Does Authorization object applicable to Master Data

Gurus,
I am trying to set up authorization relavant object to one of the HR Master data. i would like to know if this authorization object created would limit the users to access the data through backhand transactions such as RSA1 or SE16.
Please advise.
Thanks.
Regards,
Akilesh

Hi ,
If you mark infoObject as the authorization object relevant, it will restrict you to access the data at report execution level (i.e BEx Analyzer & Portal level). It will not restrict you to see the data at table level (i.r Se11 & Se16 level).
Y can get more details in below link.
http://help.sap.com/saphelp_nw73/helpdata/en/4c/65fcd82f841f3ce10000000a42189c/frameset.htm
Thanks & Regards,
Krishna.

Similar Messages

Missing authorization check to display master data error..

Hi,
We are in SRM7.0.
After adding content in my shopping cart, I am trying to change the Account Assignment in the Item Details from Network to Cost Center or GL Account.
Under Item Overview, after changing the Account Assignment to Cost Center, I go to "Assign Number" to add a Cost center..On clicking the matchcode search box, I get selection entries like Cost Center, Controlling area etc..If I click on the Search box without keying anything, I get a "Missing authorization check to display master data error".
I get the same error, when I try to select Assets under Account Assignment area and use search under Assign number. I dont get any errors on searching networks.
Am we missing any authorization check in the backend ?
Regards,
Rajan.K

Hello Rajan,
You could use transaction ST01 in SRM to perform some 'authorisation' trace.
It might give you some pointers to the issue.
Regards,
Franz

What does shopping cart error "Partner master data" or "invalid address"

Hi friends
what does shopping cart error "Partner master data" or "invalid address" mean
thanks
regards
chinna

Hi Christian -
Difference between flexible upload & Direct upload is that direct upload does not have Update Rules, direct upload will have PSA as usual & you can do testing in PSA.
second part when you load master data - if error occurs all the records for that request no will be status error so activation will not have any impact on it i.e. no new records from failed load will be available.
hope it helps
regards
Vikash

AR Down Payment Invoice Does Not Reflect in BP Master Data...

We have placed a sales order for a BP.
We select payment means and accept the payment
In the background a AP Down Payment Invoice is created
When we view the BP master data - the account ballance window does NOT reflect this "down payment"
If we select the golden arrow at account ballance, uncheck "reconciled transactions" you can see the payment and AP down payment and they clear each other out.
The problem is that when the final invoice is created it is not obvious that a down payment has been received. Even if you are simply working at the BP master data window, it is not obvious that a down payment has been received. I belive our process is correct because If you click the TDP box, the payment is listed and will be applied to the final invoice.
It simply does not alert the user that a payment had been received.
What are we doing wrong?????\
Thank you!
Edited by: Andrew Bleier on Feb 4, 2009 1:27 AM

Keith Taylor
You are right this feature is only available in Version 2007A. There account posting happen purely due to the pay SAP has been designed and the configuration of GL Accounts.
To make fundametal change to the core product is very difficult if you explain me your business process exactly as you do, I could think of alternatives.
Please let know.
Suda

Authorization object M_MATE_MAR "Material Master - Material Types" in MM01

Hi,
We in CPS Energy are implementing VIrsa SOD conflicts on the roles that are in place in current SAP 4.6C version. The authorization object M_MATE_MAR is used by MM01(Creation of Material Master) transaction code & used at mutiple roles. We have restricted this authorization object by Material Type Authorization Group (BEGRU)as WMS1 & given activity a 01, 02 & 03 in a role. The same authorization object is used in Common roles also for displaying that is using transaction code MM03 (Display Material) but the activity & authorization group are ''. This '' is taking precedence over the the authorization object given in the other role.
Please let us know how to put a control on this authorization object which is used widely by large number of users.
Maintained Material Master: Material Types                              T-D119010802
Activity                       01, 02, 03                                             ACTVT
Authorization group          WMS1                                              BEGRU
Any help is really appreciated
Thanks
Sree

Hi Sree, your role with MM03 in it should not have * for actvt if it is only a display role.
As it is a display role actvt 03 would be more suitable. That way you could have display for all auth groups, but create and change/MM01&2 would be restricted to WMS1 (and any other materials with a blank auth group)

[Asking for Clue] Authorization to Display Spesific Master Data of HR

Hi,
I have 2 payroll area, R1 and R2. I want to authorize user only to R2 payroll area employee's master data.
How to make this happen?
Thanks & Regards,
nessia

Authorizations will be done by the Basis Team.But we cannot restrict master data through payroll wise.
Either go with Personnel Area Wise or Employee Group wise or Employee subgroup wise
If not then go with the Organizational Key wise then u have configure the below nodes
IMG>Personnel Management>Personnel Administration> Organizational Data> Organizational Assignment--> Set up organizational key
Organizational key: Maintain feature VDSK1
Organizational key: Control
Organizational key: Creation rules
Best Regards,

Depreciation area set in Asset Class does not appear in asset master data

Depreciation area does not appear in the asset master data however it is set in the Asset class. If other asset is created in the same Asset class that depreciation area is automatically set in the asset master (it proofs that it is not a problem with Asset class).
I tried to set that deprecition area directly in the asset master data but all the fields are blocked for changing (is it possible to change that?).
What should I do as I need to post on that area ?
Thank you,
Jean

Ok Zaid! thanks,
But what treatment should I give to that asset? Because now it is not being evaluated in that area but we need to do it.
The asset was created in the prior exercise (year).
Regards,
Jean

Info object creation and master data attributes

Hai All,
I have customerid, customer name, customer address, customer location. Similarly I have buyerid,buyer name, buyer address, buyer location. I have some more fileds like this for seller and vendor. I am thinking of creating a central location for all this master data creating a infoObject with name "personid" and making all the others attributes like "personname", "personaddress", "personlocation". I will load all the details of customer, buyer, seller and vendor to these objects.
The cental idea is to get all the master data to a central location and then create objects with reference to these objects and let all the data flow. so that I just load the central objects and everything takes whatever it wants from there.
Now my questions
1. Can I just create an object for customerid referencing personid and then as all the other attributes get copied, can I just report on it or do I need to again create all the info objects for the customer details? Also the same for all others buyer, seller and vendor.
2. Is this of any problem if I am reporting on customer or vendor or buyer or seller's details?
Please advise me if the above situation works and let me know if I am going wrong.
Thank you.

hi Visu,
yes, you can do so, should no problem.
business content has this kind of approach,
0sold_to, 0ship_to reference to 0customer.
and also 0employee if i'm not wrong.
one thing to consider if the volume data is very high,
put it as line item dimension in infocube.
hope this helps.

Unable to make entries for objects with no master data in IP

Hi All,
In BPS, when created a layout, which contains characteristics, in whose properties 'Master Data' is not checked, we could enter the new values for them directly in the layout.
In IP, we could not do the same with the 'New Lines" option set on Analysis Item in the WAD for the characteristics whose master data property is not checked.
We have a layout, where, some characteristics are having master data checked, and some other characteristics where master data is not checked.
With the 'New Lines' option set on Analysis Item in the WAD for the characteristics whose master data property is not checked, when data entered, the error message is appearing saying that the data is not valid.
This is so quite simple in BPS. I think, I might be missing something in IP on how to achieve this.
Thanks in Advance,
Best Regards,
- Shashi

Hi,
In IP it's integerated that if you will not maintain master data you may not be able to plan for new value of characteristic.It's the normal behavior of system.
Cna check the link below:-
Master data planning in BI
Hope it may be helpful

Authorization object for Sales Area Data creation ...

Hi Gurus,
Please suggest on this:
"when an CRM Sales employee creating a BP , employee wants the sales Area for the BP from the sales area of employee in the Input selection option of Sales Area for BP". Any authorization object will help?
Thanks in advance.,

Hi Joern,
will this ST01 also work for the PCUI or BSP application for finding the authorization objects.
Actually our requirement is that we need to restrict a user searching documents belonging to him and reporting to him.
without any authorizations given we are able to search the documents of all users in activty management under activtiy monitor. we would like to block users to view only documents done by him in his sales area.
can you provide me the details of the authorization object, please.
thanks
Srini

Authorization check for Vendor Master Data

Hi,
I have a requirement where I want to restrict some of the end users in viewing accounting data of vendors. In XK02/XK03 there is a sub screen for Company code data (Accounting info/Payment trans./with holding tax). I want to put a check for the selection of these check-box. System should allow some of the users to view these data. I tried for exit/BAdis , but didn't find anything as per my requirement. Please give some suggestions.
Thanks & Regards
DR

Hi
Check BADI ADDRESS_SUBSCREEN, I think you can implement this one and add a authority check here.
check the method ADDR_APPL_SUB_PAI_IMPORT
Regards,
Himanshu

Does constructing Object streams read/write data on the underlying stream?

I was hoping to create a class that implemented externalizable and just have the read and write external methods handle all the specifics. My client is Java and the server is legacy but always creating the ObjectInputStream hangs no matter if I construct it before or after the ObjectOutputStream. See the following basic code where s is an open socket.
OutputStream os = s.getOutputStream();
InputStream is = s.getInputStream();
outStream = new ObjectOutputStream( os );
inStream = new ObjectInputStream( is );
The last line always hangs??
Thanks, S.D.

I just read this in a link to another section of the docs.
The single-argument ObjectInputStream constructor requires an InputStream. The constructor calls readStreamHeader to read and verifies the header and version written by the corresponding ObjectOutputStream.writeStreamHeader method. If a security manager is installed, this constructor checks for the "enableSubclassImplementation" SerializablePermission when invoked directly or indirectly by the constructor of a subclass which overrides the readFields and/or readUnshared methods.
Boooo, is there some way of disabling this?
Thanks, S.D.

Student file & master data change according to authority

Deal all,
I have following requirements about student file and master data that certain IT are not displayed when i do not have authority.
for example, if A student is belong to my department, IT1702 must be dislayed but student B is not belong to my department IT1702 must be disabled or must dissappear.
if i can adjust student file & master data according authority (student belong to my department or not) it would be very nice.
regards,
jin dal

Hi,
The authorizations checks in Campus Management consist of the basic authorization and the structural HR authorization.
The basic authorization determines whether the user is allowed to execute a certain function, while the structural authorization determines the objects for which the user is allowed to execute this function. In other words, the basic authorization defines what function the user is allowed to use, and the structural authorization defines for which objects the user is allowed to use this function.
For example, the basic authorization can define that the user is allowed to perform the create module booking activity. With the structural authorization you can restrict this activity only to modules offered by the faculty of Mathematics, for example. (The user can then access these modules whenever required; see also Structural Authorization).
Basic Authorization
In release CM 4.64, three authorization objects are used in Campus Management:
At the first level is the transaction code check. The system performs this check each time the user starts a transaction using the menu or command line. For this check to be successful, the user requires an authorization for the relevant transaction code in the authorization object S_TCODE.
At the second level, the Campus Management function is divided into two parts. The first part includes activities such as create request, create registration, create re-registration, cancel module booking, and so on. The second part covers master data like student master data and a major part of the academic structure.
When checking the authorizations for master data, the system uses the HR authorization object PLOG for master data authorization checks. A new authorization object ( P_CM_PROC) has been implemented for activities in release CM 4.64. The system now only checks whether the user is authorized to use the activity. It no longer checks if the user is authorized to read or change the data in this activity. The new authorization concept has the following advantages:
It simplifies authorization assignment. The system no longer uses the comprehensive data model with its many objects and object interrelationships as the basis for the activity authorization (authorization assignment via authorization object PLOG);
Changes in the data model have no effects on the authorization checks for activities;
It is now possible to distinguish between create and change operations, for example in re-registrations;
You can now distinguish between re-registrations and leaves of absence.
The table T7PIQPROCESS (Activities) contains all Campus Management activities. The system performs authorization checks for all activities with the exception of the ones listed below.
Authorization checkes are not performed for the following activities:
AC10 (Send Reminder for Outstanding Payments)
HSMA (Create Status Indicator Manually)
PR11 (Create Applicability List Automatically)
These activities do not contain any activity-related authorization checks.
In the standard system, the authorization check for activities is independent of the objects for which the activities are performed, and of their attributes. (The structural authorization only restricts the objects which the user can then process irrespective of the activity.). If you require additional checks, you can use the business add-in HRPIQ00AUTHORITY.
Structural Authorization
The structural authorization enables you to define the set of objects the user is authorized to process. You determine these objects using evaluation paths. You can define whether the user should only be given a display authorization for these objects or a maintenance authorization as well.
You cannot combine the structural authorization with the basic authorization. The user is therefore authorized to process the assigned set of objects irrespective of the function (s)he is currently using.
Further notes
As functions from other applications areas (Training and Event Management, Notification Processing) and from Student Accounting are integrated in Campus Management, users also need authorizations from these areas.
Campus Management contains a number of roles which you can combine with the roles of other application areas to create composite roles. You can either assign a composite role or individual roles to users.
Component Prefix of the roles provided
Campus Management SAP_CM_
Training and Event Management SAP_HR_PE
Notification processing SAP_CA_NO_NOTIF
Student Accounting SAP_FI_CA_
You create the business partner authorizations in separate IMG activities which you can find in Customizing for Campus Management in Campus Management Master Data -> Students -> Students as Business Partners -> Basic Business Partner Settings -> SAP Business Partner -> Business Partner -> Basic Settings -> Authorization Management.
In the SAP Reference IMG under Basis Components -> System Administration -> Users and Authorizations, you can find more IMG activities in which you can make general settings for authorizations.

Does a Master Data Change Log or Report Exist?

Does anyone know of a master data change log or report?
Such a log or report would show all changes made to cons units, cons groups, and items; including additions, deletions and changes to a hierarchy.
We hope to use this to synchronize cons group/unit and item hierarchies between BCS systems: Production and Development.
For example, if a master data change was made in the Production system, we would like to log the change, and synch this change back to the Development system.
Thanks for any insight.

Thanks, TheScotsman, for really helpful information!
Some detail of the findings for those who interested:
There is a "How to... trace changes to master-data and settings for SEM-BCS" which describes all nuances of tracking changes in MD.
The HowTo mentions the reports RSVTPROT , UGMD_DB_LOG_DISPLAY, and a t-code SCU3 that may show the changes.
Certainly the code of the reports might be taken as an example for writing your own code.
Though, the reports and the SCU3 are useful when the logging of DB tables changes is activated.

Master data check not working when loading into and ODS object

Hi guys,
we are loading transactional data into an ODS from a flat file.
In the infopackage, we have checked the option :
"Do not update data if no master data exists for a characteristic".
This option seems to be unreliable :
For some characteristics (it seems those loaded using transfer rules (routines)), incorrect data is still loaded into the ODS even if no entry exist in the associated infoobject master data table.
Any help appreciated.
Many thanks !
Pierre-Yves

Hi Dear,
please delete all the incorrect master data from the master data characteristic first and then try to uploading the data again .It should work, because there migth be some master data created when data were loaded with out the check before.
And please check whether all your characteristic info object are of master data , I mean that in the infoobject defination you have checked the master data check box on the info object. If you have only text then it might fail the master data check.
hope this help.
cheers,
balaji
Message was edited by: Balaji NS

Does Authorization object applicable to Master Data

Similar Messages

Maybe you are looking for