Removing posting access from txn codes (FBV2, FBV3 and MIR4)

Hello all,
There is a business requirement to remove the ability to post
Financial documents from a particular FI role. We are using a
job role (for the most part, one SAP role per user) approach.
For the transaction codes FBV2, FBV3 and MIR4, they would like to
remove the ability to post. The relevant auth. object for
posting is object F_BKPF_BUK, Vendor: Account Authorization. In
this role, the ability to post (which is actually activity 01,
create), has been removed; however, the role still has the
ability to post the documents.
I executed an auth. trace for each transaction code and the only
activities outside of 03 or 77 (pre-enter) are checked in this
object. I also verified that none of the other roles assigned to
the test ID (a FI reporting and display role) have this
authorization object with 01 in the activity field.
As a sanity check, if anyone has removed posting access from
specific FICO roles, please confirm that this authorization
object is the correct one. I believe I've done the standard
security 'debugging' steps and now I am stuck.
Also, other transactions with posting access FV60 and FBV6 are
restriction from posting by removing activity 01 from objects
F_BKPF_BLA and F_BKPF_KOA.
Thanks in advance for your help!

Hi, the authorizations were correct in the first place - ths issue is that they didn't test it fully because the post button was still visible. However, when I tested it via the instructions given by FICO, when I selected the post button, security prevented me from doing so and authorization object F_BKPF_BUK for activity 01 was checked.
Next time, I will make sure the testers are testing properly.

Similar Messages

  • HT5622 We have two iphones with the same Apple ID. Since I installed iOS this morning I have started receiving all my sons texts and when I send him a text it is delivered to both of us. How can I remove my phone from the joint Apple ID and remove myself

    My son and I both have iphones with the same Apple ID. Since I installed iOS this morning I have started receiving all my sons texts and when I send him a text it is delivered to both of us. How can I remove my phone from the joint Apple ID and remove myself from finding out what he is up to during Freshers week!

    You have to use a different Apple ID for your son.
    Read this note:
    iOS 5 & iCloud Tips: Sharing an Apple ID With Your Family
    still valid for ios 7

  • I had to remove my drive from a broken mac pro and put in another mac pro now my adobe master collection is telling to sign up for a trial

    i had to remove my drive from a broken mac pro and place it in my spare mac pro, but now my adobe master collection is asking my to sign up for a trial

    uninstall and clean adobe programs you 'migrated' - Use the CC Cleaner Tool to solve installation problems | CC, CS3-CS6
    and then properly install your master collection.
    Downloads available:
    Suites and Programs:  CC 2014 | CC | CS6 | CS5.5 | CS5 | CS4 | CS3
    Acrobat:  XI, X | 9,8 | 9 standard
    Premiere Elements:  13 | 12 | 11, 10 | 9, 8, 7 win | 8 mac | 7 mac
    Photoshop Elements:  13 |12 | 11, 10 | 9,8,7 win | 8 mac | 7 mac
    Lightroom:  5.6| 5 | 4 | 3
    Captivate:  8 | 7 | 6 | 5
    Contribute:  CS5 | CS4, CS3
    Download and installation help for Adobe links
    Download and installation help for Prodesigntools links are listed on most linked pages.  They are critical; especially steps 1, 2 and 3.  If you click a link that does not have those steps listed, open a second window using the Lightroom 3 link to see those 'Important Instructions'.

  • HT204385 how do i remove my computer from shared i tunes acct, and set up my own?

    i need to remove my computer from shared i tunes account and set up my own. how do i do this?
    or if i deauthorize  my computer from that i tunes acct will i be able to set up i tunes acct?

    Create an Apple ID for your son...
    Sign out of your account and get him to sign in with his new account...
    Bear in mind that any Apps Purchased with your ID will not be able to be Updated with his ID...
    The Apps are locked to your ID...
    Apple ID FAQ
    http://support.apple.com/kb/HE37

  • IMac either or has been remotely accessed, has malicious code, is hacked and/or all of the aforementioned or something that I have not yet researched. With my health issues, my Mac keeps me from thinking about the pain and disability I have. Thank you.

    Hello,
    I'm giving it one more chance and then Mac goes into trash. My iMac is either remotely accessed, perhaps malicious code, hacked and/or all of the aforementioned. I am not savvy in these areas. Please read some of the many symptoms and if you can assist me -- I am beyond grateful.  If you want to say it is my fault because I allowed somebody to use my computer or other nonsense please do not waste my time or yours. This is serious and has been going on for a period of time that is longer then I can remember!
    I have a neighbor, lives in my apartment building, 'had' physical access to my iMac.  Shortly after this I started to have problems that beyond any nightmare I have ever heard of - whether it be Windows or Apple!  Please feel free to ask me any question(s) that might help me rid my iMac of this malicious act as the police have been useless -- say they do not have equipment to check my Mac. FBI can't b bothered.
    It is more then clear that a person(s) has access and has messed up the OS, among other terrible things.  He took over my Facebook account months ago, posted as though he was me. He also prevented me from getting back into FB and Yahoo to close those connected accounts.  Went to an Apple store, under protection of their router and removed FB/Yahoo accounts.  The pages that were showing at home turned out to be fake pages controlled by him. (Think they are called "defaced").
    Anytime I did a 7X or zero out clean install -- he was there before I even hooked up the router!!!
    It came to a point that I can no longer even get to the erase/Utility/install from my apartment so I took it to Apple more then once. Besides erase/install, I turned off ALL Sys Preferences that could alert him to Mac. The last time I received a gray Install CD and was told to take it out of the building and do another erase/install.  There is no sense of going through this until I know if/how to get rid of him.
    Also when I first sign on I ALWAYS get a 192.168.100.11.  I do NOT have a router. I then go to System Preferences to Network and click "renew DHCP" several times before I get an IP addy!  I am not savvy in this area but do feel that this is a major clue.
    Passwords have been changed, master password is not something I can access which prevents me updating, etc., etc.
    I will not bombard you with every detail as that would take several pages. I am beyond desperate. Will be happy to provide further details to serious responders only.
    Thank you.
    'REQUIRE ASSISTANCE'
    Heartfelt sympathy to the many family members, friends, people who loved Steve Jobs even though they never met him -- RIP Steve. You are missed.

    If you really believe that your system has been compromised, here's what you do:
    Disconnect your Mac from your cable modem;
    Back up any documents on your system that are important to you;
    Boot your Mac from the system installation disks that came with it (insert the disk, restart your Mac, and hold down the "c" key until you get the "spinning gear" icon);
    Choose a language and click the arrow button to continue;
    From the Utilities menu, choose Disk Utility;
    In Disk Utility, select your computer's hard drive;
    Click the "Erase" tab;
    Click the "Security Options" button and select to have it overwrite all the data on the hard drive;
    Click the "Erase" button and allow it to process;
    Once the "erase process has completed (it will take a while), reinstall Mac OS X.
    Or, if this is too much for you to accomplish on your own, take your system to an Apple Store and have them help you perform these steps. If your system was indeed compromised, this will remove any such hack. You can then set up a new user account for the computer, reinstall your applications (reinstall only from original disks or downloads from the company making the software) and documents, and reconnect to the Internet.
    Note that when you reconnect to the cable modem, you may still get an IP address starting with 198. This is normal with some cable modems and probably not a cause for concern. It will not be an indication that your system is still compromised; that will not be possible if you perform all the above steps.
    Regards.

  • Problem posting invoice from T code MIRO

    Hi,
    I am trying to post invoice from tcode MIRO. but I am getting the following error. can u let me know why is such a error coming .
    <b>No target chart of accounts is defined for company code GL3000</b>
    I have even checke the company code data and the cart of accounts is maintained there
    Thanks
    Nikhil

    Hi Nikhil,
    For 'No target chart of accounts is defined for company code GL3000', it seems that you need to complete the cross-company setup :
    In SPRO / SAP Netweaver / Web application server / IDOC interface / Modelling and Business processes / Global organisation units /
    you need to complete the cross-company company codes setup ( e.g Make a dummy link to own company code and make sure all cc have chart od accounts assigned here)
    rgds
    Dirk

  • Payroll Posting to multiple Company Codes in FI and CO possible?

    Dear experts,
    I need your help on the following challenging issue with respect to payroll posting to accounting.
    Is it possible for a payroll that runs in one company code for all employees, to post to FI and CO for multiple CoCds?
    Example:
    WT 1234 exists in HR CoCd 1000 (assume an amount of u20AC 100 in the payroll results)
    G/L ABC exists in FI CoCd 1000
    G/L DEF exists in FI CoCd 2000
    CCtr xyz exists in CO CoCd 1000 (which is the employee's master cost centre)
    CCtr uvw exists in CO CoCd 2000
    The wage type should be mapped as follows:
    + 100 to G/L ABC and CCtr xyz (this is no problem, is realized with standard mapping)
    - 100 to G/L DEF and CCtr uvw
    The challenge is in the fact that the credit amount should go to another company code than the debit amount.
    How can I realize this?
    Thanks in advance for your feedback!
    Jeroen

    This is from SAP documentation:
    Cross-company code transactions are characterized by the fact that payables are assigned to a company code other than the one in which the corresponding expenses arose. This results in receivables and payables between company codes.
    If you want to post these receivables and payables to company code clearing accounts, you must make the settings in several steps, as outlined in the following.
    Note that in the case of separate HR/AC systems, posting to company code clearing accounts can only be implemented if the AC system is in Release 4.5A or higher.
    For more information on cross-company code transactions and business considerations, refer to the SAP Library under Payroll -> country -> Subsequent Activities -> Posting to Accounting -> Special Business Requirements for Posting -> Cross-Company Code Transactions.
    Settings for Posting to Company Code Clearing Accounts
    1. In the step Define Symbolic Accounts, you must assign an account determination type to each symbolic account in Human Resources. For specific postings to balance sheet accounts, the account assign types FL and FO are used. From a technical viewpoint, these account assignments are defined as follows:
    Wage types that are assigned to a symbolic account with account assignment type FL are posted in accordance with the information from the last period in the WPBP table (Work Center Basic Pay) for the current original result.
    Wage types that are assigned to a symbolic account with account assignment type FO are only used for posting in the evaluation of a current original result.
    2. In the step Define Posting Characteristics of Wage Types, you must assign the symbolic accounts with the account assignment types FL and FO to the corresponding wage types:
    You assign the symbolic accounts with account assignment type FL to wage types that, in the case of retroactive accounting, contain the difference between old and new payment amounts. In countries that use the principle of origin, this usually involves wage types /551 Recalculation difference and /552 Subsequent clearing from previous month.
    You assign symbolic accounts with the account assignment type FO to wage types that contain payments to employees and whose amounts do not change in the case of retroactive accounting. This usually involves wage types /557 Cash payment, /558 Payment of balance, /559 Transfer and other, country-specific wage types.
    3. In the step Create Posting Variants, you must set the Post to company-code clearing account indicator for the variants that you use. Otherwise, payables and receivables between company codes are not posted to company code clearing accounts, and remain as the balance on the document split account for the company codes affected.

  • I purchased a ipod 5 and i need to activate it and i already removed the device from the original  owners account and i turned off the ipod and turned it back on but it still asks me to activate it what should i do ?

    I purchased a used ipod touch 5 and i cant activate it because i needed to remove the device from the owners account but once i did remove it it kept asking me to activate it what shoukld i do ?????

    Just what do you mean by activate? Are you getting an error message?If it is still asking for the previous owner's  Apple ID and password the iPod was not removed from the previous owner's account

  • How to 'Remove' user access from deleted dual boot system's users in existing operating system's folders and files?

    I have Windows 7 Enterprise Professional, accessed earlier from (now deleted) other dual boot operating system (User folder), which shows it's users as unknowns for folder properties in Windows 7 Enterprise Professional's "C:\Users\Aniruddha",
    which causes system not responding, how to 'Remove' these unknown users from folder properties of "C:\Users\Aniruddha"?
    Also "C:\Users\Aniruddha\Application Data" creates many of own folders within eachselfs end folder ("C:\Users\Aniruddha\Application Data" creates a "C:\Users\Aniruddha\Application Data\Application Data", "C:\Users\Aniruddha\Application
    Data\Application Data" creates a "C:\Users\Aniruddha\Application Data\Application Data\Application Data" and many) because of which system stops responding randomly, starts responding only for "ctrl+alt+del", why such self
    creation begins?
    Whether a standby user with same file structure copied from a user would dynamically link it's shortcut folders with Windows user from whom these folders were copied or whether there would be no link and for above said problem I would restore User's file structre
    back to normal just by copying from standby user?

    It seems your PC is infected with some malware. Use a trusted antivirus software with the latest definition updates installed to scan and remove the malware.
    Balaji Kundalam

  • How to remove css style from source code?

    Hello,
    I am working on launching a website soon and saw that I have some repetative css styles in the source code. I would like to remove them, because I want my style sheet "115209.css" to be the main controller.
    Below is my code. I just need to know what exaclty I need to remove to make that happen. I am a bit of a newbie and am not too comfortable in chopping it up myself in fear that I might lose a closing tag or something else of importance.
    Any help would be greatly appreciated!
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
    <title>Novato Youth Center</title>
    <link rel="stylesheet" type="text/css" href="115209.css" />
    <style type="text/css">
    <!--
    a:link {
    text-decoration: none;
    a:visited {
    text-decoration: none;
    a:hover {
    text-decoration: underline;
    a:active {
    text-decoration: none;
    -->
    </style><body>
    <div id="wrapper">
             <div id="headernav"> <a href="index.html">Home</a><br>
               <a href="overview.html">About Us</a><br>
               <a href="donate.html">Donate</a><br>
               <a href="getinvolved.html">Get Involved</a><br>
               <a href="contactus.html">Contact Us</a><br>
          Español </div>
            <div id="header"> <a href="index.html"><img src="http://www.novatoyouthcenter.org/logo.jpg" /></a>
        <div id="Title">
          <h1>Novato <br>
            Youth Center</h1>
        </div>
        <div id="Tag">
          <h2><em>Success Starts Here</em></h2>
        </div>
          <div id="socialbuttons"><a href="http://www.facebook.com/pages/Novato-Youth-Center/151677233396?v=app_2309869772#!/pages/No vato-Youth-Center/151677233396?v=wall"><img src="http://www.novatoyouthcenter.org/facebook_button_11.gif" alt="facebook" height="48" width="50" /></a><a href="https://twitter.com/#!/NovaYouthCtr"><img src="twitter-icon.jpg" alt="twitter" height="48" width="48" /></a></div>
      </div>
            <div id="navigation"><a href="6to5.html">Infants - 5 years</a> | <a href="5to14.html">5  - 14 years</a> | <a href="teens.html">Teens &amp; Young Adults</a> | <a href="adults.html">Parents &amp; Adults</a></div>
       <div id="leftcolumn">
             <h4> </h4>
             <h4>Academics...<br>
             Health...<br>
             Arts...<br>
             Athletics...<br>
             Community...<br>
             FUN!<br><br>
             Inspiring and <br>
             preparing youth<br>
             for success.
             </h4>
             <p> </p>
             <p> </p>
             <p> </p>
             <p> </p>
             <p> </p>
             <p> </p>
             <p><strong>Sign up for our</strong></p>
             <p><strong>E-newsletter!</strong></p>
             <p> </p>
             <form id="EmailSubmit" method="post" action="enewsletter.php">
               <label>
                    <input name="emailsubmit" type="text" id="emailsubmit" value="Email Address" />
                     </label>
                  <input type="submit" name="Submit" id="Submit" value="Submit" />
                  <input name="recipient" type="hidden" id="recipient" value="0" />
            </form>
             <p> </p>
       </div>
       <div id="content">
         <div id="mainphoto"><img src="indexphoto.jpg" width="656" height="386" alt="main" /></div>
       </div>
    </div>
    </body>
    </html>

    Maybe I already removed the "h1", but I still see link styles and the
    background color.
    I need to know what point to which point is safe to delete without messing
    up the coding.
    Thanks again,
    - Theresa

  • Right place to put external datafiles accessed from deployed code

    Hi
    Our application needs to access data files (text files of thousands of records).
    Which is the best place to keep them on the WLS.
    I have tried the following
    1. Placed them in APP-INF/lib directory.
    The files are accessed in code by following code::
    URL url = Thread.currentThread().getContextClassLoader().getResource("MYFILENAME.DAT");
    BufferedReader brw = new BufferedReader(new InputStreamReader(url.openStream()));
    But i always get brw as null
    Also tried using the method getResourceAsStream("MYFILENAME.DAT"). But got the
    same error
    ClassLoader cl = Thread.currentThread().getContextClassLoader();
    InputStream is = cl.getResourceAsStream("BANKFILE_20030607.DAT");
    BufferedReader brw = new BufferedReader(new InputStreamReader(is));
    here also a NullPointerexception is thrown while creating a BufferedReader
    What is the best strategy to keep such files in a WLS environment.
    We could not pack them as part of ear as these data files would be very large
    running into MBs
    OR is it common to have such packaging in EARs ...
    We also want to avoid accesseing them from an absolute path reference. The best
    bet being the classpath
    thanks
    jaz

    Only .jar files in APP-INF/lib are part of the classpath.
    If you put them in APP-INF/classes, that should work.
    -- Rob
    jasmeet wrote:
    Hi
    Our application needs to access data files (text files of thousands of records).
    Which is the best place to keep them on the WLS.
    I have tried the following
    1. Placed them in APP-INF/lib directory.
    The files are accessed in code by following code::
    URL url = Thread.currentThread().getContextClassLoader().getResource("MYFILENAME.DAT");
    BufferedReader brw = new BufferedReader(new InputStreamReader(url.openStream()));
    But i always get brw as null
    Also tried using the method getResourceAsStream("MYFILENAME.DAT"). But got the
    same error
    ClassLoader cl = Thread.currentThread().getContextClassLoader();
    InputStream is = cl.getResourceAsStream("BANKFILE_20030607.DAT");
    BufferedReader brw = new BufferedReader(new InputStreamReader(is));
    here also a NullPointerexception is thrown while creating a BufferedReader
    What is the best strategy to keep such files in a WLS environment.
    We could not pack them as part of ear as these data files would be very large
    running into MBs
    OR is it common to have such packaging in EARs ...
    We also want to avoid accesseing them from an absolute path reference. The best
    bet being the classpath
    thanks
    jaz

  • Remove Keychain Access from Safari

    My MacBook is set up so that a keychain access (account login) is required before using Safari the first time after login.
    Any ideas on how to remove this requirement?
    Thanx

    I did accidentally, somehow. It's now at the point where if i hit cancel after being asked for the keychain password, safari loads web pages properly.

  • How to remove vendor address from T. Code S_ALR_87012103 - List of Vendor

    Hi Guru's
    There is one report called S_ALR_87012103 - List of Vendor Line Items, after executing this report it will give Vendors line item with vendors name & address with it.
    But I dont want to show the address of the vendors address in the out put?
    How can one remove this?
    Please help me.
    Thanks & Regds,
    Santosh Rothe

    Hii
    need to go for ABAPER help...
    or else u can try out by changing the layout try if it works
    sejal

  • Remove poster icons from final cut pro v7 track objects

    Hi Gang,
    Please see my attached pic first to help understand the issue.
    I don't need "poster" icons or frames in my track objects, I was hoping to suppress them.
    As you can see they obscure the area where my clip overlays are, making it harder to see / manipulate them. Easier if the track object is just a single colored rectangular object.
    Thank you for any advice you may give !

    In FCP-7, click anywhere in your timeline. Type Command+0 {zero} to see you Sequence Settings. When the sequence settings Pane opens, click on the Timeline Options  tab. Change the Thumbnail Display Drop Down Menu to "Name". Click OK.
    The next time you create a sequence, this should be the default selection.
    MtD

  • Time Machine: i had a problem with removing old files from trash, that is fixed and the whole reason was to make time machine work. It has been backing up for day and one half. What should I do??

    trash problem resolved. Now time machine is acting up. it has been backing up since yesterday

    If you have more than one user account, these instructions must be carried out as an administrator.
    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Console in the page that opens.
    Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left.
    Copy the words "Starting standard backup" (without the quotes) on this page and paste into the String Matching text field. Note the timestamp of the last message shown. Clear the text field and scroll back in the log to that time. Post the messages timestamped from then until the end of the backup, or the end of the log if that's not clear.
    Post the log text, please, not a screenshot. If there are runs of repeated messages, post only one example of each. Don't post many repetitions of the same message.
    Some personal information, such as the names of your files, may be included — edit that out, too, but don’t remove the context.

Maybe you are looking for

  • Production order-committed quantity

    Dear all PLz through out the  light on committed quantity in component overview screen in production order . give me detail

  • Connection between two Macs fails

    My home-network consists of a MacPro (1,1 - 2006), a MacBook Pro (Early 2008) an a MacMini (late 2009), all running OS X 10.6.3, no software-firewall is running. My router is a LinkSys WRT 610 N which I use with ethernet (Mac Pro) and wireless (Book

  • Facebook, youtube, and some other sites doesn't work on Mountain Lion

    Since I installed Mountain Lion (today) i can't acess facebook, youtube videos and some other sites. I thought the problem was the flash player so i've tryed uninstall and reinstall, desable and enable, and read some tips that didn't work until now.

  • Quick Selection Tool Problems in CS5-PC-Win7

    1) I am trying to use the QST to outline a butterfly and macaw. Problem is that while in the process of outlining the image, the QST stops at some point in the particular image outline form and goes to selecting the image square from corner to corner

  • Statistics-Relevant Delivery Date is not copied

    Hi, when i tried to change delivery date of PO at item level , the Statistics-Relevant Delivery Date is not updated automatically  with item level delivery date in delivery shedule, but delivery field is updated with item level delivery date . Can an