How do i Restrict the users up to the self service pag only in IDM 11g

Hi all,
can any one please help me out to restrict the users to self service page only in 11g.
thanks for your time and support
Regards
Siva

Your user will have the Administration page if they have an Authorization Policy configured to allow the user any of the User Management or Role Management Functions. Also, if you login as a user that has those tabs, and logout while on the Administration tab, sometimes i've noticed the new user logging in with the same browser session will be in the Administration tab but with no items available.
-Kevin

Similar Messages

How to Submit a Concurrent Request Set Using a Self-Service Page

Hi all,
I would like to know how to Run/Submit a Concurrent Request Set Using a Self-Service Page
Thanks.
Bench

Hi all,
I would like to know how to Run/Submit a Concurrent Request Set Using a Self-Service Page
Thanks.
Bench

How will I block/restrict the user to change the payment term in FBL5N?

Hi All,
How will I block/restrict the user to change the payment term in FBL5N????
I have tried on following objects:
F_BKPF_BLA
F_BKPF_BUK
F_BKPF_GSB
F_BKPF_KOA
F_IT_ALV
F_KNA1_BED
F_KNA1_BUK
F_LFA1_BUK
S_ALV_LAYO
But, not succeeded.
=>Actually user runs FBL5N, double click on a record then click on Change icon.
=>Change Payment Term.
Please reply ASAP. Point will be awarded.
With Best Regards
Dharmendra

Hi Dharmendra,
Please set an authorization trace in ST01 and then ask the user to execute the transaction and the steps on the same application server as the o ne on which the trace has been set (valid in case we are talking about mutiple application servers for same <SID>). After this is done switch off the trace,list it and fill all the authorization objects. That might give you the perfect idea.
Regards.
Ruchit.

How to Restrict the users from changing the Default variant of report.

Hello everybody,
The requirement is to restrict the users to save and overwrite the default layout variant (Layout for higher managenet)set for the report, but at the same time they should be able to change and save the other layouts for which they are having access.
I have written the logic in the program which is working fine for all the scenario when we execute the report. But the logic doesnt work if the user is selecting the layout on the output screen of the report.
for e.g if the user runs the report using the layout varaint for which he is having the authorization then he gets the all 4 options so he then he can select the layout for which he is not authorized and he can overwrite.
i have debugged and check as i have found that after the report output is shown all the layout paramater is controllled by the statndard SAP objects.
Can anyone help me out in this issue.
Thankyou in advance.
*to get the default layout variant.
w_save = 'A'.
if p_vari is initial.
    clear disvariant.
    disvariant-report = sy-repid.
    w_variant = disvariant.
    call function 'REUSE_ALV_VARIANT_DEFAULT_GET'
      exporting
        i_save     = w_save
      changing
        cs_variant = w_variant
      exceptions
        not_found = 2.
    if sy-subrc = 0.
      p_vari = w_variant-variant.
    endif.
endif.
*logic to check user authorization to change the layout setting.
if p_vari = c_layout.
    if not sy-uname is initial.
      select single * from agr_users
              where agr_name = c_role
              and   uname    = sy-uname.
      if sy-subrc = 0.
        w_save = 'A'.
      else.
        w_save = ' '.
      endif.
    endif.
endif.
Regards,
Satish.

Hi Maine,
Thanks for your reply.
As you mentioned for your own program, you can control the parameter "I_SAVE", when calling "REUSE_ALV_GRID_DISPLAY".
so already i have use the same logic and control the parameter through I_SAVE and here i am calling method ALV_GRID->SET_TABLE_FOR_FIRST_DISPLAY instead of "REUSE_ALV_GRID_DISPLAY".
and it works fine when we execute the report but the logic doesnt work when the user tries to change and save the layout variant on the output screen of the report.
Regards,
Satish

How to restrict the user to change the project structure but not the documents?

Hi,
I have created one project assigning different users in Solution manger. I want to risitrict some of the users to change the project structure but simultaneously allwoing the project documents to be created, edited or deleted using solar01 under Project documentation tab. For that I have followed the steps provided in the follwoing link.
http://wiki.scn.sap.com/wiki/display/SM/Howto+Restrict+Changes+to+Project+Nodes+to+Assigned+Team+Members
I am able to restrict the users to change the project structure, but I am not able to allow access to the project documents. It gives me the message "You are not authorised to change the project". This fulfills my one of the requirements. But, Is there any way to restrict the user to change the project structure but not the documents?. Any help will be apperitiated.
Thanks,
Rutvik Uapdhyay.

Hi Rutvik,
Basically there are 2 different authorization role ...you should look for and customize as per requirement in Z* namespace.
role - SAP_SOLAR01_ALL
this take care of objects in Solar01 like tab access etc
role -SAP_SOL_KW_ALL
this takes care of entire documentation within solman
hope this helps
Regards
Prakhar

How can i restrict a user not open more than 3 sessions in database

how can i restrict a user not open more than 3 sessions in database.For this i have already create a profile and set CONCURRENT_SESSIONS=3 and assing that profile to user but the problem is there.

You will simply need to use the following parameter in your CREATE PROFILE syntax.
CREATE PROFILE normal_user
LIMIT SESSIONS_PER_USER 2;
but the resource limits set for a profile are enforced only when you enable resource limitation for the associated database.
you could do this either by having an initialization paramater which will invoke as soon as the database starts or try using ALTER SYSTEM command

Restrict the users to use the field Unplanned delivery cost at MIRO

Dear Friends,
I want to restrict some users to use the unplanned delivery cost at MIRO. It should be displayed as visible to enter for some users and it should be displayed in grey mode not to enter anything for some users. I am asking this to restrict some misutilisation of this field by some users. Can I restrict through profiles?
Simply, I want to restrict the users to use the field Unplanned delivery cost at MIRO through Profiles of them. Pls help me,, it is impacting our business.
Regards,
Venkata Reddy.Mudda

Hi,
Check the customization for unplanned cost:
SPRO -- Materials Management -- Invoice Verification -- Logistics Invoice Verification -- Incoming Invoice -- Configure How Unplanned Delivery Costs Are Posted
Best Regards
Anamika

HT1451 Hi All, I have 2 users on my desktop, 1 i-tunes account and log-in but both users have different music contents i.e. one has the full iTunes library and the other only has some songs. How do i get both users to have the same music content?

I Have 2 users on my computer and both access i-tunes using same password etc. however 1 library has the full content of music but the other one has only partial playlists. How do I get both users to have the same full library?

The title of my initial post is a bit misleading. I already took a chance deleting one of the iPhones, hoping if I deleted the wrong one, I can still reauthorize it (all with the same Apple ID acct, so not subject to 90-day waiting period, right?) The iTunes database just updated itself, and it says I have 4 "devices" "in the Cloud", but 5 "computers" associated w my account. How can I find out what computers are associated? Isn't there a list I can see? I dont have a clue what computers they might be. If I use the "Deauthorize All" option, is it a pain to add them all back in. I assume I would have to log in from each computer to reauthorize each one. Would I have to be running the newest OS or version of iTunes to reauthorize? I think I have a PowerBook G4 Titanium with an older OS and iTunes. I'd like to keep that authorized, if possible.

How can I find out the screen size of the users moniter using the Acrobat SDK?

How can I find out the screen size of the users moniter using the Acrobat SDK? I need to know how much sreen real estate that is available on the users moniter. Is there some call that I can make from the SDK to discover the maximun X and Y coordinates?
Thanks,
Gregory

Currently, I am testing on multiple moniters and it is defaulting to the moniter designated as the #1 moniter. For our purposes, this is acceptable. Once the two documents have loaded, the user can move and re-size at will.
Gregory

How can i obtain a user guide for the ipod nano 16GB 5th gen. with out printing it off the computor

How can i obtain a user guide for the ipod nano 16GB 5th gen. without printing it off the computor.

You can't, at least not the one provided by Apple.
B-rock

How to check if a user exists in the system ?

Dear Gurus,
I want to check whether a user ID exists in the system after logon by using VBA. If the user ID exists, then I will update the user's information with external data by using the method user.change.
When running below codes, error occurs and error msg is: "The persistent key for an business object instance of type USER has not been set. Cannot invoke method EXISTENCECHECK"
How can I do to check the user ID existence ?
Set oUser = oBAPICtrl.GetSapObject("user")
oUser.ExistenceCheck "MyUserID", return:=oReturn
Thanks and Regards,
Bao Yan

Mickey,
I'm afraid I never did get this to work properly. However, in the way of all bad/good (delete as appropriate) programmers eveywhere I worked around this problem. I was using this code in Banner.asp to change the view based on the user group so if a given session variable was set a user would see a different view. It works fine with no slow down on the page and you should be able to adapt it to what you need.
Hope this helps.
Neville
Note: Application variables are ones I have defined in config.xml.
Code follows:

<% 'NAH 29/03/2004 ' 'This check the to see if the current user has the group in their membership that has been defined as the group to provide an alternative view of the portal.' 'The group variable is defined in the config.xml as "ALTVIEWGROUP"'
'Do not do this is we have already matched the group'If Session("groupMatch") <> "1" and Session("groupMatch") <> "2" then
Dim pGroup
pGroup = Application("ALTVIEWGROUP") Set Session("groupMatch") = nothing
Dim Plumtree
Set Plumtree = Server.CreateObject("ADODB.Recordset") Plumtree.ActiveConnection = "Driver={SQL Server};Server=" & Application("DBSERVER") & ";Database=" & Application("PLUMTREEDB") & ";" Plumtree.Source = "SELECT GROUPID FROM " & Application("PLUMTREEDBUSER") & ".PTGROUPMEMBERSHIP WHERE (USERID = " & strUserID & ") AND (GROUPID = " & pGroup & ")" Plumtree.CursorType = 3 Plumtree.CursorLocation = 2 Plumtree.LockType = 1 Plumtree.Open()
'If there are records we should have a match otherwise set the session varible to no match.' If Plumtree.EOF then Session("groupMatch") = "2" Else 'By getting here the user should have the matching group but complete one final check to make sure' If cInt(Plumtree.Fields.Item("GROUPID").Value) = cInt(pGroup) then Session("groupMatch") = "1" Else Session("groupMatch") = "2" End If
End If
Plumtree.Close() Set Plumtree = Nothing
End if%>

How to prevent a portal user from using the BEx Analyzer ?

Hi,
we have different type of users : most users may use the portal as well
as the analyzer ;
we have one special user with extended authorizations : this user
should use the portal , where he has a limited set of queries to run
with hardcoded filters ==> this user should not be able to use the
analyzer however, since he then would be able to call all other queries
by using the find function ;
how can we make sure this user cannot use the analyzer , using SAP
authorizations ?
best regards,
Erwin Van Giel.

Hi,
if I remove the complete S_RFC authorization for the user then the BEx Analyzer cannot connect anymore to the BW system, but neither can the user run reports from the portal : it needs the S_RFC with 'SYST'.
If I only remove the RRMX from the S_TCODE and from the S_RFC, it does not prevent the user from starting the BEx Analyzer and connecting to the BW system. It only stops the user if he would start the RRMX transaction from within an SAPGUI session.
Perhaps there should be a value in the S_RFC that allows connections from the portal but not from the BEx Analyzer .... ?
so not solved yet ....
best regards,
Erwin.

Text in VA02 - how to find the user who added the text

Hi
The user is adding text in the sales order through VA02, sometime after creating the order. This is not making any changes to the existing data, but adding the text in Header Text.
When trying to findout who made the addition of text (not changes) from VA03 - menu - environment - changes ---it is not showing any details regarding this. Please guide me how to find out the user who made the addition of text in sales order through VA02.
Thanks,
Ravi

Hi Ravi,
          I think there is no option available to find the name of the person who added text to the sales order.
         If the person who creates sales order, should also maintains the text we can find the name who created sales order. I am sure that u might be knowing the way.
       Still for the benefit of friends who r not aware, in the sales order> GOTO>Header data--> Sales tab.
Regards,
Ravi Duggirala.

How to track the user who deleted the info object.

Dear Gurus,
In our BI system one info object has got deleted. If I need to track the user who has deleted that how can I track it(in which DBtable). And the complication is one user ID is being used by many people, in this case how can I track that from which machine the Info Object has been deleted(if there is any possibility to track the machines by IP address).
Kindly let me know if there is any procedure to find it out. Your help will be rewarded with a great honour.
Regards
Mohan Kumar

Hi dear,
you have to go in SLG1 transaction, and then select
Object: RSD
Subobject: IOBJ_DEL
External ID: (put here the name of your deleted IO)
Then choose a time range...and voilà, you can find the user who deleted the IO...
Hope it helps!
Bye,
Roberto
About the IP...look at USR41 table, but I think it's a bit difficult fo find data referred to the past...
If you haven't activated logon auditing in SM19...

How to identify the user who created the variant

Hi All,
Can anyone tell me how to identify the user who created the variant ?

Hi Dear,
For the same go to SE11 and view the table "VARID". This table give the details of the program,user,variant etc.
From this table u can know which user created the variant. Hope this solve your purpose.
Regards

How do i Restrict the users up to the self service pag only in IDM 11g

Similar Messages

Maybe you are looking for