on 06-05-2007 11:41 AM
Hi,
I have problems to authorize single user for a single node in the hierarch of CostCenters.
I have created a hierarchy node variable and put it on selection screen. CostCenter is not in the row or columns - just in the filter of query
I created a Analysis Authorization (RSECADMIN) with objects 0COSTCENTER (one hierarchy node selected), 0TCAACTVT (03,16), 0TCAIPROV (0COOM_C02), 0TCAVALID (*).
This object was assigned to user over a role (PFCG).
As a result the user still can see all hierarchy nodes - user is able to select any node on selection screen - or no node at all --> result is not authorization depended. After selecting a wrong node (or no node at all) system should display a message - NO AUTHORIZATION)! This is not the case - it just display all data.
What I'm missing in the whole procedure?
What is the option to check / debug?
Thanks, Tomaz
Hi, Look carefully if you have not give 0BI_ALL in a role or sap_all. In the log from analysis you can see from what authorization objects the test are done. Look also if there is no profile with 0BI_ALL, if you made a migration for a user it creates a profile which you do not see in the roles but only in the tab profiles from SU01.
Good luck.
Bye Jan
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I assume you have set the authorisations in the IMG to "Current Procedure with Analysis Authorisations".
To debug select the Analysis tab in Tcode RSECADMIN.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
84 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.