Row Level Security not working for SAP R/3

[Former Member]

Hi Guys

We have an environment where the details are as mentioned below:

1. Crystal Reports are created using Open SQL driver to extract data from SAP R/3 using the SAP Integration Kit.

2. The SAP roles are imported in Business Objects CMC.

3. Crystal Reports are published on the Enterprise as well.

3. Authorization objects are created in SAP R/3 and added as required for the row level security as mentioned in the SAP Installation guide as well. The aim is when the user logs into the Infoview and refreshes the report he should only see data that he is meant to so through the authorization objects.The data security works very much fine when the reports are designed directly on the table but when the reports are built on the Business View it doesnt work hence the user is able to see all data.

Any help in this issue is greatly appreciated.

Thanks and Regards

Kamal

[Former Member · Accepted solution]

Hi,

In order for row level security to work for you using the OpenSql driver, you need to configure the Security Definition Editor on your SAP server. This is a server side tool which the Integration solution for SAP offers as a transport.

This tool defined which tables are to be restricted based on authorizations.

However since you are seeing the issue on reports based on Business Views, you need to identify whether the Business View is configured in such a way where the user refreshing the report is based on the user logging into Infoview. If the connection to your SAP server is always established with the same user when BV is used then you security definition is pointless.

You can confirm this by tracing your SAP server to identify what user is being used to logon to SAP to refresh the reports.

thanks

Mike