Error in Authorization even after giving Colon authoriztion to users

[Former Member]

Dear Experts

We have built a query which is having Sum GT function used and also Constant for some characterstics.

But when we execute the query the user is getting not authorized message. If i run the query without the SUM GT and Constant RKF and CKF its running fine.

We have checked the rsec log for the error it says Colon authorization is required for the some chars which are authorizaiton relavant but we have given all the other chars : authorization but still i am getting the below message.

Authorization Check Log

For a general description see the Note 1234567

Date and Execution Time (Local Server)

Execution Date: 01.12.2011

Execution Time: 15:33:23

Executed Query: ZM_SD_M22/ZM_SD_M22_Q_00010

Transaction RSRT ( BW - output test )

Executed by User P00010784

Executed with Analysis Authorizations of Another User P00007960

Software Component Release Level Support Package

SAP_ABA 700 0021 SAPKA70021

SAP_BASIS 700 0021 SAPKB70021

SAP_BW 700 0023 SAPKW70023

-

---

InfoProvider Check

Building the Buffer...

...Buffer Built

Are there authorizations for accessing InfoProvider ZM_SD_M22 with activity 03?

Authorization exists for general access to InfoProvider ZM_SD_M22 with activity 03

-

---

-

---

Relevant Characteristics for Detailed Authorization Check

(Characteristics with Full Authorization Are Not Listed!)

List of Effective Authorization-Relevant Characteristics for InfoProvider ZM_SD_M22:

0DF_HRPOSTN

ZCUS_MAT__ZSD_HEQT

ZC_CUST__ZSD_HEQT

ZSD_HEQT

-

---

-

---

Authorization Check

Detail Check for InfoProvider ZM_SD_M22

Preprocessing:

Selection Checked for Consistency, Preprocessed and Supplemented As Needed

Subselection (Technical SUBNR) 1

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

Subselection (Technical SUBNR) 2

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

End of Preprocessing

-

---

Filling the Buffer...

...Buffer Filled

Main Check:

-

---

Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

Check Added for Aggregation Authorization: 0DF_HRPOSTN

Check Added for Aggregation Authorization: ZCUS_MAT__ZSD_HEQT

Check Added for Aggregation Authorization: ZC_CUST__ZSD_HEQT

Check Added for Aggregation Authorization: ZSD_HEQT

Authorizations missing for aggregation (":")

Characteristic 1 2 3

0DF_HRPOSTN Node I EQ : I EQ :

ZCUS_MAT__ZSD_HEQT I EQ : I EQ : Node

ZC_CUST__ZSD_HEQT I EQ : I EQ : I EQ :

ZSD_HEQT I EQ : Node I EQ :

Entries marked with red do not have aggregation authorization

You can find more information about this here 1140831

The authorization check stops here as this selection is no longer needed

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

-

---

Subselection (Technical SUBNR) 2

Supplementation of Selection for Aggregated Characteristics

Check Added for Aggregation Authorization: 0DF_HRPOSTN

Check Added for Aggregation Authorization: ZC_CUST__ZSD_HEQT

Check Added for Aggregation Authorization: ZSD_HEQT

List of authorizations that provide authorization for selection on ":" (aggregation):

Characteristic 3

0DF_HRPOSTN I EQ :

ZC_CUST__ZSD_HEQT I EQ :

ZSD_HEQT I EQ :

Please guide me what else is required to get the report running.

Thanks and Regards

Sree

Edited by: CRMKNW on Dec 4, 2011 9:43 AM

[shivraj_singh2]

Sree,

In RSECADMIN when you go to Display Error Log, Look at the Presentation Options and check all of them and then Update Display, This will add more information to the trace and looking at how system is reading and combining different analysis authorizations you may be able to see where the system is skipping reading (

Regards,

Shivraj

[Former Member]

Shivraj,

I have done the way to display the authorization but still its giving the error no authorization and for change i have removed the Auth relavant Char from the filter which is having the variable (authorization type ) now its showing the report but four Key figure columns are not shown.

These key figure columns are SUM GT function which will bring the total value of a characterstic. So where am i going wrong because as i have given the : authorizaiton it should give the aggregated value for these columns and give full details for his authorized zone.

if i don't add the variable its giving all the data without these four key figures what i am expecting is it should give data for the authorized zone but also show the aggregated value in the SUM GT key figures as they are authorized with : authoriztion.

Thanks and Regards

Sree

[shivraj_singh2]

Sree,

( - Aggregated Access is a perhaps a misleading terminology, as it will not yield the aggregated total for key figures.

If you want to access key figures, you will have to build an analysis authorization for key figures

0TCAACTVT 03

0TCAIPROV [Range]

0TCAKYFNM SUM GT

0TCAVALID *

You can build a separate AA/Role for separate KFs.

Regards,

Shivraj