Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Bi Query Plannable? No Sufficient Authorization for This Subselection

Former Member
0 Kudos

Hello

I have a user that states she cannot make changes to a query that she says is plannable. We are running BI 7.0 . I am looking at the security aspect of it and can't see anything wrong. I do see the query is sending over '.' as a fund center. Any ideas?

Thanks!

Robert

Here are the analysis authorizations and trace from rsecadmin:

This one reads for any version:

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I eq 3

0TCAIPROV I CP BP*

I CP PSM*

0TCAVALID I CP *

0VERSION I CP *

Writes for version 110:

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I eq 2

0TCAIPROV I CP BP*

I CP PSM*

0TCAVALID I CP *

0VERSION I CP 110

The trace reads this

Filling the Buffer...

...Buffer Filled

Main Check:

-


Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

Check Added for Aggregation Authorization: 0FUNDS_CTR

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = ':'

AND TCAACTVT = '02'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = ':'

AND TCAACTVT = '02'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

94 ( 0FUNDS_CTR )

111 ( 0VERSION )

Authorization Check Complete

Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Partially or Fully Authorized (Intersection) Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

94 ( 0FUNDS_CTR )

111 ( 0VERSION )

-


Subselection (Technical SUBNR) 2

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Partially or Fully Authorized (Intersection) Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Value selection partially authorized. Check of remainder at end

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

NOT FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Not Authorized

All Authorizations Tested

Message EYE007: You do not have sufficient authorization

No Sufficient Authorization for This Subselection (SUBNR)

Following CHANMIDs Are Affected:

94 ( 0FUNDS_CTR )

111 ( 0VERSION )

94 ( 0FUNDS_CTR )

111 ( 0VERSION )

Authorization Check Complete

-


-


Authorization Check

Detail Check for InfoProvider BP_M001

Preprocessing:

Selection Checked for Consistency, Preprocessed and Supplemented As Needed

Subselection (Technical SUBNR) 1

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

Subselection (Technical SUBNR) 2

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

End of Preprocessing

-


Filling the Buffer...

...Buffer Filled

Main Check:

-


Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Authorized

Subselection (SUBNR) Is Authorized

-


Subselection (Technical SUBNR) 2

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Authorized

Subselection (SUBNR) Is Authorized

Authorization Check Complete

-


-


Authorization Check

Detail Check for InfoProvider BP_M001

Preprocessing:

Selection Checked for Consistency, Preprocessed and Supplemented As Needed

Subselection (Technical SUBNR) 1

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

Subselection (Technical SUBNR) 2

Check Node Definitions and Value Authorizations...

Node- and Value Authorizations Are OK

End of Preprocessing

-


Filling the Buffer...

...Buffer Filled

Main Check:

-


Subselection (Technical SUBNR) 1

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '110'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Authorized

Subselection (SUBNR) Is Authorized

-


Subselection (Technical SUBNR) 2

Supplementation of Selection for Aggregated Characteristics

No Check for Aggregation Authorization Required

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 02

0VERSION I EQ 110

Not Authorized

Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set

Characteristic Contents

0FUNDS_CTR

0TCAACTVT

0VERSION

SQL Format:

FUNDS_CTR = '1212130000'

AND TCAACTVT = '03'

AND VERSION = '000'

Characteristic Contents

0FUNDS_CTR I EQ 1212130000

0TCAACTVT I EQ 03

0VERSION I CP *

Authorized

Subselection (SUBNR) Is Authorized

Authorization Check Complete

1 REPLY 1

l_borsboom
Active Participant
0 Kudos

Your Analysis Authorization contains the following statements:

0TCAACTVT I eq 3

&

0TCAACTVT I eq 3

IThey seem to be me missing the leading zero (it should be 02 and 03), this might lead to difficulties. Probably you generated the authorizations from a DSO and you did not activated the Alpha Conversion for field 0TTCAACTVT. Try generating the authorization again.

Furthermore you seem to be lacking the ':' authorization for FUNDS_CTR

Good luck!

Kind regards,

Lodewijk