Authorisation of Objects to Plant Specific Users

Hi,
I developed Zreports for HR and PP modules. In these reports ,Selection Screen contains Personal Area and Personal Subarea(in case of HR module) and Plant(PP module). Now any User can give any Personnel area or Plant and can view the report Output.But the User should be able to view the report Output only when he gives the Personnel Area or Plant to which he belongs otherwise not. For example if the User belongs to Personnel Area  or Plant -
>1500,he should have the authorisation to run the report for 1500 only. If he gives any other Plant ,i should raise an error message. How can i approach to this issue?Please help.
Regards
K Srinivas

Hi,
Lets say based on the plant you want to assign the authorization objects.
Then based on the plant authorization, first check any standard reports or standard transactions are now taking place. Usually the users belong to the same can answer this better.
Now by looking at the authorization given to those standard transactions, we can trace the roles given, and we can see the authorization objects used there.
I mean there will be some authorization objects existing for plants.
So in the at selection screen of your custom development, first check the authorization with respect to the plant given in the selection screen, then proceed.
For more information look into the transaction SUIM.
Regards,
Santhosh.

Similar Messages

  • LSMW - Access to Specific Objects Permissions to specific users

    Hi guys,
    I want to know if it is possible to allow access to specific users that are in charge of the execution of a specific object of and LSMW.
    Regards,
    Eric

    Hi guys,
    One solution i got right now (but it isn't the ideal), is to debug the execution step of the LSMW in order to find the name of the program that iit's been call and the one that its call inthe step in wich the files are been specify. Then develop a "Z" program that calls both of them and give the user the access to this new transaction.
    Any better sugestion?.
    Regards,
    Eric

  • How to apply Software Restriction policy for specific user in local group policy object ?

    I am working on implementing user based software restriction policy programmatically for local group policy object.
    If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
    When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
    They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
    I achieved what i wanted but is it right to modify registry values ?  
    PS:- I am using Igrouppolicyobject API

    I achieved what I wanted but is it right to modify registry values ?
    You also can modify a registry programmatically based policy. Check this:
    http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Audit specific objects for specific users

    audit statement has the option to choose audit by user list
    audit object has the option to choose audited objects
    now i need to audit specific objects, i.e. user A's tables accessed by a specific group of users, let's say ALL users other than A
    Is it a simple way to achieve this goal? (audit A's tables that accessed by all database users other than A)
    Thanks!

    sorry, the link works now. However, there is nothing new in 10G, same as I read from 9i document. See my highlight below in the quoted document text, my requirements is the combination of them ( specific users and specific objects). Thanks anyway.
    <quote
    Table 8-1 Auditing Types and Descriptions
    Type of Auditing (link to discussion)      Meaning/Description
    Statement Auditing      Enables you to audit SQL statements by type of statement, not by the specific schema objects on which they operate. Typically broad, statement auditing audits the use of several types of related actions for each option. For example, AUDIT TABLE tracks several DDL statements regardless of the table on which they are issued. You can also set statement auditing to audit selected users or every user in the database.
    Privilege Auditing
         Enables you to audit the use of powerful system privileges that enable corresponding actions, such as AUDIT CREATE TABLE. Privilege auditing is more focused than statement auditing, which audits only a particular type of action. You can set privilege auditing to audit a selected user or every user in the database.
    Schema Object Auditing
         Enables you to audit specific statements on a particular schema object, such as AUDIT SELECT ON employees. Schema object auditing is very focused, auditing only a single specified type of statement (such as SELECT) on a specified schema object. Schema object auditing always applies to all users of the database.
    Fine-Grained Auditing
         Enables you to audit at the most granular level, data access and actions based on content, using any Boolean measure, such as value > 1,000,000. Enables auditing based on access to or changes in a column.
    /quote>

  • Matrial Lock for User - Plant Specific

    Hi all
    Can any one tell me that  how to  block the user plant specific
    My currect setting in Avalibity check block the user globly
    Means if any material block by one plant it
    shows error to all the plants
    can it block plant specific
    Thanks in Advancd

    I doubt user can be blocked plant Specific. Check with basis consultant, if it is possible through Roles and Authorization.
    Regards,
    Rajesh Banka

  • Giving authorisation to specific users for usage of variant

    Hi,
    I created variant for one report. Now i need to give authorization to specific users for usage of variant.
    Please let me know how to do this.
    Regards
    SRee

    hi
    jus check out these threads
    Re: Authorization for creating variants
    Report variant authorization
    hope this helps
    regards
    Aakash Banga

  • How to restrict change to plant specific data in MM01 and MM02 transaction.

    Hi Experts,
    The requirements is to restrict the plant specific data change in one system. As of now we have 2 different system lets say sys-1 and sys-2. our requirement is if at all any of the users are trying to change/create the material in Sys-1 they should be only able to update basic information and parts regional information/global informations only in sys-1.
    Do we have any option in customizing?
    If not then what would be the way to achieve this?
    Please help.
    Thanks!!!!
    Rajesh.

    Hi,
    Please refer the below link it may help you..............
    Authorization object for label Data view in mm02

  • Authority-Check Object for PLANT(WERKS)?

    Hi Experts,
    By using "V_VBAK_VKO" Authority Object am checking the user Authentication against the sales area(Sales OrgDistr. ChannelDivision) in my custom report. Below is the code,
    AUTHORITY-CHECK OBJECT 'V_VBAK_VKO'
        ID 'VKORG' FIELD s_vkorg
        ID 'VTWEG' FIELD s_vtweg
        ID 'SPART' FIELD s_spart
        ID 'ACTVT' FIELD '01'
        ID 'ACTVT' FIELD '02'.
    (Note: My report is for SD/OTC module)
    I also need to check the authenmtication of user against entered PLANT (WERKS) in selection screen, so, pls. let me know that  What is the Authority-Check Object for PLANT(WERKS)
    Thank you

    Hi,
    Transaction SU20, search for WERKS.
    When you find it, double click on the row, in the bottom half of the resulting screen there is a list of authorisation objects that contain the field.
    Unfortunately, you can't navigate from this list into the definition of the objects, so you'll need to cross-reference against transaction SU21.
    Regards,
    Nick

  • Restrict Duplicate print of receipt smartform for specific users

    Hi Folks,
    I have a custom driver program to print Customer Receipt and everything is working fine. But now I have a requirement saying I have to restrict the print option to specific user in case of print of Customer Receipt more than once.
    I found a parameter TDAUTORITY in smartform control structure SSFCOMPOP but since there is no documentation for this structure, I have no idea what is this parameter for.
    So, request you if you could guide through how to meet my requirement of restricting duplicate print for userids.
    Thank you.
    Regards,
    Sud.

    Thank you Brad for your reply.
    Since mine is a custom driver program that is not linked to any Output type in NACE, I can not use the NAST table variable. the NAST table is never updated since my program is a complete Z developement with selection screen to input the values.
    So , I believe that I am left with the Authorisation object approach. I shall use the AUTHORITY-CHECK for the user and should proceed accordingly.
    Thanks again !
    Regards,
    Sud.

  • Plant specific BOM creation SPRO settings

    Hello,
          My requirement is User must be able to create plant specific BOM creation. For this, Do we need to do any SPRO config in Material master side? or any other settings needs to be done? Kindly let me know... Thanks!!
    Regards,
    Saravana

    Hi Saravana,
    As such there is no SPRO setting for it.
    Please check the authorization object C_STUE_WRK  -CS BOM Plant (Plant Assignments)
    Regards,
    R.Brahmankar

  • How can i open period for specific user in OB52.

    Hi Expert,
    How can i open period for specific user in OB52.  As 'Authorisation Group' field is there in OB52, how can i use this field to restrict the specific user to post for particular period.  How can i creat authorisation group and where can i assign it to the particular user...
    Please let me know?
    Thanks and regards,
    Sam.

    Hi,
    Here is the detailed process as outlined in SAP help.
    Procedure
    If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
    Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
    Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
    Examples
    A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
    If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
    Thanks
    Venkata Ganesh Perumalla

  • How to send the spool output to the specific user during ALE distribution

    Hi All
    In ALE internal order Configuration done by BAPI Method SAVEREPLICA Business object BUS2075whenever user changed the internal order which is moved to the destination system because of change data setting in data element fields.
    I want to know how to send the spool output of the changed internal order to the specific user during ALE distribution.
    Please help me to reslove the above issue
    Thanks & Regards
    KRISHGUNA

    Solved by myself

  • How to find the specifed user-exit

    Hi, experts. i am first time to do enchancement. can anyone tell me how to find specifed user-exit. for example, how to find MV45AFZZ?  Also, what i should pay attention to when doing enhancment works? thanks.

    Hi Jrockman,
    There are many things associated to user exit.
    a) Tcode- CMOD.    here you can find
    b)  USER-EXIT triggering points ->
    Go to se93 and give the tcode to find the main program associated to it.
    Go to se38 and give the main program.
    Find the package associated to it.Go to->Object Directory Entry.
    Go to smod transaction.
    Press f4.
    Press Information System Button.
    Give the Project(Dev Class).
    Press enter.
    Find the enhancements associated
    c) Check the code posted by me ,to get the list of User exits and Badi for a particular tcode in the link mentioned below.
    Re: User Exit for IW22 - to populate custom fields
    d) few useful links to understand User exits.
    http://www.sapdevelopment.co.uk/enhance/enhancehome.htm
    http://www.sap-img.com/abap/a-short-tutorial-on-user-exits.htm
    http://www.sapgenie.com/abap/code/abap26.htm
    http://www.sap-img.com/abap/what-is-user-exits.htm
    http://wiki.ittoolbox.com/index.php/HOWTO:Implement_a_screen_exit_to_a_standard_SAP_transaction
    http://www.easymarketplace.de/userexit.php
    http://www.sappoint.com/abap/userexit.pdf
    ABAP Enhancements and Modifications - General
    https://www.sdn.sap.com/irj/sdn/developerareas/abap?rid=/webcontent/uuid/2342e1f3-0b01-0010-a186-fdd404884050
    Menu Exit
    http://sap.ittoolbox.com/groups/technical-functional/sap-r3-dev/menu-exits-72696#
    Screen Exit
    http://wiki.ittoolbox.com/index.php/HOWTO:Implement_a_screen_exit_to_a_standard_SAP_transaction
    Hope it helps.
    Manish

  • Creation of Plant Specific Views while creating or changing the Material

    Hi,
    When saving a material (MM01/MM02), based on data in custom table, I have to extend the material for different plants and plant specific views such as
    1.     Purchasing
    2.     Foreign Trade Import
    3.     MRP1
    4.     MRP2
    5.     MRP3
    6.     Forecasting
    7.     Parts F&P Data (custom view)
    8.     Accounting 1
    How can I achieve this? Is there any FM or BAPI that can be used to extend material for a plant and its specific views?
    Also please suggest me the user exit or BADI which has to be used to achieve this functionality?
    Best Regards,
    Kumar

    We can use the BAPI, BAPI_MATERIAL_SAVEDATA to extend material to different views.

  • Authorization object for plant on selection-screen

    Hi All,
    I need to cehck the authorization object for plant on sleection screen..the palnt is select-options.
    I have written the code
    Declaration of local constants.
      CONSTANTS : lc_i(1)  TYPE c VALUE 'I',
                  lc_eq(2) TYPE c VALUE 'EQ'.
      REFRESH : r_werks.
      LOOP AT s_werks.
        IF s_werks-low IS NOT INITIAL.
          AUTHORITY-CHECK OBJECT 'M_MATE_WRK'                "Check if the user has autorization for the plant.
                               ID 'ACTVT' FIELD '03'
                               ID 'WERKS' FIELD s_werks-low.
          IF sy-subrc NE 0.
            r_werks-sign   = lc_i.
            r_werks-option = lc_eq.
            r_werks-low    = s_werks-low.
            APPEND r_werks.
          ENDIF.
        ENDIF.
      ENDLOOP.
      LOOP AT s_werks.
        IF s_werks-high IS NOT INITIAL.
          AUTHORITY-CHECK OBJECT 'M_MATE_WRK'                "Check if the user has autorization for the plant.
                               ID 'ACTVT' FIELD '03'
                               ID 'WERKS' FIELD s_werks-high.
          IF sy-subrc NE 0.
            r_werks-sign   = lc_i.
            r_werks-option = lc_eq.
            r_werks-low    = s_werks-high.
            APPEND r_werks.
          ENDIF.
        ENDIF.
      ENDLOOP.
    My doubt is will the authorization will check the plants in between 1001 and 2001..suppose i have pplants 1001,1002,1003,1004,2001..Now will the above code will check for all the plants or only 1001 and 2001 if i specify in the select-options.
    Regards,
    raj

    Hi Raj
    First no need to LOOP AT s_werks and check s_werks-high as it will always be present only once in the table s_werks.
    Do this
    SELECT werks FROM t001w INTO li_werks
    WHERE werks IN s_werks.
    LOOP AT li_werks.
    *check your authority thing here and fill the range
    ENDLOOP.
    Pushpraj

Maybe you are looking for