Authorisation question (basic)

Guru's,
A small authorisation question...
User A can change documents of cc 1000
User B can change documents of cc 2000
Now we want to give both users also display rights to the other company documents.
So
User A can change documents of cc 1000 and view documents of cc 2000.
User B can change documents of cc 2000 and view documents of cc 1000.
Is this cumulative? According to SAP rules can user A now CHANGE documents from cc 1000 AND cc 2000?
Can someone verify this?
Thanks,
Kris

Hi
The activities aren't accumulate, but just as I said you need to use the same object several times with different activieties.
I've create a test profile with the object FI_BKPF_BUK, I use it twice:
- A) Activity: 03, BUKRS = A
- B) Activity: 02, BUKRS = B
Then I've created a report in order to test this profile:
.parameters: p_buk type t001-bukrs.
AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
         ID 'BUKRS' FIELD p_buk
         ID 'ACTVT' FIELD '03'.
write: '03', sy-subrc.
AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
         ID 'BUKRS' FIELD p_buk
         ID 'ACTVT' FIELD '02'.
write: / '02', sy-subrc.
If I run (for a particular user having the profile above) that report for the company code A the result is:
03 0
02 4
If I run it for the company code B:
03 4
02 0
Max

Similar Messages

  • 2 Questions: Basic Shape / Go to Master Page

    Hi. My questions revolve around InDesign CS4 for Mac.
    Specs: PowerMac G5, 1.8Ghz, 4GB ram, 435GB hd, OSX 10.5.8, IDCS4, Suitcase Fusion 2 (if any of that matters).
    I have a basic shape question that is perplexing me. I'm a 12 year QuarkXPress user who converted to ID CS4 last year by choice (to gain the experience under employ) so there are things here and there that cause me confusion.
    In any case my question is this. How can I convert a rectangle frame to a perfect square frame?
    Specifically, if I drop in an image, and the frame is rectangular how can I make it a perfect square using keyboard shortcuts? I realize I can create a new frame and constrain proportions as I draw it to get a perfect square, then cut and then paste the image into that, or I can transform the frame by entering equal values in the transform panel or control palette. Which would answer my question if this was not something XPress can do effortlessly.
    If you draw a shape (box) in XPress and then hold down the SHIFT key XPress will immediately transform the shape into either a perfect square or circle depending on which tool you are using. Release and you have a perfect square or circle. But you cannot seem to do this in ID after you have already drawn an rectangle?
    Is there any way around this that does not involve multiple keystrokes or drawing a new frame?
    Second question. Anyway to go direct to master pages without having to use CMD+J and then enter the MP letter? In XPress OPTN+F10 will take you directly there and directly back.
    P.S. Not trying to start an XPress/ID discussion. Just trying to learn this program and XPress is the only reference I have.
    Thanks for any advice/tips in advance.

    Keyboard shortcut for these operation , you already know the standard method , but if you want some kind of one step procedure then scripting can help.
    Post your query on the Indesign scripting forums , someone may come up with the script to select the master page and change the rectangle to square.
    and you can define the keyboard shortcut to run this scripts ,,,one step procedure.

  • Authorisation Question

    I have some music purchased from the music store and downloaded to my PowerMac G4. Having bought a new PowerMac G5 and used the setup assistant to firewire my home folder over, I was asked to authorise my new G5 to play.
    Fair enough - but the resulting message said I have now authorised three computers. Does my iPod get automatically authorised and count as the third one? If not, where is the third computer?
    Also, whilst my G5 will now play all my purchased music, if I try to use it as music to an iPhoto slide show, it asks for authorisation again. Any idea what's wrong?

    Mick, no, your iPod is not counted as an authorized computer. It is not necessary to authorize iPods to play iTMS purchased songs.
    Unfortunately only you know where that mysterious 3rd authorization might be. If you just can't figure it out you can use the iTunes Music Store Customer Service page and ask them to de-authorize all of your computers. Then you can authorize only the ones you know you will be using.

  • SDK question (basic)

    hi
    If i download the SDK for iphone, is it possible to make apps with this kit alone?
    or do you need other software. thought i might give it ago, especially as i have programmed an Acorn Electron before

    you may want to direct this question to the link
    http://developer.apple.com/iphone/program/

  • Applet persistance question (basic?)

    All:
    Forgive the ignorance, but I am not a Java programmer at all... but am looking for some info.
    What is the scope of a (untrusted) java applet in regards to IE browser sessions? For instance, if a web page initiates an applet load, does the applet stay in memory and continue to run after the user navigates away from the original page?
    We are trying to find out if it is possible for a page to load a particular applet that records the URL string of IE browser windows, and have this applet persist throughout the user's browser session, even if they leave the original page, and if they open new browser windows. Is this possible, or is it just crazy?
    Thanks for any help!
    phong

    We are trying to find out if it is possible for a page
    to load a particular applet that records the URL
    string of IE browser windows, and have this applet
    persist throughout the user's browser session, even if
    they leave the original page, and if they open new
    browser windows. Is this possible, or is it just
    crazy?And then make the user crazy trying to download anti spyware and adware and stuff. The question is why do you want the applet to be running once the user has left the page and would you ask for his permission to do so. Just as there is a law for the telemarketing guys there should be another one for these spyware guys who want to run there own agenda on the clients machine without his concent.

  • Some HDV to DVD Screen Size Questions, Basic I know

    This is my first foray into HD of any kind, but I've been using FCP on and off since version 2.
    I'm importing from a Canon HV40 mini dv camera which uses HDV. The easy setup I'm using is
    HDV to ProRes - Canon-1080i60. Capturing works, but I was advised by a friend to try burning a DVD and seeing if it works before continuing, so I did. I tried using Share, DVD SP and iDVD.
    I have a Samsung 720p TV and a Samsung DVD player. The picture is floating in the middle of the screen, with black bars all the way around it, using up around 50% of the screen real estate. Is this just the nature of HDV, or is there something else I need to do? Thanks in advance!

    Keep in mind that a DVD always contains a standard definition image. The standard def image can be in a 4:3 or 16:9 aspect ratio - but it is always 720x480 pixels.
    The problem is likely the communication between your DVD player and the TV set. Check the settings for both. If you are starting with a 4:3 image, the DVD player should send a pillar boxed image to a 16:9 display and be full screen on a 4:3 TV. If you send a 16:9 anamorphic image, it should display full screen on the 16:9 device and letterboxed on the 4:3 TV.
    To make sure this happens you need to select 16:9 letterboxed under the disk settings in DVDSP then look into the TVs settings for how it handles feeds.
    x

  • ITunes Authorisation Question

    If I deauthorize all of my computers associated with my iTunes account, can I just reauthorize my computer and all my songs will be fine and working again?

    Yes

  • Question regarding ipad 3 replacement via warrentee.

    I have a question, basically my ipad 3 is glitching. It is a 64gb ipad 3, I am fairly positive apple will replace it for me. Considering I purchased the two year warranty. However I am wondering, Will they replace it with a newer ipad model? Or will I simply get a refirbused used ipad 3. Considering that they took the ipad 3 off the market, I was wondering what the replacement would be.
    -thanks in advance to anyone who is able to help.

    Its going to be the same generation and model as the one you have.
    That is, while they no longer sell iPad 3s they surely have refurbished stock available for replacements.

  • Why is basic visual voice mail free on the Note 3 and 2.99 a month for the S4 ?

    Why is basic visual voice mail free on the Note 3 and 2.99 a month for the S4 ?

    I'm trying to reach these issues myself. There are a few different flavors of voicemail:
    Basic voice mail -- the kind you call in with your phone and press touch tones, like people used to do twenty years ago. Included with contract.
    Basic visual voice mail -- see your messages listed by caller, choose which one to play. Included with contract, but only on certain phones. The Note yes, Galaxy s5 yes, Galaxy s4 no.
    Visual Voice Mail -- the 2.99/mo version Verizon wants you to pay for. Has the features of 2, but also will transcribe your voice mails into text. Available on most phones because it is a Verizon app.
    iphone visual voicemail. Same as 2, for all intents and purposes. Has always been included because Apple established it as a condition for the carriers to be permitted to sell them.
    The mystery is number 2, what you are asking about. Though it is mentioned on a verizon comparison chart, 'basic visual voicemail' is not discussed in any verizon literature and I suspect most techs don't know about it yet. It seems to have been enabled with a kitkat update (version 4.4.4 of Android) that has been released on some, but not all phones. I think the way it worked is that users were given a free trial of the pay version of voicemail, but at the end of the trial were able to 'downgrade' to basic voicemail and keep that without paying.
    I also have an S4, and basic /no cost visual voice mail does not seem to be possible, though I have heard there may be some ways to make it work with technical workarounds. I have not confirmed any of these methods but they almost certainly would not be recommended by Verizon staff.
    To get back to your question, basic visual voicemail and what Verizon calls regular 'visual voicemail' are different products. The basic seems to be a recent product only available on some phones. The regular 'visual voicemail' is the pay service available on all phones.

  • Question about NSS, clustering Postfix over NSS shared vol.

    Hi all!
    I have a question related to NSS. I am thinking to deploy an antispam server
    using Postfix, spam assassin, clam av, etc. So the first step on my implementation
    is to port Postfix to a cluster-service using NCS and move the Postfix queue to a shared
    volume, on a NSS volume from a SAN. So, here is the problem. I didnt have any problems
    migrating MySQL to a resource and the data dir to a shared NSS volume but with Postfix
    I am having a lot of problems moving the queue dir to a NSS filesystem.
    I think that the problem comes to the special file types like sockets, named pipes, etc.
    I have set up the users on LUM and assigned it on the NSS file system with rights command,
    but when Postfix tries to start, I have this error:
    host postfix/master[15616]: fatal: fifo_listen: create fifo public/pickup: Operation not permitted
    I'm afraid that the problem is that pickup is a special file. So the question basically is, is
    NSS able to manage this type of files? I am doing well moving the queue dir to a
    NSS shared volume?
    And, finally, If this could not be possible, Could I use a ext3 filesystem over NSS? I am a little
    lost about that...
    So much thanks!

    antoniogutierrez wrote:
    >
    > Hi all!
    >
    > I have a question related to NSS. I am thinking to deploy an antispam
    > server
    > using Postfix, spam assassin, clam av, etc. So the first step on my
    > implementation
    > is to port Postfix to a cluster-service using NCS and move the Postfix
    > queue to a shared
    > volume, on a NSS volume from a SAN. So, here is the problem. I didnt
    > have any problems
    > migrating MySQL to a resource and the data dir to a shared NSS volume
    > but with Postfix
    > I am having a lot of problems moving the queue dir to a NSS
    > filesystem.
    >
    > I think that the problem comes to the special file types like sockets,
    > named pipes, etc.
    > I have set up the users on LUM and assigned it on the NSS file system
    > with rights command,
    > but when Postfix tries to start, I have this error:
    >
    > host postfix/master[15616]: fatal: fifo_listen: create fifo
    > public/pickup: Operation not permitted
    >
    > I'm afraid that the problem is that pickup is a special file. So the
    > question basically is, is
    > NSS able to manage this type of files? I am doing well moving the queue
    > dir to a
    > NSS shared volume?
    >
    > And, finally, If this could not be possible, Could I use a ext3
    > filesystem over NSS? I am a little
    > lost about that...
    >
    > So much thanks!
    >
    >
    I would try and have the socket file to be local to the machine. Mysql sets
    up the same way when clustering. I have never even tried to get socket files
    to load on an nss volume. There really is not a reason to do that.

  • BW Authorisation on Adhoc Queries

    Hello All
    An authorisation question on BW. We want to give BW users the the permissions to save queries (created using the Adhoc Query Designer) to a designated role. Further, users should only be limited to modifying their own queries and denied modify access to others' queries.
    If any of you have done this, is there a particular Authorisation object I should be looking to make the following restrictions:
    1. Allow users to save to a particular role.
    2. restrict modify access to be limited to the queries created by the user.
    Much appreciate any suggestions/ideas/thoughts.
    N

    Hi naveen!
            I think you can do this by seting the  Authorization object of the report owner to the follwing my give you this result RSZOWNER = "$USER" allows the user access to activities in all the components he is an owner of.
    you can have more help in help.sap.com in underthe follwing  structure
          BW 3.1 content
                      -> systemadministration tasks-> authorizations-> authorizations for working with business explorer-> and examples for reporting authorizations
    Message was edited by: ashwin gadi

  • Question around shared MIDDLEWARE_HOME

    Hi,
    Could anyone provide some thoughts on best practice in terms of using a shared Middleware Home across DEV,TST, PRD environments as well as for the deployment of multiple addons, e.g. SOA, OSB, BAM, etc.
    Question basically is would you go with a single shared (NFS) middleware home instance to deploy all the domains required across all these environments or would you split them.
    Also, I see recommendations to keep products in there own domain for the most part - i.e. SOA, OSB and BAM should all live in seperate domains? (At least in prod and test). I assume in DEV it would be acceptable to run them together.
    This blog post for example seems to recommend a 1:1:1 relationship between MIDDLEWARE_HOME:DOMAIN:PRODUCT. Is that best practice or would that be considered overkill?
    http://fusionsecurity.blogspot.com/2012/05/domain-architecture-and-middleware.html
    Thanks for any help in advance!!

    It may give you operational, release management and performance challenges
    1. Development install may go through patch update of WebLogic, JDK upgrade during the life cycle since the install is shared by all environments, there won't be a place to test it.
    2. Using NAS for any Java Application Server install and configuration gives performance bottleneck
    3. The NFS mount is not a stable one. For some reasons, if the NFS unmount, it gives outage for all the environments.
    The total size of WebLogic install comes anywhere between 1 and 1.3 GB including JDK. I would suggest to have separate install for all environments. Good luck.
    Lawrence Manickam
    http://toyork.blogspot.ca

  • MSDS Basic steps to create Material safety data sheet

    Dear Friends ,
    currently i am exploring how to create and Maintain MSDS in SAP
    what are the basic steps to do that , and where those MSDS is integrated to other module
    please give some overview , let me start from there
    Thanks & Regards
    Raj

    HI Raju,
    For Your question "the difference between Real substance and substance"?
    In EHS terminology we consider each material as a substance.
    In SAP EHS, Specification management is categorized into 5 types.
    Substance
    Agent
    Packaging
    Waste code
    Dangerous goods classification
    In substance (1 of the above 5), once again defined as different specification types like:
    Real Substance
    Listed Substance, etc.,
    Real Substance: A real substance is one that physically exists in a company
    For ex: If you take a pharmaceutical industry.
    For making the Anacin Tablet (Substance), We need substances like ASperine, caffeine, etc.,
    These 2 will be called as 2 real substances (physically existing in the company).
    These 2 real substances can be used in some other substance (Material) preparations.
    Listed Substance: substance whose properties are described in laws and scientific literature.
    listed substances are not manufactured, traded, or procured.
    For Second Question: what is Pharse ? and where it is used?
    Phrase is a Standardized text that can be used in EH&S reports like MSDS & Trem cards, etc.,
    *********************************XXX*************************************XXX*************************
    Now I come to your main question " Basic steps of MSDS Creation"
    MSDS is a form with data regarding the properties of a particular substance.
    We use SAP EH&S, "Product safety" module to maintain the MSDS.
    It is one of the legal requirement to maintain the Information about the chemicals, which are using in the industry.
    There is a standard format with 16 steps using globally For MSDS.
    1. Product and Supplier Identification.
    2. Composition
    3. Hazards Identification
    4. First Aid measures
    5. Fire fighting measures
    6. Accidental measures
    7. Handling storage
    8. Exposure controls
    9. Physical and chemical Properties
    10.Stability & Reactivity
    11.Toxicological Information
    12.Ecological Information
    13.Disposal consideration
    14.Transport Information
    15.Regulatory Information
    16.Other Information
    We need to maintain appropriate data in our database, to retrieve the report as mentioned above.
    Integration:
    Main integration with MM (material Management) Module, by assigning the material with substance.
    Second Integration with SD module, if customer requirement is to extract the MSDS for each delivery.
    (Not necessary for MSDS reporting)
    Regards,
    kamal

  • De-authorising software installs?

    does anybody know a way to de-authorize software installs? (not sure if that is the right wording of the question)
    basically, i've got logic express installed on my macbook, which i'm planning on selling. i talked to a apple rep via the online chat feature and they told me you get two installs. so, just incase i decide to sell the new one in a year, or buy an imac aswell, is there a way to 'get that install back' or de-authorize that computer?
    thanks alot
    ps not sure if this is the right place to post this, so please re direct to another area. thanks

    yes, i am planning on doing that. this guide is quite helpful:
    http://danbenjamin.com/articles/2008/11/how-to-prepare-a-mac-for-sale

  • Gaming 9 AC audio question

    Hi!
    I didn't understand the audio connections of this board...which is the connection to use the internal DAC?....the brochure said of a Dac at 120db but in windows there is only a simple Realtek device on Sound blaster software...Any help?
    Inviato dal mio iPhone utilizzando Tapatalk

    not quite understand your question, basically you could play around the sound using the soundblaster software directly which support the 2 different audio chip...
    the 120DB is supported by the Cmedia chip == quote from webiste "The heart of Xtreme Audio DAC is powered by a C-Media CM6631A High Definition Audio Processor. Offering ultra-realistic High Definition Audio Playback and Recording at 192 kHz / 32-bit up to 120dB SNR."
    ...  just try to plug your device in the Front panel Audio as Cmedia is the Audio chip that supports it...
    there is also Cmedia Audio controller that should be found in the Control panel

Maybe you are looking for