cancel
Showing results for 
Search instead for 
Did you mean: 

user rights - query panel does not show up

Former Member
0 Kudos

Hello,

I am struggling with application rights for webi reporting.

I created new user and I would like to allow him to create webi reports.

I created new Access Level with all WEBI permissions enabled (application + content) and assigned to this web intelligence application and this user.

When I open web intelligence application, I select "New" and then I select universe, query panel does not show up.

When I add this user to Administrators group, same procedure causes query panel to show up. So it is obvious that Administrators group has some permission which I am missing in my own access level, but I have no clue which one.

Could you help me to find missing permission?

Is there any way to trace permission checks like in ABAP ST01?

Regards,

Martin

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Martin,

try running a security query for the user to see if there is an explicit denial somewhere. Select the user, right click, tools > Create Security Query. Select "Do not query by permissions" check box.

Below in the query context area, select the folder and run the query.

_panda_

Former Member
0 Kudos

Hello guys,

I did it!. I have used Panda's approach and I discovered that my webi user had no permission to use universe connection, so I set it up:

and then I was getting following error just before query panel should show up:

 

So I added following rights to my "webi creator" group over universe eFashon:

Result:

Thanks for help!

Regards,

Martin

Former Member
0 Kudos


Glad it worked...!!

_panda_

nscheaffer
Active Contributor
0 Kudos

Good job!

Answers (1)

Answers (1)

nscheaffer
Active Contributor
0 Kudos

There are probably a number of ways to do this, but my approach was to create a group to which I add users I want to be able to create/modify WebI reports.

Here are the additional rights I have granted to this group...

I then granted that group Full Control on the Web Intelligence application.

Specifically, I think "Edit Query" is what you need.  Have you enabled that right for both "Objects" and "Subobjects"?

Noel

Former Member
0 Kudos

Hi Noel, thanks for answer.

I think I am confused on how permissions and security work in BOBJ.

The screenshot you posted displays additional rights on Root Folder... why root folder? I thought I have to assign application permissions to user/group on "Applications" screen.

My user has full control over Root Folder and all application permissions (universe, web intelligence) from my own Access Level in "Applications", yet still no luck to open query panel. -but maybe I am thinking wrong.

Just to be clear... I created one custom Access Level which contains general, content and application permissions. I believe that when I assign my user with this Access Level to any folder then I enable him to do everything with contents within that folder. But in order to allow him to access web intelligence app, I have to assign my user with this Access Level to Web Intelligence application in "Applications" panel.

- am I right or wrong?

I hope you do not mind to help me further. As you can see, I am quite new to this topic.

Regards,

Martin 

nscheaffer
Active Contributor
0 Kudos

I am by no means an expert here, but will try to help you work through this.

Here is how I have things configured.  I have given my group (which I call WebI Editors) Full Control of the Web Intelligence application.  My WebI Editors group then has the permissions I showed in the previous screenshot at the Root Folder level.  I then have folders and groups that correspond to each department within my company.

So to give someone access to a departmental folder I add them to the corresponding departmental group.  If they needed to be able to create/modify WebI reports I also add them to the WebI Editors group.  With this setup up all user permissions are handled via membership in a group.

Here is how I have the Edit Query right set up.  Do you have both the "Object" and "Subobject" boxes checked?

Noel

nscheaffer
Active Contributor
0 Kudos

One more thing just as an FYI for this forum.  If the images are not clear, click on them and they will open in some sort of pop-up window and should be clearer.

Noel

Former Member
0 Kudos

thanks Noel. Your approach is quite logical and I understand it. It is quite handy to manage permissions by group membership. I will definitely try it this way tomorrow, but I am afraid it would not help fix my issue.

I cannot see anything "magical" on your screenshots. In my setup, I granted all permissions (not just those 2) with no luck opening query panel.

Maybe I should start over. I will let you know my results.

Regards,

Martin

Former Member
0 Kudos

Ok, so I did it as you suggested but with no effect... see my screens...

User webi is member of webi creator group:

webi creator group has set advanced security over Root Folder:

these are rights of webi creator over Root Folder (same as on your screenshot):

This is assignment of webi creator group that has full control over web intelligence application:

Still after I log into BI Launchpad, I start web intelligence, click on New, select universe eFashion and then nothing. No query panel appears.

Maybe I need some additional permission to access eFashion universe? -but if I would not be able to access universe, I would expect to not see it in list of available universes:

Any other hint?

Regards,

Martin

nscheaffer
Active Contributor
0 Kudos

You've got me stumped.  A few questions...

  1. What version of BusinessObjects are you on?  We are on 4.1 SP01 Patch 6.
  2. What version of Web Intelligence are you using; HTML (Web), Applet (Java) or Desktop (Rich Client)?  The SCN post explains some of the differences.  If you are using the Java version, Java may the source of your problem.  Try one of the other ones and see if you get a different result.  I know this sounds simplistic, but I have had situations where a pop-up window such as the query panel or variable editor will appear behind my main browser window.  If you try to create this report in the Desktop version and it still doesn't work you will rule this out as the issue.

Your setup looks right to me so there must be some conflicting permissions that are preventing this from working.  I would recommend opening a support case with SAP.

Sorry I can't help you more.

Noel