Authorization of navigation attributes

[Former Member]

Hello Friends,

If i have a cube that has characteristic A and B__A as a navigation attribute, and in the query, a row item using the B__A is defined. In this case, B is the base characteristic of attribute A.

There is no row item using characteristic A defined in the same query.

When I need to restrict authorizaton of A, does it mean B__A also needs to be restricted in authorization ? That is , 2 authorization settings are needed?

Kindly advise please.

best regards

PRex

[Former Member · Accepted solution]

Hi,

In authorizations, navigation attributes are handled as ordinary characteristics.

You can mark navigation attributes as authorization relevant independently of the assigned basic characteristics. To mark a navigation attribute as authorization relevant, select the relevant indicator on the Attributes tab page in the InfoObject maintenance.

Tarak

[Former Member]

Hi

During authorization checks for navigation attributes, it is always the characteristic that is being used as a navigation attribute that is checked

If referencing characteristics are used as navigation attributes, authorization for the basic characteristic is checked. You should, however, change this logic so that the referencing characteristic is checked for instead. In the maintenance screen for reporting authorizations, choose the following path from the main menu Extras ® Compatibility ® Navigation Attributes ® Switch Off.

This function exists for reasons of compatibility. The authorization logic of referencing characteristics worked differently with the beginning of Release BW 2.0. From BW 2.0, Support Package 20 and in all of the releases that follow, for referencing characteristics as well, the authorization for exactly this characteristic (and not the basic characteristic, as was the case previously) is checked.

[Former Member]

Hi Kapadia and Tapashi,

I could not find the 'Compatibility' menu path. Is it found in BI 7? via RSD1 ?

So, can i say that in the situation of navigation attribute B__A used in the rows,

to restrict this, if it is used as an input variable,

I need to just create authorization for B__A just like it is done for individual characteristics and restrict this and no need to set authorization again on Char B directly nor on Char A directly?

Regards

PRex

[Former Member]

Dear PRex,

You will find the menu path in transaction Code "RSSM".

And you can create authorization for B__A just like it is done for individual characteristics. Two authorization objects needs to be created one for A, other for B.

Include both auth. object in the role/profile & it should work in the scenario given.

Regards

Mr Kapadia

[Former Member]

Hi Kapadia,

I am a bit confused...So, there are 3 authorization that need to be created : 1 for char A, 1 for char B and 1 for char B__A ?

when restricting char B__A,

what value is being restricted : Char A or Char B master data?

please help to clarify, thanks!!

regards

PRex

Edited by: pointes rexiproca on Apr 2, 2008 7:35 AM

[Former Member]

Hi PRex,

Only two authorization objects needs to be created .

One for A another for B , no need to create auth object for B__A.

After creating auth objects , make sure that possible combination of B__A ( values from A , values from B) are maintained in the user role/profile to avoid "Insufficient authorization Errors ".

Hope it helps.

Regards

Mr Kapadia

[Former Member]

Hi,

Refer to following Link

http://help.sap.com/saphelp_nw04/helpdata/en/e2/8ace6bc066b141948021e723d151fb/content.htm

It says

If referencing characteristics are used as navigation attributes, authorization for the basic characteristic is checked. You should, however, change this logic so that the referencing characteristic is checked for instead. In the maintenance screen for reporting authorizations, choose the following path from the main menu Extras ® Compatibility ® Navigation Attributes ® Switch Off.

In the query, you use characteristic A with the navigation attributes A__B and A__R. Characteristic R references characteristic B. For these navigation attributes, authorization for the basic characteristic B is checked. If you switch off the compatibility for navigation attributes option, B is checked for A__B, and R is check for A__R.

Regards

Kapadia