DMS Content server restriction

Question

Hi All,
In the past we have tried to restrict user access to DMS data (on content server) using DOC type/status restriction. Now we are trying to explore the possibilities of restricting users from accessing export control data from a specific content server.
1. Is there a authorization object using which we can define what content server one have access/restriction?
2. If answer is NO is there a standard method industry is following for this?
Suresh.

Answer 1

Authorization Object C_DRAW_TCD (Activities for Documents)
The following table shows authorization object C_DRAW_TCD. This object controls which users can process which document info records, based on a combination of activity and document type.
Fields
Possible Values
Description
ACTVT
(Activity)
01
02
03
06
17
Create
Change
Display
Delete
Maintain number range object
DOKAR
(Document type)
The activities can be executed for the document type.
Authorization Object C_DRAW_TCS (Status Dependent Authorization)
The following table shows authorization object C_DRAW_TCS. This object controls which users can process which document info records, based on a combination of activity, document type, and status.
Fields
Possible Values
Description
ACTVT
(Activity)
01
02
03
06
Create
Change
Display
Delete
DOKAR
(Document type)
The activities can be executed for the document type.
STATUS
(Document status)
Authorization Object C_DRAW_STA (Document Status)
The following table shows authorization object C_DRAW_STA. This object controls which status(es) can be set for which document type.
Fields
Description
DOKAR
(Document type)
The statuses are allowed for this document type.
DOKST
(Document status)
Authorization Object C_DRAW_BGR (Authorization Group)
The following table shows authorization object C_DRAW_BGR. This authorization object allows you to limit access to individual documents.
Fields
Possible Values
Description
BEGRU
(Authorization group)
0000 - ZZZZ
Used to restrict the authorizations for document maintenance further.
Authorization Object C_DRAW_DOK (Document Access)
The following table shows authorization object C_DRAW_DOK. This authorization object controls which original data of a specific document type there are access authorizations for.
Fields
Possible Values
Description
ACTVT
(Activity)
52
53
54
55
56
57
Change application start
Display application start
Display archive application
Change archive application
Display archive
Store archive
DOKAR
(Document type)
Here you enter the document type that access to original data is allowed for.
Authorization Object C_DRAD_OBJ (Object Link)
The following table shows authorization object C_DRAD_OBJ. This object controls which users can process which document info records, based on a combination of activity, object, and status.
Fields
Possible Values
Description
ACTVT
(Activity)
01
02
03
06
Create
Change
Display
Delete
DOKOB
(Object)
You must enter the data base table for the objects here (for example, MARA for material record).
STATUS
(Document status)