cancel
Showing results for 
Search instead for 
Did you mean: 

DAP issue

michele_medaglia5
Active Participant
0 Kudos

Hi BPC Friend

I want to deny the access to a member of dimension Category so I created the DAP as you can see in the attached image but when I create a new EPM Report I can retrieve the data.

Why?

Thanks

Michele

Accepted Solutions (1)

Accepted Solutions (1)

former_member186338
Active Contributor
0 Kudos

Looks like All members - Read only will override Deny...

Please test without All members and specify some other members for Read Only

michele_medaglia5
Active Participant
0 Kudos

I tried but I am still able to retried the data for nybudget

former_member186338
Active Contributor
0 Kudos

Show screenshot for test DAP...

May be you have SAP_ALL ?

michele_medaglia5
Active Participant
0 Kudos
former_member186338
Active Contributor
0 Kudos

may be test michele account belong to some team?

From security guide:

When in conflict, the least restrictive data access profile is applied

In case of a conflict between individual and team data access, the least restrictive setting is applied

Please read: 6.6 Data Access Profile Setup

in

Security Guide

SAP BusinessObjects Planning and Consolidation 10.0

version for SAP NetWeaver

http://service.sap.com/~sapidb/011000358700000470182011E

michele_medaglia5
Active Participant
0 Kudos

thanks but my user doesn't belong to any team

former_member186338
Active Contributor
0 Kudos

For test remove the line with NYBUDGET at all!

former_member186338
Active Contributor
0 Kudos

P.S. And please test that you are connected to the correct system It's one of the typical mistakes ...

michele_medaglia5
Active Participant
0 Kudos

I am connected to the right system and I took of the first row leaving only actual read only but I can still retrieve the nybudget data

former_member186338
Active Contributor
0 Kudos

Just tested - created a new user without any special rights (only roles: /POA/BUI_FLEX_CLIENT and /POA/BUI_UM_USER)

Added the user to BPC users.

Created new DAP with read only access to 2 dimension members for one model.

Assigned DAP profile to this user.

Connected using this username.

No issues!


Result in Excel Memberselector:

michele_medaglia5
Active Participant
0 Kudos

Hi I checked my user in BW and has many profiles, but I don't understand if in BPC in the DAP I specify that one member has to be denied why I can still see it?

former_member186338
Active Contributor
0 Kudos

My fresh user has only:

and

manohar_pappireddy
Participant
0 Kudos

Hi,

You have more authorizations in BW backend,so you are able to see the data for NYBUDGET category.

Regards,

Manohar

michele_medaglia5
Active Participant
0 Kudos

so it means that BW win against BPC???

former_member186338
Active Contributor
0 Kudos

BPC use BW security...

michele_medaglia5
Active Participant
0 Kudos

you are right but I am not happy about that.

Bw should be only the backend and all the setting should be done in BPC not a mix of BW and BPC.

I have worked on the version 10.1 embedded and in that case I agree but for the classic o standard model I strongly disagree

former_member186338
Active Contributor
0 Kudos

Simply don't do any changes in BW security. BPC will generate required BW security automatically.

To test - start with new fresh user.

michele_medaglia5
Active Participant
0 Kudos

thanks.

but when I ask to sap basis to create in BW a new user for BPC which authorization they should give to the new user?

former_member186338
Active Contributor
0 Kudos

"new user without any special rights (only roles: /POA/BUI_FLEX_CLIENT and /POA/BUI_UM_USER)"

Please read also the security guide for 10.1


P.S.

michele_medaglia5
Active Participant
0 Kudos

thanks

Answers (1)

Answers (1)

michele_medaglia5
Active Participant
0 Kudos

it works

thanks to everyone