Error in BI Analysis Authorization- No sufficient authorization.

[Former Member]

All,

I have been scratching my head for the past two days to resolve this issue. I am new to BI security and tried every possible ways to fix this error.But i am not sure what i am missing here?.

Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

0TCAACTVT = '03'

AND 0CUSTOMER LIKE *

Characteristic Content in SQL Format

0CUSTOMER I EQ 0000100002

I EQ 0000100005

I EQ :

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

NOT 0CUSTOMER IN ('0000100002','0000100005')

AND 0TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

NOT 0CUSTOMER IN ('0000100002','0000100005')

AND 0TCAACTVT = '03'

Characteristic Content in SQL Format

0CUSTOMER I EQ 0000100002

I EQ 0000100005

I EQ :

0TCAACTVT I EQ 03

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

129 ( 0CUSTOMER )

Authorization Check Complete

Thanks in advance...

[Former Member]

Archana,

What value did you define for 0CUSTOMER IN ?

other than0TCAACTVT, did you include 0TCAIPROV, 0TCAVALID?

Any other infobjects? try to assign colon and try

Thanks,

Sri

[Former Member]

Sri,

Thanks for your reply.

I entered 0customer in my authorization and then entered

I EQ 0000100002

I EQ 0000100005

I EQ :

[Former Member]

0BILLTOPRTY Bill-to party

0COSTELMNT Cost Element

0CO_AREA Controlling area

0CUSTOMER Customer number

0PROFIT_CTR Profit Center

0TCAACTVT Activity in Analysis Authorizations

0TCAIPROV Authorizations for InfoProvider

0TCAVALID Validity of an Authorization

______________________________ ____________________________________________________________

These are the infoobjects i entered in my authorization.

All are givein * except 0customer.

[Former Member]

Hi,

remove I EQ : (since you are restricting on two values)

2. When user is excutes the query is he entering these values only or any other?

3. try to figure out how customer structure is designed, like it might be in groups(customer might be part of the group)

or

1. Other way is Copy OBI_ALL to ZOBI_ALL and remove only 0CUSTOMER Customer number. (since you are restricting on it)

2. remove these infobjects you have added, since already these infoobjects are presentin ZOBI_ALL with *

0BILLTOPRTY Bill-to party

0COSTELMNT Cost Element

0CO_AREA Controlling area

0PROFIT_CTR Profit Center

0TCAACTVT Activity in Analysis Authorizations

0TCAIPROV Authorizations for InfoProvider

0TCAVALID Validity of an Authorization

ps: think from functional side, when user tries to excute the query he enters customer number, what about other fields?

you can acomplish this from zobi_all

Thanks,

Sri

Edited by: sri on Aug 4, 2010 12:55 PM

[Former Member]

Sri,

I removed the EQ: in 0CUSTOMER.

The query name is sales report and the user has to enter the value for the fiscal year or month in the query.

The user is not entering any values on cutomer. The query results should be displayed such that user is able to see only the results for the two customers for any fiscal year or month.

[Former Member]

Archana,

In this case you should create a variable which will pull values at run time.

or

Restrict the query on customer number(user should enter input values for customer number)

Thanks,

Sri

[Former Member]

Can u pls help me with the steps on how to create a variable at run time?

The user should be able to enter the values for fiscal year but the results should be displayed only for two customers.

[Former Member]

Look at this link regarding Variables:

It has step by step information to define variables

http://help.sap.com/saphelp_tm70/helpdata/en/22/1e9b3c334d8c15e10000000a114084/frameset.htm

[Former Member]

Archana,

Before you create a variable approach ABPERs and request them to add these customer numbers in query program. So that when you excute the query at run time value will get pulled up automatically

2, then you create steps for query variable(plenty of document are available on internet).

www.bi-expertonline.com/downloads/Smith.doc

Search tip : authorization variable

Thanks,

Sri

Edited by: sri on Aug 4, 2010 2:29 PM

[Former Member]

Hi Sri,

I got to restrict the query to display the results according to the customer number(these are the two numbers entered in 0CUSTOMER). But but the user is not making any entry for customer number while executing the query.

When i give * in 0CUSTOMER, I am able to get the entire list of results. But i wantd to get the list of results for only two customer numbers.

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

0TCAACTVT = '03'

AND 0CUSTOMER LIKE *

Characteristic Content in SQL Format

0CUSTOMER I EQ 0000100002

I EQ 0000100005

0TCAACTVT I EQ 03

Partially or Fully Authorized (Intersection) Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

NOT 0CUSTOMER IN ('0000100002','0000100005')

AND 0TCAACTVT = '03'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Content in SQL Format

0CUSTOMER

0TCAACTVT

NOT 0CUSTOMER IN ('0000100002','0000100005')

AND 0TCAACTVT = '03'

Characteristic Content in SQL Format

0CUSTOMER I EQ 0000100002

I EQ 0000100005

0TCAACTVT I EQ 03

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

129 ( 0CUSTOMER )

Authorization Check Complete

[Former Member]

Archana,

I have already given you the answer. (no need of posting the trace results again & again)

1 if you give * in customer number user will get all the information, it will work. But that is not the case we are looking for.

We want it to be restrict on two values (automatically), since user will not enter the values as input.

Discuss with ABPER's and BI developer this is the case

Easiest way:

either ask them to design query where it take customer number as input value. (above procedure will work)

or

Create an authorization variable on your navigational attribute in the query and make it input ready. in RSECADMIN you need to maintain the authorized set of values for your navigational attribute for 0Customer.

Also create an authorization variable for customer number in the query and do not make it input ready as you do not need it in selection screen. Since you have already defined authorized set of values in RSECADMIN for customer number,

since the values need to get pulled from the query program

http://help.sap.com/saphelp_nw04s/helpdata/EN/44/599b3c494d8e15e10000000a114084/content.htm

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/4753ed83-0e01-0010-e186-f98413f86...

Steps for variable:

You create authorizations under transaction RSECADMIN.

In there create a new authorization variable and give it a description. Click on the InfoProvider button and select the InfoProvider name where the input-ready query was built. Select all those InfoObjects and give them * authorization, except for 0Customer. For that InfoObject give values for the customer number ( two values) you wish the user to access. Also click on the button of special characteristics.

2. Ask abpers to invlove these values in query program

Thanks,

Sri

Edited by: sri on Aug 4, 2010 2:58 PM

[Former Member]

Hi Sri,

I asked the BI team to create the auth variable and the query was able to pull the report for just the two customers.

Thanks for your help

Archana