Skip to Content
0
Former Member
Dec 14, 2011 at 11:01 PM

BW Analysis Authorization on two charcteristics issue

59 Views

I am familiar with analysis authorizations in BW 7.0 and worked on it.

Today we have blanket authorization (RSECADMIN) for 0TAX_NUMB = *. Meaning user who has this auth/role can see values (from where ever 0TAX_NUMB is used, all company codes etc). And as you might know 0TAX_NUMB is used in 0VENDOR & 0CUSTOMER master data (as an attribute). This works well, because its easy 😊

Now, new requirement is to create more strict analysis authorizations for 0TAX_NUMB based on other characteristic values.

Auth1 (should apply to 0TAX_NUMB used in 0VENDOR):

0TAX_NUMB = all values and only for vendor account group = XXX

Auth2 (should apply to 0TAX_NUMB used in 0VENDOR):

0TAX_NUMB = all values and only for vendor account group = yyy

Auth3 (should apply to 0TAX_NUMB used in 0VENDOR):

0TAX_NUMB = all values and only for vendor account group = zzz

Auth4 (should apply to 0TAX_NUMB used anywhere other than 0VENDOR, for example, as I said above its also used in 0CUSTOMER and may be used elsewhere in future):

0TAX_NUMB = all values

Do I also need to add 0CUSTOMER here? unable to visualize!!!

Also, 0TAX_NUMB and Vendor account group will have colon authorization.

So, at this time I am not sure how this will impact other queries with following scenario(s):

User1 has auth1:

Here, User1 can see tax_numb values for vendor act grp XXX, thats good, so far.

But can user see query results where tax_numb is not used but would like to see all vendor account group related data (or other than value XXX)?

User2 has auth4:

Since this auth has blanket tax_numb, can user2 see all values for tax_numb used in 0CUSTOMER (which he/she should) and also in 0VENDOR (he/she should not)...

And what about queries that do not have 0TAX_NUMB (but infoprovider has)? Colon auth on TAX_NUMB & Vendor act grp would resolve this?

I appreciate your thoughts on this. We are BW 7.01 (Ehp1), SPS10.

Regards

-Bala

Edited by: Bala Shetty on Dec 15, 2011 12:02 AM

Edited by: Bala Shetty on Dec 15, 2011 12:04 AM

Edited by: Bala Shetty on Dec 15, 2011 12:05 AM

Edited by: Bala Shetty on Dec 15, 2011 12:09 AM