"No authorization" when assigning several user authorizations

[Former Member]

Hi

We are currently experiencing a problem with our authorizations. (BI7.0, SP11)

We have a manual/generated User Authorization (RSECADMIN > User > Assignment) granting access to:

-0COSTCENTER: Single hierarchy node (ES)

-0CUSTOMER_AORREG: All (*)

-0CUSTOMER_CUSTCOM: All (*)

-0CUSTOMER_CTRMGR: :, # and 'ES'

When executing the query everything is fine, the user is only able to see the selected node cost center node - ES (Spain).

We have a similar for FR (France), which is the same except for 0COSTCENTER and 0CUSTOMER_CTRMGR - also works fine.

However, when we grant both of these to a singe user, we get a "No authorization". Shouldn't they be combined instead of excluding each other?

Hope you can help!

Br

Karsten

[former_member206112]

Hi,

Try using execute as (on the third tab of RSECADMIN) with logs. Check out the log.

Tomer.

[Former Member]

Hi Tomer

Thanks for your answer. I ran the log (you can see it below) and I can see there are a couple of auth failures. However, I cannot really deduce why. Can you help? Thanks!

Br Karsten

-

---

Authorization Check Log

Date and Execution Time (Local Server)

Execution Date: 17.10.2007

Execution Time:10:38:32

Executed Query: ZPCA_MC/ZCO_COST_KBL

Transaction RSRT ( BW - output test )

Executed by User DKTMPKL

Executed with Analysis Authorizations of Another User TST_FRYA

-

---

InfoProvider Check

Building the Buffer...

...Buffer Built

Are there authorizations for accessing InfoProvider ZPCA_MC with activity 03?

Authorization exists for general access to InfoProvider ZPCA_MC with activity 03

-

---

-

---

Relevant Characteristics for Detailed Authorization Check

(Characteristics with Full Authorization Are Not Listed!)

List of Effective Authorization-Relevant Characteristics for InfoProvider ZPCA_MC:

0COSTCENTER

0CUSTOMER__CTRMGR

-

---

-

---

Authorization Check

Detail Check for InfoProvider ZPCA_MC

Preprocessing:

Selection Checked for Consistency, Preprocessed and Supplemented As Needed

Subselection (Technical SUBNR) 1

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

End of Preprocessing

-

---

Filling the Buffer...

...Buffer Filled

Main Check:

-

---

Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 1 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ ES

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER = '#'

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER = '#'

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER = '#'

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER = '#'

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 1 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ ES

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 1 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ ES

I EQ :

0TCAACTVT I EQ 03

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 2 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ FR

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 1 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ ES

I EQ :

0TCAACTVT I EQ 03

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 2 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ FR

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010309','0000010331','0000010335','0000010750','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010309','0000010331','0000010335','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338','0000040342','00

AND CUSTOMER/BIC/CTRMGR = 'ES'

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010309','0000010331','0000010335','0000010750','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010309','0000010331','0000010335','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338','0000040342','00

AND CUSTOMER/BIC/CTRMGR = 'ES'

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 1 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ ES

I EQ :

0TCAACTVT I EQ 03

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0COSTCENTER

0CUSTOMER__CTRMGR

0TCAACTVT

SQL Format:

NOT COSTCENTER IN ('#','0000010309','0000010331','0000010335','0000010750','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338

AND CUSTOMER/BIC/CTRMGR IN ('#','ES','FR')

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010309','0000010331','0000010335','0000040301','0000040303','0000040304','0000040306','0000040308','0000040309','0000040310','0000040312','0000040315','0000040321','0000040322','0000040332','0000040334','0000040338','0000040342','00

AND CUSTOMER/BIC/CTRMGR = 'ES'

AND TCAACTVT = '03'

OR COSTCENTER IN ('0000010750','0000040725','0000040750','0000040751','0000040752','0000040753','0000050775')

AND CUSTOMER/BIC/CTRMGR = 'FR'

AND TCAACTVT = '03'

Characteristic Contents

0COSTCENTER Node 2 I EQ #

0CUSTOMER__CTRMGR I EQ #

I EQ FR

I EQ :

0TCAACTVT I EQ 03

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

17 ( 0COSTCENTER )

58 ( 0CUSTOMER__CTRMGR )

Authorization Check Complete

-

---

-

---

Used Hierarchy Node Definitions:Node Hierarchy:Version:Key Date:Node InfoObject:Node Name:Type:Level:Validity Area:Structure Date

Node 1 1000CHCOST.08A : : 99991231 : 0HIER_NODE : 100045200.08A : 1 : 00 : 0 : 00000000

Node 2 1000CHCOST.08A : : 99991231 : 0HIER_NODE : 100045100.08A : 1 : 00 : 0 : 00000000