Security implications of using multicubes vs. basic cubes

Security implications of using multicubes vs. basic cubes

Question

Does anyone have any experience with reporting authorization checks and multicubes? I'd like to know if the reporting authorization checks on basic cubes are checked when the user accesses them via a multicube. What happens when different checks are on the multicube and the basic cube?

Are there any other security considerations for using multicubes vs. basic cubes?

We have been advised by SAP that the consistent use of multicubes regardless of whether we need them technically or not (so an additional layer of abstraction from the data) will benefit us in terms of flexibility in data modeling going forward. We are assessing the cost/benefit.

The rule as stated by the BW team would be: Queries should only ever be created on a multiprovider, never on a basic cube. Even if that means creating a multicube with only one cube attached. This would limited via security.

Reply 1

The info-providers that are applicable to a reporting authorization object are selected in transaction RSSM. The multi-providers are selected in the same manner as basic info-cubes and ODS. For example, if you have the info-object 0Plant flagged as authorization relevant and have created a reporting authorization object, you can select the info-providers to apply the check.

Reply 2

If you have authorization on the basic cube they will be checked if accessing via multicube. Putting the authorization on the basic cube

    Requires Free Membership to View

    Login

    When you register, you will start receiving targeted emails from my award-winning team of editorial writers. Our goal is to keep you informed on the hottest topics and biggest challenges faced by SAP professionals today.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSAP.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSAP.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

is better as it is more manageable.

Using a multicube in circumstances where there is only one cube can be advantageous as you can do maintenance to the basic cube underneath the m/cube with out impacting the users (i.e. build a shadow cube)

SAP now recommends now using m/cubes wherever possible.


This tip presents an SAP FAQ discussion thread. The SAP FAQ is the latest addition to SearchSAP.com's portfolio of collaborative, interactive and independent support resources for the SAP community. By registering as a member of the SAP FAQ network, you'll have the opportunity to trade lessons learned and practical advice with other SAP users on a range of SAP-specific topics. Sign up for free SAP FAQ membership here.

This was first published in September 2004

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

Back to top