Authorization Issues with ROles

Hi Experts,
We have total Set of 50 reports and work books...
We need to give around 20(reports and work books) to one user and 20 to another user and 10 to another user...
One user should not see another's reports..What should we do now...How to control this issue...Please help us...
Thanks
Vissu

HI Just assign your queries and workbooks to the repective roles.
Roles are basically for this issues only so that one user can access only queries for the roles which he is authorized.
1)Just go to the rrmx trancation or query designer and open workbook or query and there you have an option third from left to assign to the roles.
2)Just click on any query and the click on that option you will get all of the roles option there and the you can assign which ever role you want.
But it seems you haven't created any role.
just go to PFCG transaction and there you can give the name of the role and whatever user needs to be assigend to that role.in the Menu tab you can see the workbooks and queries which are assidned to that role.
The users that are assigned to that respective role only will be able to see the queries.
Thanks

Similar Messages

Authorization Issue with ODS

Dear all,
I have an authorization issue with two ODS.
One I activated for BEx reporting --> Is working fine in Dev, but I get error with
missing authorization in QUA, althought some authorizations.
Same issue with a newly created ODS, which works in Dev, but gives an error
with missing authorization in QUA.
What can be the reason for this? Any input is highly appreciated!
Cheers,
Claudia

Hi,
check that the role(s) are transported from your DEV and your QA, and that the user has the correct role(s)
Check as well in your QA transaction RSSM for your ODSs objects; it might be that by transporting the ODS, some authorizations have been applied by default.
hope this helps...
Olivier.

Authorization issue with VA02 radio buttons

Hello All,
We are stuck at one authorization issue. The user navigates using tcode VA02.
1)     Execute Tcode -VA02=>
2)     2) puts order number # 100001 =>
3)     press enter =>
4)     press enter =>
5)     Screen: Change (Company Name) Return 100001: Overview =>
6)     Option: Display doc. Header details (looks like a magnifying glass beside PO_date) =>
7)     This bring us to Change (Company Name) Return 100001: header Data =>
8)     select status tab =>
9)     on Status tab lower end there is a button u201CObject Statusu201D =>
10)     Press it =>
11)     Come to Change Status :
12)     On this screen There is Status with status no. on the right side with 7 options
e.g:
u2022     1 BLK Approval Required for,
u2022     2 BL1 Approval for Credit,
u2022     3 BL2 Approval for material Replacer
We need to restrict the radio button access for user for which we are unable to find the authorization object.
Could any one help.
Thanks & Regards
gab

Hi,
Use ST01 to trace the user activities and check which objects its hitting when you click on those buttons, then you can restrict radio buttons using those objects.
I have'nt run the tcode myself and performed the steps you mentioned, but if you think its calling other transaction from those buttons you can manage tht in SE97, or add the t-code VA02 in the S_tcode auth object in PFCG.
Hope this should get you going
Thanks,
Vijay

Getting Computer authorization issue with 11.4!

When I try to synch my IPhone 5S on Windows 8.1 / iTunes 11.4, I keep getting a message that "This computer is not authorized for the apps that are installed on our iPhone" and when I de-authorize and authorize it again, it still does not work...keep getting this message...

Hey Ashfromsea,
Thanks for the question. I understand that you are experiencing issues with iTunes Store authorization. The following resources may provide a solution:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/ts1277
Thanks,
Matt M.

Computer Authorization issue with iTunes 11.4

When I try to synch my IPhone 5S on Windows 8.1 / iTunes 11.4, I keep getting a message that "This computer is not authorized for the apps that are installed on our iPhone" and when I de-authorize…

Hey Ashfromsea,
Thanks for the question. I understand that you are experiencing issues with iTunes Store authorization. The following resources may provide a solution:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/ts1277
Thanks,
Matt M.

Authorization issue with Inbound Delievries

Hi,
Can we control authorization of Inbound Delivery creation/Change (VL31N/VL32N) based on receiving point or storage location.
Currently we are only able to control authorization at Plant level which is wide open and client needs restriction at Receiving Point or Storage Location Level.
Let us know the Autho Object to resolve thie security restriction issue.
Regards,

Hi,
As i know, we can control the authorization at the Receiving Point level, but i am not sure about the Storage Location level.
You need to check the authorization object with Basis people.
Thanks
Aktar

Authorization issue with upload functionality

Hi,
I have issue with authorization with upload functionality.
we have country as authorization relavant field. if we are giving some country authorization to user it is giving authorization error at upload functionality.
But if we give all country authorization than it is working fine.
Could you guide me how to avoid this situation. We can not give all country authorization to all the users.
Thanks,
Naman Shah

Hi Naman,
For SAP BPS
Here while defining a variable you can set the user authorization and can determine which all records can be seen by the user.
For eg. Create a variable for country with replacement type User-specific values. Here you can assign values to a particular user id.
Please check for more details:
http://help.sap.com/saphelp_nw70/helpdata/EN/43/548bafbc0f357ee10000000a11466f/frameset.htm
For SAP IP
Please Check: User Authorization in SAP IP
Regards, Rishi
Edited by: Rishikesh Sinha on May 6, 2009 8:01 AM

Sap bi authorizations issue with query designer..

i am using bw 3.x and bi 7 query designer with different kind of probs?...
i am able to see the info provider in query desinger 3.x. but i can see only cubes .i am not able to find dso or infosets or multiprovider.. can anyone suggest is there any authorizations issues..please suggest.
and with BI 7 query designer i am not able to see info providers in info areas folder to design a query..
please suggest if any authorizations should be added or not

hi suman chakravar,
thanks for replying,
can u be little bit clear about the steps.
i went to tcode su01 and entered profile 0bi_all..it doesnt work.
and executed tcode su56.there i can find list of BI related authorization profiles
i added s_rs_all profile to my user. even then i face the same problem.
i can see only queries in query designer of bi 7 format and i can not view info providers.
i can view only cube and infosets and i can not view dso and multiproviders in bw 3.x type query designer
Edited by: satishchow on Dec 14, 2011 3:23 PM

Authorization issue with iPod after replacing main computer hard drive

Anyone know how to fix an authorization problem with iTunes? I've purchased several songs from them over the past couple of years, as well as the entire first season of Weeds. I just replaced my main hard drive since my old was going kaput, reloaded iTunes, imported all of my files (I had them backed up on my storage drive) and now it's telling me over 200 songs (and all of Weeds) cannot be loaded into my iPod because I'm "not authorized to play them on this computer." Anyone else run into this problem? Will contacting iTunes service help, or will they basically tell me to deal with it? I've tried clicking "Authorize Computer" under the Store tab, which seems to work until I actually try to resync my iPod, at which point I get the same "Not authorized on this computer error."
Also, for whatever reason, It asks me to set up my iPod as if it had never been connected EVERY TIME I load it up, despite the fact that all of my preferences remain where I've set them.
Needless to say, it's driving me crazy, and if anyone knows how to fix it before I end up waiting on a support line, I'd appreciate it.
I'm running the newest iTunes (Downloaded today - 7.0.2) on a 30GB 5th Gen iPod with software 1.2.1
Thanks!
-Ben

Try playing one of them from within iTunes. It should ask you for your password. After entering it in you should be able to play them on iTunes and they should sync to your iPod.

Authorization Issue with Custom Pending Value Object and Anonymous Users

Hi,
I am just converting my demo from version 7.1 to 7.2. I am not doing upgrade. The demo uses a custom pending value object USER_REQUEST. The idea is that new employee goes to Java AS as anonymous user and enters her details and store where she will work. After submitting request there is an approval process using custom entry type USER_REQUEST. If the request is approved then IdM converts USER_REQUEST into MX_PERSON entry. This works nice in 7.1 but I am having problems with replicating this in 7.2. I created new UI task accessible by anonymous that creates new USER_REQUEST entry. I also assigned role idm.anonymous with UME action idm_anonymous to UME built in group Anonymous users.
My problem is with the field STORE. This field is a reference field to another custom entry type STORE (this entry type will be used in context based assignment). Every new employee must selects a store where she will work. The problem is when user clicks on button "Select". Web dynpro terminates and returns authorization error. I also tested this with entry type MX_ROLE. I added attribute MXREF_MX_ROLE and same issue. So it seems that just assigning UME action idm_anonymous is not enough to list objects from identity store. I found a workaround for this issue. When I assign also UME action idm_authenticated to Anonymous users then it does not dump and I get a pop up window where I can search for store. It does not seem right to assign idm_authenticated to anonymous users.
Another issue is with display task for entry type USER_REQUEST. I assigned a display task to entry STORE and I set that Anonymous have access to this task in Access control tab. I assigned default value to the field store. So when a user opens page she can see a hyper link to display already assigned store. When user clicks on this hyper link it opens a new pop up window and user must authenticate against Java AS. After successful authentication the display task for entry STORE is displayed. I would assume that anonymous user can display it without authentication.
So to me it seems like authorization checks have been changed in 7.2 versions and are more strict for anonymous tasks. Hence my question is how can I implement my scenario. Am I missing some configuration or what's the proper solution to my two issues? I don't count assigning idm_authenticated to Anonymous users as a solution. This workaround does not solve my second issue.
Thanks

Some of the folks from Trondheim labs check, but rather infrequently. There's another person who I guess is in consulting that also checks from time to time.
Sorry I can't help you with your main question...
Matt

Authorization issue with 1080p videos

I deleted the movies Toy Story 1, 2, and 3, and upgraded them to 1080p. Now when I try to play them on my ATV3, I get a message saying that authorization is required. Other movies purchased with the same account work OK. I tried deauthorizing iTunes, signing out of the iTunes store on the iMac and ATV3, but nothing has worked. I also tried deleting one of the movies again and redownloading, which had no affect. I sent email to apple support, and they just sent a link with instructions to do the same things I had already tried. I read in a couple of other threads that apple was had trouble with their authorization servers, but that was back in March.
Any suggestions to resolve this issue would be greatly appreciated.

Hi,
check that the role(s) are transported from your DEV and your QA, and that the user has the correct role(s)
Check as well in your QA transaction RSSM for your ODSs objects; it might be that by transporting the ODS, some authorizations have been applied by default.
hope this helps...
Olivier.

Authorization issue with Company code/ Cost center combination

Hi,
I am currently trying to restrict user access by company code and cost center combination.
We have roles defined for each user and I am trying to use the standard authorization object A_S_KOSTL in this role . It seems that since it is not a 'maintianed' object no activity can be assigned to this autorization object.
currently the values are :
company Code : 1110 , 1112, 1114
Cost Center : *
i am getting sy-subrc as 0 even when i test for company code : 1110 for a user with the above role.
My code is :
AUTHORITY-CHECK OBJECT 'A_S_KOSTL'
    ID 'BUKRS' FIELD '1110'.
F sy-subrc EQ 0.
AUTHORITY-CHECK OBJECT 'A_S_KOSTL'
ID 'KOSTL' FIELD '*' .
IF sy-subrc EQ 0.
    MESSAGE 'Success with KOSTL also' TYPE 'S'.
ELSE.
      MESSAGE 'Success with BUKRS only' TYPE 'S'.
ENDIF.
ELSE.
      MESSAGE 'Failure' TYPE 'S'.
ENDIF .
I get a subrc NE 0 for the KOSTL part. The test passes for BUKRS.
Please advise on how to proceed.
Thanks and Regards
Soumya

Okay, I misread the "NE". Sorry.
Have you done a syntax check on it?
Also compare to:
AUTHORITY-CHECK <object>
ID 'KOSTL' '*'.
I cannot confess to ever have done a "full" AUTHORITY-CHECK myself, but it is most likely the same as with DUMMY -> you should not use the FIELD statement as '' value if the data element does not know what a '' is...
Cheers,
Julius

Authorization issue with report on "Char data target"

Hi,
we've a characteristic ZCHAR inserted as data target.
user is not able to execute a report created on this "Characteristic data target".
error is as follows : "Error : You are not authorized to use ZCHAR".
Could some one advise how to resolve this issue & what authorizations need to be assigned to this user.
<b>PS: same user has no problems running other reports created on infocube & ODS.
also, this characteristic data target is not "authorization relevant" in the info object definition.</b>
appreciate your help.
I've following profile assigned to user.
S_RS_ICUBE - Administrator Workbench - InfoCube
Activity   :                     All activities
InfoCube Subobject :             All values
InfoArea           :             *
InfoCube           :             *
Hari Immadi
http://immadi.com
SEM BW Analyst

Gova,
thanks for your reply.
profile doesn't have any authorization object S_RS_IOBJ.
looks like this is the problem.
I quickly tested with this object on a dummy profile & it worked with following settings. Is this correct just for reporting?
Object S_RS_IOBJ
Activity                       Display
InfoObject                     ZCHAR
InfoObject catalog             *
Subobject of InfoObject        Data
Hari Immadi
http://immadi.com
SEM BW Analyst

BEx authorization issue with colon value

Hi All,
I have created few reports in 3.5 version on a cube. Two reports are having authorization object company and remaining don't have authorization object. If i do not give value colon( for company, authorization is failing for those reports do not have company. If i give colon value for company in authorization object, both reports with company and without company are working fine. If i do not specify any input value for the reports which are having company are giving all company values( but it should give no authorization message instead of displaying all companies). I'm using characteristic variable of type authorization and Ready for input. Can you please advise me how to fix this issue.
Cheers,
MKR

Hi MKR,
If you have custom authorization object and you have ticked it against a cube, then every query/report on that cube should have that authorization object.
Please chage the queries accordingly and check
hope this helps

Authorization issue with Dynamic Converter

We have configured the Dynamic Converter to immediately translate documents to HTML when checked in.
We have created a security group, and the Guest role has read access to that group.
When we make a call from our Web App to the translated page (using a HTTP Get request), we are prompted for a userid and password, when we think it should not.
Anyone any ideas on how we can get around this issue, or if anyone has seen this problem before.
Thanks.

Hi, thanks for the reply.
We are not using accounts.
I have given read access to guest for all security groups and I still get the pop up asking me to log in. The only content being loaded is from word documents. This is the error I get if I cancel the login:
Welcome to Stellent
Unable to get dynamic conversion. System needs login authentication credentials.
When we use the "web location" as opposed to the "get content" link it works fine with no login required for the same document.

Authorization Issues with ROles

Similar Messages

Maybe you are looking for