No Permissions to Access Data Source

[kazanec]

I've created a secured cube in Transformer 8.3 and published it to CC. I used the wizard within Transformer to create my data source and package, restricting powercube authentication to a single namespace. I tested the data source connection and it came back successful. But, when I try to open my package in one of the studios, it errors out because I do not have have access to the data source. I looked at the permissions on the data source in Cognos Administration and my user does have access.

SSO is enabled on my server. Users are authenticated against the same namespace as specified under restricting the powercube authentication to a single namespace. 

Any help is appreciated. Thanks.

[MFGF]

Hi,

What access does you login have?  I'm guessing you will need traverse, read and execute privileges as a minimum.  You might also want to check the privileges of the connection within the data source too...

Regards,

MF.

[kazanec]

My account is a member of the Systems Administrators group. I've checked the permissions within the datasource itself, and my account should have full access. Also, if it helps any, if I attempt to use said datasource in Framework Manager, I get an error as well.

Code Select Expand

QE-DEF-0314 An error occurred while calling the content store for the data: 'my_cube_name' information.
CCL-RCI-0002 The Soap server returned a Soap fault.
The error messages from WASP engine:
CM-REQ-4222 You do not have the permissions to access this data source.

[kazanec]

Issue resolved.

Had setup SingleSignOn using IdentityMapping. When I restricted access to a single namespace, REMOTE_USER was denied access because it didn't belong to said namespace. As soon as I removed the IdentityMapping option, everything worked fine.

[MFGF]

Hi,

Thanks for getting back to us with the solution.  Glad you managed to resolve the problem.

Best regards,

MF.

[kazanec]

Has anyone been successful with using SSO and restricting to a single namespace? Do I need to setup Kerberos delegation? Is there a way of granting REMOTE_USER access to my CM?

Thanks.