How to restrict AS02 access to certain fields only

How to restrict AS02 (Asset Master Record) access to certain fields only. Currently when you assigned AS02 to a certain user, this will enable the user to change all the fields in the asset master record. Suppose i want only the user to restrict the access to certain field eg.NDJAR (Life in Yrs).
Thanks for your inputs.
Regards,
Robert

hello,
basis has to assign the proper activity with object A_S_ANLKL. in this case they have to allow activity 03 only with combination of Cocode,asset class. see some more details below.
This authorization object is the first part of the object "asset master record."
The definition at this level determines whether the user is authorized to process data in a given company code. The activity type for the transaction is also defined here. This authorization object is used for master data transactions, for the display of value fields, and for reporting.
Defined Fields
The following fields are assigned to the authorization object
Asset class (specified by entering a value in the pop-up window)
Company code (specified by entering a value in the pop-up window)
Activity type - there are three different activity types:
01 = Create
02 = Change (including blocking and deleting)
03 = Display

Similar Messages

How to restrict read access to certain document in stellent content server

Hi,
We are using stellent content server to store project documents. We would like to restrict access to certain confidential documents.
Users with Read / Write permission should not be able to access but admins with RWDA permission should be able to access these confidential documents.
Appreciate your inputs on this.
Thanks,
Nayana

Without seeing your setup and environment its a bit hard..
But...
Make sure that user has read only access to public security group.
You could setup an addition role with readOnly access and apply it those users.
Or restrict there account to have Read only access.
Remember if the user has Admin access on the Account but only readonly access on the security group then they will only have read only access on the files and visa versa.. :)
J.
Message was edited by:
JRS

Unified Storage 7110 - How to restrict CIFS access to certain hosts

Hi,
I am trying to setup some CIFS shares on a 7110 machine and restrict access to them based on Host name or IP address. I have played around with the schema settings but have not gotten that to work successfully and I was wondering if anyone has gotten this to work or has any documentation explaining how to set this up. I have already downloaded the docs that you get from docs.sun.com and they explain what each feature can do but do not go into great detail on how to get it to work.
Thanks

Providing a new version 1.1.0 of the command "WFA Schedular" Changes made: Added conditional String Representation based on the Scheduling parameter provided. Provided check for the right number of parameters passed into the command.Added a new parameter "Expiry Date" to automatically stop the recurring execution upon expiry.Check for Posh3.0 version in code.Have Fun!! sinhaa Below example for:Schedule a workflow for recurring execution every alternate day i.e. once in 2 days at 10:30 PM starting 06-Jul-2015 (Today's date is 02-Jul-2015) . The recurring workflow execution should expire on 31-Dec-2015 and stop.

How to restrict the access of FUNCTION MODULE for others after transporting

A Function module needs to be executed in one server and should be executed when others try to access it.how to restrict the access of FM to one application server after being transported using SM59.

issue resolved

How to restrict user access in Oracle Application Server 10g (9.0.4)?

Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

Hi,
You have to edit httpd.conf and modify acces rights for each protected directory
e.g.
<Directory /var/www/sub/payroll/>
Order allow,deny
Allow from 192.168.1.0/24
</Directory>
then you have to restart Oracle HTTP Server
jm--

How to restrict the length of input field

Hi,
How to restrict the length of input field. That is we should not be able to enter more thatn 10 charecters.
Regards,
H.V.Swathi

Hi swathi,
For this you have to create a simple data type. No need of writing a code.
Go to Dictionaries -> Local Dictionary -> Data Type - > Simple Type - > Right click and "Create Simple Type".
Here you should create a Simple type with String as built-in Type. Here you will also see the Length Constraints option.
Set the value of maximum length and minimum length. In your case set the value of maximum length to 10. At runtime this will not allow the user to enter more than 10 characters.
Now create an attribute and bind it to this newly created simple type. Bind the value of the input field with this particular attribute.
Regards
Manohar

FB02 how to restrict to certain fields only during editing

hi!
Would like to know how to restrict fields e.g. Baseline Date when using FB02.
Thanks

Hello,
Your Base line date is controlled from settings in payments methods. (This payment methods must have been assigned to your vendor or customer)
You have four options:
Posting Date
Document Date
System Date
No default
In first three cases, the system proposes the date, however, the user will have the option to overwrite them.
In the fourth case, the system forces the user to enter a valid base line date.
"Base line date is nothing but a date from which the due date stars get calculating"
If you want to restrict the base line date, write a validation in GGB0 and assign the same in OB28 for your company code.
Regards,
Ravi

How do I limit access to certain (but not all) applications on my laptop?

Hello,
Is it possible to reduce access to certain applications (eg Email) while allowing other applications to remain "open" to all users?
I only have one account on my powerbook, and would like to simply prevent access to certain applications.
Any help will be greatly appreciated,
thank you,
nihal

Korelice
you would need , in following Matt's advice to ensure that the restricted users were not created as admin users. That is, on creation do not click the 'allow this user to administer computer' box. If you tried parental controls on them, you would be told by the OS that you can't restrict an admin.
The better advice would be to restrict the actual use of the single user you have now, who is presumably an admin, to just admin (installations, re configs, set up new users etc) tasks. Change his password so those real people you don't trust (?) couldn't get to him. You could have a 'restricted' user who is not restricted in respect of apps (email, browser etc) but can't admin. Use him yourself for browsing etc and general use. Add another restricted user for(the kids, irresponsible friends and such) who are not admins and can only use certain apps. I am aware that is not precisely what you asked.

How to restrict VK11 access based on condition class D (Tax)

hi ,
I have a requirement to restrict VK11 access based on condition class D (Tax). Because all users should not have access to maintain tax data in VK11 while general pricing data they can maintain. when condition class is D then we should have control.
Thanks
Akhilesh

Hi Akhilesh,
Please find the below link and click on View article.
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c
how to create authorization object?
Thanks
Dasaradha

How to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some users and allow the access for some users?

I have a requirement to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some of the users and allow the access for some of the users.
I have applied the below code on the web.config file but this modification impacting only on the web application level not on the site collection and sub site level.
<location path="_layouts/15/InPlaceRecordsSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
<location path="_layouts/15/InPlaceRecordsListSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
When I tried the access on
:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx">http://<servername>:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx page allowed the access for all users.
Please suggest the possible solution to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages on SharePoint2013.
Thanks
Ramasubbu

You can't do it from OOTB.
_layout folder is accessible to the users if they have read access in any of the site even subsite.
You can modify *.aspx file, add your custom control which will check user.
[custom.development]

How to Restrict Intercompany Access By Company Code

We have multiple territories, of which each is assigned their own company code We'd like intercompany access to be restricted by company code so users only have intercompany access to only territories they have authorization for. Currently, we have role X setup and authorized users have access to this role.
Intercompany TCODES would include FBU2, FBU3, and FBU4.
The obvious solution would be to create additional roles via PFCG whereby each role has access to X company codes and assign these users to the appropriate role. Any other ideas? Also, with the ECC upgrade, doesn't this impact performance on the cube when trying to restrict roles by company code?
Thanks in advance!
Edited by: david kim on Feb 10, 2009 2:13 AM

Hi david kim,
Based on my experience, the best way is by maintaining the roles in Txn PFCG as what u did just now. FYI, there's no impact on performance on the cube when trying to restrict roles by company code. (we have faced it before when upgrading 4.6C to ECC6...with flying colors ...).
Hope this will solve your problem.
TQ
Regards,
Nazrul

How to restrict PCs to logon one domain only

I have multi domains environment. I have number of PCs that will be placed in common area that I would like to restrict the PC being allowed to logon my domain (A) only. How do I do that?
I use GPO to set 'Default Logon Domain' but if users from other domain knowing how to do domain\username I think they would be able to logon.
I can not apply 'Deny Logon Locally' because I don't have rights to other domains. I tried that and I tried to select Domain Users from other domain, I got denied.
Is there a way to do it without interact with other domain admins? thanks.
Thang Mo

What is your domain controller?
There is a kb--->How to restrict use of a computer to one domain user only
Solutions may be applicable..

How to restrict outside access to php files needed by a swf

hello all,
i have php files that my swf needs for database access that
i'd like to restrict access to so no one other than the swf can
gain access to for security reasons. seeking best practice for
this.
can't simply do an .htaccess redirect away from the directory
w/ the php in it since the swf client will also get redirected.
one way is to embed a key into the swf which gets POSTed to
the php file. if this key doesn't exist then the php file sends an
error message rather than executing. but then someone could crack
the swf and get the key. and if the swf retrieves the the key from
the server then there still must be an unprotected file for the swf
to get the key from.
another way is to .htaccess protect the folder with the php
files and allow the swf to authenticate. is this best? if so, how
to do this?
what's your thinking?
tia,
michael

Hi ,
Store the customer number in session. When a user pastes some other customer's virtual dir url then use request.getPathInfo() to get the URL .Parse the URL and compare the customer number in the URL with the session variable. If they do not match then redirect the user to an invalid access page.
Hope this helps.
Regards,
Vishal

How to restrict the accessibility of a class to specific class(es)

How can I restrict accessibility of a class (instantiating or using) to a specific class or a set of classes. For example, I have a class 'CreditCard'. I want to limit its accessibility to a specific class 'CreditCardManager'. i.e., anyone could only create or use objects of 'CreditCard' class from 'CreditCardManager' class only.
This may look like 'friend' functionality in c++. But it is not. The private members should not be accessed from the manager class.

Define a CreditCard interface:
public interface CreditCard {
}Put the implementation inside CreditCardManager:
public class CreditCardManager {
    private /* static (?) */ class CreditCardImpl implements CreditCard {
    public CreditCard newCreditCard(...) {
        CreditCard cc = new CreditCardImpl();
        return cc;
}Since you are going on about it, I assume CreditCard is a key concept in your app, so there are probably other reasons to make it an interface too. For example, so that youi can mock it in unit tests.

Keychain: How to enable automatic access for certain applications?

I have gotten really tired of Adium and Skype asking for the keychain password every time I reboot the machine, and Quicksilver neeing my system password all the time when installing updates.
How do I enable automatic access to the keychain and system password for certain applications, but not all?
PowerBook G4, 1.5 Ghz Mac OS X (10.4.6)

Hi, Bjørn.
A. You wrote: "I have gotten really tired of Adium and Skype asking for the keychain password every time I reboot the machine..."There are two things to check. You'll use Keychain Access — in the Macintosh HD > Applications > Utilities folder — for both.
One key point to note before you begin: If the affected account was created under Jaguar, it's default keychain will have the same name as the account's short name. Accounts created under Panther or later have the default keychain name of "login." The user's default keychain is always highlighted in bold in the Keychains list in Keychain Access. All of the instructions in Mac Help regarding keychain assume the accounts were created under Tiger and always refer to keychain "login."
Here are the two issues to check and correct:
1. The affected account may have its keychain preferences set so that the keychain locks automatically after a period of inactivity or after sleep mode:1.1. Select the user's default keychain.
1.2. Click Edit > Change Settings for Keychain "keychain_name."
1.3. Deselect the checkbox next to "Lock after __ minutes of inactivity", if selected.
1.4. Deselect the checkbox next to "Lock when sleeping", if selected.
1.5. Click Save.2. The affected account's login password and keychain password are different. Set the keychain password on that account to be the same as the account's login password. See “Mac OS X 10.4 Help: Changing your keychain password.”
Once those steps are taken, if an application requests access to the keychain, click Always Allow.
Note that if you update applications, i.e. install later versions, you may be asked once to confirm the new version's access to your keychain. That's a standard security precaution.
B. You wrote: "...Quicksilver neeing my system password all the time when installing updates."That cannot be prevented if that application is installed in the Macintosh HD > Applications folder using an installer, such as the Mac OS X Installer. Authentication is required if an installer will add or change files in either Applications or other System-related folders.
Good luck!
Dr. Smoke
Author: Troubleshooting Mac® OS X

How to restrict AS02 access to certain fields only

Similar Messages

Maybe you are looking for