auhorization in report

[Former Member]

Hi

We have two roles : one for poster and one for bill to and two reports viz poster report and invoice report.

These 2 roles are assigned to one user to view both the reports.

Now, we want to restrict the user with a single value for poster, that means the user should able to view only that poster when he executes the poster report.We also want to restrict bill to in the same way in invoice report.

Now the problem is that this combination work only for a single report. If poster is restricted in the poster report then user can see all the bill to values in the invoice report. we tried so many combinations but unable to get the correct value.

Both the report should work at the same time with the restrictions but it is working for only one report. We also got authorization error when trying to achieve this in one report.

We are in BI 7 and we tried doing these in RSECADMIN. Even we tried with variable. Nothing is working.

Any help to solve this issue will be highly appreciated.

[Former Member]

solved on my own

[ravikanth_indurthi]

Hi sarah,

REPORTING_AUTHORIZATION:

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a6c54319-0e01-0010-20a4-fb81ad32...

check this might be useful.

Rgs,

I.R.K

[Former Member]

Hi Thanks for the reply...

But we have gone thorugh all these and nothing is helping..

I think we are unable to get the restriction work for us as both the restrictions are conflicting each other.

Do let me know if you can find anything.

[Former Member]

Hello Sarah,

Could You give more detail information?

Poster and Bill are InfoObjects in the same InfoProvider? Do You have the 2 reports built on the same InfoProvider?

What are the detail of the values in the roles for reporting? I.e., what are the rsecadmin objects created for both cases?

Diogo.

[Former Member]

Poster and Bill are InfoObjects in the same InfoProvider.These two reports are built on the same InfoProvider.

Please find below the rsecadmin objects with CP*.

0TCAACTVT

0TCAIPROV

0TCAKYFNM

0TCAVALID

ZCPOSTER

This is working fine to restrict the poster report. If we make ZCPOSTER EQ some value, then the invoice report works fine.We even tried using 0CRM_BILLTO as CP * which did not work.

That means at the same time we are unable to do the restriction for both the reports. One working making other fail.

[Former Member]

Ok,

You're saying that you've already made this authorization in rsecadmin?:

0TCAACTVT CP *

0TCAIPROV CP *

0TCAKYFNM CP *

0TCAVALID CP *

ZCPOSTER CP *

0CRM_BILLTO CP *

If so, both queries should work for poster and bill with no lack of authorization, i.e., you will have maximum authorization in both reports for poster values and bill values.

Did you try this? Does this works? Please let me know.

Diogo.

[Former Member]

We tried this as well...it did not work....

[Former Member]

Ok,

So something is wrong because you should be executing the report without any errors.

Try this:

Create an authorization from scratch in rsecadmin.

Give a description and push the button of the InfoCube "InfoCube Authorizations".

Select your InfoProvider and mark the option "Insert Full Authorizations"

Press Enter

Select all objects listed

Press Enter again

Push the button "Insert Special Charact."

Save the new authorization and give it to the user

By now you have a new authorization created for that InfoProvider that has all the InfoObjects relevant for authorization for that InfoProvider with all the values for those InfoObjects.

Test the query again. It should be working now.

When creating this last authorization are poster and bill in the InfoObjects inserted automatically by the rsecadmin? If yes, is because they are relevant for authorization and exist in the InfoProvider, otherwise they don't appear. Only those objects in the new authorization created are checked during query execution.

You can always see what is missing in the authorization:

Go to rsecadmin and choose Analysis, choose Execute as...choose the user that you want to test and mark rsrt. Choose the query and execute it. After executing you should receive a message of lack of authorization. Go back to rsecadmin, choose Analysis, choose Error Logs, insert in Executing User your user and in Restricted User the user that you tested. Choose display and you'll see where the authorization is missing.

Award points if helpfull.

Diogo.

[Former Member]

I solved the issue myself...

Thanks anyway for the answers.............