[authorization] how to limit infoareas shown when opening query in query designer

[Loed]

Hi guys,

How do you limit the infoareas shown for the users when they wanted to open a query in analyzer or query designer?

I was able to do it by filtering the specific COMPOSITE PROVIDER in the infocube part under the S_RS_COMP. I am using the S_RS_RREPU (reporting) template.

But if I will put the specific INFOAREA in the infoarea option, it doesn’t work. I still can see all objects in the INFOAREAS tab when opening a query using query designer or analyzer.

How do you make this INFOAREA work? So it will only be displayed if the user opens the INFOAREAS tab above.

The only problem I have in using the INFOCUBE option even though it is working is that solution is not flexible. I don’t want to add the name of composite provider every time we created new one. That’s why I wanted to check if there is a way for the INFOAREA section to work.

NOTE: I don’t want to HIDE the INFOAREAS tab by using the S_RS_FOLD since I will be exposing the queries in BOBJ design studio and/or web intelligence.

Or is there a way to do this in design studio? We are just importing the BW authorization to BOBJ authorization that’s why I think this should be implemented in BW.

Thank you.

Loed

[FCI]

Hi Loed,

I took the same one (S_RS_RREPU) and just filled the 2 S_RS_COMP with the infoarea and deactivate the S_RSAUTH. I'm on a 740SP15 on Hana.

Here is the role I used (I changed the extension from SAP to TXT to be able to include it here):

zzfctest.txt

You can upload if you wnat into your system.

Regards,

Frederic

[FCI]

And I have only this role....

[Loed]

Hi Fred,

I uploaded your role and assigned that lone role in a dummy user (no changes done on your role) but it still shows me all of the infoareas.

I also tried to change the NODESNOTCONNECTED with other infoarea but still same result.

I am using SAP BW on HANA with release 750SP7. I am not sure what's the problem with the INFOAREA option why it is not working in my end. 😄

Loed

[FCI]

Seems like a bug to me. You can create an OSS message.

Your user has only one role and one profile (the one of the role) ?

[Loed]

Yes, user has only the role and profile of ZZFCTEST. No modifications done to your role.

Okay, I will make an OSS message.

I'm just wondering why only the RSINFOAREA doesn't work but the RSINFOCUBE and RSZCOMPID are both working.

Thanks for your help Frederic. 🙂

Loed

[FCI]

Hi Loed,

Yes, your ZIA_VALUE is a BEX variable. You should create it as an exit variable in the query designer and code your algorithm in CMOD or the exit variable BADI. The step to be used is 0.

Regards,

Frederic

[Loed]

Hi Frederic,

But will that also work in PFCG? That kind of variable works in RSECADMIN (same as the method you have mentioned), but I wasn't able to make it work in PFCG. Did you already try to create the same?

Thanks.

Loed

[FCI]

My mistake, I didn't realize it was the PFCG.

This kind of variables used to work on old BW authorization objects but this probably has never worked on standard auth object (as S_RS_CUBE is).

[Loed]

Do you have other idea how to solve this using a variable or other solution?

Thanks.

Loed

[FCI]

I think you can forget about dynamic values at a PFCG field level. Seems that SAP never bothers to implement it on the ECC side. Dynamic values seems to be only available on RSEC fields.

Any codification rules at the cube or query level that could help you ?

[Loed]

Okay. I think I will just implement a naming convention in our query designer so I can filter using the RSZCOMPID with wild card characters.

Thanks for the help Frederic.

Loed

[FCI]

Hmm, just tried at the moment. My user can only see the infoareas on which he is authorized (here only the unassigned node):

What's your pb exactly ?

[Loed]

Hi Fred,

What template did you use for your reporting user? I am using the S_RS_RREPU template and tried to filter the INFOAREA but I still can see all of the infoareas.

Regards,

Loed

[Loed]

Hi,

Is it possible to use a variable value in the RSINFOCUBE part of S_RS_COMP? This is the only way I think to make the solution flexible for future developments.

If yes, where will I implement the code for that variable? Is it in CMOD? Will I also use i_step = 0?

Thank you.

Loed