HELP!! security - HR related fields in BW rpt

We are planning to bring HR data to our BW system. Of course, there are some HR specific security concerns. Specifically, there are certain fields(about 10-15) that certain users are not allowed to see. These are NOT key figures, but rather characteristics, so key figure security is not relevant. We have several 'levels' of users, each who are allowed to see different sets of data (characteristics). That is, 'level 1' users may be allowed to see all characteristcis, while 'level 2' can see a subset of them, while 'level 3' can see an even smaller subset.
The question is how to enable this type of access most effectively and easily without creating different versions of the same query.
Ideally, we'd like to have all the users run the same query, but have the system contol what characteristics each user sees, depending on his security profile.
I want to be clear - this is not about what 'set' of data people can see for an object. Rather, it is the ability to se "ANY" data for that object.
That is, they would have NO access to any values for an infoobject.
I am familiar with BW security and cube authorization and have not found a suitable solution. I have tried granting access to no values for an object, but if the cube is secured by that object, I get NO AUTHORIZATION when I run the report, even if I do not drill down on that object. That's no good.
Any ideas?

U can check all the infoobjects corresponding to R/3 fields in below tables:
RSTSFIELD
RSOSFIELDMAP
Best way to check mapping is using BI Contents.
KJ!!!

Similar Messages

  • When trying to make a purchase for a movie I get a security information required field then I select continue and it brings me back to original screen to purchase movie. Please help.

    When trying to make a purchase for a movie I get a security information required field then I select continue and it brings me back to original screen to purchase movie. Please help.

    It's telling you to verify your billing information (credit card, address, security code), which needs to be done in iTunes via computer.

  • How to add related fields from one transaction to other transacction?

    Hi all,
    I have a problem. I need to add an OPPORTUNITY field (SALESCYCLE) to the ACTIVITY transaction because of an upgrade and I'm now in a new world... The CRM 2007 is an unexplored place to me.
    I added some custom fields (Z fields from the CUSTOMER_H) by adding the context node BTCUSTOMERH to the BT126H_APPT component, view ApptDetails, with transaction BSP_WD_CMPWB (thanks Stephen Johannes for your blogs) and all works correctly.
    I tried doing the same with the SALESCYCLE and it doesn't worked... :_(
    I added the context node BTOPPORTH, but I'm sure I failed at the wizard step with the "Higher level context node" or with the "BOL Relation", but I can't find the correct answer. I found the field in the "Configuration tab", I put it in my view but the GET method doesn't work... The field remains always void.
    I don't have problems adding activity related fields, but when I try to add some flow related (opportunity one in my case) fields it's different.
    I have been looking for any solution but I have only seen that I can add this attribute directly to one context node and modify some BAdI or do any thing similar, but I don't know how to do that either. I will accept this solution if someone tells me how to do that... But I think the first solutions could be the most appropiate (I can be wrong... of course!)
    Thanks in advance....
    Sergio

    Thanks for your answer, Subhasis!
    Your solution is correct if I want to add to the Activity a field related to the Activity or some field on the DocFlow structure (the case you described), but it's not my case. I did that with customer fields before and all worked correctly.
    My scene is like this. I have an Opportunity and there is a follow-up Activity created. When I want to see the Activity, I need to show on the Activity transaction the preceding Opportunity field SALESCYCLE, which is at the CRMD_OPPORT_H table (BTOPPORTH context node).
    The problem comes when I add this context node to the Activity. I think the application is trying to get the field from the CRMD_OPPORT_H with ACTIVITY data and it returns void to the field. I think it forgets to get the opportunity data first and after that try to get the SALESCYCLE value from the CRMD_OPPORT_H (with the Opportunity GUID).
    By the moment, I have added the attribute SALESCYCLE to the BTDOCFLOW context node and, at the moment he do the GET, I change the field it gets by the GUID of the opportunity:
         dref = current->get_property( 'SALESCYCLE' ). "#EC NOTEXT
          dref = current->get_property( 'OBJKEY_A' ). "#EC NOTEXT
    Then I go to the CRMD_OPPORT_H directly to get the SALESCYCLE value...
    I know it's a bad solution... but it works and I don't know any other solution by now. If anyone can help me to do it correctly I'll be greatly appreciated!
    Regards,
    Sergio

  • Need some help in creating Search Help for standard screen/field

    I need some help in adding a search-help to a standard screen-field.
    Transaction Code - PP01,
    Plan Version - Current Plan (PLVAR = '01'),
    Object Type - Position ( OTYPE = 'S'),
    Click on Infotype Name - Object ( Infotype 1000) and Create.
    I need to add search help to fields Object Abbr (P1000-SHORT) / Object Name (P1000-STEXT).
    I want to create one custom table with fields, Position Abb, Position Name, Job. Position Abb should be Primary Key. And when object type is Position (S), I should be able to press F4 for Object Abb/Object Name fields and should return Position Abbr and Position Name.
    I specify again, I have to add a new search help to standard screen/field and not to enhance it.
    This is HR specific transaction. If someone has done similar thing with some other transation, please let me know.
    There is no existing search help for these fields. If sm1 ever tried or has an idea how to add new search help to a standard screen/field.
    It's urgent.
    Thanks in advace. Suitable answers will be rewarded

    Hi Pradeep,
    Please have a look into the below site which might be useful
    Enhancing a Standard Search Help
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/daeda0d7-0701-0010-8caa-
    edc983384237
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ee93446011d189700000e8322d00/frameset.htm
    A search help exit is a function module for making the input help process described by the search help more flexible than possible with the standard version.
    This function module must have the same interface as function module F4IF_SHLP_EXIT_EXAMPLE. The search help exit may also have further optional parameters (in particular any EXPORTING parameters).
    A search help exit is called at certain timepoints in the input help process.
    Note: The source text and long documentation of the above-specified function module (including the long documentation about the parameters) contain information about using search help exits.
    Function modules are provided in the function library for operations that are frequently executed in search help exits. The names of these function modules begin with the prefix F4UT_. These function modules can either be used directly as search help exits or used within other search help exits. You can find precise instructions for use in the long documentation for the corresponding function module.
    During the input help process, a number of timepoints are defined that each define the beginning of an important operation of the input help process.
    If the input help process is defined with a search help having a search help exit, this search help exit is called at each of these timepoints. If required, the search help exit can also influence the process and even determine that the process should be continued at a different timepoint.
    timepoints
    The following timepoints are defined:
    1. SELONE
    Call before selecting an elementary search help. The possible elementary search helps are already in SHLP_TAB. This timepoint can be used in a search help exit of a collective search help to restrict the selection possibilities for the elementary search helps.
    Entries that are deleted from SHLP_TAB in this step are not offered in the elementary search help selection. If there is only one entry remaining in SHLP_TAB, the dialog box for selecting elementary search helps is skipped. You may not change the next timepoint.
    The timepoint is not accessed again if another elementary search help is to be selected during the dialog.
    2. PRESEL1
    After selecting an elementary search help. Table INTERFACE has not yet been copied to table SELOPT at this timepoint in the definition of the search help (type SHLP_DESCR_T). This means that you can still influence the attachment of the search help to the screen here. (Table INTERFACE contains the information about how the search help parameters are related to the screen fields).
    3. PRESEL
    Before sending the dialog box for restricting values. This timepoint is suitable for predefining the value restriction or for completely suppressing or copying the dialog.
    4. SELECT
    Before selecting the values. If you do not want the default selection, you should copy this timepoint with a search help exit. DISP should be set as the next timepoint.
    5. DISP
    Before displaying the hit list. This timepoint is suitable for restricting the values to be displayed, e.g. depending on authorizations.
    6. RETURN (usually as return value for the next timepoint)
    The RETURN timepoint should be returned as the next step if a single hit was selected in a search help exit.
    It can make sense to change the F4 flow at this timepoint if control of the process sequence of the Transaction should depend on the selected value (typical example: setting SET/GET parameters). However, you should note that the process will then depend on whether a value was entered manually or with an input help.
    7. RETTOP
    You only go to this timepoint if the input help is controlled by a collective search help. It directly follows the timepoint RETURN. The search help exit of the collective search help, however, is called at timepoint RETTOP.
    8. EXIT (only for return as next timepoint)
    The EXIT timepoint should be returned as the next step if the user had the opportunity to terminate the dialog within the search help exit.
    9. CREATE
    The CREATE timepoint is only accessed if the user selects the function "Create new values". This function is only available if field CUSTTAB of the control string CALLCONTROL was given a value not equal to SPACE earlier on.
    The name of the (customizing) table to be maintained is normally entered there. The next step returned after CREATE should be SELECT so that the newly entered value can be selected and then displayed.
    10. APP1, APP2, APP3
    If further pushbuttons are introduced in the hit list with function module F4UT_LIST_EXIT, these timepoints are introduced. They are accessed when the user presses the corresponding pushbutton.
    Note: If the F4 help is controlled by a collective search help, the search help exit of the collective search help is called at timepoints SELONE and RETTOP. (RETTOP only if the user selects a value.) At all other timepoints the search help exit of the selected elementary search help is called.
    If the F4 help is controlled by an elementary search help, timepoint RETTOP is not executed. The search help exit of the elementary search help is called at timepoint SELONE (at the
    F4IF_SHLP_EXIT_EXAMPLE
    This module has been created as an example for the interface and design of Search help exits in Search help.
    All the interface parameters defined here are mandatory for a function module to be used as a search help exit, because the calling program does not know which parameters are actually used internally.
    A search help exit is called repeatedly in connection with several
    events during the F4 process. The relevant step of the process is passed on in the CALLCONTROL step. If the module is intended to perform only a few modifications before the step, CALLCONTROL-STEP should remain unchanged.
    However, if the step is performed completely by the module, the following step must be returned in CALLCONTROL-STEP.
    The module must react with an immediate EXIT to all steps that it does not know or does not want to handle.
    Hope this info will help you.
    ***Reward points if found useful
    Regards,
    Naresh

  • Custom Search Help for Business Agreement field in transaction BP.

    Dear Experts,
    My requirement is to add Custom search help to Businees Agreement field (BUPA_CRMM31-BUAG_ID) in transaction code BP.
    PLease guide me how to add Custom search help to Businees Agreement field which dont have search help option.
    Regards,
    Bala

    Hello there,
    I think the requirement/question is not very clear in your post.
    However, the segment Java applet calls a CRM class which has related code and methods.
    Class:  CL_CRM_MKTTG_SEGAP_COM
    Package: CRM_MKTTG_SEG_APPLET.
    Please explain the problem in detail.
    Regards,
    Vinamra.

  • Finding the related field for "Leave Type"  from the BI content in HR modul

    Hi good after-noon!!
    Can any one help me out in finding the related field for "Leave Type"  from the BI content in HR module?
    Regards,
    Suman.

    Hi Suman ,
       U can get the information in KTART field in PA2006 table in SAP. This field can take values like annual leave type, long service leave, study leave etc....
    Regards
    vamsi

  • After obtaining the ObjectID, what crm call do I need to make to receive it's related fields?

    After obtaining the ObjectID, what crm call do I need to make to receive it's related fields?
    I currently have a PHP script which emails the ObjectID number to my email account (this was for initial testing).
    What CRM call do I need to make to obtain the customers information related to the ObjectID?
    I need to retrieve the customers username (or email) and their password. 
    I need this information to create another account on another external system.
    How the system will work:
    Customer makes a purchase and inputs their information including a username/password along with their payment information.
    After the transanction is complete the ObjectID is sent to my php script.
    The script takes the objectID and sends it back to BC to retreive the customers username/password.
    Once this is retreived, it is sent to an external database creating an account on another system.
    (If anyone has a quick script for this, feel free to share if you would like.)

    Seems like no one's biting and I don't have experience with the API much so you should probably hit up Mario in a private message to see if he can help: http://forums.adobe.com/pm-post!input.jspa?to=822747

  • Need Help Locking Digital Signature Field

    I am working on a form with a number of sections to be completed by various departments. When a section is completed, I have a digital signature set to lock the fields related to that section. The form is sent to the next department and so on… Locking the form fields with the digital signature works just fine. The problem I have it that when viewing the form in Acrobat 8 Pro, the digital signature can be right-clicked on and cleared. This unlocks all the related fields and makes the form free for editing.
    Is there a way to lock the digital signature to prevent using the “Clear Signature” function?
    Thanks for any help,
    Richard

    George,
    Thanks for the quick reply.  Upgrading to Acrobat 9 may be an option.  If not, is there a way to lock these fields with scripting?  Or applying a password after signing?
    Thanks again,
    Richard

  • Can someone plz confirm me that how i can change or update the security questions related to my apple id? as i have been never put them since i create my apple id but now due to some security reasons its asking me again and again the answers. i am unable

    can someone plz confirm me that how i can change or update the security questions related to my apple id? as i have been never put them since i create my apple id but now due to some security reasons its asking me again and again the answers. i am unable to go through the process. thanks.

    Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities

  • Regarding Search help on selection-screen field

    Hi there,
    I am working on custom tables.
    I have a requirement to maintain search pattern on a selection-screen field.
    selection-screen parameter: p_name which is company name filed from Z table.
    By giving a string like Holl* and by  pressing F4 on the field p_name it has to popup a dialogbox having list of company names starting with Holl.
    Thanks in advance.
    -Tulasi

    Hi
    Go through the link given below :
    How to create a search help for my own fields in selection screen
    F4 search help on report selection screen
    also try :
    CALL FUNCTION 'F4IF_INT_TABLE_VALUE_REQUEST'
    EXPORTING
    DDIC_STRUCTURE = ' '
    RETFIELD = 'VKORG'
    PVALKEY = ' '
    DYNPPROG = SY-REPID
    DYNPNR = SY-DYNNR
    DYNPROFIELD = 'P_VKORG'
    STEPL = 0
    WINDOW_TITLE =
    VALUE = ' '
    VALUE_ORG = 'C'
    TABLES
    VALUE_TAB = T_TABLE1
    FIELD_TAB = field_tab
    RETURN_TAB = RET_TAB
    DYNPFLD_MAPPING = DYN_TAB
    EXCEPTIONS
    PARAMETER_ERROR = 1
    NO_VALUES_FOUND = 2
    OTHERS = 3
    With Regards
    Nikunj shah

  • Search Help for Infotype Custom Field

    Hi,
    I have created a search help for a custom field in an infotype. What would be the best way of filtering the help selection based on infotype values such as molga, begda, endda?
    Thanks in advance.
    /Elvez

    Hi Nishanth,
    thanks for your reply, perhaps I should clarify my question:
    1) I have a custom field in an infotype
    2) I have a table containing the search help information
    3) I assigned a search help to the custom field
    4) I have activated a search help exit
    The problem is that the information that I get from the custom field is not sufficient for making the selection. Therefore, I would like to somehow get hold of the addition information, such as BEGDA, ENNDA, MOLGA, to do a proper selection in the search help exit. How can I achieve that?
    I read something about function module DYNP_VALUES_READ -would it be possible to call this function module from my search help exit and thereby reach my goal?
    /Elvez
    Message was edited by: Elvez

  • HELP_START: how can i do a search help F4 same as field Group PLNNR in CA02

    Hi all,
       I'm developing a report in which i use two field Group (PLNNR) and Group counter (PLNAL) as same as in CA02: choose a group by F4 and after these two fields are filled with the chosen values in help screen.
       My problem: i would like to do a search help for field Group (PLNNR) as same as in CA02. I have used the Function HELP_START for this purpose, but i can not reach my purpose: i choose a group in dialog help and after the field Group have the chosen value, but the field Group counter (PLNAL) don't have any value.
       I don't know which input values for structure HELP_INFOS will be get a result as same as in CA02?
       Anyone know how i should do to solve my problem, please help me?
      Which input is incorrect (code below), please help me!
    Thanks a lot in advance,
    My Actual input for structure HELP_INFOS as below:
    ls_help-call      = 'V'.
      ls_help-tabname   = 'RC271'.
      ls_help-fieldname = 'PLNNR'.
      ls_help-spras     = sy-langu.
      ls_help-docuid    = 'FE'.
      ls_help-object    = 'F'.
      ls_help-dynpprog  = sy-repid.
      ls_help-report    = sy-repid.
      ls_help-dynpro    = sy-dynnr.
      ls_help-pfkey     = 'NXD'.
      ls_help-dynprofld = 'P_PLNNR'. (My fiel 'Group' in Selection screen)
      ls_help-MENUFUNCT = 'HC'.
      ls_help-fieldlng = '8'.
      ls_help-pov = 'N'.
      ls_help-curow = sy-cucol.
      ls_help-cucol = sy-curow.
      ls_help-selectart = 'A'.
    CALL FUNCTION 'HELP_START'
           EXPORTING
                help_infos   = ls_help
           IMPORTING
                select_value = lv_select_value
           TABLES
                dynpselect   = wt_dselc
                dynpvaluetab = wt_dval.
    Thanks,
    Vinh Vo

    Why do it in more complicated way, while the simplest method is available. You can use :
    PARAMETERS: p_plnnr LIKE rc271-plnnr.
    PARAMETERS: p_plnal LIKE rc271-plnal.
    Give it a try.
    Thanks & regards,
    Hadiman

  • Dynamic value help for a table field to fill two fields, how to?

    Hi all gurus,
    In SRM 7 I defined a dynamic value help for a single field (ZZ_PROLE_R3) of my header custom table.
    That's the code from WDDOMODIFYVIEW in the webdynpro /SAPSRM/WDC_DODC_CT, view V_DODC_CT:
    DATA: lo_tabnode        TYPE REF TO IF_WD_CONTEXT_NODE.
          DATA: lo_tabnode_info   TYPE REF TO IF_WD_CONTEXT_NODE_INFO.
          DATA: tab_value         TYPE WDR_CONTEXT_ATTR_VALUE_LIST,
                wa_value          TYPE WDR_CONTEXT_ATTR_VALUE.
          lo_tabnode = wd_context->GET_CHILD_NODE( name = 'THCUS' ). "the custom table node
          lo_tabnode_info = lo_tabnode->get_node_info( ).
          wd_this->GET_VALHELP_ZZ_PROLE_R3( EXPORTING iv_guid = lv_guid
                                            IMPORTING ZZ_PROLE_R3_VALHELP = tab_value ). "this method returns the dyn value table
          lo_tabnode_info->set_attribute_value_set( name = 'ZZ_PROLE_R3'
                                                     value_set = tab_value ).
    The method GET_VALHELP_ZZ_PROLE_R3 dynamically builds the value help table tab_value; such table is made up by two fields:
    value : contains the value of the field
    text   : contains a description of the value
    The above solution works; now I'd like to enhance it. The custom table THCUS contains also a field called ZZ_PROLE_R3_DESC, which represents the description of ZZ_PROLE_R3. It is, exactly, the TEXT field in tab_value.
    So I'd like to do as follows:
    - the user clicks on the search help for ZZ_PROLE_R3 field of the table;
    - the above described value help appears;
    - after the selection, both ZZ_PROLE_R3 and ZZ_PROLE_R3_DESC are filled with the selected couple value - text chosen from the value help.
    Could anyone help me achieving such a behaviour?
    Again, a little request... when I open the above value help dialog box, the window itself has a label "Floorplan Manager application for OIF.." that obviously I'd like to redefine (e.g. "Role selection value help"). Is there any way to do that?
    Thanks in advance

    Chris Paine wrote:
    It seems to me - given that your code is in wddomodifyview that you are trying to have different dropdowns per row
    - I'm not sure where you are populating lv_guid - but I'd guess it is an attribute of the row selected? If it isn't then I can't see any reason that you would do this code in wddomodifyview and not wddoinit.
    Hi Chris and thanks for your help,
    lv_guid is the GUID of the document's header; I need to pass it to the method that populates my value help table because the values in it are derived from some fields on the document. (the situation actually is more complex; there's an RFC call on the backend for which the document is intended for to retrieve the data that populate the value help...).
    I'm quite unexperienced on webdynpro and terminology; if dropdown menus are fixed selection option that appears on a field, I guess this is not my case. I did a pair of screenshot to provide an idea of what the solution by now is, and what "I would like to have":
    [Pre-selection (F4 icon on the field in table)|http://imagebin.ca/view/npIsaqF.html]
    [Value Help popup for the field ZZ_PROLE_R3|http://imagebin.ca/view/8fZUh3T.html]
    [Result by now |http://imagebin.ca/view/3PaqdvE.html]
    [Result I'd like to have.|http://imagebin.ca/view/dExR0J.html]
    Chris Paine wrote:
    However - by your comment on the "value help dialog box" I am guessing you are using an input field? If this is the case then I would strongly suggest that you change/enhance the structure of the context node THCUS (btw, better coding practise to refer to it as wd_this->wdctx_thcus when using the get child node construct) so that you refer to an actual SAP ddic search help, if you then associate in the structure the value and text fields then populating the text field should happen automatically. Also you'd have the nice side effect that your value help dialog would be named after the associated ddic search help.
    Thanks for the code suggestion, I'll apply that. For what concerns the context node THCUS... It is, by standard, a node which I can't explictly find in the context for the view V_DODC_CT. The problem is that ZZ_PROLE_R3 and the corresponding description field ZZ_PROLE_R3_DESC of the table must be filled with data retrieved dynamically @ runtime from the backend. So I guess I can't populate a val help referring to a dictionary table/field; I'd rather do as follows:
    - retrieve what's the target backend for the document (to do so, I have to process the document .. that's why the header guid passed to my method);
    - RFC call to a custom method that extracts possible values for the specific backend;
    - bind the ammissible values to the value help.
    Chris Paine wrote:
    I realise that this is rather a lot - so if you have any specific question please do respond - hopefully I or someone else will be able to clarify.
    Thanks again for your help; additional info as well as code examples would be highly appreciated

  • Search help for a Input Field........

    Hi,
      I'm fairly new to BSP and I would like to know how to attach Search Help to the Input Field in BSP application.
    Thanks
    NP.

    Hi nagendra
                        Search Help for input field Provide using attribute of input field is showHelp and onvaluehelp
                      This is providing the search help .

  • Change Search Help for Payment Terms Field

    Hi,
    I would like to change the Search Help for Payment Terms Field, in Customer Master (KNVV-ZTERM). and in Sales Document. I believe it is the same.
    Default is From Table T052 / T052U
    ZTERM  and TEXT1  Fields
    I would like to have
    From Table TVZBT
    ZTERM and VTEXT
    PayT    Own Explanation Field.
    Can we change the Search Help.

    Hi,
      The search help for the payment terms is not coming from the DDIC search help..
      It is coded in the process on value-request event...
      The function module FI_F4_ZTERM is called for this..you have to change this function module in case if you want the values from a different table..
      OR do implicit enhancement in the subroutine FORM HELP_ZTERM in the include MF02DFH0 to call your search help instead of the function module FI_F4_ZTERM ..And do the same for the sales order also..
    Thanks
    Naren

Maybe you are looking for

  • Connect macbook to windows network

    Trying to connect a workmate's macbook to MS SBSSRV 2008... absolutely no joy...

  • TA24080 mac os x 10.6.8 but keyboard not responding

    my keyboard is not responding

  • Yosemite SMB File Sharing

    Scanning from a network scanner is an issue, it doesn't work due to an authentication issue. I believe it has to pertain to device signing in the OS itself but I do not want to make OS changes that I cannot project the lifecycle of. I believe there n

  • Can anybody help me in updating forwarding agent

    I am trying to update forwarding agent( Parvw = CR partners) in delivery using function module SHP_DELIVERY_PARTNER_UPDATE. but it is not working in code, but it is working from se37.can anybody tell me why it is so ad what to do

  • Problem in preparedstatements

    hi all,i am using preparedstatements in my program.i use so many of them.i have so many functions and in each function i declare preparedstatements though the preparedstatements are common.but when i use these preparedstatements in the valuechanged()