Skip to Content
0
Former Member
Nov 27, 2008 at 04:46 PM

No authorization" if several authorizations assigned through differen roles

130 Views

Dear all,

I have a strange issue within BI auth analysis (SAP NW 2004's).

Context: I have a cube with 3 characteristics auth relevant:

Country

Report Unit

Business area

Let's take the example I had this week with my end-user:

- I built a set of BI analysis in RSECADMIN

- Each BI analysis was assigned to a single PFCG role through S_RS_AUTH auth Object.

- Roles are assigned to end-users via SU01.

My End-user has 3 roles, so 3 BI analysis assigned with the following values:

The 3 BI analysis contain

0TCAACTVT ==> CP *

0TCAIPROV ==> CP H5*

0TCAVALID ==> CP *

Role1 provides BI analys 1:

Country = LB

Report Unit = 00556LB0001

Business area = 0001

Role2 provides BI analys 2:

Country = JO

Report Unit = 39835JO0001

Business area = 0001

Role3 provides BI analys 3:

Country = SY

Report Unit = 39835SY0001

Business area = 0001

The 3 auth variables were correctly set within the query as follows:

==> Variable represents = "Multiple single value"

==> Variable is "Optional"

==> Ready for input

After having ran his query, my end-user has a "you do not have sufficient authorization" message

This is a sample of what is checked by the system (just for JO country as an example)

SQL Format:

/BIC/H5COUNTRY = 'JO'

AND /BIC/H5GESBER = '0001'

AND /BIC/H5REPUNIT IN ('00556LB0001','39835SY0001')

AND TCAACTVT = '03'

OR /BIC/H5COUNTRY IN ('LB','SY')

AND /BIC/H5GESBER = '0001'

AND /BIC/H5REPUNIT IN ('00556LB0001','39835JO0001','39835SY0001')

AND TCAACTVT = '03'

I have the impression that the system does not read globally what the user has in his auth buffer but only roles separately.

I found the following OSS note 1244127 ("No authorization" when a user has several authorizations).

This note is valid from October 1st 2008 !!!!

I applied it but infortunately the pb remains. Last thing, we don't want to use "variable Exit"

I cannot bielive that with BI 7.0 you cannot manage auth combinations trough different roles...Amazing.

Had you faced this kind of issue ?

Hope I was enough clear on my explanations.

Any Help will be very appreciated.

Many thanks in advance.

Bader

Edited by: Bader KEROUI on Nov 27, 2008 5:46 PM