access control objects

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 6:43 am

i have created a TI , one of the input parameter is user name .
and this user name is comming from the websheet which it calls my TI.
the purpose of using input parameter as user, is to get group information of the logged in user from the websheet.
This am handling in TI script by control objects cube.
i have a question . only an admin can able to access the control objects by running TI.?

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 10:05 am

A TI process runs with admin access. One the user has access to it, it’s fine.
Also, right-click a TI process name and set the security access checkbox, should you need the process to make changes to security.
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 10:35 am

Thanks for the reply,

in tm1web once non admin user login . and runs ti . ti is not trigerring .

pls need help

declanr
MVP
Posts: 1628
Joined: Mon Dec 05, 2011 11:51 am
OLAP Product: Cognos TM1
Version: PA2.0 and most of the old ones
Excel Version: All of em
Location: Manchester, United Kingdom
Contact:

Re: access control objects

Post by declanr » Sun Nov 03, 2019 10:42 am

As an admin go into the }processsecurity cube and find that TI process - then put READ in the cell that corresponds with a security group that the user belongs to.
You can also right click on processes and go to security that way for the same purpose.
Declan Rodger

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 10:56 am

Thanks For the Reply,


as am an admin i have made to read for the TI which needs to be executed in websheet. and i kept cube access also to write .

but still its not triggering . please help

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 11:17 am

Does it work if you execute the process from the button, with an admin user ?
How did you see that the process did not run - in the TM1 message log ? Did you use AsciiOutput to write certain test values to text files, to debug the process ?
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 11:40 am

actually i have written basic TI with hard coded values .

For Example: i have used cellputn to input a value for one combination into the cube.

it worked when i execute the process from the button and am an admin user.and i can see the cellputn value in the cube.

later i cleared the value , this time when non admin user logged in and execute the process from the button .i got process executed successful

but i dont see the value in the cube.

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 11:44 am

This is about as basic as it gets.

The user has READ access to the process and you see in TM1 server message log that the process ran ?
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

tomok
MVP
Posts: 2631
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: access control objects

Post by tomok » Sun Nov 03, 2019 11:45 am

declanr wrote:
Sun Nov 03, 2019 10:42 am
As an admin go into the }processsecurity cube and find that TI process - then put READ in the cell that corresponds with a security group that the user belongs to.
You can also right click on processes and go to security that way for the same purpose.
Did you perform these steps? User cannot execute a TI process without at least READ access to the process.
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 11:50 am

tomok wrote:
Sun Nov 03, 2019 11:45 am
declanr wrote:
Sun Nov 03, 2019 10:42 am
As an admin go into the }processsecurity cube and find that TI process - then put READ in the cell that corresponds with a security group that the user belongs to.
You can also right click on processes and go to security that way for the same purpose.
Did you perform these steps? User cannot execute a TI process without at least READ access to the process.
yes i peformed all these steps. and in message logs also i have got saying :

2144 [1c1] INFO 2019-11-03 11:44:24.497 TM1.Process Process "TEST_WEBSHEET": finished executing normally, elapsed time 0.00 seconds.

but i dont see any value

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 11:52 am

Wim Gielis wrote:
Sun Nov 03, 2019 11:44 am
This is about as basic as it gets.

The user has READ access to the process and you see in TM1 server message log that the process ran ?

yes the user as read access to the process, and i can see tm1 server message log that process ran.

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 11:56 am

You don't have cell security applied by any chance ?

In any case, please provide screenshots of:
- the TI process
- the cube view, such that the name and the element references are visible
- the security setup
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 12:29 pm

Please find the below script i was using in prolog section.

CellPutN (36,vsCube ,'2020' ,'RTB' ,'Capex' ,'0001' ,'Recharge' ,'P1' ,'Budget Version1' ,'Standard' ,'BM1' ,'Fittings - office layouts_Capex Template' ,'MFZ0977' ,'NRG615' ,'CL0003' ,'BA' ,'990011' ,'NA' ,'JAN' ,'Validity');

i can see the value in the cube when i execute it as an admin user.
test_process.PNG
test_process.PNG (4.64 KiB) Viewed 321 times
and i have selected my data source as none for the TI. please find the attachment access given to the process TEST_WEBSHEET

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 12:38 pm

The user is part of at least one of these groups ?
What does the user see if he does not see the 36 ?
Is the user using a sandbox ?
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 2:41 pm

Wim Gielis wrote:
Sun Nov 03, 2019 12:38 pm
The user is part of at least one of these groups ?
yes he is part of one of the group.
What does the user see if he does not see the 36 ?
user can see data in the tm1 web view, where as admin user not able to see the data in cube view.
and the value in tm1 web view looks in blue color.
Is the user using a sandbox ?
no he is not using any sand box.
test_process1.PNG
test_process1.PNG (56.93 KiB) Viewed 273 times

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 3:39 pm

You have 990011 in the CellPutN (is it a cost center ?) and your screenshot is showing something else. Please show the correct screenshot that matches the code, or change the code to match the screenshot.
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 3:48 pm

Wim Gielis wrote:
Sun Nov 03, 2019 3:39 pm
You have 990011 in the CellPutN (is it a cost center ?) and your screenshot is showing something else. Please show the correct screenshot that matches the code, or change the code to match the screenshot.
yes its a cost center, and the view is same as shown in the screen shot and for the validity and cost center i can see value 36 in tm1 web view.
where as i dont see the same data cube view for the base sand box.

Wim Gielis
MVP
Posts: 2258
Joined: Mon Dec 29, 2008 6:26 pm
OLAP Product: TM1
Version: PAL 2.0.8
Excel Version: Office 365 - latest
Location: Brussels, Belgium
Contact:

Re: access control objects

Post by Wim Gielis » Sun Nov 03, 2019 4:54 pm

Please show a screenshot with 1 cell !
The exact cell that you target in the CellPutN.
A screenshot with the non admin user.
Best regards,

Wim Gielis

Excel Most Valuable Professional, 2011-2014
http://www.wimgielis.com ==> 109 TM1 articles and a lot of custom code
Newest blog article: Set up a TM1 model with AutoHotKey as a service or application

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 5:10 pm

Wim Gielis wrote:
Sun Nov 03, 2019 4:54 pm
Please show a screenshot with 1 cell !
The exact cell that you target in the CellPutN.
A screenshot with the non admin user.
How does it make difference.when all combination in the view is same .only the cost center is 990011 diff

vikram.balaji16
Posts: 17
Joined: Tue Oct 29, 2019 3:50 am
OLAP Product: IBM Cognos
Version: 10.2.2
Excel Version: 1808

Re: access control objects

Post by vikram.balaji16 » Sun Nov 03, 2019 5:12 pm

In my architect cube view sand box is base and in the tm1 web view sand box is default. I can see data in sand box default, where as in sand box base I don't see the value

Post Reply