Enterprise Manager fusion middleware control 12c. Weblogic Server administration console 12c.
(if this is not enough info about versions, don't hesitate to ask for more).
I am not sure if i should ask this question in this category of the communtity or to create a technical SR in my oracle support. this is my first time, if i wasn't supposed to post it here please show me the correct path.
As seen in the question, i will give context on what i did: i created a new user in Weblogic Server administration console 12c, put the user in a group and in Enterprise Manager fusion middleware control 12c gave that group a role. further i logged in with the weblogic admin user in oracle analytics (keep in mind the whole process i did with the weblogic admin user) to give the "role" some privileges (i am not sure if i gave the right ones, i can give more details on that if needed). Now when i log in with the user in oracle analytics and go to shared folders and open the dashboard i get the error. I also gave permissions to the folders, workbooks, analyses to check if that had something to do with it.
I have checked if there was anyone with a similar problem. There was one and the solution for that problem was to turn on the single sign on provider in Enterprise Manager fusion middleware control 12c. I did all that, restarted servers and still getting the error on the user.
I'm looking forward to some troubleshoot ideas or if there is a proper solution for this, let me know!
I have found the solution to my problem.
Source:
I have implemented the logic what has been stated in the post above and that solved the issue i was having.
So in this forum there were two problems that have been solved on what i needed. Thank you all!
Please let us know the exact version of Oracle Analytics being used and also is the issue seen only with dashboards which has some DV content embedded on it. Kindly confirm.
@Sumanth V -Oracle i am not sure where to find it on analytics itself (if i go to about, i dont see any version, but if it helps i''ll still show you some pictures) maybe this will help? i found this one the weblogic server: 12.2.1.4.0. As to my current knowledge of analytics i've only used actions, workbooks and some analyses on the dashboard. I don't have made any other type of dashboard.
Please refer the below document which should help you in retrieving the version details:
How To Determine The Version Of Oracle Analytics Server (OAS) or Oracle Business Intelligence (OBI) (Doc ID 2289049.1)
Please confirm if you are able to seamlessly navigate between /analytics to /dv without any issues. Also, is the issue seen when opening any analysis, workbooks or only specific Dashboards?
@Sumanth V -Oracle i have check the document and the one with: /analytics > help > About, after clicking help it brings me the OAS help page and dont see details about a version :(, further with this one: /dv > profile > About, is the previous picture i showed. I went to the server itself but couldn't find the command that were specified. I did try one where the bitools are located, it was called ./patchrpd.sh and gave me this result (see screenshot):
i can navigate seemlessly between the two if i only use the weblogic admin user but when i log out and log back in with the new user i get insufficient permissions eventhough i gave (or i think i gave) the right permissions. It starts to let the new user log in when i close the window and open a new one and log in with the new user (only logs in in classice home). the new user seems to get the insufficient permissions for dv: http://IP_address/dv/ui/home.jsp?pageid=home but for this url: http://IP_address/analytics/ it works (only after closing and opening an new window and logging out of the weblogic user). Sometimes i had to clear cache for it to work properly but i think the enabling of the sso providing fixed the cache problem. But the problem prior to the cache still persists.
Further after logging in with the new user in the classic home, i have only tested it on dashboards and a workbook (no dashboard). the dashboard one gives me bootstrap failure and the workbook just gives me insufficient permissions.
@Sumanth V -Oracle or for anyone who is willing to help me, I don't know if this information will help but before the bootstrap failing error i've gotten some access denied error for a path when trying to open the dashboard. so i was troubleshooting on how the new user assigned to the role could only view the dashboard. So i gave that role all permissions, like all of it in the administration section from the classic home. Right after giving all permissions to the role and testing if the user could open the dasboard that was the first time i received the error. i've also tried to test it on another new user and with given permissions to access dashboard etc and the error still persists.
Didn't fully read all the details as it sounded like most was about guessing what version you have. It is defined you have Oracle Analytics Server, the version is still unknown...
You have an issue when opening DV with a new user.
It sounds like you have been messing around the "classic" permissions, there is nothing in the "classic" home controlling DV permissions.
DV permissions comes from policies that are assigned to the application role. That's why most security models do inherit from the default application roles, so that you don't have to reinvent the wheel and start guessing that policies are needed. Mostly because there is little to no documentation about what detailed policies you need, there are just covered in a generic way saying what the policy sets do.
In addition to what was mentioned above, for the problematic user login classic home, click on User Profile icon and My Account->Application Roles and verify the Roles assigned. As Gianni mentioned for DV access you can make the customer role or group, a member of a default application role like DVConsumer DVContentAuthor so it inherits the proper permissions for dv access.
@Gianni Ceresa ,@GayathriAnand-Oracle thanks for the insight. I applied the changes (i gave the group the dvconsumer role) and fixed the problem i was having.
For anyone who are still willing to help, I have one final request: now i can open workbooks with the user with the dvconsumer role and see the reports in the workbook, but when opening the dashboard i get blank visuals. These visuals do show and load when i check on with the user it has been created (weblogic admin user). What can be the issue here?
Security is a serious thing in Oracle Analytics: a security model can be extremely complex because it's meant to be an enterprise platform.
If you don't see data, it's once again because of security.
But nobody else than you has that environment available and know what the security model looks like.
Adding your new user to the DV Consumer role is not THE solution. It just did work because apparently your default DV Consumer application role has the default policies assigned. But you maybe just introduced a security risk in your platform.
If you aren't the administrator/owner of that environment, ask them to tell you what application roles are required. If you are the person in charge, you should know your whole security model and take decision of what privileges or application roles your user should be member of.
Never play randomly with security, you will pay a price for it at some point (at the next audit or when you have data accessible by users who shouldn't be able to see it).
@Gianni Ceresa perhaps there was some sort of miscommunication, my apologies. I will take your advice to the utmost and will look deeper into it. I am the person in charge and the user i created was just a test user to test for other users in future roles, but thanks for your advice/concern :) . With that being said, can you maybe point me in the direction where i should be looking with the dashboard issue i'm facing or is can i read it somewhere?
