       COL#
           133          0          5          0          1
           133          0          5          3          2
           133          0          5          5          3
           133          0          5          6          4
           133          0          5          9          5
           133          0          5         10          6
           133          0          5         11          7
           135          0          5          0          8
           135          0          5          3          9
           135          0          5          5         10
           135          0          5          6         11
          OBJ#    GRANTOR#  GRANTEE# PRIVILEGE#  SEQUENCE# PARENT                OPTION$       COL#
    ---------- ---------- ---------- ---------- ---------- ------------------ ---------- ----------where
    OBJ# is object ID, could be any object not only table,
    GRANTOR# is user# , ROLE is also considered a special USER internally in Oracle.
    SYS@etest> select user#, name from user$
      2  /
         USER# NAME
             0 SYS
             1 PUBLIC
             2 CONNECT
             3 RESOURCE
             4 DBA
             5 SYSTEM
             6 SELECT_CATALOG_ROLE
             7 EXECUTE_CATALOG_ROLE
             8 DELETE_CATALOG_ROLE
             9 EXP_FULL_DATABASE
            10 IMP_FULL_DATABASE
    ..............So different roles will have different records in objauth$. Even it's same privilege of same object granted to same user.
    a GRANTEE# can have same privilege to the same object from different GRANTOR#

  • What happens if we assign multiple roles to one user

    Hi Experts,
    what is the outcome of the scenerio where multiple roles are assigned to one user in MDM
    example : role A has execute command for field X and another role B has read only command for the same field X, what happens if both the roles are assignes to user John?
    Thanks in advance
    Sharma.

    hello Abhishake,
    Thanks for the reply,
    so does that mean the user will have the execute role even though the second role was read only?
    Thanks,
    sharma

  • Problem with role and user; user can't see the table

    Hello forum,
    I've created a role:
    CREATE ROLE enr_service;
    GRANT CONNECT TO enr_service;
    GRANT ALL ON Locataires TO enr_service;
    GRANT ALL ON Batiments TO enr_service;
    GRANT ALL ON Sportifs TO enr_service;
    GRANT SELECT ON Epreuves TO enr_service;
    and also a user:
    CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
    GRANT enr_service TO ENR1;
    ALTER USER ENR1 DEFAULT ROLE enr_service;
    ALTER USER ENR1 DEFAULT TABLESPACE USERS;
    I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
    SELECT * FROM Sportifs;
    ORA-00942: table or view does not exists
    I can't see what I've done wrong. Any help is appreciated.
    Sebastian

    user2019788 wrote:
    Hello forum,
    I've created a role:
    CREATE ROLE enr_service;
    GRANT CONNECT TO enr_service;
    GRANT ALL ON Locataires TO enr_service;
    GRANT ALL ON Batiments TO enr_service;
    GRANT ALL ON Sportifs TO enr_service;
    GRANT SELECT ON Epreuves TO enr_service;
    and also a user:
    CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
    GRANT enr_service TO ENR1;
    ALTER USER ENR1 DEFAULT ROLE enr_service;
    ALTER USER ENR1 DEFAULT TABLESPACE USERS;
    I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
    SELECT * FROM Sportifs;
    ORA-00942: table or view does not exists
    I can't see what I've done wrong. Any help is appreciated.
    SebastianThat's probably because ENR1 doesn't have any table named SPORTIFS and he didn't qualify the table name with the schema name ...

  • Is it possible to export and import the roles and users tables?

    Hi,
    is there any possibility to export and import the role and user definitions?
    We have a SAP MDM repository with a lot of roles and users and also with a lot of changes.
    And now I'm searching for a fast and efficient way of managing the roles and users.
    Thanks and Regards, Melanie

    Hi Melanie,
    There is no export/import functionality for roles and users.  The only way to manage these in an automated way would be to write a program that uses the Java or ABAP APIs.  Both APIs expose functionality to create, update and delete roles and users.
    Hope this helps,
    Richard

  • Table that stores the business role and user id mapping

    Hi,
    i want to know the table that stores the Business role and the business role and user id mapping in CRM system.
    Thanks in Advance.
    Regards,
    Pricy

    Hi Mary,
    There is no direct table but there is a way to find it.
    HRP1263 is the table where business roles are stored when maintained at org level. These are stored against the Position.
    For getting user ID and position linkage refer table HRP1001.
    In HRP1001 table use below criteria to get the User and Position.
    OTYPE = CP
    SCLAS = US
    SOBID = User ID
    ENDDA = 31.12.9999
    Get the OBJID
    Query the HRP1001 table again with following
    OTYPE = CP
    OBJID = OBJID from above Query
    ENDDA = 31.12.9999
    SCLAS = S
    SOBID = Thats Position.
    Pass the position to HRP1263 as below.
    OTYPE = S
    OBJID = POSITION
    PROFILE - Thats business role assigned for the given position and user.
    Hope this is helpful.
    Regards,
    Naresh

  • Administration Menu Localization of User Permissions and Titles of DataGrids into the Roles and Users screens.

    Hey LightSwitch Team,
    I have a LightSwitch Web Application, that is already localized (en-EN and de-DE). Now I have the requirement to localize the names of the User Permissions into the Administration Screen (this is built-in functionality). How can I achieved
    this?
    Another Task is to translate the Titles of the DataGrid into the Users Screen and Roles Screen (Administration Menu), because they are in english language, instead of german (i.e. 'User and Groups', instead of 'Benuter und Gruppen' or 'Users
    and Groups in this Role', instead of 'Benutzer und Gruppen dieser Rolle').
    In addition of this the User Permissions are in the english language too. How can I translate all of them?
    Note: Another texts are already localized (e.g. 'Rolle von Gruppe geerbt').
     Many thanks. Any help would be greatly appreciated.

    Hi AndySta,
    Welcome to lightswitch forum.
    According to your description above, if you want to localize your lightswitch application, you need add a localized resource file, add a Resources File, and then name it Client.de-DE.resx, then call a resource from code. Check out
    https://msdn.microsoft.com/en-us/library/xx130603.aspx
     for further information.
    Best regards,
    Angie
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Configuring roles and users (adf security) application context wise.

    Dear All,
    I referred this tutorial (http://biemond.blogspot.com/2008/12/using-database-tables-as-authentication.html) which shows how to hook up adf security with database schema but at domain level which will be common to all applications in that domain. I want to make it different to each application. (i.e each application will use differene database schema for storing user credientials i.e enterprise roles,application roles and users.)
    Can any one please point me to proper way..
    Regards,
    Santosh
    jdev 11.1.1.2.0

    Dear Frank,
    <i>
    Instead you have a single identity management system and have the application policies being different for the applications.Using ADF Security, users and groups can have different privileges in different applications
    </i>
    suppose i have 3 applications that use adf security, the users will be common to all applications. right..?Roles and group can be different for applications.
    application polices means roles and group..?
    So how it(application polices) can be made different for applications? is it inbuilt or some configurations needed ?. Can you point me to some blogs or tutorials for more reference.
    Bet: Incase i hook up adf security with database schema.
    Regards,
    Santosh.

  • Extraction list roles and users for entreprise portal.

    Hi Everyone,
    I work on Enterprise Portal only java.
    I want to extract the list of all these users with their roles
    How do I proceed?
    Thanks for the help!
    Regards Giglio

    Giglio,
    Its possible to access the list of user and their roles from portal in several ways:-
    Approach 1:
    User Admin -> Import/Export -> User Data Export -> Press Export Button -> Copy the user content and store in a seperate file -> Done.
    Approach 2:-
    You can write a custom progrram in Java using UME API to get the portal user information. You can use webdynpro for java or JSP Dynpage/abtract portal component to use UME API.
    Ram

Maybe you are looking for