Authorisations maintained in custom tables

Hello Everbody,
I just have a small question regarding AC.
For some workflows, authorisations are maintained in custom tables in our system. E.g. a workflow process for asset approval where a certain user can only approve the asset if it is below a certain limit... This limit is maintained in a simple table...
Can AC also handle scenarios like that and check with RAR for "SoD" or "sensitive access"?
Thanks
Andreas

Hello Andreas,
Exploring the feature of Supplementary Rules in RAR should help you in this scenario. You can maintain reference for a table where you have this limit is maintained.
Regards, Varun

Similar Messages

How to create cutom authorisation group for custom table?

Hi,
I created once custom table.
i want to allow only some users to create entries.
how can i achieve this?
if with creation of z authorisation group tell me procedure
thanks in advance.

Hi,
   See to this link it may help you.
   How to create Authorization group
   Custom Authorization Objects

Custom transaction has to be created to maintain the custom table

My requirement is like this:
We have received the request to create a special transaction to maintain directly the table ZZRPPT_SUBCONPRI (Subcontracting price table).
Currently the table is accessed through transcation code SM30. Access to this t/code is limited due to the security reasons.
So new transaction has to be created to maintain this table.
Could you please suggest in this?
US

Hi Srinivas,
You can create a program and in that you can call the table with the specificied restrictions.
Maintain the transaction code for that program.
Assigning the table
z_view = 'ZZRPPT_SUBCONPRI '.
For the restriction
REFRESH z_funct.
CLEAR z_funct.
z_funct-function = 'ATAB'.
APPEND z_funct.
Lock the table
CALL FUNCTION 'VIEW_ENQUEUE'
EXPORTING
    action    = 'E' "E for Lock
    view_name = z_view.
Call SM30 transaction for 'ZZRPPT_SUBCONPRI'
CALL FUNCTION 'VIEW_MAINTENANCE_CALL'
EXPORTING
    action                       = z_action
    view_name                    = z_view
TABLES
    excl_cua_funct               = z_funct
EXCEPTIONS
    client_reference             = 1
    foreign_lock                 = 2
    invalid_action               = 3
    no_clientindependent_auth    = 4
    no_database_function         = 5
    no_editor_function           = 6
    no_show_auth                 = 7
    no_tvdir_entry               = 8
    no_upd_auth                  = 9
    only_show_allowed            = 10
    system_failure               = 11
    unknown_field_in_dba_sellist = 12
    view_not_found               = 13
    maintenance_prohibited       = 14
    OTHERS                       = 15.
Definately the above solution will work out, because i had implemented for many of my customized tables.
Reward points if helpful.
Kannu.

SM30 - Maintain a custom table

I created a z table and I need to maintain it in SM30. I have never done this but the consultant said that I should only have to create the table. When he goes to SM30 to maintain it he gets the following:
"The maintenance dialog for ZPP_RTG_DATA is incomplete or not defined
Message no. SV037
Diagnosis
The called function with the view/table ZPP_RTG_DATA needs a special
    maintenance dialog which, however, either does not exist at all, or does
    not exist completely.
System response
The called function cannot be performed.
Procedure
Generate the required maintenance dialog."
What do I need to do so this consultant can earn his pay?
Davis

Create maintainnce dialoge for that first.
STEPS:
1. go to SE11 and key in your table name - ZPP_RTG_DATA.
2. click on change.
3. Go to UTILITIES->Table Maintainnce Generaror
4. Select an Authorisation GRP. If nyou don;t know key in '&NC&'.
5. Key in Function Module name. Recommended Same as table name - ZPP_RTG_DATA.
6. Select One Step.
7. Key in Screen number. Example 1
8. And click on CREATE.
Go to SM30 and the Maintainince dialogue should be there and you should be ablle to maintain the table from there.
cheers
Amandeep

Table Maintenance: Manual Transport for Entries in Customizing Table

Dear forum,
i'm facing a tricky problem at the moment. My customer wants the maintain a customizing table, but he does not want to transport the entries automatically (don't ask me for the reason), but manually.
The online help tells me, that this can be done.
In the SE11 i chose untilities -> table maintenance generator and for the subscreen "dialog data transport details" i chose "no or user, recording routine".
Continuing wiht the SE11 i chose untilities -> table maintenance generator -> environment -> maintenance objects -> transport "manual transport".
In the SE54 i created the events 10, 11 and 12 with the recommended coding from the online help.
But when i start the Maintenance via SM30 the points in the menue table view -> transport or edit -> transport are not active.
The function group does not include any generated statuses to activate the menue-points. What is missing toi get the popup, that asks me for the transport number?
Can somebody help me out or tried this before?
With kindly Regards,
Robert

wrong!
the online documentation says:
Manual transport
The object maintenance transaction offers a manual link to transports. You can branch to it by selecting the Transport menu option. In the transport session, you can then select objects to place them in a Change request. A special transport program may be available instead of the menu option Transport, to place the object in a change request. The setting Manual transport means that changes to the object are not automatically recorded. If the maintenance transaction offers an automatic transport link, in addition to the manual one, you should select the setting Automatic transport.
What has to be done to realise it except creating the events?

Custom Table --Points will be given to your suggestion

Hi Folks,
This is a requirment that I have. Any suggestion on where to begin and where to head?
Create an application that will be used to maintain the custom table. Read only access of this table to certain user.
The custom table maintenance application should allow a user to copy an existing record on the custom table and use this as the basis to create a new record.
Maintenance application should not allow any records to be deleted. Instead, use a flag to indicate whether that record is active or inactive. When adding an asset, the system needs to check the flag on the corresponding record on the custom table to verify it is an active record.
Maintenance application must verify that any information entered in the new custom table is valid. The following fields must be validated:
Company Code
Asset Class
evaluation group
All Depreciation Keys & Lives
When creating an asset, the input screen requires asset class and company code be entered.   The user should not be allowed to go to the next screen until the combination of asset class and company code has been validated against the custom cross-reference table.
When entering the asset class, the lookup should show only the valid asset classes for the entered company code, assuming the company code has been provided by the user.When adding a new record to the custom cross-reference table, the status flag should be defaulted to active.
My thinking is I will create a Z table and have the ABAP team create a custom
T-code that will maintain this table and give the access to the user specified by the business. What user exit, if any would you think that needs to be maintained in the table for populating certain asset class/evaluation group relevant to the company code or vise versa ? My main question is about how do I maintain the table.
Thanks in Advance for any info you provide and everyone will get points for the relevant info that they provide.
Rob

Thanks both of you. As a functional guy, I guess I should only mention what tables and fields will be affected for the creation of the new custom table. And do I need to mention anything about the maintenance application or ABAPers will be well aware what they have to do to create the maintenance application?
My thinking is I will tell the ABAPers to create the maintenance application (isn't this a custom T-Code ? ) And once they create this custom T-code, I will tell them that it will be used against the custom table to verify the validity of the data in that custom table. Also, 2 sets of role are to be defined and these are to be linked to this custom T-code (probably the role of security). one of the roles maintains the data in the custom table through copying and creating the asset master record from the custom table and the other role has the read only access.
Also, for example if asset class = 0001 and company code = 0001, my requirement is to make sure that only evaluation group 2 that is valid for the combination of asset class 0001 and company code = 0001 be populated, when a user presses F4 and tries to choose one set of evaluation group 2. Does this make sense? Well, do we need user exit for this? My thinking is because evaluation group is not the function of asset class and company code. so, if someone has to select the evaluation group, they will be shown the list of evaluation group that have been defined in config (as I understand, evaluation groups are not assigned to company code/asset class directly in the config, just like business area is not assigned to company code directly). Any suggestions? let me give you the requirement once again and may be you can figure out a little bit better.
<b><b>Provide a method to maintain a cross-reference table of valid codes as provided by the business. Depreciation keys and lives will be determined based on a combination of company code, asset class, and equipment type.
Create an application that will be used to maintain the custom table. The table will be updated by the Centralized Fixed Assets role that will reside in Corporate Accounting. The Fixed Assets Business role will need read-only access to the table.
The custom table maintenance application should allow a user with the Centralized Fixed Assets role to copy an existing record on the custom table and use this as the basis to create a new record.
Maintenance application should not allow any records to be deleted. Instead, use a flag to indicate whether that record is active or inactive. When adding an asset, the system needs to check the flag on the corresponding record on the custom table to verify it is an active record.
Maintenance application must verify that any information entered in the new custom table is valid. The following fields must be validated:
Company Code
Asset Class
Equipment Type
All Depreciation Keys & Lives
GL Account (If it is determined that this will reside on the custom table)
If any of the fields are not valid, as determined by the validation above, return a message stating information is not valid.
When creating an asset, the input screen requires asset class and company code be entered.   The user should not be allowed to go to the next screen until the combination of asset class and company code has been validated against the custom cross-reference table.
When entering the asset class, the lookup should show only the valid asset classes for the entered company code, assuming the company code has been provided by the user.
When selecting the equipment type, only display valid equipment types for the company code and asset class that were previously selected.
When a depreciation key is assigned to an asset, verify that it is a current valid depreciation key by checking the effective dates of that depreciation key prior to assigning to an asset.
Exception to standard field value assignments:
In addition to company code, asset class, and equipment type, when Asset_Class = RT_CC and Equip_Type = 0201, then the salvage value will be $2500.
Exception to standard field value assignments:
In addition to company code, asset class, and equipment type, when Asset_Class = RT_CC and Equip_Type = 0205, then the depreciation keys for area 10 is ZDYC and area 11 is ZNYC.</b>
Thanks again for your time to look at my issue, and I really appreciate your suggestions.
Rob

How to maintain the sequence in the custom table

Hi,
We have custom table where we will store the standard text name based on different flags and it will be fetched the value according to the condition.
Example code
SELECT SINGLE field1
                  field2
             INTO ( vaiable1 variable2 )
             FROM custom table
            WHERE tdobject = iv_signature
              AND bukrs    = vbdkr-bukrs
              AND vkorg    = iv_vkorg
              AND vkbur    = iv_vkbur
              AND lland    = vbdkr-land1
              AND fkart    = vbdkr-fkart
              AND kschl    = iv_kschl.
CHECK sy-subrc <> 0.
SELECT SINGLE field1
                  field2
             INTO ( vaiable1 variable2 )
             FROM custom table
            WHERE tdobject = iv_signature
              AND vkorg    = iv_vkorg
              AND vkbur    = space
              AND fkart    = vbdkr-fkart
              AND kschl    = iv_kschl.
CHECK sy-subrc <> 0.
SELECT SINGLE field1
                  field2
             INTO ( vaiable1 variable2 )
             FROM custom table
            WHERE tdobject = iv_signature
              AND vkorg    = iv_vkorg
              AND vkbur    = space
              AND fkart    = vbdkr-fkart
              AND kschl    = space.
The solution I created to avoid the select is, i have created the FM with all parameter. Addition to the FM, I have created a Table as well to maintain the flag.
New table
TDOBJECT   TDID BUKRS VKORG VKBUR KUNNR      MWSKZ AUART VGBEL_AUART KTGRM LLAND FKART WERKS KSCHL STNAME
FOOTER                                                                           X     X           ZNET_DICI_FTR_FI
FOOTER                                                                           X     X           ZNET_DICI_FTR_NL
FOOTER                X     X                                                    X
i.e. say example if we maintain the value in the custom table based on the first select query. Then we need to maintain the flag in the table which was created newly.
Note In the both field the key fields are same.
The problem now is we have plenty of select query for different condition, i though of maintain the sequences of the entries. But my worry is how many sequence number will be maintained and in what bases it will be maintained.
Could you please help me to resolve this problem?
Regards,
Vijay

Hi,
I got your requirement as,
whenever a new entry is made in the table, one sequence has to be maintained somethign like serial number and everytime it has to be incremented. If it is so, then you can go for an additional field as serial number. Then get the max serial number from the following select query:
select max(serial) from cust_table
into v_serial.
Now, when you make a new entry, just give (v_serial + 1) to serial number...
Please let me know if i understood wrongly... or what you want...

Custom table can be displayed and not maintainable using SE16n.

Hi Gurus,
I have created a custom table with DATA BROWSER/TABLE VIEW MAINT. equal to 'N' (Display/Maintainance not allowed) in SAP ECC 6. The the requirment is, this custom table can be displayed using the transaction SE16n.
This requirement is existing in ECC 5. with same setting DATA BROWSER/TABLE VIEW MAINT. equal to 'N' (Display/Maintainance not allowed) and this table can be viewed using transaction SE16n.
would there be possible that this requirement be implemented in SAP ECC6? would this be due to the version?
Please help.
Thank you..
Regards,
SAI

Hi Kiran,
Thanks for your answer but unfortunately this is not what I'm looking for. Iam also familiar with &SAP_EDIT.
Well, my problem is, the custom table setting Data browser/Table view Maint. is set to "N Display / Maintainance not Allowed" ( under Delivery and Maintainance Tab). Also there is no table maintainance generator setup.
So basically with this setting, in transaction SE11 'Contents' is disabled. And with transaction SE16n, when you execute and tried to view the table, error "You cannot display zcustom_table with standard tool". (checkboxs are hidden)
What the requirement is looking, the custom table can be viewed (this is with the same setting above but can be viewed using SE16n and the checkbox maintain entries is automatically tick but when executed "auth failed" so, basically to view the entries, untick the checkbox then entries can now be viewed.)

Creating 2 table maintainance views for one custom table

Hello All,
I want to create 2 table maintainace views for one custom table.
I know how to create table maintainace but I want to know whether we can create only one maintainance view or we cal also create 2 maintainace views for a single custom table.
Regards
Mahesh

Hello,
You can create as many maintenance views one one table as you want.
Kind regards,
Bart

Custom table entries transportable / maintainable in production environment

Hi,
I have a custom table with table maintenance generator (automatic transport of table entries). I would also like to maintain the table entires in the production environment (i.e. using SM30 transaction, rather than transporting the entries from Quality). I hope there is a cofiguration to do this.
Could any one help me on this.
Thanks in advance.

Adding to what others have suggested, it is not advisable to give SM30 access to your users. Its better to create a parameter transaction for the maintainance dialog and give the user access to that transaction. Other way of restricting the access is using authorization group selection while creation of maintainance dialog (&NC& will give access to every one). Check the below link to see how to create a parameter transaction for sm30.
[Parameter transaction for sm30|http://www.divulgesap.com/blog.php?p=MTg=]
Cheers,
Ravikiran

How to maintain default values for custom table fields -- Urgent

Hi all,
I've a requirement wherein i need to create a Z table (with maintainence view) in which i'll have date and time as two of its field which should have current date and current time as default value. Can somebody suggest as how am i to maintain the date and time fields defaulting to current date and current time.
Incase if someone is unable to intrepret what i'm trying to say, please query me, i'll elaborate it further.
Please give in your quick inputs which is highly valuable to me and also will be highly appreciated.
Thanks in advance,
Vaishnavi Varadarajan

We have a following custom table which contains the fields Date on which record was created and Name of the person who created the object. We would like to have these to be filled up with SY-DATUM and SY-UNAME respectively.
Using the events, we can achieve this.
Please refer the following link:
http://abapliveinfo.blogspot.com/2007/12/events-in-table-maintenance-in-sap.html
Also,
Write a form routine in table maintanance generator.
1. SE11 > utilities > table maintenance generator
2. environment > modification > event
define the event and form routine to make use of the tigger. in the form routine define an object for the class and call the relevant method.
Or u can do it as:
Table maintenance generator is basically used to do table operations like (insert, delete, modify...).
if you create table maintenance for your table it will build a module pool program, by using you do the above operations.
below is the procedure to create table maintenance generator.
1) Create one function group.
2) after activating your Ztable, choose 'Utilities'----> 'Table maintenance genrator'.
3) then give the authorization group and function group created abobe in the next screen.
4) Then choose the "create" button in your application tool bar, which will creates the module pool program.
5) then create one Tcode by chosing "Transaction with parameters( parameter transaction)".
6) in transaction field give "SM30", select the check box "Skip initial screen".
7) in the below of that screen you can find the "Default values" frame.
8) there under the "name of screen field" select the "View name' and 'update".
9) in value column against to "view name" give you table name, and against to "Update" put 'X' in capital letters.
save it then you can straight away use this newly created Tcode to maintain your table.
Note:- 1) make the modification while saving the data into your table using this newly generated program to carry out your validation (even though it looks like standard program; no need to enter the access key).
2) if you do any changes to your table and press the activate button automatically the table maintenace generator will be goes off, you need to create this again.
cheers,

Custom Table & User authorisations

Hi,
We've just made a transaction, pointing to a view of a custom table.
We would like to "grey" out all of the columns, except one, to limit the modifications. Is it possible with user authorisations ?
Regards,

Please go through the link below:
https://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=93454609
It helps you to identify the steps along with the screenshots which you need to follow.
In short you can do it by on the table maintenance screen by following this path:
Environment -> Modification -> Maintenance Screens
and then goto the element list tab and uncheck input checkbox for the fields which you want.
Regards,
Raman.

Customized table could not maintain in PRD

Hi all,
I have created a table ZTABCUST with table maintenance as below.
Delivery Class : C (Customizing table, maintenance only by cust., not SAP import)
Data Browser/Table View Maint. : X Display/Maintenance Allowed
Table Maintenance Dialog
Authorization Group : &NC& (w/o auth. group)
Authorization object : S_TABU_DIS
Function Group : ZGAA004
Package : ZSD
Maintenance type : one step
Maint.Sceen No : Overview screen : 1
Dialog Data transport Details
Recording routine : Standard recording routine
Compare Flag : Automatically Adjustable
I have transported this into Production.
But when i try to update my customized table in PRD using SM30/SM31, the system show message
"Client 300 has status 'not modifiable' ".
and I couldnt update my customized table.
How and what should I do in order to make my customized table to be modifiable in Production?
I need this to be solved urgently.Points rewarded.

Please do the following.
goto"Delivery and maintaince" tab. Then make the Data browser/Table view maint. as
X Display/ Maintenance allowed. then activate it . then create the table maintenance generator again..

Custom Table for Verifying Duplicate Invoice against Legacy Invoice Data

Hi All,
We are trying to upload legacy invoice data in a custom table. Then we want to use SAP duplicate invoice check functionality to look for the potential duplicate invoice from this custom table as well apart from the standard SAP tables.
If you know of some user exit or any function module which I can use to link this custom table with the standard SAP duplicate invoice check functionality then it would be of great help.
Regards,
Sanjay

Hi Jurgan!
Thanks for the reply,
We are using ECC6,
Support pack : SAPKH60013
Settings for Duplicate Invoice Check In Vendor Master is correct
Customization setting OMRDC transaction, tick mark for invoice reference no. only
If all the cited characteristics match, the system displays a
customizable message. M8462 (if logistics invoice documents are found) or M8108 (if accounting documents are found).
I have ensured that message M8108 (if accounting documents are found) is maintained as an error message in OMRM.
Still system is allowing duplicate invoices for the reference nos. 00082 and 00072.
For other reference Nos. which are previously used for other documents, system issues error message successfully.
I dont want to delete archived accounting doc. and if I maintaind BKPF entris of this archived doc manually it will create probelm in FI.
is this happen due to life span of secondory index of archived accounting doc. is completed ?.
Please Help
Many Thanks
Vikas

Maintenance View for custom table with foreign key relationship

Hi Folks,
I have created a custom table with foreign key relationship with other check tables. I want to create a maintenance view / tablemaintenance generator. What all things I need to take care for the foreign keys related fields while creating the maintenance view / tablemaintenance generator.
Regards,
santosh

Hi,
You do not have to do anything explicitely for the foreign key relationships in the table maintainance generator.
Create the table maintainance generator via SE11 and it will take care of all teh foreign key checks by itself.
Regards,
Ankur Parab

Authorisations maintained in custom tables

Similar Messages

Maybe you are looking for