acess right with (user owns)

[former_member186487]

Hi,

This is for BI 4.1. I have user access to only the right which the user owns, like Edit objects which user owns etc.

Now this may cause a concern once the user leaves or moves on to something else.

The other user will not be able to change the object because he/she does not owns it. Is there any recommended method other than using Admin ID for changing the user?

Please advise.

Regards,

SS

[Former Member]

Hi,

I would do the below :

1. Keep the content into a separate folder.

2. Assign the EDIT RIGHTS ( Not the OWNER rights)

3. Restrict the VIEW rights on that folder for the group which user belongs to.

So if users moves out of the organization and any other user joins and the edit rights are still the same.

Hope it helps.

Regards,

Upendra.

[former_member186487]

The objects are in seperate folder. If I restrict the user on View than user will not see it because user does not own it and hence he/she will not be able to Edit it, even though user has been given global edit rights in the group. I am using Admin rights currently to move the user from USERA to USERB. There must some method to change the owner.

Regards,

SS

[Former Member]

Hi,

Exactly that is correct. Carry on keeping the objects in one folder and assign the rights.

The best practise is to ensure the rights on the public folders is given to a specific user group instead of user group.

For example --> User A belongs to Group 1.

User B belongs to Group 2.

Assuming Folder Structure like this :

Root Folder --> Folder A
                  --> Folder B

Apply global edit rights for Group 1 and Group 2 on Root folder and assign View Objects applied at OBJECTS LEVEL only at the root folder.

Now on Folder A --> Apply View Objects at Object and Sub-object level for Group 1. Here view rights are restricted to only GROUP 1 users.

Folder B --> Apply View Objects at Object and Sub-object level for Group 1. Here view rights are restricted to only Group 2 users.

If the users in Group 1 are moved away from company, just move the Folder A as sub folder to Folder B. The rights can be assigned this way.

Now to change the ownership of the report you would need to copy and paste into your personal folder, which automatically makes you as owner of that report.

One suggestion is to keep the security model as simple as possible.

Regards,

Upendra.

[former_member195290]

Hi Surendra,

You should create User Group and assign the appropriate access rights to that Group.Add the users which all are suppose to be in that group.

Now, if a user leaves or moves on to something else, as the other user falls in that user group will have the same access rights and will be able to do his/her activities.Also you can add up new user directly to the group.

A simple way describing it :Training: Managing Users, Groups and Folders - BusinessObjects XI

Regards,

Javed

[former_member186487]

Even though they are in the same group they will have issues. It differentiates based on "User Owns" and not group owns. This is my understanding.

Regards,

SS

[former_member195290]

Please explain your requirements.

As per my understanding you have user who owns a report its objects for eg.Now if he/she leaves, you want other user to perform the same tasks.Am i Correct?

Regards,

Javed

[former_member186487]

Yes. Can anyone please advice if there is any recommanded approach to this issue?

Please advice.

Regards,

SS

[former_member186487]

Yes. Can anyone please advice if there is any recommanded approach to this issue?

Please advice.

Regards,

SS

[former_member195290]

Hi ,

As per SAP BO User Mgmt Guide:

Owner rights

Owner rights are rights that apply only to the owner of the object on which

rights are being checked. In the SAP BusinessObjects User Management

System, the owner of an object is the principal who created the object; if that

principal is ever deleted from the system, ownership reverts to the

Administrator.

Owner rights work similarly to their corresponding regular rights and are

useful for managing owner-based security. However, owner rights are

effective only when the principal has been granted owner rights but regular

rights are denied or not specified.

http://help.sap.com/businessobject/product_guides/boUMS01/en/FPM75_UMS_admin_en.pdf

Check the topic :To create an FPM administrator 

in the pdf to get how to handle this type of scenario.

Regards,

Javed