This content has been marked as final. Show 4 replies
I'm sorry but the correct answer cannot be simply "don't do that". The catalog shared folders should definitely be available in BI Publisher. They were in version 10, and they should be in version 11.
In my installation, the shared folders were available until I integrated Fusion Piddleware security with Active Directory. With the proper roles set up, my AD user can see the correct folders within the shared folders of the catalog, but only through BI Analytics. When I try to view the exact same folder in BI Publisher, it issues this error to the logs:
[2012-02-26T16:40:27.486-08:00] [AdminServer] [WARNING]  [oracle.xdo] [tid: 38] [userId: <anonymous>] [ecid: 4d7950b0e2efed24:-582c29db:135b23aefcd:-8000-0000000000005493,0] [APP: bipublisher#11.1.1] Context: 0, code: O9XNZMXB, message: access denied for user to path /shared.
This fragile Oracle system has clearly lost track of the user who is logged in. Evidence of this is also in the log, immediately upon logging in as my user:
[2012-02-26T16:40:05.996-08:00] [AdminServer] [WARNING]  [oracle.xdo] [tid: 23] [userId: <anonymous>] [ecid: 4d7950b0e2efed24:-582c29db:135b23aefcd:-8000-000000000000547f,0] [APP: bipublisher#11.1.1] java.lang.SecurityException: Security violation: /RAININ/Finance/Month End/Segmentation ad-hoc.xdo, user: *<my_user_name>*, permission: 2240
Clearly it knows my username, because it had some problem giving *<my_user_name>* access to that report in the Month End folder.
Why can't I see the same folder in the Shared Folders through BI Publisher as I can see through BI Analytics? Hmmm?
One thing I did find is that when I added Read permission on Shared Folders to a role of which my user is a member, I could then see that folder in BIP. However, I can also see all of its subfolders, which I should not be able to do. Clicking on them gives the error:
[2012-02-26T17:07:40.386-08:00] [AdminServer] [WARNING]  [oracle.xdo] [tid: 11] [userId: <anonymous>] [ecid: 4d7950b0e2efed24:-582c29db:135b23aefcd:-8000-0000000000005d24,0] [APP: bipublisher#11.1.1] java.rmi.RemoteException: access denied for user to path /shared/Samples.
As far as I can tell, there is no way to give access to just one folder within Shared Folders without allowing the user to see all the other subfolders.
Any solution for this issue.
I am hitting the same problem. We have set of folders in the catalog and these folders are accessible from the analytics url.
The shared folders are not available in xmlpserver url.
If i add read permission to the group which my user id belong on the shared folders i can access the catalog folders from xmlpserver url.
But it lists all folders in the catalog.
Is there a way where we can restrict only one group to access a specific folder in both analytics and xmlpserver url ?
OBIEE version : 188.8.131.52.1