cancel
Showing results for 
Search instead for 
Did you mean: 

User Access Rights in Hierarchy Nodes BEx Query

Former Member
0 Kudos

Hi experts,

have been researching for a while, but seems a bit difficult to find the answer to my issue. So I have a query which uses hierarchical reporting and I would like to restrict different users from looking at different node values in diffierent levels for ex.

Cars (Level 1)

     Model X (Leve 2)

          Type X1 (Level 3)

     Model Y (Level 2)

          Type Y1 (Level 3)

   

So user X should see only Model X and its child nodes. User Y should see only Model Y and its child nodes. Finally, User Z should se the whole hierarchy like it is above.

I know one solution is to restrict the hierarchy in the query, save the query and publish it to the Role that this user is assigned. However this is not flexible if there are 100 users and each of them has to access a specific node value in the hierachy. If following the above approach, this would mean to create 100 Roles and 1 user for each role.

Could anyone please suggest any possible solution for the above scenario?

With Best Regards,

Regys

Accepted Solutions (1)

Accepted Solutions (1)

kohesco
Active Contributor
0 Kudos

Hi,

For our HR reports we use a customer exit variable reading a DSO, where each user has his org unit and the ESS/MSS parameter assigned to it, ESS meaning only the org unit it self and MSS all the org units beneath the specified org.

In this way the users are only able to see allowed data.  The hierarchy will only show posted values.

Grtz

Koen

Former Member
0 Kudos

Hi Koen,

thank you very much for the response. As my knowledge is limited in ABAP and customer exits, could you please give me some hint on the ABAP code for this customer exit? Also how do you assign the ESS/MSS parameter to the user. In the customer exit or is there any other way?

Thank you in advance for your consideration.

Best regards,

Regys

kohesco
Active Contributor
0 Kudos

Hi,

You can use BI content for that - Structural authorization is is called...check out ... http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e1cba990-0201-0010-43ae-af579aee7... grtz Koen

Former Member
0 Kudos

Hi Koen,

thanks for the suggestion. I will look through it.

Best Regards,

Regys

Answers (0)