Dear all,
I have a strange issue within BI auth analysis (SAP NW 2004's).
Context: I have a cube with 3 characteristics auth relevant:
Country
Report Unit
Business area
Let's take the example I had this week with my end-user:
- I built a set of BI analysis in RSECADMIN
- Each BI analysis was assigned to a single PFCG role through S_RS_AUTH auth Object.
- Roles are assigned to end-users via SU01.
My End-user has 3 roles, so 3 BI analysis assigned with the following values:
The 3 BI analysis contain
0TCAACTVT ==> CP *
0TCAIPROV ==> CP H5*
0TCAVALID ==> CP *
Role1 provides BI analys 1:
Country = LB
Report Unit = 00556LB0001
Business area = 0001
Role2 provides BI analys 2:
Country = JO
Report Unit = 39835JO0001
Business area = 0001
Role3 provides BI analys 3:
Country = SY
Report Unit = 39835SY0001
Business area = 0001
The 3 auth variables were correctly set within the query as follows:
==> Variable represents = "Multiple single value"
==> Variable is "Optional"
==> Ready for input
After having ran his query, my end-user has a "you do not have sufficient authorization" message
This is a sample of what is checked by the system (just for JO country as an example)
SQL Format:
/BIC/H5COUNTRY = 'JO'
AND /BIC/H5GESBER = '0001'
AND /BIC/H5REPUNIT IN ('00556LB0001','39835SY0001')
AND TCAACTVT = '03'
OR /BIC/H5COUNTRY IN ('LB','SY')
AND /BIC/H5GESBER = '0001'
AND /BIC/H5REPUNIT IN ('00556LB0001','39835JO0001','39835SY0001')
AND TCAACTVT = '03'
I have the impression that the system does not read globally what the user has in his auth buffer but only roles separately.
I found the following OSS note 1244127 ("No authorization" when a user has several authorizations).
This note is valid from October 1st 2008 !!!!
I applied it but infortunately the pb remains. Last thing, we don't want to use "variable Exit"
I cannot bielive that with BI 7.0 you cannot manage auth combinations trough different roles...Amazing.
Had you faced this kind of issue ?
Hope I was enough clear on my explanations.
Any Help will be very appreciated.
Many thanks in advance.
Bader
Edited by: Bader KEROUI on Nov 27, 2008 5:46 PM