Split Analysis authorization (rsecadmin)

[Former Member]

Hi Guru's.

In my company we want to authorize on: company and "consolidation group" (for SEM BCS system). Is it possible to split an analyse authorization?

More details: a report contains both company and consolidation group, so you need access to both. now, if I try to put the two characteristics in one analyse authorizations, it works. But If I make one analyser for Company (without consolidation group) and one for consolidation group (without company) and assign both to the user, I get the error: Partially or Fully Authorized (Intersection)

<u><b>log output</b></u>

Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COMPANY

0TCAACTVT

SQL Format:

TCAACTVT = '03'

Characteristic Contents

0COMPANY I EQ 007577

I EQ 002630

I EQ 001542

I EQ 001122

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Contents

0COMPANY

0TCAACTVT

SQL Format:

NOT COMPANY IN ('001122','001542','002630','007577',':')

AND TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COMPANY

0TCAACTVT

SQL Format:

NOT COMPANY IN ('001122','001542','002630','007577',':')

AND TCAACTVT = '03'

Characteristic Contents

0COMPANY I EQ 007577

I EQ 002630

I EQ 001542

I EQ 001122

I EQ :

0TCAACTVT I EQ 03

Not Authorized

[former_member206112]

Hi Martijn,

The logic of the new analysis concept works in an "and" mode. This means that authorizations should have both authorized values. If the authorization won't contain them both, you will get the missing authorization message.

Tomer.

[Former Member]

Hi Tomer,

Thanks for your reply! But that contradicts the information in SAP help <a href="http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm">SAP HELP: filling empty dimensions and combining</a>.

I would like to combine authorizations as in the example below: (<b>what is the difference with the thing I did above?)</b>

Example 1 (Simplest Case):

There are two authorization-relevant characteristics: 0CALYEAR and 0COUNTRY. The user has two authorizations, both of which have a characteristic with filled single authorizations (values, intervals, and so on):

Authorization 1:

Characteristics

Values

0CALYEAR

1999-2002

-

-

Authorization 2:

Characteristics

Values

-

-

0COUNTRY

DE, US

These authorizations have the same meaning as the following single authorization:

Result:

Characteristics

Values

0CALYEAR

1999-2002

0COUNTRY

DE, US

The authorizations are combined. It is possible to express this in such a way that the "empty" dimension (characteristic) has been filled by the other dimensions that are not empty.<b></b><b></b>

Message was edited by:

Martijn Biesbroek

[Former Member]

Hi,

Question, has the user made a negative selection, such as I want all except this? I know that in that case it will not work. Besides that it takes much more time to select the data.

Have fun.

Jan van Roest

[Former Member]

Hi, I solved the issue:

I have a hierarchy like this

CONSOLIDATION GROUP

0company 0company 0company

I would have thought that if I authorize somebody for the group, plus the 3 companies that it Will work. BUT NO. If (in the BEX) you see the aggregated values, but if you click on + button to see the values per company you will get an error.... That is strange because I have authorized the user for all companies within the group. So SAP BW asks for auth. for all companies in stead of only the 3 above....

It works when you use variables in your query, (derive from authorization)