Adding Object Mannully Vs. Adding Object in SU24 for Tranaction

All,
What is the diff. between Adding a missing Object Mannully in PFCG  Vs. Adding Object in SU24 for Tranaction ?
What is the diff. between chaning Vaule for a missing Object Mannully in PFCG  Vs. Changing a value in SU24 for a Auth Ojbect ?
Please let me know.
From
PT.

Hi PT,
There is no direct link between transactions and the auth objects assigned to them via PFCG.  Things like config and the way transaction are used have an impact on how the auths are evaluated for a given transaction.
As you know, we use SU24 to update the SAP delivered values to meet the auth checks in our particular implementations or as per our requirements.  What this enables us to do is to ensure that when we enter a transaction, all the relevant auth objects and where appropriate fixed values are pulled through (so if you know that different usages of that tx requires different values then add the object in SU24 but leave the relevant field blank).  If you remove that transaction from the role, the auths that are also required are removed from the role too, as long as the role is not in Manual or Changed status.
If you manually add the auth object then you have no link with the transaction/s that are required to run the object.  You can remove the transaction and the auth object value will remain in the role.  If not properly managed, you can end up with excess auths still present in roles, particularly with the S_* objects and in areas like FI where it is very easy to skip between transactions through menu options where there is no S_TCODE check, with the auth object check being the only controlling one.
Manually entered objects definitely have their uses as long as they are properly documented and managed when maintaining roles.

Similar Messages

  • Objects to be added manualy with Transaction code

    Dear all,
    There are certain transaction code required for Purchase Order Release. ME29N, ME28. After that also we have to add some objects Manually based on su53 log.
    Is it possible to identify which OBJECTS are required to add for specific transaction codes?
    Thanks in Advance,
    Nirav

    Simple way is T-code su24
    In T-Code su24 CM-Check maintain is sap default object those objects are must we have to provide all those objects ,while adding T-code automatically default objects will add.
    C-Check same T-Code can check this objects also if required depends on our process but this not mandatory this can call background only any one of this check objects.
    Some time if your are not provided proper value to existing objects then it will call some objects field name field value which is not relevant to us.(Ex.S_tabu_disp,S_develope)
    Better check the error and su53 dump then think whethrt this is relevant to this or not then provide, but max we should avoid manual objects. Manual objects will not pick the values from origination level
    Some T-codes ,calls some other T-codes also in background.
    Some customize report or standard report are modified report also call some T-Codes are authorization objects dependents on the report this you can find out with the help of ABAPer or you can check if you have se38 or sa38 ,go to that ABAP program find u201CAUTH u201D then will know the object .that objects needs to insert manually in that particular role.

  • Adding additional sap object BUT000 in dms object link.

    Hi Experts,
    My requirement is adding business partner (SAP object BUT000 ) in DMS object link.
    BUT000 is not present as standard sap object list in object linking.
    I have gone through SAP documentation and understood following things.
    1) Program two screens for the following module pools for the SAP object that is to be linked additionally:
         u2013 SAPLCV00
         u2013 SAPLCVIN
    question start: Does this means add one screen lets say screen 5000 to function pool  SAPLCV00 and
                            add one screen 5000 to function pool SAPLCVIN with SAP access key.
    question end:
    The process logic must be according to that of screen 0204 in program SAPLCV00 and must not be changed.
    question start: Does this means simply copy PBO and PAI of screen 0204 and put it in screen 5000.
    question end:
    Create the function module OBJECT_CHECK_XXXX (XXXX = name of the SAP object).
    question start: does this means create FM OBJECT_CHECK_BUT000 in my case.
    question end:
    If this object can be classified, this function module already exists in the standard system. Otherwise, copy the existing function module OBJECT_CHECK_EQUI (linking of equipment) and change it to suit the new object.
    question start: does this means if FM OBJECT_CHECK_BUT000 does not exist in SAP system create it by copying
                            FM OBJECT_CHECK_EQUI.
                            Is it ok if I keep the logic of FM OBJECT_CHECK_EQUI as it is.
    question end:

    Hi Sunil,
    For adding new object first maintain this object in key fields in spro.
    You need to add the DMS sceen to the perticular object sceen with screen exit.
    The object sholud reflect in DMS and DMS screen should reflect in object t-code.
    Check in SE80 if there is no screen exit available for the object ,need enhancement.
    I hope this will help you much.
    Regards,
    Ravindra

  • #include "%(Filename)_i.h" inserted into C++ source after adding connection points to ATL object using wizard.

    What is the subsitution for this appearant macro?  Solution will not build if removed.
    Using
    Adding Connection Points to an Object directions.

    Hi Shawn,
    Since you have posted this issue to the VC++ forum, I think you would get better support there:
    http://social.msdn.microsoft.com/Forums/vstudio/en-US/8494410e-9578-4b67-a08d-3380aac10fcf/include-filenameih-inserted-into-c-source-after-adding-connection-points-to-atl-object?forum=vcgeneral#503cbc06-40a2-4073-a56e-1b384b11b56e
    So I will move this thread to the Off-topic forum. Thanks for your understanding.
    Sincerely,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • [Q] htmlKona - adding attributes not specified in object model

    How do I go about adding attributes to a htmlKona object that exist in
              proprietary HTML versions, or versions beyond what is supported in Kona, if
              those add methods do not exist in the current object model?
              Most htmlKona elements extend weblogic.html.ElementWithAttributes, but the
              addAttribute(String, String) method is inexcessable.
              Any help appreciated. If this is posted to the wrong group, please point me
              in the right direction.
              Lukas
              

    I guess you need to get htmlkonapatch403Patch.jar. ElementsWithAttributes
              supports it then.
              Madhavi
              Lukas Bradley <[email protected]> wrote in message
              news:[email protected]...
              > import weblogic.html.TableElement ;
              >
              > class TableTest
              > {
              > public static void main(String args[])
              > {
              > TableElement lTable = new TableElement() ;
              > lTable.addAttribute("height", "100%") ;
              > }
              > }
              >
              > Yields:
              >
              > TableTest.java:8: Method addAttribute(java.lang.String, java.lang.String)
              > not found in class weblogic.html.TableElement.
              > lTable.addAttribute("height", "100%") ;
              > ^
              > 1 error
              >
              > While the documentation states:
              >
              > java.lang.Object
              > |
              > +----weblogic.html.HtmlElement
              > |
              > +----weblogic.html.ElementWithAttributes
              > |
              > +----weblogic.html.MultiPartElement
              > |
              > +----weblogic.html.TableElement
              >
              >
              > And ElementWithAttributes has:
              >
              > addAttribute(String, String)
              >
              > And yes, many browsers will allow you to set the height on a table. =)
              > Thanks for any help.
              >
              > Lukas
              >
              >
              >
              > John Greene wrote in message <[email protected]>...
              > >
              > >Hi --
              > >
              > >A method was added to allow generic attributes. I thought it was this
              > method
              > >you speak of. How do you mean it's inaccessible? Newsdude, can you
              > clarify?
              > >
              > >
              > >Lukas Bradley wrote:
              > >>
              > >> How do I go about adding attributes to a htmlKona object that exist in
              > >> proprietary HTML versions, or versions beyond what is supported in
              Kona,
              > if
              > >> those add methods do not exist in the current object model?
              > >>
              > >> Most htmlKona elements extend weblogic.html.ElementWithAttributes, but
              > the
              > >> addAttribute(String, String) method is inexcessable.
              > >>
              > >> Any help appreciated. If this is posted to the wrong group, please
              point
              > me
              > >> in the right direction.
              > >>
              > >> Lukas
              > >
              > >--
              > >
              > >Take care,
              > >
              > >-jg
              > >
              > >John Greene E-Commerce Server Division, BEA Systems,
              > Inc.
              > >Developer Relations Engineer 550 California Street, 10th floor
              > >415.364.4559 San Francisco, CA 94104-1006
              > >mailto:[email protected] http://weblogic.beasys.com
              >
              >
              >
              >
              

  • Adding URL to a 3D object

    Hello,
    I have 3d model from Microstation saved in format u3d. I create 3D pdf from this model. Now my problem is:
    - I need insert URL to this model
    (This should go with JavaScript, but I don't now how)
    Second question is:
    - is possible default disable some layers of the model?
    (All the layers are by default activated)
    Thanks

    Hello,
    thank you for your answer, but is not much helpful for me..
    "- I need insert URL to this model
    http://forums.adobe.com/thread/850845 " -
    I know the HyperlinkExample.pdf, but is it only example,..I don't know how.
    If I uncompress this PDF , I saw javascript like this: (parts of javascript)
    function PDF3DSDK_LaunchURLWrapper(url)
        try{
            app.launchURL(url);
        }catch(ex)
            console.println("HostScript: error during launchURL; url = " + url);
    endstream
    endobj
    //& this
    var pdf3dsdk_linkTypes     = new Array( PDF3DSDK_MESH_LINK_COUNT );
    // possible values are:
    // launchURL - opens a URL at new (external) browser window
    var pdf3dsdk_linkParams1   = new Array( PDF3DSDK_MESH_LINK_COUNT );
    pdf3dsdk_linkMeshNames[0]  = "PDF3DLabel_launch_url";
    pdf3dsdk_linkCompareType[0] = "like";
    pdf3dsdk_verboseModes[0] = 0;
    pdf3dsdk_linkTypes[0]  = "launchURL";
    pdf3dsdk_linkParams1[0] = "http://www.pdf3d.co.uk";
    function pdf3dsdk_DoLaunchURLActionForIndex(index,node)
        try
            host.PDF3DSDK_LaunchURLWrapper(pdf3dsdk_linkParams1[index]);
        }catch(ex)
            console.println("3DScript: error during launchURL; url = " + pdf3dsdk_linkParams1[index]);
    I think that these functions should provide operations Adding URLs into a 3D object,
    isn´t it ?  Thank you
    "- is possible default disable some layers of the model?
    I do not know what the layers are. Some Microstation term?
    But nodes in 3D PDF model can be switched on and off -
    interactively, via annotation properties (node dictionaries) or JavaScript." -
    Yes, layers are "nodes" in Acrobat. I know how switch on and off this nodes interactively, but I need some nodes deafult switch off. When I open my model, every nodes are switch on...
    JavaScript is maybe solution, but I don't know how to do it.

  • Adding days to a date object

    I am retreiving a date field from the database.
    i am retrieving that with getDate() method on the result set object.
    that is am retrieving as java.sql.Date object.
    on that date object i have to add 30 days and store it back in the
    database as a date field in database.
    How should i go about handling this problem.
    suppose
    java.sql.Date newDate=rs.getDate(1);
    on this newDate how can i add 30 days and store it back to the database.
    Plz help me out guyz.
    Thanks.

    wud the setting to a particuale date means setting to
    the date i retrieved from the database.
    How to set for a particular date.We have setTime()
    method in Calendar.
    but that takes util.Date object.Then do i have to
    convert the sql.Date object into a util.Date object.A java.sql.Date IS-A java.util.Date.
    (There's no such thing as a sql.Date or a util.Date unless you have a different API than the rest of us.)

  • Possible?Multi-Entity View Object with one Entity Object that is Read-only.

    I know this sounds crazy, but I would like to create a multi-entity view object, where one entity object is based on a table in my application (we'll call it "Users", which basically stores the primary key for the person from the institutional people database), and the other table is a entity object based on a view of the institutional people database table (read only access), which we can call "People".
    I know that since no updates will be done to the People table, it really should be a read-only View Object, but I would lose the ability to sort on attributes like Last Name, Hire date, etc, since those would be transient attributes in my ViewObject for the Users. By having People as an entity object, I can then create a multi entity view object and have the ability to join Users to People and be able to sort on the above mentioned fields (like Last Name).
    The problem is that when I use the JDev (I'm currently using 10.1.2.1) AppModule BC4J tester, when I click on the multi-entity view object that I added to the AppModule it gives me an error:
    oracle.jbo.RowCreateException) JBO-25017: Error while creating a new entity row for People.
    ----- LEVEL 1: DETAIL 0 -----
    (java.lang.InstantiationException) null
    I have tried to change all the attributes to updateable in my entity object, but no create method, and I have tried to make them all read-only, but no effect, I get the same error (probably because the People view is read-only in my schema).
    Is there a way to change the entity object so that it will not try to create a new row when it runs the Tester? So that the multi entity view object behaves more like a view link, but gives me the added bonus of being able to sort on the Last Name column from the People table?
    Thanks for any help on this subject...at worst, I will have to use the view link method to get the job accomplished, but it would be "cooler" if this would work!
    Jeremy.

    Steve, thanks for your quick response to my question.
    To answer your questions, I was trying to create the Multi-entity View Object to give me more flexibility when working with my User table, and my People view. The flexibility I desired was that I would be able to sort my Users based on attributes in the People view. This is not possible when the there is only one Entity in my VO, and the People view data are all transient attributes, because they are not in the SQL statement.
    Ultimately, after working with one of my colleagues, we decided to use the approach that you mentioned by creating a read-only VO with the SQL query we want to display to the user (contains both User and People data fields), and then use a different ViewObject when performing other actions on the User Table (such as inserts/updates/deletes). By using the setWhereClauseParam() method in the handleLifeCycle() for the JSP page, we should be able to navigate between the different View Objects, so that the user does not see any difference.
    Thanks! Oh, and by the way, I have read your article you included before, and I have used it many times before to tune my View Objects! Thanks!

  • What's the difference between a not-initialed object and a null object

    hi guys, i wanna know the difference between a not-initialed object and a null object.
    for eg.
    Car c1;
    Car c2 = null;after the 2 lines , 2 Car obj-referance have been created, but no Car obj.
    1.so c2 is not refering to any object, so where do we put the null?in the heap?
    2.as no c2 is not refering to any object, what's the difference between c2 and c1?
    3.and where we store the difference-information?in the heap?

    For local variables you can't have "Car c1;" the compiler will complain.That's not true. It will only complain if you try to use it without initializing it.
    You can have (never used, so compiler doesn't care):
    public void doSomething()
       Car c1;
       System.out.println("Hello");
    }or you can have (definitely initialized, so doesn't have to be initialized where declared):
    public void doSomething(boolean goldClubMember)
       Car c1;
       if (goldClubMember)
           c1 = new Car("Lexus");
       else
           c1 = new Car("Kia");
       System.out.println("You can rent a " + c1.getMake());
    }

  • ManagedAccounts.aspx Object not reference to object

    SETUP: 2x SharePoint 2010 Servers (14.0.5130.5002); 1x SQL 2008 R2
    I setup alot of managed accounts (about 10) and had them setup to automatically generate the new passwords.  After doing this operation, i can no longer access the managedaccounts.aspx page.  I get object not referenced to object.  I read
    a bunch of forums that said the farm account shouldn't be set to autogenerate passwords and it will cause the error.  Next, what i did is setup a new AD account with static password and made it the farm account.  I then deleted the old farm account
    using powershell.  However, even after doing this, i am still getting the same error.  Any ideas? (everything else is working in the farm as far as i can tell.
    04/12/2011 10:38:06.44  w3wp.exe (0x197C)                        0x1FB0 SharePoint Foundation        
     Runtime                        tkau Unexpected System.NullReferenceException: Object reference not set to an instance of an object.   
    at Microsoft.SharePoint.ApplicationPages.ManagedAccountsDataSourceView.FillDataTable(DataTable table, DataSourceSelectArguments selectArguments)     at Microsoft.SharePoint.WebControls.DataTableDataSourceView.Select(DataSourceSelectArguments
    selectArguments)     at Microsoft.SharePoint.WebControls.AdministrationDataSourceView.ExecuteSelect(DataSourceSelectArguments arguments)     at System.Web.UI.DataSourceView.Select(DataSourceSelectArguments arguments,
    DataSourceViewSelectCallback callback)     at System.Web.UI.WebControls.DataBoundControl.PerformSelect()     at System.Web.UI.WebControls.BaseDataBoundControl.EnsureDataBound()     at System.Web.UI.WebControls.CompositeDataBoundControl.CreateChildContro... 
    04/12/2011 10:38:06.44* w3wp.exe (0x197C)                        0x1FB0 SharePoint Foundation        
     Runtime                        tkau Unexpected ...ls()     at System.Web.UI.Control.EnsureChildControls()    
    at System.Web.UI.Control.PreRenderRecursiveInternal()     at System.Web.UI.Control.PreRenderRecursiveInternal()     at System.Web.UI.Control.PreRenderRecursiveInternal()     at System.Web.UI.Control.PreRenderRecursiveInternal()    
    at System.Web.UI.Control.PreRenderRecursiveInternal()     at System.Web.UI.Control.PreRenderRecursiveInternal()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) a5dbe0de-bab0-48cc-9d99-9c094490a1f1

    Here is another thread about this:
    http://social.msdn.microsoft.com/Forums/en-US/sharepoint2010setup/thread/406f1817-d687-49d7-9691-26e487fb5577
    However, none of suggestions worked for me.  i can't reinstall our staging farm cause we are in the middle of a migration.  I am probbably going to open a case with MS as it doesn't seem like anyone has any idea about the problem.

  • There was an error while writing data back to the server: Failed to commit objects to server : Duplicate object name in the same folder.

    Post Author: dmface15
    CA Forum: Administration
    I am working in a new enviorment and i am trying to save a report to the Crystal Server via the CMC. I am uploading the report from the objects tab and attempting to save to a folder. The report has 1 static defined parameter and that's it. When i click submit to save the report i receive the following error message: "There was an error while writing data back to the server: Failed to commit objects to server : Duplicate object name in the same folder." There is not a anothe report within the folder with that name. What could be causing this error message and equally important, what is the solution.

    hte message you received about duplicate user probably means something hadn't fully updated yet. Once it did then it worked...
    Regards,
    Tim

  • [svn:fx-trunk] 11454: ASyncList class ASDoc change: added explicit warning about the lack of support for re-inserting pending items .

    Revision: 11454
    Author:   [email protected]
    Date:     2009-11-04 18:17:33 -0800 (Wed, 04 Nov 2009)
    Log Message:
    ASyncList class ASDoc change: added explicit warning about the lack of support for re-inserting pending items.
    QE notes:
    Doc notes:
    Bugs:
    Reviewer:
    Tests run:
    Is noteworthy for integration:
    Modified Paths:
        flex/sdk/trunk/frameworks/projects/framework/src/mx/collections/AsyncListView.as

  • How to get the object class field value in CDHDR table for vendor

    hi
    how to get the object class field value in CDHDR table for vendor

    Try KRED/KRED_N as object class in CDHDR for Vendor.

  • Adding redirect path and  pattern in Lion server for configuring software update server

    Adding redirect path and  pattern in Lion server for configuring software update server.Any changes

    Ok, after days of browsing on the forum I found the following hint on another discussion related to AFP access:
    "This may be a service ACL issue.
    It turns out one of the latest Apple updates turned on Service ACL's which caused AFP connections to be  blocked. Once I fixed the Service ACL in Server Admin... all connections and Single Sign On worked."
    Well, after allowing access to all services to all users with Server Admin, we were finally able to log in the server with our admin account...
    So, there must have been an update that turned on ACL's which caused even our local access, probably for OD/Kerberos, on the server to be restricted.

  • Photoshop bug: Smart Objects overwriting other Smart Objects when edited and saved in Illustrator

    Experiencing issues when working with a large number (over 200) vector smart objects brought into Photoshop CS4 from Illustrator. 
    Things seemed to be going along nicely; if I needed to edit a Smart Object, I could double-click it, it would open in Illustrator and then I could edit and save it.  Return to Photoshop and the Smart Object is updated.  Swell and dandy.  The issue started happen when I hit a large quantity of either vector smart objects (remember, over 200) or the many layers and groups within Photoshop (must be over 500).  When I would double-click, open, edit, and save the vector Smart Object, the Photoshop Smart Object I was working on would update AND another/several other Smart Objects would update as well.  Which, of course, would ruin the artwork, as suddenly I was seeing several instances of the same object.  If it hadn't have been for ForeverSave, I many not have recovered the work.
    It's rather hard to isolate the issue to see what's causing the problem.  Here are some of the possible causes:
    Running Snow Leopard on Mac
    Many, many Smart Objects in file, perhaps enough to ruin the naming convention and cause bugs when Photoshop referenced the temp file
    Many, many Photoshop layers and groups
    Illustrator vector files copy+pasted from several different files (affects the naming convention perhaps?)
    Some groups/layers in Photoshop are duplicates
    To help make it a little clearer, you should know:
    Running the most updated software / OS (that is until CS5 comes out)
    Smart Objects showed no error until I had actually opened, edited, and saved the referenced temp file (i.e. VectorSmartObject1.ai)
    Files saved and worked on from Dropbox (network folder)
    Not looking for much of an answer to this question; I just wanted to see if anyone else had come across this bug.  Also, Adobe PLEASE look into this as you begin testing for the next update.  I have the file(s) if you need to replicate the issue.  My best guess is that the naming convention of Vector Smart Objects has an odd character limit so when Vector Smart Object 200.ai is saved, Vector Smart Object 2.ai gets overwritten.

    Have you tested this with Photoshop CS5 and Illustrator CS5? (the current versions, that came out last month)
    If you duplicated a smart object layer, both layers refer back to the same file content. So when you change the file, both layers would be updated.  That is intentional and explained in your manual.  If you didn't realize this, that could explain what you are seeing.
    If you placed separate files, then they should not be updated at the same time, because they will refer to separate files.
    Yes, Smart Objects only update when you save the file.
    You would need over 4 billion smart objects in one document to get Photoshop confused about which one refers to which file.  And since the layer limit is much less than 4 billion, I doubt that is the cause.
    There is no naming convention involved. We don't limit the filenames (except to platform standards and to include a file type extension).

Maybe you are looking for