SUMMARY:
This Technical Note describes an issue that occurs in Strategy 10.4 Web and later versions when users try to save a data import cube to their My Reports folder. This issue has been classified as a defect by Strategy. A workaround is provided in all affected versions, and is slated for a fix in a future release.
SYMPTOM:
In Strategy Web 10.4 and above, when users try to save a data import cube to their My Reports folder, they receive the following error message “You do not have the necessary privileges to access this resources. Please contact the Strategy Server Administrator”. However, the user already has the “Save to My Report Folder” privilege required to save objects to their My Reports folder.
STEPS TO REPRODUCE:
Follow these steps to reproduce the issue:
1) Create a test user
2) Assign the user all "Web Reporter" privileges, all "Web Analyst" privileges (except "Web save to Shared Reports" privilege), all "Web Professional" privileges, and any other basic privilege to use Web features.
3) Log into Web as the test user
4) Select "Add External Data" -> "File from Disk" -> "Drag files here or Choose files" -> Finish -> Save in "My Reports" folder. User receives error message.
CAUSE:
This is an identified defect in Strategy verion 10.4 and above. This occurs as Data Import cubes are complex objects. They require several system objects to be created automatically by Strategy. These system objects are created in a shared folder which the user does no thave the privilege to do. These should not be flagged for checking privileges as they are being created by the system and not be the user.
ACTION:
This issue has been addressed in Strategy 10.7 (feature release) and upwards and in the Hotfix 3 and upwards for Strategy 10.4 (Platform release).
Please apply the latest available Hotfix if in Strategy 10.4 or upgrade to Strategy 2019 to benefit from the fixes.
WORKAROUND:
Grant the user "Web save to Shared Reports" privilege in “Web Analyst" and then deny “Write” permissions/ACLs to the Public Object folder or Report folder in developer to work around this issue. With this setup the user can still not save to the shared reports folder manually but can create data import cubes in their own folders.
Note: This issue still reproduces even if user has all privileges except for the "Web save to Shared Reports" privilege in “Web Analyst".
The Strategy Internal Reference Number for the issue discussed in this technical note is DE45194.