Analysis authorization security / 0TCA_DS01, 0TCA_DS02 ??

[Former Member]

Hello,

We are trying to setup the security on BW side. We have created funds_ctr as auth relevant and then we have created an auth object buit now we are not able to coneect it to infoprovider. I am trying to figure out how do add name of the infoproviders and where (probably something to do with object 0TCAIPROV).

Also one of the document that I am referring talks about activating templates of DSO's 0TCA_DS01 to DS05 and then create/copy for you own application area. Also it talks about loading user data, (which is the data they are talking about)?

Can some one throw some light on these things?

Thanks,

Kiran

[Former Member]

Hi Kiran,

Not sure if you are still interested in this, but...

<i>We are trying to setup the security on BW side. We have created funds_ctr as auth relevant and then we have created an auth object buit now we are not able to coneect it to infoprovider. I am trying to figure out how do add name of the infoproviders and where (probably something to do with object 0TCAIPROV).</i>

Once a Characteristic is flagged as Authorization Relevant in RSD1, it is automatically checked for any InfoProvider that contains it.

There is no longer an "InfoCheck" table as there was in RSSM in version 3.x.

0TCAIPROV can be used if you want the user to have a different set of authorizations for one InfoProvider vs another.

You can have two Analysis Authorizations like these:

AA_0001 contains:

0TCAIPROV IP_001

0COSTCENTER CC_1000

AA_0002 contains:

0TCAIPROV IP_002

0COSTCENTER *

In this case, the user would have authorizations for all Cost Centers for IP_002, but would be restricted to CC_1000 for IP_001.

<i>Also one of the document that I am referring talks about activating templates of DSO's 0TCA_DS01 to DS05 and then create/copy for you own application area. Also it talks about loading user data, (which is the data they are talking about)?

Can some one throw some light on these things?</i>

These DataStore Objects (formerly known as ODSs) can be copied to a new application area, under a new name, and then can be loaded with data. That is all correct.

Each one is used for something different. The steps go like this:

Copy the DSs

Load with data

Go To RSECADMIN ---> Generate

Enter the name of your DS(s)

Generate

This will then generate Analysis Authorizations based upon the data that is in the DataStore object(s).

This is especially helpful if you have large amounts of Analysis Authorizations to generate. It also works for text descriptions of these, for those of type "hierarchy", and for assigning them to users (directly - not through a role).

Look at the structure of each DS object. The fields need to be filled correctly for this to work.

I've loaded them both from a flat file (.csv) as well as from an SEM cube.

I hope that helps.

cheers,

rob