Community
Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Read only

Authorizations missing for aggregation in SAP BI Security

surya_appala
Active Participant

‎2018 Mar 07 1:23 PM

0 Likes
3,808

Hello Everyone,

I see a user getting an error saying "Authorizations missing for aggregation (:)"

User has below AA

AA - ABC123

Characteristic - C123 with value 0001

AA - XYZ123

Characteristic - C123 with values 0001, : and #

Both the AA has the same set of Info objects/Characteristics. This means Authorizations will gets union and combined into 1 at runtime check.

Trace file is highlighting AA ABC123 with Characteristic C123 in RED.

From my understanding user has access. Could someone please suggest what might be missing. Thank you.

Hello Everyone,

I see a user getting an error saying "Authorizations missing for aggregation (:)"

User has below AA

AA - ABC123

Characteristic - C123 with value 0001

AA - XYZ123

Characteristic - C123 with values 0001, : and #

Both the AA has the same set of Info objects/Characteristics. This means Authorizations will gets union and combined into 1 at runtime check.

Trace file is highlighting AA ABC123 with Characteristic C123 in RED.

From my understanding user has access. Could someone please suggest what might be missing. Thank you.

Reply
5 REPLIES 5
Read only

Colleen
Product and Topic Expert
Product and Topic Expert

‎2018 Mar 26 8:45 AM

1,881

do both AAs have the same restricted characteristics that the multiprovider contains?

Have you run the trace via RSECVAL to see how the AAs are being evaluated for the report?

Read only

surya_appala
Active Participant
In response to Colleen

‎2018 Apr 19 2:12 AM

0 Likes
1,881

From my understanding RSECVAL is a table. I do not see any option to trace from it. May be I am missing something. Please guide if there is any option to trace from RSECVAL. Thank you.

Read only

Colleen
Product and Topic Expert
Product and Topic Expert
In response to Colleen

‎2018 Apr 19 10:37 AM

1,881

you are right and the fault is with me and a failure to multitask. I meant RSECADMIN and switch on a trace from there to evaluate the Analysis Authorisations. You can also check STAUTHTRACE for your S_RS_COMP authorisations

Read only

surya_appala
Active Participant
In response to Colleen

‎2018 Apr 19 12:34 PM

0 Likes
1,881

Okay Thank you Colleen. Issue is with AA and not from general authorizations. 🙂

Read only

surya_appala
Active Participant

‎2018 Apr 19 1:58 AM

0 Likes
1,881

Hello Colleen,

Sorry for the late reply.

Both the AA are having same set of Characteristics restricted. But Info Provider is different. I think this is the issue. In order to make union of Analysis Authorizations, both should have same Infoprovider and same set of characteristics. Thank you.

Regards,

Surya