02-08-2008 3:08 PM
Hello
I have a user that states she cannot make changes to a query that she says is plannable. We are running BI 7.0 . I am looking at the security aspect of it and can't see anything wrong. I do see the query is sending over '.' as a fund center. Any ideas?
Thanks!
Robert
Here are the analysis authorizations and trace from rsecadmin:
This one reads for any version:
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I eq 3
0TCAIPROV I CP BP*
I CP PSM*
0TCAVALID I CP *
0VERSION I CP *
Writes for version 110:
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I eq 2
0TCAIPROV I CP BP*
I CP PSM*
0TCAVALID I CP *
0VERSION I CP 110
The trace reads this
Filling the Buffer...
...Buffer Filled
Main Check:
-
Subselection (Technical SUBNR) 1
Supplementation of Selection for Aggregated Characteristics
Check Added for Aggregation Authorization: 0FUNDS_CTR
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = ':'
AND TCAACTVT = '02'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = ':'
AND TCAACTVT = '02'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Not Authorized
All Authorizations Tested
Message EYE007: You do not have sufficient authorization
No Sufficient Authorization for This Subselection (SUBNR)
Following CHANMIDs Are Affected:
94 ( 0FUNDS_CTR )
111 ( 0VERSION )
Authorization Check Complete
Subselection (Technical SUBNR) 1
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Partially or Fully Authorized (Intersection) Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Value selection partially authorized. Check of remainder at end
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Not Authorized
All Authorizations Tested
Message EYE007: You do not have sufficient authorization
No Sufficient Authorization for This Subselection (SUBNR)
Following CHANMIDs Are Affected:
94 ( 0FUNDS_CTR )
111 ( 0VERSION )
-
Subselection (Technical SUBNR) 2
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Partially or Fully Authorized (Intersection) Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Value selection partially authorized. Check of remainder at end
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
NOT FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Not Authorized
All Authorizations Tested
Message EYE007: You do not have sufficient authorization
No Sufficient Authorization for This Subselection (SUBNR)
Following CHANMIDs Are Affected:
94 ( 0FUNDS_CTR )
111 ( 0VERSION )
94 ( 0FUNDS_CTR )
111 ( 0VERSION )
Authorization Check Complete
-
-
Authorization Check
Detail Check for InfoProvider BP_M001
Preprocessing:
Selection Checked for Consistency, Preprocessed and Supplemented As Needed
Subselection (Technical SUBNR) 1
Check Node Definitions and Value Authorizations...
Node- and Value Authorizations Are OK
Subselection (Technical SUBNR) 2
Check Node Definitions and Value Authorizations...
Node- and Value Authorizations Are OK
End of Preprocessing
-
Filling the Buffer...
...Buffer Filled
Main Check:
-
Subselection (Technical SUBNR) 1
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Authorized
Subselection (SUBNR) Is Authorized
-
Subselection (Technical SUBNR) 2
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Authorized
Subselection (SUBNR) Is Authorized
Authorization Check Complete
-
-
Authorization Check
Detail Check for InfoProvider BP_M001
Preprocessing:
Selection Checked for Consistency, Preprocessed and Supplemented As Needed
Subselection (Technical SUBNR) 1
Check Node Definitions and Value Authorizations...
Node- and Value Authorizations Are OK
Subselection (Technical SUBNR) 2
Check Node Definitions and Value Authorizations...
Node- and Value Authorizations Are OK
End of Preprocessing
-
Filling the Buffer...
...Buffer Filled
Main Check:
-
Subselection (Technical SUBNR) 1
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '110'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Authorized
Subselection (SUBNR) Is Authorized
-
Subselection (Technical SUBNR) 2
Supplementation of Selection for Aggregated Characteristics
No Check for Aggregation Authorization Required
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 02
0VERSION I EQ 110
Not Authorized
Following Set Is Checked Comparison with Following Authorized Set Result Remaining Set
Characteristic Contents
0FUNDS_CTR
0TCAACTVT
0VERSION
SQL Format:
FUNDS_CTR = '1212130000'
AND TCAACTVT = '03'
AND VERSION = '000'
Characteristic Contents
0FUNDS_CTR I EQ 1212130000
0TCAACTVT I EQ 03
0VERSION I CP *
Authorized
Subselection (SUBNR) Is Authorized
Authorization Check Complete
11-26-2008 8:17 AM
Your Analysis Authorization contains the following statements:
0TCAACTVT I eq 3
&
0TCAACTVT I eq 3
IThey seem to be me missing the leading zero (it should be 02 and 03), this might lead to difficulties. Probably you generated the authorizations from a DSO and you did not activated the Alpha Conversion for field 0TTCAACTVT. Try generating the authorization again.
Furthermore you seem to be lacking the ':' authorization for FUNDS_CTR
Good luck!
Kind regards,
Lodewijk