Turning off broadcasting functionality turns off BEx search functionality

[Former Member]

Hi SAP Security Gurus,

I am currently working on a BI 7.3 migration project and one of the requirements is to restrict regular users from accessing broadcasting. I was able to do so but it impacted the FIND button in BEx Analyzer. Every time regular users search for queries, the system says NO OBJECT FOUND.

Turning off the broadcasting in authorization check S_RS_COMP and S_RS_COMP1 but doing so also disabled the FIND button. Kindly advise me on how to disable broadcasting without turning off the FIND functionality in Bex Analyzer.

Scenario #1: Broadcasting tool was deactivated for regular users and this also deactivated the Find feature

How I did it: I changed the ACTVT field in S_RS_COMP1 from Display and Execute to Change and Execute.

Test #1: Find a query BEx Analyzer 7.3

Result #1: “No Objects Found”

Workaround #1: A regular user can manually search a query from the Roles folder.  Please note that this is not as convenient as using the Find feature and so, the users demand to have the Find feature activated.

Test #2: Broadcast a query

Result #2: Correct.

Scenario #2: Broadcasting tool was activated and this activated the Find feature

How I did it: I changed the ACTVT field in S_RS_COMP1 from Change and Execute to Display and Execute.

Test #1: Find a query BEx Analyzer 7.3

Result #1: Correct. Queries can be searched without any authorization errors.

Test #2: Broadcast a query

Result #2: Users are now able to broadcast queries.

Thanks,

Marlon

[Former Member]

Hi Marlon,

Try to restrict this with broadcasting object S_RS_BCS (BEx Broadcasting Authorization to Schedule) not with s_rs_comp or s_rs_comp1

Definition

You can use this authorization object to determine which user can schedule broadcast settings for execution in which way.

Note the following:

• The only prerequisite for online execution of broadcast settings is the authorization for execution of the underlying reporting object (for example, the Web template).

• Direct scheduling in SAP background processing is available to every user that also has authorization to create background jobs.

• If a user needs to make settings for the execution of broadcast settings under the name of another user (for example, during user-specific precalculation), the authorization for background planning for other users is necessary.

  Defined fields  

The object contains five fields.

• Object type determines the reporting object that the broadcast setting is based upon:

• Web Template HT

• Query QU

• MS Excel workbook WB

• ObjectID contains the technical name of the reporting object, for example, the technical name of the query. For the workbook, the Workbook ID serves as the technical name.

• EventType describes the type of event to which the broadcast setting should be registered:

• Data change to underlying InfoProvider DC

• Time defined by the administrator TP

• EventID contains the identification of the event. In the case of data changes to the InfoProvider, this is the technical name of the InfoProvider.  With times defined by the administrator, this is the part of the job name after the prefix 'TP_BROADCASTING_', for example, MONDAY2AM for the job name 'TP_BROADCASTING_EVERY_MONDAY2AM '.

• Activity determines whether a user

• 01: is allowed to create registrations

• 06: is allowed to delete registrations