Access Restriction of some confidential DMS documents.

Hello Gurus,
I need your expert guidance on the following requirement.
The requirement is to restrict the access of the document to users like Author, Reviewer and Approver for the following business scenario:
Say there is a special document Type APR (Employee appraisal document)
And for 5 different employee created (Authors) the document giving their self-inputs.
Now these employee are assigned to say 3 different Supervisors (Reviewers) and one Manager (Approver)
{Author; Reviewer and Approver are maintained in Additional Data of the document.}
So each document will have a Reviewer and Approver assigned along with the Author.
Our requirement is to restrict the access of these 5 documents to the Employees (Authors), so that none of these employee can view each others document. And allow display/change to respective Supervisor (Reviewer) and Manager (Approver) only.
We need to restrict document access based on the above scenario
After checking, I think using authorization object the above requiremment can not be met. Can we use any user exit?
Thanks in advance!
Regards,
Ganesh

Hi Ganesh,
This can be achived with help of two objects C_DRAW_DOKST and C_DRAW_BGR.
Take help from basis and make roles with having the status and authorizations groups maintained as per your requirement so that they can't access each other's documents. Make a authorization groups for type of documents and give them authorizations to specific status. This is totally maintained in roles and assign these roles to users.
I hope this will reslve the query.
Regards,
Ravindra

Similar Messages

  • Access restriction question

    I have a WRT54G v2 wireless router/access point (Firmware Version v2.02.7) ...and I am using access restrictions with some success, but I have one question - is there any way to setup a rule (or rules) such that site blocking is time-based?
    For example, the internet is up and available, except for myspace.com, which is blocked between 7pm and 5am.
    I know that a time window that spans midnight requires two rules, but what I don't know is how to have a rule that is both site-based AND time-based. If I create a new rule and change its status from "allow PCs" to "deny PCs", the router's web-based GUI immediately disables the blocked protocols, blocked sites, and blocked keywords fields...and so it seems that what I am asking for is not possible...unless I am missing something.
    Any ideas? Thanks.
    cheers,
    Steve
    Message Edited by Scuba_Steve on 09-18-2007 12:10 PM

    Okay...the answer is this - NO. So what to do? Install a different firmware. I installed Tomato and it blows the doors off of the standard Linksys firmware...and the supported access restriction rules are far more powerful and intuitive.

  • Best practice for securing confidential legal documents in DMS?

    We have a requirement to store confidential legal documents in DMS and are looking at options to secure access to those documents.  We are curious to know.  What is the best practice?  And how are other companies doing it?
    TIA,
    Margie
    Perrigo Co.

    Hi,
    The standard practice for such scenarios is to use 'authorization' concept.You can give every user to use authorization to create,change or display these confidential documents. In this way, you can control access authorization.SAP DMS system monitors how you work, and prevents you from displaying or changing originals if you do not have the required authorization.
    The below link will provide you with an improved understanding of authorization concept and its application in DMS
    http://help.sap.com/erp2005_ehp_04/helpdata/en/c1/1c24ac43c711d1893e0000e8323c4f/frameset.htm
    Regards,
    Pradeepkumar Haragoldavar

  • Access DMS documents from MDM ??

    Hello folks
    We have a customer that has SAP DMS (Document Management System from SAP ERP) where the product image files are stored on a SAP Content Server.
    We are planning to implement MDM for rich product catalogue whereby end-users access MDM via Portal, but we need to access some documents on DMS too.
    I know that there is standard PLM iviews that shows DMS documents linked to a Material, can we use these iviews to modify them so that they are launched on request of user after browsing in MDM iviews (managing same material numbers) ?
    Has anyone of you made this ?
    Any hint/help on this is most welcome !
    Thanks
    /Sooriya

    Hi Sooriya,
    We can get the Product ID from MDM Standard iview through EPCF Eventing. Based on that ID, we can fetch the documents from DMS.
    I am new to DMS. Can you please share some information on fetching document links from DMS through standard or APIs?
    In my scenario, i have to fetch the documents link from DMS for all Master records and store the link in MDM. Also, when a new master s created in MDM, I have to attach/upload documents for the master record and store the document link in MDM. The actual document is present in DMS. When I send the newly created Master data to ECC, I have to link the Master data and the documents in ECC also.
    Your help is greatly appreciated!
    Thanks,
    Arun prabhu S

  • How to Restrict printing the document using IRM for a Single Document?Allow printing for some documents and restrict the printing for particular documents in same document library?

    Can we able to Configure the IRM in Document Level in SharePoint Document libraries?
    The document library contains multiple document sets , Can we restrict the printing according to document sets? Allow printing for some documents and restrict the printing for particular documents in same document library
     Is this possible?Please suggest.

    Yes, that can be done. But note that all administrators will have the same right to print, so you need to make sure the users are not administrators. You can include a macro to disable printing, but if the users disable macro, they can print the documents.
    Hence, there is no foolproof way to prevent printing documents. If you still need a foolproof security, PDF format provides password based security (viewing doesn't require a password) that can be implemented to prevent the document from printing,
    which doesn't require any special scripts and is tough.
    You can have a look at the following links:
    http://msdn.microsoft.com/en-us/library/office/ms458245(v=office.14).aspx
    http://msgroups.net/microsoft.public.word.docmanagement/prevent-printing-of-docum/91353
    http://www.go4sharepoint.com/Forum/prevent-printing-saving-documents-10150.aspx
    The following link explains about the security features in PDF. This is for information purpose only and not for promotion of any products:
    http://www.pdflib.com/knowledge-base/pdf-security/
    Balaji Kundalam

  • Access DMS document throgh CRM

    Dear Gurus,
    Is it possible to access DMS document throgh CRM.
    Is there any object available for CRM like customer compalints, Solution provided Excetra...,
    Can any one share the doc for CRM-DMS object config.
    Thanks in advance.

    Yes, but you need to create a RFC Connection between your CRM system and ECC6. SAP DMS itself is not available in the CRM system so the RFC connection needs to be in place in order to use it.
    From the Help Files:
    Integrating Product Lifecycle Management (PLM)
    Usage
    Integrating Product Lifecycle Management (PLM) lets you link documents from the PLM Document Management System (DMS) with documents from CRM such as contracts, opportunities, and activities.
    Integration
    To use PLM in CRM, you require SAP Enterprise Resource Planning (ERP) 4.70 and higher.If you want to use SAP EPR 4.6c, you require SAP Note 620160.
    Prerequisites
    You have maintained the RFC connections to PLM. For more information, see the Implementation Guide at Customer Relationship Management ® Basic Functions ® Content Management ® Maintain RFC Connections to PLM.
    Features
    Integration is only available for the People-Centric UI.
    Change markings in PLM documents are not displayed in the PC-UI.
    The following functionalities are available:
    ·        You can use the PLM DMS to link PLM DMS documents directly to the following objects, or to delete the links:
    ¡        CRM business objects
    If you assign a PLM document to a CRM business object, it appears in the PLM Documents folder.
    ¡        Sales contracts
    ¡        Sales documents
    ¡        Business partners
    ¡        Products
    ·        Finding PLM Documents
    You can also find PLM documents in CRM by the following properties:
    ¡        User-defined text
    ¡        Document number
    ¡        Document type
    ¡        Version number
    ¡        Status
    ¡        Description
    ¡        User
    ¡        Part
    For PLM documents, the Creator field in CRM Content Management specifies the Person Responsible from PLM.
    The full-text search only searches the document long text and not the content of the document itself .
    There is only a full-text search in the document long text, not in the document content itself.
    ·        Jump to PLM WebDocuments as of SAP ERP 4.70

  • How can I access eBay pages marked "blocked due to legal restrictions of some countries"/ All other browsers do not block.

    Using Vista Ultimate 64x and Firefox (any version) I keep hitting eBay page blocks that read "Unfortunately, access to this particular item has been blocked due to legal restrictions in some countries..." These same pages can be accessed with IE or Chrome so it is not really a legal restriction.
    How can I get Firefox to allow these eBay pages to display? I include the url of one blocked page.
    This happens on eBay and eBay-UK

    Prohibited and restricted items over view for eBay...Link to
    http://pages.ebay.ca/help/policies/items-ov.html
    Beware of items as they relate to Cuba... Some Cuban items can be sold in the US, while others cannot be sold in the US....based on US government regulations.
    No restrictions for Canada...with respect to anything from Cuba
    Then there are country restrictions  as identified by Canada Post... Link to
    http://www.canadapost.ca/tools/pg/manual/PGcustoms-e.asp
    A most interesting situation
    A box that originally contained Cuban Cigars, was overprinted to read Coban Cigars, an obvious overprint, missed on first inspection...
    It is always important to know what is not acceptable....
    another situation..
    France has a restriction on receipt of toys made in China.... always state country of origin
    Also be aware of country specific restrictions
    Sometimes things may not be too obvious  such a publisher with a Canadian address, that had a book printed in China....Hong Kong or elsewhere....not in Canada
     

  • Duet Enterprise 2.0 -  Accessing SAP DMS Documents

    Hi,
    Is there any possibility to access the SAP DMS documents using Duet Enterprise 2.0 from SharePoint 2013?
    If the answer is No, then what is the starter services in DE 1.0 and why the DMS functionality is included in that and not in DE 2.0, which will be the easy way to access SAP documents from the SharePoint. Is there any alternative?
    Please clear my queries, i'm eager to know the reason behind it.
    Thanks,
    Kamal

    Hi Kamal,
    The DE 1.0 Starter Services models are available on the DE 2.0 Software package.  To implement Starter Services for DE 2.0 you should follow all of the steps in the DE 1.0 FP1 documentation with the exception of importing on SharePoint.  I have attached a document with the commands required to import the Starter Services to SharePoint.
    Hope this helps.
    Cheers,
      Helen

  • Document Universe Overloads/Access Restrictions

    Is there a good way to document universe overloads/access restrictions? I can't seem to find anything. We have a ton of universe objects which are restricted for certain users/groups, and we need to re-work this list. Ideally, I'd love to have these listed out by restriction name - restricted object, or restriction name - row-level restriction.
    Any help is much appreciated!

    Hi Kunal,
    Yep, that's exactly what I did.  The query I used was:
    Select SI_NAME, SI_OBJECTS
                      from CI_APPOBJECTS
    where  SI_KIND like '%OVERLOAD%' and SI_PARENT_CUID = '<universe ID>'
    This worked fairly well, but it would be great if SAP would give us an ability to output these queries to Excel to make them more manageable.
    Thanks!
    Bill

  • I'm getting an error message "There was an error when opening this document. Access denied" on some PDF's that I was able to open in past. Uninstalled XI and installed X but same problem. Any thoughts?

    I'm getting an error message "There was an error when opening this document. Access denied" on some PDF's that I was able to open in past. Uninstalled XI and installed X but same problem. How can I access these files?

    I have exactly the same problem. The interesting thing is that the file opens when I attach it to an email and open it out of the email. I already saw the advice you provided in  similar post from Aug last year and checked the security settings of the file and the folder. But according to that I have all rights.
    My OS is Windows 7 Enterprise.

  • Confidential access restriction

    Hi all,
    We have implemented EP 7.0 with ESS/MSS with JAVA Stack and back end with SAP ECC 6.0 with ABAP Stack. The portal roles like end user, admin are created in the portal and assigned in the portal for each user. But for any user to access this portal the userid will be created in back ECC 6.0 and some basic ESS/MSS Functions role will be assigned. Basic ESS/MSS functions role is a customized role taken a copy from standard SAP role with all values given in the role.
    So any end user USER1 logging in to the portal will be able to access his own functions from Portal role and the overall functionality role from Backend which is working fine and if the same user tries to login into ECC 6.0 the system shows the no authorization for the tcodes PA20 etc. since only the values are maintained.
    Now there is a user from Core HR  (USER2) who already has an access to PA20 in ECC 6.0, and the portal roles assigned to the same userid. Now this user logging into portal is able to view/change own data but when logging into ECC 6.0 the user able to see all the details of the company. This happens because of the ESS function role assigned in that userid.
    Hope i have explained the scenario clearly and understandable too.
    Is there anyway where the USER2 should not be able to take the access of ESS Functionality role assigned to that userid when logging into ECC 6.0.
    Or
    Is always the ESS Function roles are given with all the values for portal functioning or is there a way for restricting to some values.
    Request you all to help on this issue.

    To be able to use ESS in portal, user does not need to have authorization to view details of everyone else in the system. You need to get your security team to restrict authorization to view only his information.

  • DMS Documents cannot be created

    Hello DMS Gurus
    I am working on DMS module.Previously on my P.C. ,  files which are attached in the DMS (Created From CV01N) can be opened easily ( PDF files,Excel, Word files).
    But some time ago my P.C. was formatted & now I have installed WINDOWS 7 operating system.After this installation I am unable to open the documents which are attached in DMS.Every time it is giving the error that File C:\ DFIG.pdf cannot be created.   or   "C:\material.xls file cannot be created" when file is excel sheet.
    I have already taken Read & Write access of C drive & also installed Document Imaging software. But still I am facing the same issue.
    What could be the reason? Is there any other software installation required?
    Your reply is awaited & appreciated.
    Thanks
    Pravink.
    Edited by: PFulwade on Aug 19, 2011 11:38 AM

    Hello Pradeep
    Front End Computers Setting are as follows:
    Data Carrier Type
    PC     Desktop with Windows     C:\
    WL     WfW system / local applications     c:\temp\
    Front End Computers Setting :
    #        PC     #                          BASIS
    Christoph        PC     Christoph                          GOINGLIVE
    DNIRANJN25        PC     DNIRANJN2515PG5     PLMUSER2
    Default        PC     DEFAULT                          Default for local PC
    JANAND2143     WL                          JANAND2143PG3     YSUNIL
    YSUNIL2247     WL     YSUNIL2247PG3     YSUNIL                               YSUNIL
    Waiting for your reply.
    Thanks
    Pravink

  • Some files in "DOCUMENTS" icon in dock won't open. Get msg saying You need a newer version of Pages to open this document." Have Pages 4.1 installed.  Same files will open ok from Finder, Pages App. Recently sync'd with ipad2 (Pages) after iOS5 installed.

    Some files in "DOCUMENTS" icon in dock won't open. Get msg saying "You need a newer version of Pages to open this document." Already have Pages 4.1 installed.  Same files will open ok from Finder/Pages App./selected file. Prob not noted until recently after sync'd with ipad2 (Pages) when I installed iOS5. Anyone-- please?!

    You have 2 versions of Pages on your Mac.
    Pages 5.2 is in your Applications folder.
    Pages '09/'08 is in your Applications/iWork folder.
    You are alternately opening the wrong versions.
    Pages '09/'08 can not open Pages 5 files and you will get the warning that you need a newer version.
    Pages 5.2 can open Pages '09 files but may damage/alter them. It can not open Pages '08 files at all.
    Older versions of Pages 5 can not open files from later versions of Pages 5.
    Once opened and saved in Pages 5 the Pages '09 files can not be opened in Pages '09.
    Anything that is saved to iCloud and opened in a newer version of Pages is also converted to Pages 5 files.
    All Pages files no matter what version and incompatibility have the same extension .pages.
    Pages 5 files are now only compatible with themselves on a very restricted set of hardware, software and Operating Systems and will not transfer correctly on any other server software than iCloud.
    Apple has removed almost 100 features from Pages 5 and added many bugs:
    http://www.freeforum101.com/iworktipsntrick/viewforum.php?f=22&sid=3527487677f0c 6fa05b6297cd00f8eb9&mforum=iworktipsntrick
    Rate/review Pages 5.2 in the App Store.
    Peter

  • WRT54G2 and WRT54G locks-up (freezes) when blocking web sites using Access Restrictions

    I am convinced that a few Linksys routers such as WRT54G2 and WRT54G have a major issue when blocking web sites using Access Restrictions (Internet Access Policy). After a few hours of internet access by 15 wired users the Linksys locks-up and blocks all internet web access. The only solution is to restart the power on the router.
    We are currently using a Linksys WRT54G2 v1 (firmware 1.0.04). We upgraded the WRT54G2 v1 firmware to the latest 1.0.04 version which did not resolve the issue.  NOTE: We were previosuly using a a Linksys WRT54G v1.1 (firmware 4.21.1) until the power supply blew a week after we started blocking web sites using Access Restrictions (Internet Access Policy).  
    Basically, we have a T1 internet connection and a hub connected to the Linksys router. We are trying to block several web sites such as facebook, myspace, etc. for 15 wired users. We do not use wireless connections.
    This is the 2nd time it happened with 2 different models.
    Please help ASAP.
    Thank you,
    Lance
    (Mod note: Edited post. Some parts off topic.. Thanks!)

    Also,  you have already upgrade/re-flash the firmware of your Linksys Router you need to reset and reconfigure your router from scratch. Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

  • BASIS--to restrict authorization for a PO document type & 122 movement type

    Dear All,
    Plz guide me how to restrict authorization for a PO document type & for a movement type 122 i.e. for eg. if a user has authorization for PO document type IC then he should not be able to rum movement type 122 for any T-code he runs.
    Thanks in advance
    Arpit
    Basis

    Hi,
    Your request was not too clear to me.. As per my unde
    Here is some details of Authorization object related to Purchase Order:
    Document Type in Purchase Order( M_BEST_BSA )
    Purchasing Group in Purchase Order (M_BEST_EKG )
    Purchasing Organization in Purchase Order  (M_BEST_EKO)
    Plant in Purchase Order  (M_BEST_WRK )
    Document Type in Outline Agreement (M_RAHM_BSA )
    Purchasing Group in Outline Agreement (M_RAHM_EKG )
    Purchasing Organization in Outline Agreement ( M_RAHM_EKO )
    Plant in Outline Agreement ( M_RAHM_WRK )
    This can be helpfull to you to restrict authorization to PO..
    In Organization Level, it can be restricted by Purchasing group, Purchasing organization and plant..
    Regards,
    Sandip

Maybe you are looking for

  • Notifications aren't working for Mail on iPad mini

    Notifications is working fine on my new iPad mini, except for Mail.  Mail on my iPhone 4 running iOS 6 works great but not on my new iPad mini running iOS 7. When an email comes in on my iPhone while it is OFF I get notified with an Alert.  On my iPa

  • MX440 - T8X Can't get the card over 2X

    I have an MSI MX440 - T8X 64mb DDR vga card. (upto 8X agp)                MSI 694T - Pro Motherboard. (upto 4X agp)                Pentium 3 1Ghz.                512mb memory. I have installed uptodate bios for motherboard and vga card. Up to date vi

  • Hotfix4 shows IOS status bar at the top

    After updated to Director 12 with Hotfix4 a week ago, my ipad/iphone apps have a IOS status bar shows up at the top.  Which didn't show in previous hotfix. Any one know a way to make this "IOS status bar" (with battery, time, wifi, 3g status symbols)

  • Multiple mail to vendor

    Hi All, Is there any way to output P.O as a mail to different vendor mail IDs?

  • Weblogic Suite - OEM Diagnostics Pack for Fusion Middleware

    Hi All, we are lookng at of migrating the BEA licenses we have with oracle licenses. With Oracle licensing terms, we are told we need to get the Weblogic Suite which includes an OEM - Diagnostic pack for fusion middleware. Has any one used this let k