Authorization based on Item Name

I have a requirement to allow a user administrator to define which menu tabs & pages are available to each user group. So... I can't hard code the authorization scheme at design time for each item.
I've setup a form and table where the admin can link items to groups based on the item name. I can write a parameterized Authorization Scheme query to see if the item is available to the user's group - IF.. I can pass the item name as a variable.
How can I make the item name available to the Authorization Scheme as a variable in a parameterized query? Or, can you think of another way to meet the spec?
thanks,
Mark

I'm an eternal optimist (with a poor memory... ;o )
I wish there were more/better/documented hooks intoI agree but this specific case is not about documentation, the product currently just doesn't support what you are looking for.
The Apex team does seem to acknowledge that this would be a "desirable enhancement" as evidenced by Scott's comment in that thread
We do have plans to externalize authorization controls to facilitate this kind of thing, it's just a question of resources for us

Similar Messages

Authorization check based on item category on sales order (VA01 or VA02)

I want to be able to restrict authorization of users based on item category. We only want certain users to be able to select a certain item category. I know I'm going to have to check one of the userexits in MV45AFZZ. The issue I'm having is the authorization object .
The item category is field VBAP-PSTYV.
What we are going is having a item category for emergency orders. But this requires more manual steps to associate with the original order. We already have the emergency item categories defined and working (no credit check etc) so there's no reason not to have them added to the original order. The issue is its use has to be restricted so when the user selects an alternative item category it checks whether they have the authority.
Any help would be appreciated

Hi,
You can achieve this through authorization objects.
Transaction
SU20 - Authorization Fields
SU21 - Authorization Objects
Create the field PSTYV in the Authorization Fields.
Then Create the authorization object and include this field along with the standard field ACTVT (which determines what activities can be performed by a certain user i.e. Create, Change or Display) & user-name
In your your-exit, you can either use the ABAP command AUTHORITY-CHECK or the function-module AUTHORITY_CHECK and pass the values for these fields. The system can perform the test based on this values & based on the sy-subrc value you can restrict the users that are not having the authorization to select item-categories for emergency orders.
Following link should help you:
[SAP Authorization Concept|http://help.sap.com/saphelp_wp/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm]
Hope that helps you.
Regards,
Saurabh

Analysis Authorization based on Hier node with multiple display hierarchies

Hi guys - I've got a problem where s.o. might have an idea of how to switch on the light at the end of the tunnel, I am currently standing in:
Requirement:
Cost Center Authorization should be given through RSECADMIN, reporting should be possible for any hierarchy that exists for the authorization relevant info object.
Preferred solution:
The Cost Center Analysis Authorization should be given through RSECADMIN - Hierarchy node assignment.
u2022     A dedicated Authorization Cost Center Hierarchy will be maintained in ECC6 as an alternative cost center hierarchy and extracted into BW.
u2022     The RSECADMIN Hierarchy node assignment should be based on a particular node (Type 2).
u2022     The display level will be specified as required (here: Level 7)
u2022     The Authorization granted should be independent of hierarchy name and version (validity 3).
Reporting Scenario and technical impact:
As mentioned above, when designing and running a query the user should be able to freely select other (i.e. than the authorization) display hierarchies for the authorization relevant reporting object 'Cost Center' as well. The technical names of the semantically relevant hierarchy nodes could therefore vary. E.g. cost centers 1, 2 and 3, being assigned under hierarchy node u2018Au2019 of the RSECADMIN relevant authorization hierarchy, could be subsumed by hierarchy node u2018Bu2019 in another display hierarchy, which the user may want to display in accordance to his reporting needs. Ideally, the alternative display hierarchy should therefore display node u2018Bu2019.
My findings so far (based on prototyping) turn out that this is not possible as long u2018Bu2019 (and its hierarchy) is not authorized in RSECADMIN. Can these findings be confirmed? And if not, would anyone have an idea of how to facilitate the reporting scenario?
Would there be any other way to grant access, possibly based on RSECADMIN single values, and also enable the user to flexibly display hierarchies with only those hierarchy nodes whose single cost center values the user has been given access to?
Thanks everyone for your input...
Claus
Edited by: Claus64 on Jul 13, 2009 4:10 AM

HI CLause,
On Jul 14 2009, you wrote in SDN and said:
FYI: Found a solution...
The hierarchy analysis authorization will be based on a navigational attribute of cost center.
With analysis authorizations it is possible to declare the Auth object (e.g. 0COSTCENTER__RACCAUT0) as authorization relevant and leave the superior object 0COSTCENTER auth irrelevant.
The auth will be given for 0COSTCENTER__RACCAUT0. This object will be placed as a filter of the query, being restricted by an Authorization variable for hierarchy nodes.
Due to the concept of Analysis Authorizations, this variable will automatically pick up the nodes granted as part of RSECADMIN Hierarchy based Authorization.
As mentioned above, 0COSTCENTER as the regular reporting characteristic remains auth irrelevant and can therefore take any hierarchy thatu2019s available. Reporting on single values will be possible, too. Only those nodes show up that hold the authorized cost centers in accordance to the authorization.
If the auth relevant 0COSTCENTER__RACCAUT0 is not used in the query definition by either not taking it in as a filter or skipping the Auth variable, the query will launch the message that the authorization is missing. No data show up at all.
Claus
See this thread:
Analysis Authorization based on Hier node with multiple display hierarchies
I am also in the same situation as you and need to understadn your solution. I understand that you created a Nav Attr on 0COSTCENTER and made this auth relevant whilst ensuring that 0COSTCENTER is NOT auth relevant. This is all fine. The issue was you have multiple hierachies for 0COSTCENTER, how did the new Nav Attr help you solve your issue. When loading 0COSTCENTER what values did you load ino the new Nav Attribute and how did that link to the hierachies? Also, in RSECADMIN you created hiearchy nodes based on the Nav Attribute but I am confused as to what values you have in the Nav Attr.
I appreciate if you can share your solution from the past in more details.
many thanks

How to restrict authorization based on profit center in ke80 report

hi friends
we have a situation where we need to maintain the authorization based on profit center in ke80 report. The authorzation object K_PCA is not working. whenever we assign a particular profit center and then generate the profile, we still get the message no autjorization and when we check su53 it shows it needs '' asterisk. but we cant assign the asterisk as we have 5 subsidaries and there are using 5 different set of profit centers so assigning asterisk () would be comprimising on our security.
does anybody came across this situation and if yes how did they resolve this?
I need your suggestions on how to maintain this restriction.
Regards,
Imran

Hi Friends
The problem has beend solved. It turns out that this is a report writer issue. We raised the issue with SAP and they informed that 'For Report Painter/Writer every item is checked if you have the authori-zation or not. Only the items with authorization fullfilled will be displayed afterwards'.
Based on SAP answer we created different reports for each profit center/company code.
I would like to thank you all for your time and inputs.
Regards,

Duplicate Item Name

Hello all,
I have a widget in Captivate 5.0 that pulls in an image based on the name of the slide. The widget is named according to a convention i created. W_02_0004_02
This would signify (Module 02 - Slide 0004 - Image 02)
I had incorrectly labeled one of the widgets and need to change it back
I receive the following error: W_02_0004_02 is either a reserved keyword or is already assigned ot another item. Provide a different name for the item.
How do i delete the memorized name in Captivate so i can re-use this item name.
Deleting the "Adobe Cached Projects" folder did not help this issue
That item name does not exist in the Captivate Library
I have selected and deleted all unused items in Captivate also.
Thank you so much for your help,
~ Sean

UPDATE: It seems this issue of not being able recycle Item Names may be fixed in Captivate 5.5. I know it definitely existed in Captivate 5.0 but I just tested the use case in Cp 5.5 and found I could re-use the item name of a deleted object without triggering an error message. I only tested on buttons, captions, and highlight boxes. So there may be some scenarios where this still causes a conflct (e.g if the objects are referenced by Advanced Actions) but I haven't tested this.
Perhaps you could download the Cp 5.5 trial and check whether upgrading your projects (copies of your projects) would resolve the issue for you.

Can we change NAME OF TAB and ITEM NAME dynamically at runtime in forms 6i

Hi all,
I have a requirement like
1) based on organization choosen the TAB NAME AND TAB LABLE name in tab canvas should be changed dynamically. can this happen?
example: In forms i gave the NAME and LABLE OF TAB (PROPERTY PALLET) as *'TAB_INITIAL'* and *'TAB_INITIAL'* respectively .
when org_1 is choosen , lable should be changed to 'TAB_ORG_1' .
when org_2 is choosen , lable should be changed to 'TAB_ORG_2'. can the NAME also be changed dynamically??
2)Similarly can we change the ITEM NAMES present on this tab based on organization selection?
Thanks,
Durga Srinivas

Hello.
You can perform this by using:
set_tab_page_property('Tab_page_name', label,'your_desire_label');
and for item set_item_property.
More details on these built-ins and also some example can be found in Forms Builder Help.
Regards,
Alex
If someone's answer is helpful or correct please mark it accordingly.

Select Item Name

Hi :
I have a sql report in apex where the report is in page 15 but also there are multiple reports in other pages from page 10 to page 15 but the item is located in page10 as i select the item in page10 all the reports must redirects to it based on the item selected
item name in page 10 is p10_projects
plsql query is like this
declare
i number:=1;
q varchar2(32676);
BEGIN
q := '
SELECT pro.project_name
FROM projects pro ';
IF :P10_PROJECTS = 'ALL' THEN
q := q||' AND pro.id = :P10_PROJECTSS ';
END IF;
IF :P10_PROJECTSS <> 0 THEN
q := q||' AND pro.id = :P10_PROJECTS ';
END IF;
Return q
End;
now whts my requirement is like i also have a another item in page 15 called :p15_projects here in the report there must be a option like even if i select the item in page 15 the report must redirect to that base on this selection also
please suggest me how to include this condition in the above query
thanks
sudhir

You know this makes little sense, right?
Ad-hoc reporting should be done at worst via Discoverer or a data warehouse solution, where the irrelevant fields can be hidden, foreign keys can bring code descriptions and everything can have nice names. More properly, it should be submitted to IT and they should determine how to produce the output the business requires. Letting users run queries directly against the database tables is almost always a bad idea. How does the user know if they want XPLV_BTCH_ID or not? They want to know details of sales made in a given period or how many widgets are in stock.That's what an IT department is for.

Hot to get ITEM NAME

Hello,
is it possible to use *#CURRENT_ITEM_NAME#* in a function parameter?
I want a function based validation and create a function. Then I created a element validation in my page with the PL/SQL-Expression Type and insert this code to start the function.
rpf.vornamecheck(:#CURRENT_ITEM_NAME#)= 1
In this point I dont want to insert the name of the Item manualy, because if I change the item name i also have to change it in the parameter of this validation.
I test it a lot of times, but it doesn't work. Is there a other way to get the Name of an item (NOT LABEL)??

I understand completely what you mean and I agree that it would be very good to have more ways to indirectly reference things to avoid
hard coding page numbers and column_names. I am a newbie also and did not know javascript but I quickly discovered that it was easier to deal with javascript than to try to do things via plsql because javascript is easily available in the running page whereas to call plsql you have
to know a lot more about the page load and page submit and partial page refresh and ajax and so forth. I simply do not know myself if there is a way that a change or blur can trigger a plsql check of that which changed. Maybe so using html_db? There's a big gap in my brain regarding that. I have made a personal choice to just go with javascript and not have to tackle the other ways of doing this because they
are actually harder to understand than I am finding it to learn javascript.
This is the two part javascript way. In this example we call a very simple javascript function timehourCheck which is defined in the
javascript section of the page (other locations are possible). If it doesn't like the hour it actually nukes the item value. Note passing this the event object to the function. Some things 'this' has are this.id (the id which is what you asked about) and this.value the value.
so a question would be is there an equivalent plsql based way of creating the kind of information passing that is obtained via the
this event object in javascript?
html form element attributes
for the page item to be checked:
onBlur="timehourCheck(this);"
javascript part of page contains this:
function timehourCheck(thisobj) {
var mytext = thisobj.value;
if (mytext.length == 0)
    {return;}
if (mytext * 1 > 12)
   {alert('ERROR time hour ' + mytext + ' is > 12');
   thisobj.value = '';
if (mytext * 1 < 0)
   {alert('ERROR time hour ' + mytext + ' is < 0');
   thisobj.value = '';
} // end timehourCheck

How to get item names as column headings???

Hi,
I've given all the items in my complex folder nice user-friendly names, which can be seen in Desktop and Plus, but when I pull them into a worksheet the column headings revert to the underlying column name. Also, in Plus the list of selected items shows this underlying column name while the list of items in the folder shows the user-friendly names! This is really confusing for users.
Is there a way to get Disco to use the item names? Or do I have to go back to the underlying tables and views and recreate them with my user-friendly names?
Thanks

In Administrator when I look at the item properties, it shows my user-friendly item Name as the item Heading as well, but when I go into Desktop and pull the items into a worksheet, the worksheet column headings SOMETIMES default to the item Identifiers (or the underlying table/view column name in the item Formula), NOT the item Headings.
Here's an example - I have 3 numerical items:
1. Name and Heading are both "IP EL Spells", Identifier is "MONTHLY_ACT_EL", Formula is ""V pbc running totals 0406".Monthly act el"
2. Name and Heading are both "IP EL Spells YTD", Identifier is "RUNNING_ACT_EL", Formula is ""V pbc running totals 0406".Running act el
3. Name and Heading are both "IP EL Spells Prev YTD", Identifier is "PREV_ACT_EL", Formula is ""V pbc running totals 0406".Prev act el"
When I pull these into a crosstab in Desktop to sum them, the column headers are:
1. IP EL Spells SUM
2. Running act el SUM 1
3. Prev Act El SUM
The first heading is correct, the second seems to be based on the Formula or Identifier but I don't know where the "1" comes from or why "act el" are in lower case, and the third also seems to be based on the Formula or Identifier, but in mixed case.
I'm baffled!

When I try to use autofil to enter my name address ect it requires me to click on each item , name, email ect how do I get it to use the whole profile

when I right click on autofil a widow comes up with my profiles, I see no way to simply choose one and have all the info filled in. I have to click each item, name , address ect to have it show on whatever form I am trying to fill

You can try one of the form fill extension:
*Autofill Forms: https://addons.mozilla.org/firefox/addon/4775
*Autofill: https://addons.mozilla.org/firefox/addon/262804/
*fireform: https://addons.mozilla.org/firefox/addon/3193
*Formito ( Form Filler ): https://addons.mozilla.org/firefox/addon/formito-form-filler/

Report for vendor list based on items

Hi Experts,
                report format:
ITEM NAME     ITEM TYPE    VENDOR NAME   VENDOR TYPE
computer           domestic        abc computers     manufacturer
computer           domestic        gef computers      dealer
computer           domestic        jkl computers       trader
sofa                   import            abc lifestyles       manufacturer
chair                 domestic         xyz pvt ltd           dealer
how many vendors are supplying that particular item? item type ? vendor type?
Help in this query.
Thanks & Regards,
Saikrishna.

Hi Raviraj,
              Thanks. i just altered this query by giving condition.
SELECT T1.[Dscription] as 'Item Name', T3.[ItmsGrpNam] as 'ItemType', T4.[CardName] as 'Vendor Name', T5.[GroupName] as 'Vendor Type' FROM OPCH T0 INNER JOIN PCH1 T1 ON T0.DocEntry = T1.DocEntry INNER JOIN OITM T2 ON T1.ItemCode = T2.ItemCode INNER JOIN OITB T3 ON T2.ItmsGrpCod = T3.ItmsGrpCod INNER JOIN OCRD T4 ON T0.CardCode = T4.CardCode INNER JOIN OCRG T5 ON T4.GroupCode = T5.GroupCode WHERE T1.[Dscription] between [%1] and [%2] GROUP BY T4.[CardName], T1.[Dscription], T3.[ItmsGrpNam], T5.[GroupName]
Thanks & Regards,
Saikrishna.

Changes to OITM Item Name replicate to RDR1 Dscription on open order lines

Hi
A quick question, does anyone know if it is practical to have changes to an item's Item Name field replicated to sales orders RDR1 Dscription field on orders which have open lines for that item?
Scenario we face is when an item is made 'obsolete' standard practice is to mark it inactive and edit the OITM Item Name field to contain 'Obsolete'.
We may have sales orders with lines open for this obsolete part which we need to be automatically updated if the original data changes.
Thanks in advance for advice or guidance.

Hi Marli,
Try this:
IF $[RDR1.U_Label] = '2'
SELECT Case T0.U_UPCChoice
When 1 THEN T1.U_UPCRetail
WHEN 2 THEN T1.U_UPCLoc
WHEN 3 THEN T1.U_UPCItem
WHEN 4 THEN 'Look at Attachment'
END
FROM dbo.OCRD T0, dbo.OITM T1
WHERE T0.CardCode = $[$4.0.0] AND T1.ItemCode = $[$38.1.0]
Thanks,
Gordon

Oracle SQL Developer error - "The file-based source procedure Name is not present in the database."

I recently started working on the Oracle SQL developer. I have 'select' privileges on the QA schema and when tried to execute proc in QA. It is giving the error as 'The file-based source <procedure Name> is not present in the database. Was it compiled?'
instead 'you do not have sufficient privileges to execute this procedure'. Did research on internet but with no luck.What configuration changes needed to be done to make it work.Guide me.

Sounds like you do not have the correct privileges. What should have been granted to you by the QA user, or some other user with appropriate privileges, is...
grant EXECUTE on "QA"."<PROCEDURE_OF_INTEREST>" to "<YOUR_USERID>" ;
Note that a grant of execute on a procedure has nothing to do with grants of select on some or all of QA's tables and views.
So, as Vadim suggests, from your connection node in SQL Developer's Connections view, if you expand the Other Users node, then expand QA and look in the Procedures node, do you see the procedure of interest? If not, you cannot expect to be able to execute it from your userid's connection. And even if you do see it, you may have some other privilege that permits viewing but not executing, like...
The role SELECT_CATALOG_ROLE
The system privilege SELECT ANY DICTIONARY
And even if you do not see it there, then having certain other privileges granted to you could permit executing it in general, like...
The role EXECUTE_CATALOG_ROLE
The system privilege EXECUTE ANY PROCEDURE
Also, note that the 3.0 release is a bit dated nowadays. Upgrading to 4.0.3 production or even the 4.1 EA2 (early adopter) release will, in general, give you a better experience.
Best wishes,
Gary

How to change background color of text in pdf based by font name

Hi
How to change the background color of text in PDF based by font name. Is there any option in Javascript. e.g: If PDF containing ARIAL font, the ARIAL text background color needs to be changed in red color for all pages. Same for all fonts with different different color in the PDF.
Thanks in Advance

Hi
1) Is there any possibilities to highlight with different color based on font using javascript
2) list of font used in PDF using javascript
3) How to hilight the text using javascript
Thanks in Advance

Item '(item name)' could not be moved message

I get the message "The item '(item name)' could not be moved because '(folder)' cannot be modified." when trying to copy files from my iBook to my iMac over the network. This includes Home, Desktop, and other folders. The odd thing is this has worked fine in the past. I checked and File Sharing is enabled on both computers.
However, I can copy files to/from my iBook when on my iMac with no problems.

On the iMac, select the folder you're trying to move the items to and choose Get Info from the File menu. Under Ownership & Permissions, verify that your account has Read & Write access to them, and that they are unlocked. Repeat this process with each folder.
(11725)

Authorization based on Item Name

Similar Messages

Maybe you are looking for