Adding security object to a transaction code

Greetings,
I received a request from our Financial side of the house to restrict access to a particular fund type in the transaction codes FM5S and FM5I.  When I examine the objects required for those transaction codes, I don't see anything that is tied to the fund type.
My questions:
1.  Can I add an arbitrary object that is checked when a transaction code is executed?
2.  How do I determine which object is appropriate?  For example, searching for a "*type" in SUIM, Authorization Objects by Field, Text, seems pretty chancy.
Bill Bormann
Purdue University

> It's fairly straightforward to add an object that is required when a transaction code is added to a role, but, you still have to make some kind of modification (cosmetic or more) to the underlying code to check that object.
Unless it is already checked in the code at the correct location you want to use it for control.
> For these transactions (FM5I and FM5S), SAP supports a check for fund authorization groups...
SAP "owns" the authority-checks in SAP standard code. In some cases you can influence them or how the system reacts to them - but not all.
> ... and the object specifying the groups is automatically added when these transactions are placed in a role. 
Only if instructed to do so via SU24.
> Alas, we're not using fund authorization groups here, so if the business wants to restrict by type we're going to have to either find a SAP-supplied object that includes the fund type and modify the code...
No. Only if there is no equivalent check and no enhancement / customer exit point available
>...  (here, two transactions)
Most likely it will anyway just be one and the same function module so is checked or can be changed centrally.
> or assign the fund types to fund authorization groups.
This is usually the easiest and least intrusive way. Take note that group type fields (typically called BEGRU) are mostly optional objects.
The system only reaches the check at all if there is a value maintained. If not, the check is suppressed and you might not even see the trace of it in ST01 or SU53.
I recommend contacting your functional support of the Funds Management "module" and go through the options with them. They should know what can be done and which is most sustainable.
Cheers,
Julius

Similar Messages

  • Executable LSMW Object to a Transaction Code

    Hello there,
    Can anyone tell me the steps to assign a Executable LSMW Object to a Transaction Code?
    Thanks much.

    Hi Michael,
    Assume that you could tie the frame program for periodic data transfer (/SAPDMC/SAP_LSMW_INTERFACE) to a transaction code.  When creating the transaction code you can determine which option (parameters, variant etc.) would be best suited for this.
    Kind regards,
    Robert

  • How to created and assign one object to a transaction code

    Hello All,
    Please give some Idea about, how to assign an newly created object to a transaction code.
    I want to give authorization on co11n transaction code. by default there is no control on storage location level. I created a new object 'Z_AFRU_AWK' that incudes 4 fields. Activity, Order type, Storage Location & Plant'. How I can assign this object in the place of C_AFRU_AWK.
    I done this throught su24 but its not working. I am missing something. please help me.
    regards
    Lal

    Hi Kariyath  ,
    what object have you created is it a abap program or a script or a module pool what you are referein here.Please be clear.
    You can maintan the authorizations in the transaction PFCG.
    Select the role and then change the authorization data there.
    Reward points if helpfull.
    Regards,
    Vamshi.

  • Adding custom fields to CN41 Transaction code

    Hi Experts,
    I have a requirement to display few SAP standard fields (like VORN1 from AFABD structure) in CN41 transaction code. I modified the custom include structure CI_PROJ in table PROJ. When I ran CN41 tcode, this field doesn't show up in the layout list. But I can see the same feild in CN42 transaction code. Can anyone advise what is the difference between CN41 & CN42 and how this field to be shown in CN41?
    Also, can some one advise, if SAP will take care by itself to fill the data since it is standard field or do we have to write any custom code in user exit?
    Finally, can anyone explain me the difference between Structure Overview & Project Definitions?
    Really appreciate your help.
    Regards,
    Sailesh.

    Thanks Rod,
    But SAP gave us a provision to modify the custome structures CI_PROJ or CI_PRSP etc so that we can add the fields here.  My question was, I am able to see these fields in CN42 tocde but not in CN41.  Is there a way, that I can display the fields fromm CI_PROJ onto CN41 report?
    And for second part, I thoguht, if I add the SAP standard fields from PSJ logical database, then SAP should update these fields automatically.  I might be wrong on this.
    Any ideas?
    Shylesh

  • How do i find authorization object for a transaction code?

    Hi SD Guru's
    I need to find the authorization object for both standard & Z transactions.
    How can i find this?
    Regards
    Ravi

    Hi,
    check the coding with SE38 for "authority-check" and you will get the objects or set a breakpoint on statement "authority-check" while you execute the transaction.
    Regards,
    Andreas

  • Generic Object Services for a standard transaction code

    Hi,
    We have a requirement where we are depreciating the assets (standard transaction ABAA) using a custom BDC program. We need to maintain a history (called audit trail) for the particular asset that has been depreciated using this program. For this audit trail we have been asked to use "Generic Object Services" in transaction code ABAA.
    Unfortunately, Generic object services are not available in this transaction code. Can you please suggest me how to create "Generic Object Services" for a particular standard transaction code. Also, we have show the details of custom workflow that handles the approval process in order to depreciate the asset. How to show this workflow details using Generic Object Services. This is a very critical issue, any help will be very help ful.
    Please let me know should you require more information on this topic.
    Thanks,
    Ashish

    Hello Ashish,
    i dont think activating of GOS will solve ur probs..... GOS wont create a WF item ...... try to get some kind of GOS before u do anything in SAP systems.
    u can do like this ......
    1 create custom screen where u can enter asset details and store in custom tables....and generate one custom doc.number to track.
    2. trigger WF when user submits it for approvals.
    3.Upon final approvals.--->run BDC to do postings......
    4.Give a Option to attach documents to the parking documents. ( that GOS ).
    regards
    Prabhu

  • Authorization Object for Transaction Code

    Hi,
    Is there a report I can execute to give me the list of authorization object for this transaction code?
    Thanks.

    Check Transaction SU24
    Alternatively you can go to SE16-- enter the table name TSTCA, then enter the T CODE, you will get the object related to that T Code.
    Reward points..

  • Finding Business Objects for Transaction Codes

    Hello,
    How to find out the Business Object for a transaction code. For instance I want to find out the Business Object for Tcode: BP.
    Please guide me!
    Regsrds,
    Khushboo

    Thanks Gerhard!
    But I am looking forward to the PROCESS STEPS to be followed for finding the BO for a TCODE.
    I had quoted TCODE: BP just as an example.
    Regards,
    Khushboo

  • User exit for transaction code MIGO (Goods Receipt)

    Hi Team,
    Please let me know the <b>name of the user exit</b> for adding a new field in transaction code <b>MIGO</b> (The field is Freight charges ) at header level.
    Would be suitably rewarded.
    Regards
    Badari

    hi,
    Transaction Code - MIGO                     Goods movement
    Exit Name           Description
    MBCF0002            Customer function exit: Segment text in material doc. item
    MBCF0005            Material document item for goods receipt/issue slip
    MBCF0006            Customer function for WBS element
    MBCF0007            Customer function exit: Updating a reservation
    MBCF0009            Filling the storage location field
    MBCF0010            Customer exit: Create reservation BAPI_RESERVATION_CREATE1
    MBCF0011            Read from RESB and RKPF for print list in  MB26
    MB_CF001            Customer Function Exit in the Case of Updating a Mat. Doc.
    Cheers
    Alfred

  • Transaction listing for default "Current Settings" transaction codes in IMG

    I am trying to create a succinct list of the transaction codes used to access "current setting" functionality throughout the IMG.  More specifically ones for HR/Payroll related tasks.
    We are trying to implement a super user program where we hand off as much of the customization and maintenance of the system to the business.  In do this I wanted to get a list of the transaction codes that are already set up as defaults by SAP so we can immediately implement this while we are activating other functions.  We are on ECC 6.0 so the CUSAMEN table is no longer relavent to our situation and of the notes from SAP do not address how to do this.
    I have looked in the OBJH table and it lists all the objects that are flagged as "current setting" objects and it also indicates whether they are transaction codes, views, tables etc.  The transaction codes obviously do work but tables and views shown as objects but no t-code to execute the update.  I know there must be a key or way to link the Object to the transaction code created for it in SE93 but can't seem to find it.
    Any help or insight as to how to do this would be greatly appreciated.
    Regards,
    Bill

    Thank you Shahram for your reply but I'm still not getting the results I'm looking for.  For example, the transaction S_AHR_61000061 is used to change or View Tax Authorities per Resident Tax Area and is basically SM30 editing the table T5UTZ. 
    When I search for that transaction code in TSTCP using SE16 I can't find it.  I I also can't find any references to any of the other tax tables such as T5UTA and T5UTR.  When I look in the IMG, under Display IMG Activity and Maint.objects the assigned objects are showing T5UTZ being assigned to SM30 as a transaction with a subobject of 01.
    Is there another table that lists transactions and Objects?
    Thanks again.
    Bill

  • Objects to be added manualy with Transaction code

    Dear all,
    There are certain transaction code required for Purchase Order Release. ME29N, ME28. After that also we have to add some objects Manually based on su53 log.
    Is it possible to identify which OBJECTS are required to add for specific transaction codes?
    Thanks in Advance,
    Nirav

    Simple way is T-code su24
    In T-Code su24 CM-Check maintain is sap default object those objects are must we have to provide all those objects ,while adding T-code automatically default objects will add.
    C-Check same T-Code can check this objects also if required depends on our process but this not mandatory this can call background only any one of this check objects.
    Some time if your are not provided proper value to existing objects then it will call some objects field name field value which is not relevant to us.(Ex.S_tabu_disp,S_develope)
    Better check the error and su53 dump then think whethrt this is relevant to this or not then provide, but max we should avoid manual objects. Manual objects will not pick the values from origination level
    Some T-codes ,calls some other T-codes also in background.
    Some customize report or standard report are modified report also call some T-Codes are authorization objects dependents on the report this you can find out with the help of ABAPer or you can check if you have se38 or sa38 ,go to that ABAP program find u201CAUTH u201D then will know the object .that objects needs to insert manually in that particular role.

  • Transaction code for adding new character

    hi ,
          i am new member of this group.I want to know the transaction code for adding a new character in BW.
           please help me.
    Thanks in advance,
    reena

    Hi reena,
    When you say "adding a new character in BW" you want to create a new characteristic (InfoObject) in BW or you want to add a new char to BW?
    Modeling in BW is done at tocde RSA1 & go to relevant tab on left screen (dataprovide, InfoObjects etc) & right click to create Objects.
    hope it helps
    regards
    VC

  • Transaction code to repair/check objects

    Hello
    Can somebody remind me transaction code to repair/check objects in BW?
    Thanks

    hi
    you can use rsrv. it  is  for bw objects consistency analysis and repair.
    from transaction code RSRV doc itself :
    Transaction RSRV: BW Data and Metadata Test and Repair Environment.
    Transaction RSRV checks the consistency of data stored in BW. It mostly examines the foreign key relationships between individual tables in the enhanced star schema of the BW system.
    The transaction interface was re-designed for SAP Portals release 3.0A. A brief guide about how to use the transaction follows.
    Starting the Transaction
    You can reach the test and repair environment
    By entering the transaction code RSRV
    From InfoObject maintenance (Transaction RSD1)
    By clicking on the "Analyze" button in the intial screen.
    After selecting a characteristic in the maintenance screen via the "Processing -> Analyze InfoObject" menu option.
    The Initial Screen
    When using the test and repair environment for the first time, the message "Values were not found for all setting parameters" draws your attention to the fact that there aren't any saved settings for your user.
    After confirming the dialog box, you reach the initial screen of the transaction. This is divided into two parts:
    1. On the left-hand side, you can see a tree structure with the pool of available tests.
    2. The right-hand side is empty at first. The tests you have selected will be put here. A selection of tests is called a Test Package here.
    Combined and Elementary Tests
    An Elementary Test is a test that cannot be divided into smaller tests and that can therefore only be executed as a whole.
    In this regard, a Combined Test determines which elementary tests are to be executed after entering the parameters. You can remove individual elementary tests from the test package before carrying out the actual test run, in order to reduce run time, for example.
    Combining a Test Package and Executing it.
    Firstly select one or more tests with drag&drop or by double-clicking. Each selected test appears as a closed folder in the view of your test package. (An exception is elementary tests without parameters: These do not appear as a folder). You can also drag a whole folder of tests from the test pool across to the right-hand screen area; all tests that are located in the hierarchical structure under this folder are then added to the test package. You can also display a short description of the test, if required. Do this right-clicking on a test and choosing "Description" from the context menu.
    Afterwards, you must supply the tests with parameters. Tests without parameters must not be given parameters. You are given notification of this when selecting them. You can enter parameters by double-clicking on a test (or a test package) or by expanding the folder of the test.
    A dialog box appears in which you must enter the required parameters. Input help is often available. After entering the parameters, a folder with the name "Parameter" is added under the test. This contains the parameter values. The test name can change in some circumstances, enabling you to see at first sight for which parameter values the test is to be executed. It is possible to select the same test several times and give it different parameters, which may even be preferable in some situations. When you have supplied the combined test with parameters, the folder with the name "Elementary Tests" is added under this one. It contains the elementary tests, from which the combined test is built. You can delete individual elementary tests in the test pool using drag & drop.
    After supplying all tests with parameters, you can start the test run by clicking on the "Execution" button. After execution, the test icons change from a gray rhombus to a red, yellow or green one, depending on whether the test had errors, warnings or was error-free.
    Test Results
    The test results are written to the application log. Depending on the settings, the system jumps automatically to this display, or you can reach it by clicking on the "Display" button. The results are saved in the database, and can therefore be compared later with additional test runs.
    In the left-hand side of the window, you can see an overview of the most recent test runs. Double-clicking on a folder displays all messages under these nodes as a flat (non-hierarchical) list in the right-hand screen area. Long texts or detail data may be available for individual messages, which can be displayed with a mouse click.
    Repairs
    Some tests can repair inconsistencies and errors. Automatic correction is generally not possible: If entries are missing from the SID table for a characteristic, in which case the lost SIDs are still being used in a dimension table (and the corresponding dimension keys are still being used in the fact table) of an InfoCube, you can only remove the inconsistency by reloading the transaction data of the InfoCube. Also note that you must make repairs in the correct sequence. You must always read the documentation for the test and have a good idea about how the error occured, before making the repairs.
    After executing the test run, go from the application log back to the initial screen to make these repairs. Click on the "Fix Errors" button to start an error run. Since the dataset could have changed between the test and the repair run, the required tests are executed again before the actual repair. The results can be found in the application log once again.
    Test Packages
    The test package is deleted if you do not save the test package in the display before leaving the test environment. Choose "Test Packages -> Save Test Package" in the option menu. You can do the following via options in the "Test Package" menu:
    Load packages
    Load for processing - the package is then locked against changes by others.
    Delete and
    Schedule execution at a later date or at regular intervals in background processing
    Settings
    In the "Settings" menu option, you can make settings (adjust the size of the screen areas, for example) and save them. The settings are automatically read when starting the test environment. Support packages are being delivered with additional settings options since the test environment is under development at the moment. A message notifies the user at the start if there aren't any values for the setting options.
    Jobs Menu Option
    You can access the job overview via the Jobs -> Job Overview menu. Use this when you want to check the status of a test package you have scheduled.
    Application Log Menu Option
    You can display old logs from previous test runs in the dialog box, as well as scheduled ones. The option of deleting test logs can also be found here.
    New Selection Button
    The currently selected test package is deleted when you press this button.
    Filter Button
    After a test run, click on this button to remove all elementary tests without errors or warnings from the test package.
    Executing Test Packages in Process Chains
    You can add a process chain to the ABAP Programm RSRV_JOB_RUNNER in the process chain maintenance transaction, RSPC. To do this, use drag & drop to select the process type "ABAP Program" under "General Services" in the process type view. When maintaining process variants you will be asked for the program name and a program variant. Enter RSRV_JOB_RUNNER for the program name. Choose a program variant name and click on "Change". In the next screen you are able to either change or display an already existing variant, or create a new variant. When creating a new variant you will be asked for the following: Package name (an imput help on this is available), the detail level for the log to which the RSRV log in the process chain log is to be integrated, and a message type severity at which process chain processing should be terminated.
    The RSRV process log in the process chain is built as follows:
    First is a summary specifying whether errors, warnings, or no errors occurred for each elementary test.
    A log view of the RSRV test package at the specified detail level follows.
    Example: If you choose the value '3' for the detail level, only messages up to and including detail level 3 will be included in the log processes for the process chain. Messages occuring at a lower layer of the test package test are not displayed in this log. Please note that, unlike the application log, the process log does not propagate errors from deep detail levels to low detail levels. For example, if a single detail level 4 error occurs the summary will show that the relevant test delivered an error. However, this error will not be listed in the second part of the log.
    A complete log is always written independantly of the RSRV process log in the process chain. You can view this in the menu option "Application Log->Display Log->From Batch".
    Please note that there is currently no transport object for test packages and that consequently these cannot be transported. Process chains that execute RSRV test packages must therefore be manually postprocessed after a transport to a different system: The relevant test packages must be created.

  • Report to view user nm, authorization objects, activity, transaction code.

    Hi All,
    I want to view a user-wise report that displays the transaction code, authorization objects and activities for which the user has authorization.
    Is there any standard report to view all this at a glance?
    Can anybody help me on this?
    Thanks.

    u can try SUIM tcode
    its really helps u
    regards,
    Abhilash

  • How to know the workflow object name assigned to a Transaction code

    Hi Friends,
    There is one workflow object assigned to one transaction code VKM1. How can i know the workflow object name assigned to that particular transaction. Can anybody help me?
    Regards
    shankar

    HI
    Please check t.code PPOMW
    Thanks & Regards
    Phaneendra

Maybe you are looking for

  • File to File Interface without ESR objects

    Hello everyone, I have a requirement where our business users will  produce the .csv files in one location and we need to move to another location. I recon that we can build this File to File interface( usin FCC) without using ESR objects, can any on

  • Multiple WHT code in one invoice

    Dear SAP gurus, We have a scenario where in one PO there are multiple lines in which each line is having its own witholding tax code. During MIRO, the wihtolding tax code that is pulled is coming from vendor, thus there is one code applicable for all

  • Partition of iMac

    Hello I want to use Corel Draw, and was thinking of installing the program onto an iMac, into a Windows partition created with Bootcamp. I was thinking of using the iMac only for windows software, with my existing iMac for Mac programs. So, what I wa

  • Form to Image

    Hi, I have a Adobe Interactive form. After filling in the form and saving it, is it possible to convert the form into an image and pass it into R/3. Thanks, Prasy

  • ITunes download incorrect.

    Can I get reimbursed for an unintended iTunes download?