on 04-28-2015 4:23 PM
Dear All,
We are uploading flat CSV files to BPC space via data manager upload option and users are able to save the upload files to company (public) folder as well as their individual team folders. We have setup all users as team leads to their team folders but not given access to "Edit Public folder profile P0055", but the data manager upload process (profile P0101) some how granting them access to save the upload file in the company folder. System preventing from save to company folder for input templates and reports. We are expecting a consistent behavior - Users not to have ability to save the files into company folder. Only LZ Admins have access to publish stuff here and users are allowed to copy/view from there.
Please let me know if anybody else noticed this behavior and possible solution.
Thanks and Appreciate your comments
Sharif Shaik
Hi Sharif,
I would think that task "upload data" will give access to upload to all the folders the user have access to, ie public company folder.
Andy
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Andy,
Thanks for your comments.
The upload data task in data manager is not checking the user security. If it does, then this user should not be allowed to save the files in the company public folder. As I said above same user is not allowed to save input templates and reports in the company public folder. The P0055 task profile is preventing him from doing this. If we control company folder access for input template and reports, I would expect same behavior for data manager data upload process as well.
It seems this is a BPC bug or by design not checking security setup during data upload process.
Thanks
Sharif
Hi Sharif
If the data manager package does bypass the security, I think it is prudent to log a message with SAP to have an official response, so that this information be logged in an SAP note for future reference.
Just out of curiosity, Does the user whom is executing the data manager package have the SecondaryAdmin task profile associated with it?
The SecondaryAdmin task profile has the 'Edit content of Public Folders' task associated with it, so in theory it would have access to upload to the company folder and could be a possible reason.
Pg. 34 of http://service.sap.com/~sapidb/011000358700000470182011E
Kind Regards
Daniel
User | Count |
---|---|
15 | |
4 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.