'Change' authorization when manager raises SC as a requisitionar.

Hello,
First let me explain the regular functionality.
When a requisitionar (with role SAP_BBP_STAL_EMPLOYEE) orders the shopping cart and the same is gone to manager
( with role SAP_BBP_STAL_MANAGER), the manager can change but employee can not.
i.e. the manager can see the 'change' button under approval for that SC but employee can not.
This we have achieved by setting the security level (BBP_WFL_SECURITY) under PFCG for resp. role.
For role SAP_BBP_STAL_MANAGER = 4
For role SAP_BBP_STAL_EMPLOYEE = 1
Our client is happy with this functionality.
But, now it's desired that when the manager will raise a SC for his own use,
then the manager also must not be allowed to change the SC once ordered or when changed/rejected by his approver.
Please let us know whether this is possible?
If yes, How?
BR
Dinesh

Hi Dinesh,
with the BADI BBP_WFL_SECUR_BADI, method SET_SECURITY_LEVEL, you can change the WF security level determined from role personalization.
In input parameters you have the user ID in ACTUAL_USER, the object ID/Type/Guid, the scenario SCENARIO (see possible values in SE11 domain BBP_SC_SCENARIO).
So with the inbound scenario and the user's profiles, you can determine your own security level and overwrite the standard one.
In export parameter, you have the changed security level NEW_SEC_LEVEL.
Rgds
Christophe

Similar Messages

  • Reject Pending Approval Tasks when Manager changes

    Folks,
    I have a requirement , when the user's manager change , i need to reject all the pending approval tasks for that particular user whose manager has changed , not others pending tasks .
    Please let me know if anyone has implemented such a requirement .
    I'm thinking of writing the logic in Change Manager task in xellearte user prov process , so when manager will change this task will trigger and in this task i will get all the pending approvals by using the 'getPendingApprovalTasksAssignedToUser' but i'm not sure how to identify the user who was the beneficiary of the task .
    Thnx
    Sid

    We are using 11.1.1.5 with BP03.
    Question - An OIM user can raise requests which can be routed to its manager for approval. The manager may manage more than one subordinate and will have approval tasks for requests raised by all his subordinates. If one of the subordinate's manager changes, tasks assigned to old manager for that subordinate should be rejected. All other tasks assigned to this manager by other subordniates should still be active. Can we fetch tasks assigned to a manager for a particular subordinate?
    APIs do give me all the tasks assigned to a user but can we filter them to fetch tasks related to only one beneficiary without fetching all and then iterating through all to get desired result?

  • My email address has changed and when I try to play purchased songs it asks me to authorize another computer under the old email address.  How do I play the music that I have purchased?  My account is current with the new email address.

    My email address has changed and when I try to play purchased songs it asks me to authorize another computer under the old email address.  How do I play the music that I have purchased?  My account is current with the new email address.

    You may have already done this, but try de-authorizing your computer (through the iTunes:Store menu) and then re-authorizing it.

  • I can't get my password manager working. It remembers passwords for websites but when I enter in a new password (because this had to be changed) or when I have a new username + PW that I wish to save, the password manager does not appear.

    I can't get my password manager working. It remembers passwords for websites but when I enter in a new password (because this had to be changed) or when I have a new username + PW that I wish to save, the password manager does not appear.

    If you updated your existing account then try logging out of it on the iPhone by tapping on the id in Settings > iTunes & App Stores and then log back in and see if that 'refreshes' the account on the iPad.
    If you created a new account then you can log out of the old account and in with the new one as above, but any content that you purchased/downloaded via the old account will remain tied to that old account, and only that old account can re-download its content and download updates to its apps.

  • Email notification when Document status changes in Solution Manager

    Hi,
    Is there a way to send email notification to certain people if the document status changes in Solution Manager?
    For example: A notification email should be send to business user when development is complete.
    When development is complete, document is set with status 'Build complete'. As soon as this status is set, we want to notify business user to test the object. Similarly on other document statuses as well.
    Thanks in advance.

    Hi Vikky
    Check out doco 'How to: Automatic email notification' on service.sap.com.
    SAP Support Infrastructure > SAP Solution Manager > Information for VARs ASPs and AHPs > Setup Documents (SP15+)
    Thanks
    Daniel

  • "You no change authorization" SV 349 when run TCODE SE54.

    Hi!
       I need to adjust the maintanance dialog for View J_1BBRANCV but it is showing  "You no change authorization" SV 349.
       I am running TCOD SE54.
       I am super user.
         Do anybody know to do?
    Thanks!

    Hello!
    I am having the same issue with the view: J_1BECD_CUST03V.
    Guess it's not a security/authorizarion problem the developer user has SAP_ALL.
    Anyone can help?

  • How do I change authorization in adobe digital editions using windows vista

    How do I change authorization in adobe digital editions using windows vista?
    When I try ctrl alt delete, I get the blue windows log in sceen.  How do I get past the log in screen to use the ctrl alt delete to change authorization for the adobe digital editions screen.

    Adobe apps can be reset to their factory defaults by using Ctrl+Alt+Shift, not Del. The rest doesn't really make any sense since you did not provide any details and authorizations can't be changed that way, anyway. If you want to transfer books to other devices you need to contact the vendors to release the DRM/ provide a new download and if you want to change the registered ID, you need to contact support or create a completely new account, which in turn will require you to buy your DRM managed books again/ get a new download as well.
    Mylenium

  • Can anyone tell me why a picture would change color when I try to download/upload it?  It is the exact same picture- chosen the same way and when it goes to any other program it changes the color (I've tried canvas on demand and mpixpro.  I've also tried

    Can anyone tell me why this picture changes color when I try to download/upload it?  It is the exact same picture I have taken from the same location.  The image on the left is via preview and the image on the right is what is shows like when I try to download it.  I have emailed it to myself and it shows fine on the computer and in CS4, but when I look at the download via my phone or on another computer it shows the wonky color on the right.  I have checked the color space shows RGB/8 bit.  Any ideas why or how to fix it?  It isn't with any one specific session.... and I've tried it on both my desktop and my laptop- saved image to an external hard drive and to drop box.  I've tried sending the image to canvas on demand, my email, mpxipro, POST editing- all the same result.  Please HELP!!  What am I doing wrong?

    Most of the time you see something like that. The image in question has a color profile other then sRGB. Some image viewers/displayers are color managed and others are not.  So the image do not look the same in all of the applications you use. So colors seem to change.
    Try converting it to sRGB color and see if then looks the same all around. Also I think PC and Mac displays are set to different gamma something like 1.8 and 2.2
    Though I'm colorblind I even see color variations.

  • Can't change quantity when copy from Sale order for Delivery

    Hi all!
    Can i use authorization for can't change quantity when copy from Sale order for Delivery.

    Tien,
    Approval will not work when you have mutiple rows of data.  You would have to work with SP Transaction Notification
    There has been threads before on the forum on the same topics.
    Block the Quantity in Sales Delivery
    Approval Procedure for chaning quantity in Delivery Document
    Suda

  • No authorization to change authorization data

    Hello,
    When trying to change an opportunity in our CRM system we get this error message only for one partner.
    "No authorization to change authorization data"
    Our user has SAP_ALL, SAP_NEW and we don't find anything in st01.
    Any idea for this issue? Could it be an HR authorization object missing? Or a CRM one?
    Thanks in advance.
    Best Regards,
    Olivier

    Sometimes error messages are misleading or returned from other users's contexts (rfc, service calls, etc) or even hardcoded in worste cases.
    You will need to debug it and stop on the message number to see where it is coming from and why.
    Cheers,
    Julius

  • Any changes in workgroup manager I make are not working!

    First off I know this isn't the place to vent, but I am so sick of all the bugs loaded in the directory system of mac. I think Apple has produced a horrible product and it is always one problem after another. I am experienced with all the other directory systems and I firmly believe Open Directory is the worst!
    Ok, now on to my problem. Our set up includes 6 Mac OS X 10.6 servers. 1 is the Master OD and the others are all replicas. We recently upgrades the servers from 10.5 and ever since I have been having problems with OD. During the upgrades I took an archive of the system, decommissioned the Master and all replicas, then after the upgrade I restored the archive and replicated all the others. Things worked fine for a couple of days. Everyone can login and I could create new users and make changes in workgroup manager. After a couple of days I could no longer make any changes in workgroup manager. I can physically make the changes and create new users and save with no errors, but when I try to log into the file server with the new user or use the changed password, it doesn't work. No errors in the logs that I looked in.
    Here is something weird: When I log into workgroup manager using the local administrator account, I do not see the changes I made in workgroup manager. When I click the unlock button and log in as the diradmin I can see the changes.
    Any, ANY, help would be greatly appreciated. I've been working on this for weeks now. Please don't advise to decommission the Master and rebuild the directory. I already tried that about 10 times with the same result.
    Thanks!

    5 days should be plenty, unless you have a really slow link. Here are a few diagnostics that come to mind to figure out more about what's going on:
    To test to figure out of I'm right about replication being the source of the problem, and if so which replicas aren't up to date, use the "ldapsearch" command to compare the data in the master vs. the various replicas. For instance, to check whether a new user named "fred" has shown up in the server at serverIP, run the command: ldapsearch –LLL –x –h serverIP –b cn=users,dc=masterserver,dc=example,dc=com “(uid=fred)”
    (replace serverIP with your server's address, "dc=masterserver,dc=example,dc=com" with your search base, and fred with the actual account name). Try this on the master and the various replicas, and see which (if any) of the replicas are out of sync.
    If some/all of the replicas are out of sync, check /var/log/slapd.log on the problematic replica(s). It's visible in Server Admin -> servername > Open Directory in sidebar -> Logs in toolbar -> LDAP Log in the View pop-up at the bottom of the window.
    Also, check the replica status in Server Admin -> Open Directory -> Settings -> General.
    Also, on the problematic replica(s), check the replication connections: "sudo lsof -i | grep ldap" should show an entry starting with "slapd" and ending "->masterserver.example.com:ldap (ESTABLISHED)". If it doesn't, you may have some sort of network connectivity/firewall issue.
    If you want to get even more detailed, running "sudo tcpdump host masterserver.example.com and port ldap" on the replica will let you spy on the content of the replication connection.

  • Mass Change in Recipe management (Transaction RMWB) - change specification

    Hello ALL,
    I am working on a Requirement - Mass Change in Recipe management (Transaction RMWB)
    Requirement - for a given specification number get the list of all recipes where this particular specification is used (this is achieved by standard functionality in RMWB)
    When a particular recipe is changed in a recipe - perform a mass change of specification across all the recipes.
    Things I have found already:
    This has to be done in similar fashion as status change is done using ABAP Class -CL_RCP_MSC_STATUS
    I would appreciate your help and suggestion in this.
    Regards,
    Nikhil

    Hi Beth,
    Yeah actually we did the same thing per your specs: non-status related although confined to preferred recipes, substituting substance X for Y in dependent formulas of recipes.
    The only option right I am aware of currently requires custom ABAP work using the Mass-Change framework supplied. 
    Regards

  • BBP_PS_PROJECT_GET_LIST: Checks for Change Authorization.

    Hi,
    I have a custom SAP program that is required to fetch pertinent details from a project.
    The SAP function module BBP_PS_PROJECT_GET_LIST retrieves several internal tables is used for this purpose. 
    For some reason this function module, which looks like it should only retrieve information and cannot perform changes itself, checks for Change authorization to object C_AFKO_ACT.  As a result, users with Change access to projects can run this and get the appropriate results (in internal table IT_AFVC).  However, users with Display access only to projects do not have any data returned back in this same structure.
    Any idea on how to go about this problem?
    Regards
    Jibat

    Hi,
    See also the foll related  notes before you implement the corrections in the note 818342 based on your current SP level for SRM 4.0.
    Note 742314 - BADI for approver selection when adding/changing approvers
    Note 802581 - Error in call "BBP_WFLH_AGENTS_FOR_CHANGE_GET"
    BR,
    Disha.
    Do reward points for  useful answers.

  • Talent Management - Change of Reporting Manager

    Hi all,
    I have changed the reporting manager relationship in SPRO: Talent Management and Development>Basic Settings>Specify Type of Reporting for Determining the Manager from INDIRECT to DIRECT (to A002 relationship).
    However, after the changes I am unable to view the manager's name under the talent profile header and also those employees with A/B 002 relationship in MSS talent assessment.
    Before the changes (with INDIRECT relationship), I was able to view the the manager in the talent profile header and employees under the manager.
    Are there any other configurations needed besides the above is needed for me to view the A002 manager and the relevant employees under him.
    Thanks in advance.

    Hi Eric,
    This is the only setting that you need to enable if you use S A 002 S relationships. I'm not sure why you don't see the correct reports and managers, so it could be down to an evaluation path (as suggested above) or it could be a bug. I would suggest raising and OSS message for some clarification.
    If you do that please post the solution you get from SAP here, since it will be useful for other users of the forum.
    Best regards,
    Luke

  • Message "Location Products Without Change Authorization" in PP order deleti

    Hello Experts,
    We have scheduled the program /SAPAPO/DELETE_PP_ORDER to run in background and recieve location products in spool list with message "Location Products Without Change Authorization".
    Location products in the list keep changing every day. Could you please suggest what are the possible causes of this missing change authorizations?
    Thanks a lot.
    Best Regards,
    Chandan

    Hi,
    Try running the program in foreground and when you encounter the error message, go to tcode: /nSU53 and take a screen shot of the details. Your secutiry team would be able to guide you for the authorization missing.
    Hope this helps.
    Regards,
    Nawanit

Maybe you are looking for