Implying Security on Business Object XI 3.1 Universe having SAP BW as Source Applies to: SAP Business Object XI 3.1. For more information, visit the Business Objects homepage. Summary This article describes how to restrict Business Object XI 3.1 Universe to particular users or groups, thus ensuring security. Author: Sourav Shirsha Banerjee Company: Infosys Limited Created on: 06 September 2011 Author Bio Sourav Shirsha Banerjee is working as a System Engineer in Infosys Limited and has experience of working in data warehousing, BW enhancement for the last 1 year. He is a consistent learner and works proactively to adopt new technology. 2011 SAP AG 1
Table of Contents Introduction... 3 Pre-Requisite... 3 Different Kind of Restrictions... 3 Step by Step Guide to Create a Restriction... 4 Step By Step Guide to Add Users/Groups... 8 Applying Restrictions... 9 Related Content... 11 Disclaimer and Liability Notice... 12 2011 SAP AG 2
Introduction While working in a highly secured environment and critical project it is sometime recommended to create restriction on universes that is needed to avoid unnecessary hazards. Restriction:- Restriction on universe is the allowance of control to read/modify existing or new universes. We can restrict a universe by users or by Group. When a user or a group connects to a universe, depending on the restrictions applied to that universe, objects are available to read/modify, to that group or user. We apply restrictions on universes on two levels: CMS: - In this level of restriction we can restrict the universe/universes from CMC (Central Management Console). This restriction is applied to universes basically by administrator. Universe: - In this level of restriction we can restrict a particular universe to a user or a group of users. This document describes how to imply restriction thus security at Universe level. Pre-Requisite SAP BW Net Weaver 7.0. SAP Business Object XI 3.1 Universe Designer. Different Kind of Restrictions We can define multiple restrictions on a universe, which can be modified at any time. Following are the different types of restrictions Connection: - We restrict the universe at connection level to data source. Object access: - We can restrict universe objects by this. Query controls: - We can restrict the result set of a query as well as query execution time. SQL generation options: - Helps in restricting SQL generated queries. Not applicable when SAP BW is source. Row access: - Restrict the result set of the query using Where Clause. Not applicable when SAP BW is source. Alternative table access: - We can replace a table referenced in the universe by another table in the database. Not applicable when SAP BW is source. 2011 SAP AG 3
Step by Step Guide to Create a Restriction Go to Tools -> Manage security -> Manage Access Restriction The Manage Access Restriction dialog box opens. Create New. 2011 SAP AG 4
The Edit Restirction dialog- box appear. The first TAB appears Connection.This tab helps in Putting restriction at Connection Level. Mention the name of the restriction.choose the connection from Connection field tab. Choose the control tab.here we can limit the size of the result set and the execution time of the queries. The above number on each category are default. We can change the same based on our requirment. 2011 SAP AG 5
Select the Object tab. This tab help in putting restriction at object level.we can apply restriction on multiple object depending on requriement.click Add. Click Select. The selection dialog box appears. Select the required object.click ok. Click Ok 2011 SAP AG 6
To add other objects to restriction repeat the above process. The above example creates restriction on Connection, Object access, Query controls level. Once the restriction is defined the same appears in Available Restrictions panes of the Manage Access Restriction dialog Box. 2011 SAP AG 7
Step By Step Guide to Add Users/Groups For adding restrictions we need to add users/ groups. Go to Tools -> Manage security -> Manage Access Restriction. Once the Dialog box appears, select Add user or group. The following dialog box appears From Available groups and users panes select the user and groups on whom we want to put restrictions. We can also search the same. Click Ok after the user/groups are added. 2011 SAP AG 8
Applying Restrictions Applying Selected Once the Users/Groups and restriction is added for first time the Apply button get activated and we go ahead activating the same restriction to particular users/group. The following screen shot demonstrate the same. Before--- Restriction is applied. Click Apply after selecting the Restriction as well as user/group 2011 SAP AG 9
After--- Restriction is applied. Click ok to apply the restriction on the selected users/groups. 2011 SAP AG 10
Related Content http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_universe_builder_guide_en.pdf BusinessObjects Enterprise XI 3.1 SAP Help Portal Page SAP BusinessObjects Solution Portfolio Knowledge Center For more information, visit the Business Objects homepage 2011 SAP AG 11
Disclaimer and Liability Notice This document may discuss sample coding or other information that does not include SAP official interfaces and therefore is not supported by SAP. Changes made based on this information are not supported and can be overwritten during an upgrade. SAP will not be held liable for any damages caused by using or misusing the information, code or methods suggested in this document, and anyone using these methods does so at his/her own risk. SAP offers no guarantees and assumes no responsibility or liability of any type with respect to the content of this technical article or code sample, including any liability resulting from incompatibility between the content within this document and the materials and services offered by SAP. You agree that you will not hold, or seek to hold, SAP responsible or liable with respect to the content of this document. 2011 SAP AG 12