Authorisation Issue SRM 7.0
Dear Experts,
We are configuring Extended Classic Scenario in SRM 7.0.
I have 2 Purchasing groups and each having one Purchaser.
Each Purchasing group is responsible for 1 Product category.
When I create and approve shoping cart I need to restrict the processing of PO to the relavent Purchaser.
I have created 2 ZROLE in SRM by coping the standard Operational purchaser role with the modified Authorisation objects BBP_PGRP & BBP_PURORG and assigned it to the corresponding user.
For the purchasers I have asssigned the standard Operational Purchaser role in Portal.
When I log in as Purchaser still I can see and modify the PO's belonging to the both Purchasing group.
Can any one give me a suggestion how to over come this issue.
Regards,
B.N.Karthikeyan.
Hello,
This might help.
Note 1334253 - Authorization Check missing in Sourcing Cockpit
Note 1335797 - Authority Check on Process Type missing in Sourcing Cockpit
Note 1242643 - Authorized Purchase Group and organisation in POWL
Thanks
Ashutosh
Edited by: ASHUTOSH TRIPATHI on Jul 22, 2009 10:35 AM
Similar Messages
-
Dear XI Experts ,
I am not able to test my scenarios in the Dev box.They are failing when I check them at the adapter engine.
The error which I am getting is as follows :
File_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Received HTTP response code 401 : Unauthorized.
This looks to me as it has some authorisation issue. Can you people provide some details on this .
Thanks
AmitHi Amit,
Please check the following urls.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0d9a978-5f59-2a10-1cae-d4cf0c92a0f2?quicklink=index&overridelayout=true
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/bd5950ff-0701-0010-a5bc-86d45fd52283?quicklink=index&overridelayout=true
Thanks
Ravi -
Ksb2 transaction ( Display commitment item for CC )authorisation issue
In my project some of the user are facing problem to display for the T code KSb2 ( Commitment Item report for cost center ).
Mesage : No authorisation to display valuation view 1 for controlling Area .
User has in her authorisation profile to display valuation view 0 ie legal valuation .
In KSB1 transaction one option comes in Extras -> Actual valuation where the user can select 0 or 1 .
But in Ksb2 this option is greyed out .
So system is reading valuation view 1 & I am not able to understand from which settings ?
Need help on this .Do we mention any where in the variant relating to Valuation View ?
ThanksHi,
I think try to check with your Basis person. Do /nSU53 in KSB2 to see if any authorisation issue is involved.
Regards
Divraj -
Authorisation issue - the report is running and
Hello friends,
Need some help .
There is one salary report , which user is not able to see the data . It is running and running for 1/2 hours
and finally the message coming that action is cancelled.
I have checked the data flow and everything seems correct .
It seems the problem with user authorisation .
How could i check the User id authorisation for this specific salary report. ?
I am not aware about the more thing in authorisation.
Thanks in advance.
RegardsI feel this is not authorisation issue. But i am not sure.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PM -
Authorisation issue . - Report is running and running
Hello , By mistanly i resolved the last thread .
Yes , i have excuted the report by using RSSMQ and with the user id . I found the below messge .
Full Authorisation is requiered for this selection option .
A displayed hierachy requires option .
Could you please let me know , how i can solve this issue now .?
Thanks in advance.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PMI feel this is not authorisation issue. But i am not sure.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PM -
Authorisation issue regarding BEX Broadcaster
Hi all
Does anyone know why I maybe getting an authorisation issue attempting to broadcast a pdf report via the Bex broadcast tool?
The recipient user has all the relevant authorisations and roles attached, and when this report is previewed in Bex Report Designer, the report runs fine showing all the data for the report, However when the report is scheduled via the Bex broadcaster, the broadcast fails. RSRD_LOG shows the following message
Java communication error: RFC destination NOT_CONFIGURED does not exist.
Message no. RSBOLAP017
And in T-code sm21, I get the following error
X MESSAGE BRAIN 299: SAPLRSEC_CHECKS
RSEC_GET_AUTH_HIER_FOR_USER:NOHIE
This indicates that there is an authorisation error with my user, however as mentioned earlier all the authorisation objects and roles seem correct as the report runs fine as I can preview in bex report designer with no authorisation problems at all.
I have also executed the report in T-code RSECADMIN this also shows no errors in the error log and the report runs fine here too.
Please can anyone advise?
Thanks
ForhadHi Forhad,
I'm not sure if the error is related to the communication between the Java and the BW or if it's a problem with the authorization.
Are you using a customer exit or an authorization variable in your query/bookmark?
Check if by chance your query have an hirarchy assigned to a characteristic, then, check the user's authorization and check whether you have enough authorization for the hierarchy.
I'm unsure, but maybe note 916090 can help you.
I hope it helps.
Regards,
Daniel -
Hi guys,
Hoping you can assist me with an authorisations issue I am facing.
End-users are using a Z bespoke material upload program. In order to run the program they need full authorisations to all views in MM02 as the upload program uses this transaction in a BDC Call. However they currently have restrictions on certain views in MM02.
I need to find a way that allows them to run the program but prevents them from getting full access to all the views in MM02.
Any help would be greatly appreciated.
Thanks,
Philip JohannesenHi guys,
thanks for your feedback.
Alex - yes you are right submitting it to a background job via a batch user wouldn't be suitable. As there are restrictions against the Users ID on which materials they copy to certain plants.
The views are there to prevent them from changing data. However they can view the data in display mode.
Do you know where I could get more detail on setting up approriate change control measures as you suggested?
Many Thanks,
Philip Johannesen -
Authorisation issue in SRM 7.0
Dear Experts,
We are configuring Extended Classic Scenario in SRM 7.0.
I have 2 Purchasing groups and each having one Purchaser.
Each Purchasing group is responsible for 1 Product category.
When I create and approve shoping cart I need to restrict the processing of PO to the relavent Purchaser.
I have created 2 ZROLE in SRM by coping the standard Operational purchaser role with the modified Authorisation objects BBP_PGRP & BBP_PURORG and assigned it to the corresponding user.
For the purchasers I have asssigned the standard Operational Purchaser role in Portal.
When I log in as Purchaser still I can see and modify the PO's belonging to the both Purchasing group.
Can any one give me a suggestion how to over come this issue.
Regards,
B.N.Karthikeyan.Hi,
In the PPOMA_BBP -Change attributes . Go to the extended attributes in the give exact product category for the purchaser
so that he can shop only that product category he cannot modify other category
Regards
Ganesh -
User Authorisations in SRM 7.0
Dear Experts,
We are Configuring Extended Classic Scenario in SRM 7.0.
We have two Purchasing groups each responsible for one Product category.
We have one purchaser assigned to each Purchasing group and the we have given the Product category responsible for the Purchasing grioup in Extended attribut of the Purchaser Position.
After creating SC by the user when we try to process PO by loging in as Purchaser we can able to see the PO from both the Purchaser log in.
Can any one help in restricting the user to process the PO belonging to the assigned Purchasing Group.
Is it possible to restrict by attributes or through Authorisation objects assigned for the user.
Regards,
B.N.Karthikeyan.Hello,
To check correspondance between PO puchasing group and user purchasing group, you could:
1 - get PO detais using function modul BBP_PD_PO_GETDETAIL. At header level you can find Purch. Org and Purch. Group
2 - get user Organizational Unit ID (which is purchasing group ID) using BBP_OM_STRUC_GET_ORG_FROM_USER, then run FM BBP_OM_DETERMINE_RESP_PGRP to get purchasing group code linked to user Organizational Unit ID.
For FM BBP_OM_DETERMINE_RESP_PGRP, i don't remember if you can get directly purchasing group value using importing parameter is_object-objid = purch. group ID (and is_object-otype = 'O').
If not, run this FM without any importing parameter: you will get all purchasing groups.
Then, look for purch. group of you purchaser among them.
As you are in SRM 7.0, I dont know if all indicated FM are available: if not, look for their equivalent.
Regards.
Laurent. -
Hi
I recently purchased a new PC running windows 8.
When I went to authorise my new PC in iTunes, I put in my correct apple ID and password but kept getting the same error message "We could not complete your iTunes store request. The network connection was reset.Make sure your network connection is active and try again."
Now my network connection is fine and it even allows me to sign in to the Apple store with my current ID and even download music on the new PC once I re-verified my CC details etc, I just can't access my existing music library etc,.
It just doesn't allow me to add/authorise this second PC, I only have one other PC currently authorised so its nothing to do with exceeding 5 authorisation or my network connection. I've been trying this over a period of a week so its not a one off Apple issue like on a Sunday when they are busy. Is there anyhting with windows 8 I'm missing here that I should know about?
Guys I need your help for a solution?Hey Finny2013,
Thanks for the question. The following articles may help you to resolve this issue:
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/TS1277
Additionally, you may want to check for third-party security software or firewalls that are interfering with your connection to the iTunes Store:
iTunes: Troubleshooting security software issues
http://support.apple.com/kb/TS3125
Thanks,
Matt M. -
Authorisation issues in ECC6.0
I am getting an authorisation error for some transaction. I never faced any such issues before the upgrade. Pls resolve
Thanks
ManojHi,
You would need to perform a security upgrade after your upgrade to ECC6.0. There are differences in the transaction codes from 4.7 and ECC 6.0 Untill you perform the upgrade, you will face such issues.
Please follow SAP handbook second edition by Jose Hernandez for procedure of upgrade.
If you have performed the security upgrade, then please specify the when are you getting such issues.
Regards,
Imran -
Authorisation Issue ASA 5510 8.0(2)
Hi
I have a strange issue that when authorisation commands are sent from ASA to ACS, thet are sent to ACS with a source address of 0.0.0.0 rather than IP address of device accessing the ASA or that is how ACS is viewing it.
Authentication on device is OK.
We are not having this issue with other devices but this is only device we have on 8.0(2), we have devices on newer and older IOS, unless I am missing something on config but all looks OK.
Any help/thought apprecated.i wish it was that simple.
the permissions have not changed at all on the network shares. i can log in to the network locally and have no issues whatsoever accessing the very same shares I am trying to access through the webvpn. -
Authorisation issue:Using RRI..
Hi Experts,
I have an issue here as described below:
I have created one End user role to give authorisations to end users.
when testing(by assigning this role to test user id),I can able execute queries using Bex Analyser.But when trying to go to see some other report which is connected to the base report through RRI(via menu in query --> goto <display line-item>),I am unable to see the data.
Its ending up with the error:You do not have sufficient authorization.
Could some one please suggest resolution for this issue.
Quick help will be highly appreciated.
Thanks & Regards
NagHi
Please chec RRI query having authorization variables or not if yes check RSECADMIN for values assigned for those objects.
Go to RSECADMIN and switch on the Trace with log so that it will display the exact result.
Regards
Jagadeesh -
Dear Gurus,
In the production system one user is having authorization only for ME23N and till yesterday he was able to use it. But now he is getting No authorization for document type "OPA" and activity "03". Our basis people checked authorization for the particular and he is having the required authorization. I mean for object "M_BEST_BSA" for activity "03" and for "BSART" document type "OPA".
Basis team has not made any changes and am not sure how this issue started suddenly. Any inputs to resolve this please. Immediate help is really appreciated.
Regards,
GMQuick solution for this:
You tell the username to BASIS team who is having this authorisation and they can simply add the saem roles to that particular user.....It may happend many times that BASIS missed out some roles or groups........ -
AppleTV 1 Authorisation Issues Again
Old 40GB AppleTV 1 running 3.02 software.
Purchased Rio kids movie October 28th including iTunes Extras. SD version only.
Movie and Extras played, though Extras navigation a little flaky.
Today purchased The Lion King HD/SD with iTunes Extras.
iTunes Extras menu loaded fine but Movie/Scenes would not authorise. Did nto look at all extras.
Winston suggested making a purchase on his AppleTV1 made things authorise.
Downloaded a free podcast to AppleTV1 - this did not help. Did not test with a paid movie/music purchase.
Some time ago, AppleTV content would occasionally not authorise if it had not been played in iTunes though from memory this was standalone mode when itunes/internet unavailable and for synced not streamed material. Playing The Lion King in itunes did not help.
Mac with The Lion King configured for Sharing not Syncing, so removed its iTunes entry from Settings>Computers on AppleTV and re-added the same iTunes library as a Shared library again (seconds compared to a resync).
Immediately AppleTV 1 would now play The Lion King Movie.
Conjecture, but seems to me that AppleTV 1 may get issued some kind of authorisation certificate for movie playback, that will not allow playback for certificates older than the one issued? Maybe it's more than that and some newer content requires additional authorisation.
Unclear as yet if any additional purchases will now play or require authorisation steps again.
Also unclear to me if this perhaps only affects HD purchases not SD.
I bought an HD series that would not play on my Mac Pro due to HDCP restrictions once, while other HD content would play.
Lots of permutations to try test here, but once authorisation accepted you can't test the others.
It will be interesting to see if this movie will play without an internet connection.
Yet again, DRM inconveniences the paying customer not those who download illegaly and laugh at paying customers.
Feedback to Apple again required:
Apple - Apple TV - Feedback
ACDownloaded a free podcast to AppleTV1 - this did not help. Did not test with a paid movie/music purchase.
Podcasts are not protected, I'd assume that's why they didn't help.
......so removed its iTunes entry from Settings>Computers on AppleTV and re-added the same iTunes library......
That's another of the workarounds that has been offered, I took the view it was a little convoluted for someone with 140 GB synced to the Apple TV, and that a direct purchase was probably the simplest of the workarounds.
Haven't had any response about this issue from Apple yet, I have to assume they are aware of it, but it would be nice to know something.
Maybe you are looking for
-
Can I set up RAID 1 in Mac Mini Server?
Sorry if I am in the wrong forum, but would like to know if the new Mac Mini server can be set up as RAID 1 or 0 and does it require reinstalling OS after formatting, or it comes already in RAID? thanks,
-
Video formatting for iBook authors
Hi My videos are .m4v format from iMovie codec h.264, AAC they are 960x540 but iTunes producer wont accept as asset - the error message reads that it can not detect the video format ftyp. What does that mean? WIll putting it through Compressor 4 c
-
I am having problems playing half my games on facebook because of abod flash player is there any way around this?
-
AR,GL and profit center relation
Hi, We have a requirement to report profit center wise amount. aageing analysis. At present we are not loading Profit center through AR. So we are doing a look up to get the profit center on GL. So can you please let me knoew the relation betwen the
-
How do I fix footage that was capture in the wrong format?
Hi there, I want to edit footage that was supposed to be captured in 16.9. 720 x 480(1.2121) but once imported onto premiere pro cs4 looks like this according to properties it was captured in 16.9. 720x480(0.9091) How can I convert it to the first s