Question:
Hi,
I am creating security roles for BW queries. Among the variious requiremnts one of them is :
** Open existing query starting with "Y' and will be able to save it as
query starting with "Z".
Please let me know which object/s to maintain to achieve this requirement.
Thanks in advance
Deb
Answer:
You don't say what version you are on, but for 3.x, the authorization objects you want to look at are S_RS_COMP and S_RS_COMP1.
Try running a trace to see what are being checked for these objects.
Mike
Answer:
Hi ..
We are using BW 350 ( patch level 15) on AIX with ORACLE 9.2.0
Answer:
IN R_S_COMP field RSZCOMPID you can restrict the Technical name of the queries a user can execute (16) read (ACTVT 03) Change (ACTVT 02), Create (ACTVT 01) etc. Name ranges can be Y* or Z* or any further restriction you want.
Also be ware that as of 3.0B you can restrict user not to be able to change queries someone else has build : object S_RS_COMP1 Field RSZOWNER value ($USER). the restriction works on teh activity code enterd in both S_RS_COMP and S_RS_COMP1. pls test carefully as it can creat leaks hen configured wrongly.