Authorization problem with infoobject

i created a query and assigned it to role allusers. when the user tried to execute the query, he got not authorized for infoobject ZXXXX. so i did SU53 and it shows
it is checking for S_RS_IOBJ and the user master record has 0* Z* and Y* for infoobject and 0* Z* for info object catalog and DATA for subobject of infoobject.
this infoobject is not marked authorizaton relevant. ( i checked in RSD1). I am able to run the query but not the users ?
i went to RSSM, and verified the info in su53 log. in ST01 i can run trace only for myself . not for other user...hw to go ahead with this problem. this is a basic query and the user profile has the role allusers.
> points will be assigned for inputs

Hi Ravi,
Check in RSSM for the info-provider on which the query is created and find what are the authorization objects that are switched on for the info-cube. Then check in the User profile what authorization objects are included and find out what are the values assigned to this authorization objects.
You can also do a profile comparision between yours and the user's by using AGR_USERS table. Check if anything is missed out from the users profile as compared to yours.
Hope it helps.
Thanks,
Soumya

Similar Messages

Authorization problem with VF01 "Create Billing Documents"

Dear All,
We face following problem with VF01 "Create Billing Documents".
Transaction: VF01
User: Joe
Authorization of Joe:
     VKORG Sales Organization: A, B (authorization object V_VBRK_VKO)
     FKART Billing Type: 1, 2 (authorization object V_VBRK_FKA)
The objective for Joe:
   Joe is qualified to create bills in
      sales org A only for billing type 1 and in
      sales org B only for billing type 2.
   Joe should not be able to create bills for
      sales org A with billing type 2 and in
      sales org B with billing type 1.
How can we solve this problem?
We already searched for userexits without any success.
Any help or ideas are very appreciated.
Regards
Markus Wilhelm
Project Manager ERP

Dear,
There are standard authority-checks based on Sales organization (authorisation object V_VBRK_VKO) and/or Billing type (V_VBRK_FKA).
An option would be to create a new billing type, define specific authorisations and use the new billing type for these documents.
The bad thing is that you would also need a special (new) sales order type, because the billing document type is unique per sales order.
So maybe it is easier to have a different sales organization.
Another option would be to create a new authorization object and check it in the billing documents.
If you wish, you could modify program LV60A005 & LV60A006.
Then you might check various user/customer exits.
Some functions to check: EXIT_SAPLV60A_001/002,
EXIT_SAPLV60B_001 - 008, EXIT_SAPLV60B_010 - 011.
Regards,
R.Brahmankar

Authorization problems with oranetb user

We have set up Apex in an oracle database, that are installed on unix operative. We have problem with the authorization
for the oranetb user. On the unix system we have one user that can call scripts with for example unix command like ls,
cp, etc.
Now we want this oranetb user to run unix commands in scripts, without change the user in unix environment. We have
been told that we can use something in the script, with PATH’s and authorization for oranetb user. Have you ever done
something like this? And can you help us with something that you think can help us?
We also have the same problem to run workflow (Informatica) from a script in unix, when apex is calling the script.
If you want more information, please send a mail to me.
Email: [[email protected]]

hunt3r,
iTunes Store menu -> View my account... Once you've logged in, there's a button to deauthorize all your current machines and start you back at zero machines authorized. Try that.

Authorization Problem with 9.2.. Please HELP!

I recently got a new laptop, only my second so I'm not at the max. I downloaded 9.2, which I didn't have before. I imported all of my "Purchased" CDs, and keep getting prompted to authorize my computer, which I already did. When I try it again, it tells me I already have the computer authorized. So I go to play the song, and it again prompts me to authorize...
I have gone through every troubleshooting tip, I emailed them (with no answer, even after 48 hours...) I stopped in teh local apple store where the man proceeded to smirk the entire time, and had the nerve to tell me if I had a MAC it would work fine.
I tried to get an apple "specialist" to call me, but while I was setting it up, I was informed I would need to PAY TO GET SERVICE!! What happened to the 1,000 songs that I PAID FOR??
Needless to say I'm livid. If anyone could help me here I would really appreciate it

I have in my room 2x usb keyboards and one ps/2 . I have also conenctor USB->PS/2 and the keyboard is not working at all when im using it to connect it to my PC. My friend told me that i should have no problems with getting into bios on usb keyboard. Probably i turned off an option in bios which is called USB Legacy Device Support and thats why i cannot get into bios with my usb keyb. But im worried, if I reset my bios settings, And that option will be on ? Will i be able to get into bios then ?
Could an owner of this board told me, what happens with this "USB Legacy Device Support" after bios reset ? Is EN or DIS ?
Regards

Authorization problem with iTunes 6.0 in iMovie

I just upgraded to iTunes 6.0. I am able to play my purchased music in iTunes. When I attempt to play iMovies (QT 7.0.1), I am asked to authorize the song in iTunes. The iTunes opens up but the computer hangs after I put in my authorization data. Is there a fix for this. If not, should I downgrade to a lower version of iTunes in which this problem did not occur?

Try the steps in this Apple document:
http://docs.info.apple.com/article.html?artnum=300456
I would also try in iTunes to de-authorize the computer (under Advanced menu) and then reauthorizing it. It almost sounds like there's a problem with the iTMS servers.

URGENT: Authorization Problem with SolMan 4.0

Hi all,
I'm still configuring the SolMan 4.0 . I did all the basic customizing but still have an authorization problem. If I want to create a new support message and want to choose the System/IBase, i get the message "no authorization". And the "KeyUser"-User or "FirstLevelSupport"-User even cannot open the transaction "notif_create".
I tried randomly some roles without any proper results:
SAP_OP_DSWP
SAP_RMMAIN_EXE
SAP_SCDT_ALL
SAP_SCDT_DIS
SAP_SCIDM_ALL
SAP_SCIDM_DIS
SAP_SCOUT_ALL
SAP_SETUP_DSWP
SAP_SMSY_ALL
SAP_SMSY_DIS
SAP_SOL_AC_COMP
SAP_SOL_KW_ALL
SAP_SOL_PM_COMP
SAP_SOL_PROJ_ADMIN_ALL
SAP_SOL_PROJ_ADMIN_DIS
SAP_SOL_SERVTRANS_CREATE
SAP_SOL_TRAINING_EDIT
SAP_SOL_TRANSPORT_DIS
SAP_SOL_TRANSPORT_EXE
SAP_SOLAR01_ALL
SAP_SOLAR02_ALL
SAP_STWB_2_ALL
SAP_STWB_INFO_ALL
SAP_STWB_SET_ALL
SAP_STWB_WORK_ALL
SAP_SUPPCF_ADMIN
SAP_SUPPCF_PROCESS
SAP_SUPPDESK_ADMIN
SAP_SUPPDESK_PROCESS
SAP_SV_FDB_NOTIF_BC_PROCESS
SAP_SV_SOLUTION_MANAGER
The "KeyUser" has the Roles:
SAP_SUPPCF_CREATE
SAP_SUPPDESK_CREATE
The "Processor" has the roles:
SAP_SUPPCF_PROCESS
SAP_SUPPDESK_PROCESS
Has anyone an idea??
Best Regards
Philipp

Hi Phillipp,
did you do the step 1.4 from service.sap.com/solutionmanager media library technical papers Service Desk: Additional Information ? You have to create the ibase ....
Lando
P>S> Don't forget the points if this answer is hepfull

Authorization problem with computer and Nook

I am tryng to transfer an Overdrive book from my computer to my Nook.
I received a pop-up that said that I could only read the book on the computer because the Nook was not authorized.
However, when I went in to authorize my computer it said that that Adobe ID already existed.
This is the only computer that I have had and I have not exceeded the 8 device limit .
So, why cannot I get it to authorize my computer and Nook?

ADE often gets its authorization confused.
First return the library book ~ it is probably now authorized with the mixed-up id, and you might not be able to return it once your proper ID is registered.
Clear any old authorization using ctrl-shift-D to ADE (cmd-shift-D if on Mac).
Restart ADE.
Try again to authorize ADE with your Adobe ID.
Then you should be able to set the ID into the Nook as well; and borrow the book back again.
Good luck ~ what a rubbish implementation of DRM Adobe has produced....

ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?

OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.

Authentication and Authorization Problems with IIS 6 and Jrun 4

Hello all,
I am using IIS 6 with JRun 4 as my app server, and I am having problems trying to get authentication and role authorization with Windows Integrated Authentication to work. I have set up IIS 6 to pass-through the authentication credentials to Jrun, without using an anonymous user. What I have done is written a small test servlet that displays the username of the logged in user, and then tries to check if a user is in a test role that I set up in my database. I have specified that a roles table is to be used by specifying a JDBCLoginModule in Jrun's auth.config file. The code for the servlet is below:
package testauthenticationapp;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.*;
import javax.servlet.http.*;
public class SecureTestServlet extends HttpServlet {
   private static final String CONTENT_TYPE =
      "text/html; charset=windows-1252";
   public void init(ServletConfig config) throws ServletException {
      super.init(config);
   public void doGet(HttpServletRequest request,
                     HttpServletResponse response) throws ServletException,
                                                          IOException {
      response.setContentType(CONTENT_TYPE);
      PrintWriter out = response.getWriter();
      out.println("<h3>REMOTE USER: " + request.getRemoteUser() + "</h3>");
      if (request.getUserPrincipal() != null){
         out.println("<h3>" +request.getUserPrincipal().getName() + "</h3>");
      } else{
         out.println("<h3>User Principal is null</h3>");
      if (request.isUserInRole("Test_Role")){
         out.println("<h3>User is in Test_Role</h3>");
      } else {
         out.println("<h3>User is NOT in Test_Role</h3>");
      out.close();
1. What I am seeing is that when request.getRemoteUser() is called, the username information is what I expect it to be. It is of the form <Domain>\<Username>. When I try to redisplay the username using the request object's Principal object, the call to request.getUserPrincipal() returns null. This is a little confusing to me since I thought that essentially getRemoteUser() was a short cut for calling getUserPrincipal().getName(), and if I get something for getRemoteUser, getUserPrinicipal should return something as well. I guess they work differently at some level. Has anyone ever encountered this before?
2. When I call request.isUserInRole("Test_Role"), it returns false. I've checked the role name being called for typos in both my database and in the code, and that does not seem to be the case. I think the setup in auth.config is properly configured because I have created many other applications using declaritive FORM based authentication, and the role information was retrieved fine from the database. I would think that when I use request.isUserInRole in my servlet code it would use the same role information, but I could be wrong since this is a different type of authentication. Do you think that the reason request.isUserInRole() is returning false could be tied to the fact that request.getUserPrincipal() is returning null (even though getRemoteUser() is returning a valid username)? How does request.isUserInRole() get its user information, by using getUserPrincipal().getName() or getRemoteUser()?
Any help that is provided is appreciated. Thanks in advance.

Try This...
Close All Open Apps... Perform a Reset... Try again...
Reset ( No Data will be Lost )
Press and hold the Sleep/Wake button and the Home button at the same time for at least ten seconds, until the Apple logo appears. Release the Buttons.
http://support.apple.com/kb/ht1430

Authorization Problem with Hierarchical Filter

Hi Gurus!
In our BW system I created a query that includes hierarchy-enabled characteristic
(0costcenter). 0costcenter has a hierarchy node variable to restrict
user's data by using authorization.
Then I created an authorization object from t-code RSECADMIN, in this auth.
object, restricted 0costcenter from hierarchy authorization tab , and
selected 6 nodes (the nodes have no sub-nodes).
In our web template ( WAD 7.0 ) I used hierarchical filter to see the 6 nodes in our report. It works fine when I first open the template in our Enterprise Portal that we see in the variable screen,0costcenter's variable captures the nodes that I restricted in our authorization object.
In the portal the hierarchical filter displays only selected nodes but this filter shows the hierarchy's root (name of the hierarchy) and when we choose the root the analysis displays all the values, the authorization do not work here.
From RSECADMIN, In the hierarchy authorization tab, I tried all the type of hierarchies but all of them gave the same result.
When i execute the report in BEx Analyzer, the authorization works fine, I think the problem is about hierarchical filter but i cannot find any solution...
Can you give me an idea plz..
Thank you!

Hi,
I think this is caused by program error.
Take a look:
[1075125|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1075125] - Unauthorized data displayed when structure element expanded
[917565|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=917565] - Query displays unauthorized data
[981828|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=981828] - No authorization for assigned inactive hierarchy
[654947|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=654947] - Hierarchy authorizations with compound characteristics
Only available in German:
[1158432|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1158432] - Zu viele Werte berechtigt bei Hierachie mit Intervallen
Hope this helps.
Regards
Andreas

Authorization Problem with WebDynpro Services

Hi,
cam someone help me with this error:
No authorization to log on as a trusted system (Trusted RC=1)., error key: RFC_ERROR_SYSTEM_FAILURE
Thanks in advance,
Raj

This means that the user id that you have provided does not have the correct authorizations to log on to the system. You must provide that user id with the needed authorizations to proceed. I believe the authorization object is S_RFC. Give the rights for this and the problem should be resolved.
Regards,
Rich Heilman

BeX Variable:Strange problem with InfoObject CHAR 60

Hi everybody,
I've created an infobject custom (lenght:60 char).
In Bex I've created a variable (type select option) but when I choose a value of 60 char from match code, it's truncated and I obtain an error message (BRAIN 643) because this value isn't in master data table.
Thanks in advance.

Hi Riccardo,
unfortunately the problem hasn't solution on BEX side.
Here full answer from SAP:
Hello,
We analyzed the issue on our testsystem and found out that it is
not possible to enter more than 45 characters in the selection screen inBEX analyser.
Even though the length may be defined as 60 characters, it takes only
the first 45 characters and truncates the remaining
characters.
Similar thing happens when we run the query and try to retrieve the
variable value. Now when we select a value which is greater
than 45 characters, it truncates the extra characters and then fills
the text box for that variable with truncated value.
But now that we do not have this value in the master data table
it generates the error message.
Even if you try to copy and paste the value in the variable pop up
screen it truncates it to 45 characters.
Please note that this would happen only when you run the query in
BEX Analyser(as in this case screens are rendered by basis) and not WEB.To verify this you can run the same scenerio in WEB (HTML) mode and see
that it works fine because in this case screens are rendered in BW
which can have length greater than 45 characters.
So I would suggest you to run such queries (which has variable values
exceeding 45 characters)in HTML and not Bex analyser,or refrain from
using values exceeding 45 characters.
As we spoke to our development, this would not be fixed in future support packages.
Therefore,I would suggest you to either use characteristic values upto a maximum of 45 characters or use WEB/HTML to run queries with suchscenerio.
I hope this resolves the issue.
Thanks for your understanding and cooperation and I´m sorry that I can´t give you a better answer.

Authorization Problems with iTunes 7.1 and Vista

I'm running Windows Vista Business edition. Any time I try to play a purchased song, I get prompted that "you've already got 5 computers authorized to play this", but when I check my actual account settings, it says I've only got 3 computers our of 5 authorized (which is correct). I've tried updating to the latest version of iTunes (7.1) and it didn't help. I tried to run the "fix the seurity permissions issue in Vista" application that Apple released and it doesn't even appear to run (gives me the EULA, I hit 'accept' and it just closes the window).
Iv'e checked all of the standard issues that I've seen bandied about. Yes, I'm using my administrator account (my only account on the machine is my admin acct.). I've tried right clicking and launching it as an admin (just in case..)...no change. Songs that I have purchased since upgrading to Vista work just fine and will play. Anything purchased before the upgrade WILL NOT WORK.
I'm just kind of frustrated as other people have mentioned as well. I've got many many songs that I cannot listen to at all due to this issue. Plus to be honest, I'm afraid to plug in my iPod to update it. I don't want it to "update" and then all of a sudden I can't even play the songs from the iPod either. If anyone has any ideas, I would really appreciate it as it is getting a bit tiring.
Thanks in advance.

Hey there - It sounds like you have songs from more than one account in your library.
When you try to play a song that needs to be authorized it'll have the account ID that it was purchased with listed in the pop-up window (where you enter your password).
This is the important part: Make sure that the account ID that the song asks you for is the ID that you login to the iTunes store with when you check how many authorizations you have left.
Hope this helps!

Authorization problem with sync

Please help
When I try to authorize mu Ipad with Itunes, an authorization is asked.
After giving it, it says that one computer is authorized. After that he ask again for authorization.
After say no, the does sync photos, contacts, but no apps.
Who knows what it happening to me?
Already thanks
Ton

Have you tried here:
http://support.apple.com/kb/TS1389
(iTunes repeatedly prompts to authorize computer to play iTunes Store purchases)
This also may help:
http://support.apple.com/kb/HT1420
(About iTunes Store authorization and deauthorization)

Authorization Problem with previous account

Okay, so everytime I try to play a song that I bought using my old account information(AOL login) says that the computer is not authorized to play it. And this only started to happen a couple weeks or so ago, but for like a year before it was fine.
So I try to login in using my previous account information which is an AOL login and it doesn't work, saying that my screename or password is incorrect. Well I know for a fact that the screename/password are correct because I checked the "my info" thing and i've had the same password for years.
I think the problem is that, I deleted my 'paying' AOL account and now I just have one of the free ones so I could still hold onto my screename (for AIM). I can still login at aol.com but it brings me to AIM Mail under the same name.
So i'm wondering now, if because I deleted my actual AOL account, itunes doesn't recognize the screename/password...? I tried calling AOL but I couldn't get anything. I'm not really sure what to do.
Anyone with any help or answers would be great!

i am having a similar problem.
My old laptop has died and my itunes was stored on there. I didnt have an ipod at the time so my music was never backed up (yes stupid of me i know!) Now, almost a year later i have got a new computer and can't access my old itunes. I have used the correct user name and password as the old account but all the music i added to my old account isnt in the new itunes.
Any ideas?

Authorization problem with infoobject

Similar Messages

Maybe you are looking for