Auth obj - Maintainence status change

Hi,
would like to change the Maintainance status of Auth obj from "Changed" or "Maintained" to --> "Manual" . Is it possible, without adding the same manually.
planning to do this as during merging, "Manual" auth objs are not disturbed.
Thanks,
Sam
Message was edited by: Sam

Hi Sam,
It sounds like you are planning to "merge" your roles by inserting
the profiles of the selected roles. While this will accomplish your goal
of getting access for your users - it will be a nightmare to maintain.
As already mentioned, you will be bypassing the functions of profile generator in
the way it was intended to function. If you want to merge 2 roles, then you
should only merge the menu sections of the roles and then allow PG to
select your authorization objects. If you only have profiles, then look
at the values in S_TCODE and insert these into the role menu section.
Regards,
JC

Similar Messages

  • Changing the AUTH OBJ in table

    hi experts,
    I am creating the Z* table, when i am creating the the AUTH obj under the table maintenance generator, it is coming as
    S_TABU_DIS, but i want to change this AUTH obj to S_TABU_NAM.
    looking forward for your valuable answers.

    First read [Note 1516880 - Authorization check for generic table access (S_TABU_NAM)|https://service.sap.com/sap/support/notes/1516880]
    The authorization concept for the generic table access using such standard transactions as SE16, SE17, SM30, SM31 or SM34 (or their "proxy" transactions) was previously only bound to the authorization object S_TABU_DIS.
    With Note 1481950, the authorization concept
    was enhanced with the authorization object S_TABU_NAM that checks the access at table name level:
               If a user does not have any S_TAB_DIS authorization for a certain table, the system also checks whether he has an S_TABU_NAM authorization. The access is permitted if the user has an S_TABU_NAM authorization...
    Regards,
    Raymond

  • Analysis auth obj assigment

    Hi
       Iam created one auth obj in rsec admin. how can i assign the auth obj to user .My answer is  1)direct assigment 2) through roles.
    for example: created analysis auth obj is : ztest_1
    It have the info obj : 0customer. and iam entered two values(values : A & B) in detail tab.
    In role tab where i have to find the created analysis auth obj.to assign values .like below
    Now i would like to assign this auth obj to user1 through role only for the customer value A .
    For user2 i have to restricted vale B.
    In direct assigment path will be the user>assign>specify the user name (user A)> give the created analysis auth obj (ztest_1)>select insert.
    This is the  process ...right?
    Now i would like to assign only one value (value A for the user A).How it is possiable in direct assigment..
    Other wise i have to create diff analysis auth obj(ztest_1...etc) for diff values(A &B)f or particular info obj(customer)?
    Thanks
    B.K
    Edited by: B.K on Jul 15, 2008 12:44 PM

    Hello B.K.,
    When you create an authorization ztest_1 with 0customer with values A & B, this will always have the two values for the customer just like it was before with the old authorization method.
    So no matter what way you assign this authorization to the user it will always have the two values!
    To separate (filter) only one value (A or B) you have to create two different authorizations, one for customer A and one for customer B.
    To assign, the direct assignment is just like you referred.
    To assign with the roles, go to the desired role in PFCG, enter in change mode, go to tab Authorizations tab and click on change authorization data (pencil button).
    Inside there, click on manual insert objects (something like this) and insert the object name S_RS_AUTH.
    You'll have a yellow sign.
    Expand that tree where the yellow sign is and click on the pencil button in front of the last yellow sign of the tree.
    In "Value from" in that next window insert the name of the authorization (in your example ztest_1).
    Generate your role.
    Now if you assign that role to the user "user1" in transaction su01.
    If ztest_1 has the values A & B for customer then user1 will have both values. If you separate the two authorizations let's say ztest_1A and ztest_1B with respectively the values A and B separate for the 0customer object.
    You could assign in the role the value ztest_1A in S_RS_AUTH values, and assign that role to the user "user1" in su01, and you could direct assign (just like you referred before) to the user2 the authorization object ztest_1B.
    Therefore you'll have user1 with the value A and user2 with the value B.
    Please assign points,
    Diogo.

  • Auth obj for Tax number 1 and Tax number 2 in fk02

    In tocde FK02 and FK03 we want to restrict some of the fields i.e Tax number 1 and Tax number 2 i.e field stdc1 & stdc2 ,to be visible to some users only ,Is there any auth obj for these fields which we could restict to specific users.

    Hi,
    You can give the authorization for tab wise Genaral data/accounting data/Payment transaction
    Check the auth. objects:
    F_LFA1_BUK     Vendor: Authorization for Company Codes
    F_LFA1_BEK     Vendor: Account Authorization
    F_LFA1_APP     Vendor: Application Authorization
    F_LFA1_AEN     Vendor: Change Authorization for Certain Fields
    Regards,
    Kishore K

  • RE: Transport of Auth Obj Maintained in SU24

    Hi all,
    I went in to SU24 and maintianed fields in an auth object of a transaction, then after saving it asked me to create a transport and i did that.
    Now i regenerated the role and it pushed the new auth obj/fields in role.
    what happens if dont create a transport for the modifications that i did in SU24 for a particular Auth Obj and if i transport that role to TST.
    will this automatically update the auth object in SU24 in TST ? or will it just be in role because of the role transport?
    thanks,
    Sun

    Hi,
    what happens if dont create a transport for the modifications that i did in SU24 for a particular Auth Obj and if i transport that role to TST.
    The changes will reflect in the ROLE in TST ( i guess its the SID of Quality server), however the SU24 in TST won't get updated to reflect whatever you in did in Development System.
    will this automatically update the auth object in SU24 in TST ? or will it just be in role because of the role transport?
    Yes, it will only be the role transport.
    The role will work fine, however this would break the relationship of Auth Objects & Tcode in TST, (when you click on the "Where-Used List" in TST you won't be able to find which Tcode brought that particular auth object in the role.
    Regards,
    Zaheer

  • Status and Tracking: Lock Function overide due to status change?

    Hello experts,
    Does anybody know whether it is standard functionality that a user with only R_STS_PT authorisation can unlock his/her planning by changing the status to "in process"?
    Should it not be the case that I higher hierarchy node or someone with R_STS_SUP authorisation must first unlock the plannig before for somone with only R_STS_PT authorasation can perform any status change? I am currently unsure whether what we are observing is a feature or a bug which we had previously not noticed.
    Thanks in advance,
    Will

    Hi William,
    Persons responsible for executing the planning process i.e. the User (Auth: R_STS_PT) are assigned to an area of responsibility (hierarchy node) within a subplan. They are either assigned to their own area of responsibility directly or are assigned as a substitute. The person responsible uses the STS, firstly to jump to his or her planning application, secondly to set the status of his or her own planning, and thirdly to monitor and set the status of any people who may be assigned under them.
    For example, the person responsible for node 11 of the subplan u201Ccost center planningu201C  logs on to planning session 1 in the STS. In this way he or she can obtain the detailed view for his or her cost center.
    Auth: R_STS_SUP is for Planning Coordinators for monitoring the entire planning process and thus have special access rights. So R_STS_PT & R_STS_SUP are the same, except that you are only allowed to set certain statuses of a task on the basis of the hierarchy levelto which you are assigned (this means, whether you are executing (R_STS_PT) or supervising a particular planning task (R_STS_SUP))
    Manoj

  • Sale Order Status Change after delivery of materials from projects

    have ETO sccenario which consists of all modules such as SD,PS.PP etc. Materials will be procured from external vendors & manufactured inhouse through project systems. After delivery of materials from project systems, billing & invoicing will be done at sales level.
    On delivery of materials from projects, sale order status remain open. Request you to look into the matter & suggest about status change of sale order after delivery / billing.
    Regards,
    Ranjan

    Hi,
    In sale order, WBSE is assigned. Delivery of materials are through cns0. then subsequently picking / packing / billing will happen at sales level. Billing is of delivery related. Please suggest to fix the issue.
    Thanks & Regards,
    Biplab Ranjan

  • Service Desk Settings, Automatic Email at status change of messages

    Hello experts,
    I need your help about this:
    I am configuring Service Desk Specific Scenario Settings -> Automatic Email at status change.
    I made the configuration suggested as described SAP Note 691303. Also I configured the status profile SLFN0001 in transaction DNO_CUST01, and the Action profile SLFN0001_STANDARD, both  for the SLF1 (Service basis message), but still when we change the status of messages, the email is not generated in SCOT, overview of send orders.
    I want to clarify that the configuration made for the action of send email was in transsaction SPPFCADM, selected DNO_NOTIF, and push Define Action Profile and Actions, then selected the Action profile SLFN0001_STANDARD for making he ocnfiguration as suggested in note 691303.
    SCOT is correctly configured and working OK.
    Business partners emails are mantained too.
    Thank you very much.
    Hector Longarte

    Hello. Thanks to all of you for your comments. I am answering to your questions below:
    Have you assign proper partner function to every status in action?
    I do not know where can I make this assigment.  I am thinking that this may be the cause. Please I kindly ask you to give me orientation about this.
    Have you defined condition for defined action?
    Yes, the condition was defined thru SPPFCADM. Now, I wonder if this must be configured for CRM_ORDER application as described in note 691303, or for DNO_NOTIF ??
    Have you maintained user deatils on identification tab in BP?
    Yes, the Business partners and emails adresses were correctly mantained.
    The configuration we are talking about and you want to change, is it regarding SLFN (Service Desk Messages) or SLF1 (Basis Service Message)?
    I supose that for Service desk messages we must configure SLFN, and not SLF1. Right?
    In DNO_CUST01, we have SLF1. We have not made any configuration in DNO_CUST04, it is still as original standard. Please let me know if we are right.
    You want to send an aut. email notification when status of SLF1 changes?
    We want to send email notifications to the message creator about the status change of service desk messages.
    Thank you very much.
    Best regards.
    Hector Longarte.

  • Question over the appraisal status change

    Dear All,
    Our appraisal has ( following the flexible template ) has planning, mid year review and final phases. With in each main status we have sub status configured. Example - In the planning stage ( say in the month of February ) , employee add objectives, change weights etc and send to manager for approval. If manager approves, the document status will be changed from planning  to mid year status and employee's form is changed to the display mode ( so he cannot update objectives / weight etc)
    Then again in the mid year  status ( say a few months later - June ist ), the employee needs to review the appraisal, add or update the objectives etc and submit for manager approval.
    My issue is -  After the employee's appraisal form is changed to display only from planning to review status - How the employee's appraisal  form can be changed from a read only to change mode in the same status ? As it is necessary for employee to add/ update in the form.
    I am seeking the best approaches for the below as I am considering two options ( as mentioned below )
    1)   For the  mid year status  , I will configure a sub status ( called start mid year ) and attach a push button. The employee select the push button during the mid year  period ( say June 1st ) and this push button triggers the status change from Mid year to Mid Year / Start Mid year. We also plan to apply a custom implementation for  BADI for column access and badi  (HRHAP00_COL_ACCESS) will decide the access control for columns etc.
    2) The other approach I am considering is we are considering a workflow (INFO_APPRAISEE_CHANGE_REVIEW ) to notify th employee 7 days before the mid year review starts. Can this workflow trigger the status change or read the column access from the BADI (HRHAP00_COL_ACCESS) ?
    Any other simpler approaches ?
    I saw in the Process config ( tabs and process ) that we can define the phase with dates and status / substatus etc. Can this be useful for the above scenario. For eg. On June 1st when the mid year review start, can the status be changed  like from Mid year  to Mid Year / Start Mid year ?
    Please let me know . Greatly Appreciated!
    Aneez Hameed

    Hi Aneez, both options are great,   HRHAP00_COL_ACCESS is configurable at each sub-status, so you have many options.  You can have the manager "approve" at beginning of year, but keep it in "in planning" by having a 3rd sub-status.
    You can have the employee or manager have access to the pushbutton so that mid-term can start. 
    you can also do a workflow option where it is changed automatically, your option 2.
    the final option is the HR adminstrator can change the status, by doing a mass select in phap_admin and then they change to the status to move it to "in review" with all of your mid-term substatuses. 
    they key to making this work is the additional config that goes along with HRHAP00_COL_ACCESS.  here you will want to do define a Z table with the following columns:
    object id - your template ID
    role - which are the same roles values defined at your template - apee for apraisee
    template status - integer - represents status ID
    template sub-status - ID
    column id - FAPP, OBJO, etc..
    availability indicator (char) - here you will configure H, X etc... which the badi uses to know how to handle it. 
    best regards - michael

  • Picking status change in Outbound delivery

    Hi All,
    I have to create a start condition in PPF actions, whihc is nothing but BADI... whihc will trigger when the Pcikinf status is changed....
    I have these threee condtions:
    Action will be triggered by outbound delivery order status change:
    1.     Picking planned status at header level changed after warehouse order creation/cancellation  (corresponds to Focus2 status      0 u2013 Forecast);:
    u2022     from u201CNot startedu201D to u201CCompletedu201D and back from u201CNot startedu201D to u201CPartially completedu201D and back ;
    u2022     from u201CPartially completedu201D to u201CCompletedu201D and back;
    2.     Picking status changed at header level after execution each of warehouse order in drop location (corresponds to Focus2 status      1 - BeginPicked);
    u2022     from u201CNot startedu201D to u201CPartially completedu201D and back;
    3.     Picking status changed at header level after execution of last warehouse order in drop location (corresponds to Focus2 status      2 - Picked):
    u2022     from u201CNot startedu201D to u201CCompletedu201D and back;
    u2022     from u201CPartially completedu201D to u201CCompletedu201D and back;
    any help????
    I want to know how can i code this??

    Hi,
    In the BADI, you can get reference to Delivey Object
    lo_dlv_ppf TYPE REF TO /scdl/cl_dlv_ppf.
    lo_prd                TYPE REF TO /scwm/cl_dlv_management_prd.
    get delivery reference
      lo_dlv_ppf ?= io_context->appl.
    Get the attributes DOCID, the find the status of the documents accordingly.
    Now get the instance of the Delivery management:
    lo_prd = /scwm/cl_dlv_management_prd=>get_instance( ).
    Then read Delivery header and items using the below method based on DOCID:
    APPEND is_docid TO lt_docid.
      ls_include_data-HEAD_PARTYLOC  = abap_true.
      ls_include_data-HEAD_DATE      = abap_true.
      ls_include_data-HEAD_TRANSPORT = abap_true.
      ls_include_data-ITEM_DATE      = abap_true.
      ls_read_options-data_retrival_only = abap_true.
      ls_read_options-mix_in_object_instances = abap_true.
    CALL METHOD lo_prd->query
            EXPORTING
              it_docid        = lt_docid
              iv_doccat       = is_docid-doccat
              is_read_options = ls_read_options
              is_include_data = ls_include_data
            IMPORTING
              et_headers      = lt_whr_headers
              et_items        = lt_whr_items.
    You can find header status in lt_wr_headers.
    Or based on DOCID, get status from table /SCDL/DB_STATUS.
    Hope that helps
    Vinod.

  • How to configure workflow for status change of a salesorder.

    Dear Friends,
    I want to generate Idocs after a sales Order delivery  status changes
    using workflow.
    Please tell me the procedure ,as i am doing this for the first time.
    thanks,
    jeevan.

    Suggest using "Modes" in PPM. Mode 01 will have "x" capacity, mode 02 will have "y" capacity and so on. You will have to give a slightly different resource name for each mode. E.g, If there is a multi capacity resource named "RESOURCE", then first create following resources in the Resource master : RESOURCE_X and RESOURCE_Y. Define individual capacities ( Resource is same, only we are separating capacities). Then include these in the PPM -  mode 01 = RESOURCE_X, mode 02 = RESOURCE_Y.
    Hoe this helps

  • Service Order status change thro' Action

    Hi all abaper
    After completing billing, thro the action I am changing service order user status as completed. i hv written my code in class method.
    After billing as action runs my code from method execute and changes the status properly and gets save into system but action status shows incorrectly processed and comes in red colour in action monitor. following is my code   plz help me        
    Moderator message - Please respect the 2,500 character maximum when posting. Post only the relevant portions of code
    Edited by: Rob Burbank on Oct 13, 2010 11:13 AM

    Are you processing status codes out of sequence?  Talk to your functional specialist or look at the status config for these documents...sounds like you're going to completed without first setting a status code that would have to be there prior to your status code...I seem to recall doing status changes for these documents that were a multi-step process...set TECO, then CLOSED or something like that?

  • To create the follow up transaction automatically on status change in sap crm?

    To create the follow up transaction automatically on status change in sap crm? If yes, how to make the setting for this?

    Hi vishal,
    As per the requirement transaction type is activity(ACTI) & sales order(TA). when the take order objective is complete system automaticaly craete a new activity of tele sales call or metting with wholesaler.
    this is requirement of client.
    now i am already create all type of transaction types of activity & sales order & create follow up transaction also. i have doam already create action profile also but when i am assign this action profile to transaction & try to create an sales order no follow up transaction could be create automatically. i think the condition is not right so please help me out in this. what should be the start & schedulec condition for this scenerio

  • Batch status change with UD

    Hi Everybody,
    I have a question about batch status change while taking UD. I understand that stock posting and batch status for each UD code is decided by the value in 'Posting proposal UD' field in Selected Set settings. I understand that I can customize the movement types for the values (eg VMENGE01, VMENGE02 etc) in config. But that is only for stock posting. From what setting is the Batch status decided eg. If we approve, the batch is unrestricted and if we reject it is restricted.
    Can I customize those values which are available in the drop down in the 'Posting proposal UD' ? Can I create a value of my own ?
    Regards,
    Manish Saraswat

    Manish,
    execute tcode QS51
    you will be able to see 'Posting Proposal UD' in "Selected Set ". Now select that line (Posting Proposal UD line). Status for Posting Proposal UD should be "Released"
    After selecting that line on left hand side there is " Dialog Structure " in that there is " Selected Set Code " Click on that.
    Complete list of code will come you can add and modify those codes.
    Hope now its clear to you.
    Edited by: tejasg on Mar 24, 2010 4:21 PM

  • Status change from 'Completed' to 'In Process' not allowed

    When configuring Appraisals in R/3 we want to change the  Status of 'Completed' when pressing the 'Reject' button so that it moves to the Target Status of 'In Process'
    However, we are getting an error message:
    Status change from 'Completed' to 'In Process' not allowed
    The SAP help states the following:
    In Process (only if final appraisal or part appraisal is defined)
    This has been defined at Template Level.
    So I don't understand why we are getting the message.
    Does any one else know of a way to configure the Appraisal template so that after it has been 'Rejected' it moves back into 'In Process'
    Thanks
    MN
    Points Rewards!

    Hello Andreas,
    Ah, sorry, there was so much talk about user decisions that I assumed you were using a standard decision task.
    Still, I would be extra careful of changing the way workflow usually works because you have an unknown target audience that are based on the standard.
    The standard SAP philosophy is quite simple: cancel/F3 or do nothing and it stays reserved. If you do not want it reserved, you need to perform an action. This is based on a majority of processes: in most cases when you execute a work item you will also be the one who is going to completed it. Replacing it is the lesser used of the two alternatives, therefore it is the only one that requires an action on the part of the user.
    Again, this is intended as constructive input. Strange quirks and unusual behaviour tend to add a black mark to software if they do not make things easier to use. In many environments users are not even aware of the reserve/replace business, so there you would be adding an additional layer of complexity.
    Personally I would find an exit popup annoying as a regular workflow user - regular decisions can be approved with one click, or I can back out with a single click if I need to make a phone call or look up some info before approving - but with this new-fangled thing I've got an extra button to click and an extra thing to think about. This is especially the case in a payment approval scenario where you may have users in some departments who may approve hundreds of payments each week.
    My suggestion would be to leave it like that. By all means put an option into the user decision to put it back or to 'un-reserve' it (and loop round if the user chooses it). That way you are adding value and not clicks.
    Cheers,
    Mike

Maybe you are looking for