Issue: A user whose user name includes an asterisk (*) has unauthorized access to view information for similar user names.
Solution: Do not use the asterisk character (*) in user names or in Common Names (CNs), because it is the wildcard character used for searches performed in Shared Services Registry. For information about supported characters in user names, see the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.