BW Query designer security issue

Question: Hi all,

We have a role created for power users which should give them access to open the Z-queries and save them as Y-queries and then be able to change their own Y-queries.

When the power user opens the Z-query using the query designer, the characteristics and the default values are greyed out. And get a error message "You are not authorized to query XXXXX".

Though the role allows them to save the Z as Y-query, they are not able to edit their Y-query (due to the already greyed out issue while opening the z-query).

When I add the actvity =02, 06 in addition to the previously assigned 03, 16 for both COMP and COMP1 objects, The user is now able to open the z-query without any error message and is able to save to as Y-query and edit it.

COMP and COMP1 have acvtivity = * for the Y-queries.

======================
Now,
by adding the activity = 02, 06, I end up giving the power users access to change and delete Z-queries, which should not happen.

Can somenow help me understand how to avoid them from changing and deleting the z-queries but at the same time give the right solution.

Thanks.

Answer:
and we are on BI 7.0

Is this a OSS not issue in BI?

Answer:
use two instances of comp1 in the role
1. 03 and 16 for z queries with field RSZOWNER as *
2. 02 and 06 for y queries with field RSZOWNER as $USER. The second object allows them to edit the saved Y queries.

Answer:
Thanks Mithlesh

I used the S_USER_AGR to resolve this. And it works. Though this object was already added, I miss spelled (should not trust my typing skills) the role name.

Removed 02 and 06 activity from both comp and comp 1 objects.

But I still see the pop up message which says "you are not authorized for query xxxx" when I open the Z query using the query designer. When I give 02 and 06 activities for comp and comp 1 objects, the error message does not appear anymore. I found an OSS note 946027 about this problem which suggest appling SP 9 for BI 7.0 but we are already on SP10 for BI 7.0.
Copyright ?2007 - 2008 www.jt77.com