Auth. Check while executing Query with Hierarchy based infoObjects

[Former Member]

Hello,

We made an info object 0CRM_TR as authorization relevant and is a hierarchy based infoobject

We created analysis authorization on the above info. object with hierarchy based authorization

to a specific territory hierarchy node (Say C) in rsecadmin

and assigned the analysis authorization to role.

Now we have a query which has this infoobject (0CRM_TR) with a variable assigned to the infoobject of type optional,

now the users when they execute the query, they do not want to the select the hierarchy from drop down or F4

but instead wanted to execute the query as it is with blank value in the variable and wanted the output to just to

limit to the authorized hierarcy node(c).

But here the output is returning all the hierarchy data and does not give any authorization error.

Any idea what more settings to be implemented? even the variable of user authorization does not even perform authorizatin check.

We donot want the variable to be made to "Mandatroy" and enable for ready for input.

Hierarchy Authorization on 0CRM_TR given in RSECADMIN.

Hierarchy TERR_RI0210_0001/20060630//0CRM_TR

Nodes A29CCBC8E98CE34A9B4CB87A4C606921

Type of Authorization 1

Hierarchy Level 0

Validity Period 2

Will award 10 points for best solution. Thanks - Sreeni.

[Former Member]

I have also been facing the similar issue and I know why it is happening, but do not know how to solve it.

Issue --> creted authorization object for TERRITORY (0CRM_TR inforobject is auth relevant) and created hierachy nodes. While creating hiearchy nodes, I selected the Territory HIerarchy and selected perticular node. Now the node_name for this node is GUID which is system specific. So the roles created based on this node works fine is DEV system, but as soon it is transported to QA, the roles does not work because the TERR_GUID is differnent in QA.

So does this means that we have to maintained TErritory authorization manually in all system (DEV, QA, PRD) as GUID's are system specific? This does not seems very right?

Has anyone worked on building BW security based on 0CRM_TR object?

Regards

Pankaj