Regarding Analysis Authorization

[gaddam_vinaykumar]

Hello,

Currently we( Security team ) are trying to handle an authorization issue in our project, where the users having access to the role( in question ) are able to access all the org units through a BI query.

Ideally they should be able to access only their org unit...... I'm not referring to the summarized data here.

I checked the role; it contains,

S_rsec with * for each & every field, and

S_rs_auth with the analysis authorization having 0orgunit with I CP *.

I checked the query too, the variable Org Unit is of Hierarchy Node type & has Processing By=Manual Input.

Now can you please tell me, is this analysis authorization( in S_rs_auth ) causing the issue?

Thank you.

[gaddam_vinaykumar]

Right, we are addressing that too.

Thanks for your reply Shivraj.

[Former Member]

Yes , remove * for characteristic 0ORGUNIT and maintain only those ourg units for which you want to give access to users via this AA.

Thanks

Amit

[gaddam_vinaykumar]

Thanks for your reply Amit.

So can I say; AA containing value auth( I CP * ) can affect a variable, which is of Hierarchy Node type?

[Former Member]

Hi Gaddam,

  Does this solution provided by Amit worked for you?

This is possible by restricting query also .

In query designer , restrict Org unit  for the Query XYZ you are looking for.

Thanks,

Varun Jain

[Former Member]

Yes, * will provide access to hierarchy nodes as well...

[gaddam_vinaykumar]

Thanks Amit, for the confirmation.

My understanding was, hierarchy node variables get values only from hierarchy auths.

[shivraj_singh2]

Vinay,

Just adding one important point here, S_RSEC should not be assigned to reporting users. Reporting Users can get sufficient access from COMP, COMP1 & S_RS_AUTH objects.

Regards,

Shivraj

[gaddam_vinaykumar]

Right, we are addressing that too.

Thanks for your reply Shivraj.