Authorization Check in Project System-CJ30

Hi!
I have a requirement wherein in the transaction CJ30 where we enter the Project budget amount , when entered it should check against the user s authorized amount and allow to go further and save or give a message saying that the following person is not authorized to enter that amount for project budget. For example if I am authorised to enter project budget amounts <= 15000 dollars and if I enter 23000 dollars it should give me a message saying I am not authorised to enter that amount and the higher in line should be contacted . If I enter amounts below 15000 I shld be able to save it and proceed. I want this authorization at this level so that not any amount is enterd by anyone and missused so that it creates problem in budget forecasting and reviewing in future. I tried looking for BADIS and Exits for it but couldnt find any.
Is there a solution to this and if so can anyone help me with it as we shall be going live next month with thisproject.
Kindly help.
Aarav

Hi Sheel!
Thanks for your answer but where exactly do I use this statement "Authority check...."
I mean where and how do I use this statement so that I can validate the entry .
Thanks

Similar Messages

Authorization challenge in Project system

Hi,
We seek to solve an authorization challenge in Project system with use of the authorization object K_PCA together with the PS authorization objects C_PROJ_PRC and C_PRPS_PRC. Hence, the client seek an authorization solution for Report Painter/ writer reports using the standard Profit Centre hierarchy. Assistance in this matter is highly appreciated.
Thanks!
Kjell Aarhus

You can create checks on projects and WBS elements by company code/profit centre. We looked at all PS auth objects and nothing really fit the bill for us so In the end we activated some user exits associated with project systems and created a couple of new auth objects which were called in specific code placed in the user exits. When the exists are activated, they are checked whenever the specific project information is displayed. So long as your report writer reports use the PS logical database for reporting, you will call these exits.
In our example, we had logic that checked at a project definition level that checked the company code of the project definition, and at WBS element line item check - to extract profit centre and display/not display as appropriate. Of course you can make your logic work however you like when the exits are opened up.
You can find more information on them by going into the IMG; SPRO > Project System > Authorization Management > Enhancement Create Auth Check. The documenation is also quite good too.
Good luck hope it works out for you.
D

Authorization Checks of Project in Incident

Hello experts!
It is necessary to realize Authorization Check of the Project in SMIN incident. I want to use BADI CRM_ORDER_AUTH_CHECK. I find Authorization object S_PROJ_GEN. But I have questions.
How the project related with incident GUID or number ?
Whether it is possible to deduce the Field "Project" in assigment block "Details"? Field Project is in assigment block "Details" of Request for Change.

How to define relationship of incident with the project. What are there standard functional modules, Tables? Thanks!

PS Authorization Check (CJ20N)

Hi guys,
I am implementing 'authorization check' to projects and WBS elements. I found the enhancement CNEX0002 and everything worked fine for all PS transactions, except for CJ20N.
The implementation is to not allow changes for projects (and all it's WBS element) which I have no authorization. So we can see them (in gray color), but cannot change.
The problem is when we open a Project or WBS element at CJ20N. If I have no authorization to change them, the objects comes with no possibility for inputting data, but when we try to create an activity, it works and should not work.
I would appreciate some tips from people whom have done that.
Bests,

Hi Karla,
I have successfully implemented that. Here you need to do the similar authorization checks in includes EXIT_SAPLCNAU_003 and EXIT_SAPLCNAU_004 for Network Header and Network activity authorization.
Then it will work fine.
Regards
Priyank

Problem with Project Systems authorizations

Hi All,
We are implementing project systems module and are facing several authorization issues. The SAP default values do not seem to work and there are several objects which showup as "not checked" in SU24 showup in the SU53. e.g. tcodes are CJ20n, CJI3. Are there any steps for activation / pre-requisites, etc?
Thanks for your inputs
Vijaya

Hi
There are chances that some of the transactions codes will call other tcodes while execution.
in this case also CJ20N is calling many tcodes, those auth check would not be inserted as check points in SU24 , hence you should identify them in the testing phase or using the TCDCOUPLES table.
You can check the calling & called transaction values in the table TCDCOUPLES in SE16, according to that you can build your SAP roles.

Capacity check problem in Project system

hi,
i have some questions for the Capacity check problems in Project System.
1. if one Person is assigned to diffierent Work Centers, for example, person A is assigned to Work Center 01 under Plant 01, and Work Center 02 under Plant 02, how can i do the Capacity check?
if i want to use A of Work Center 01 in the Project, the System will only check the Capacity of 01, or both of 01 and 02?
2. What is the Pooled Capacity?
Rgds,
Liang

hi,
1.Capacity check takes place at plant level itself..
2.Pooled capacity:- This is created separately in [u wil find in PP] and this capacity can be used by different work centers.
regards
pushpa

Project System - Project execution ;Mandatory setting CJ30 & CJ32

Hi,
Pl help & guide how to put mandatory settings for PS -Capital Project execution with CJ30 (Budget assignment) & CJ32 (Budget Release), at present in our Project Systems mapped without CJ30 & CJ32, bcos if the Project & Network are released, the project is executed without any problem. But i would like to have a solution or a guidance from u that to restrict the project execution without CJ30 & CJ32
Thanks & regards
Srihari Ediga

no one responded

Authorization issue in BI system.

Hi,
Having a authorization issue in BI system.
user trying to run a query in and attempt to drill down by customer, he gets customer details but some of the customers are missing...
Does the authorization granted in BI system based on customers? Is it a security issue?
pls help...
Thanks...

Hi,
Please execute the query with your id(developer id who will be having access to all data) first. Check if you are able to see all the customer data. If you are able to see all the data then the user is restricted with some authorizations. ( usually the authorizations are done on sales organization, company codes, plant..etc.. please check how it is in your project...)
If you are not able to see all the customer data, then check in the infoprovider on which the query is built and do your analysis.
Check in the roles assigned to the user.
Hope it helps.
Edited by: Maddy on Apr 21, 2011 6:42 AM

Error for customer specific Authorization check (User Exit)

Dear Experts,
I am facing a problem in PM.
I have created a maintenace plan for calibration via t code IP42 and mentioned the order type PM05. Scheduling is done for the order. I got the order number.
I have released the order and got the inspection lot number.
While entering the results recording through t code QE17, the reluts are out of the specified range, i have given the valuation Rejected, immediately system is giving an error message as below:
"Error for customer specific Authorization check (User Exit)"
Though there is no user exit activated in the system, this message is coming and not allowing the result recoring for rejection.
If I'm entering the result recording within the specified range, then valuation is Accepted and its allowing to save.
I have checked the following user exits:
QQMA0002: QM: Authorization Check for Entry into Notif. Transaction
QQMA0026: PM/SM: Auth. check when accessing notification transaction.
The above 2 User Exits are not active.
I have also checked a note 429066. But it says incase of any dump for that user exit only its applicable and more over the current version of the system is ECC 6.0 packae 15, where as that note is applicable upto 4.6C.
Please some one help me on this issue.
Thanks and Regards,
Praveen.

Dear Pete,
I have cheked with my technical team, There is no hotpacks updated recently. This is the implementaion project I'm in, so performing the cycle for the first time.
Any how I got it solved, in T code QE17, after entering the Inspection lot in next screen goto menu path Settings - User settings - Defects recording mention the reprt type and tick on Reprt type Changable.
At the time of result recording if the valuation is Rejected then it ask for defects recording close that window if not rwequired then save, the error message no longer apperaing now.
Regards,
Praveen

PS reports authorization check

Hi guys,
I am experiencing an unexpected behavior in PS module.
I have two different project areas using PS WBS.
I am running some test due to a lack of security. I can control all access on WBS using ACL configuration but ACL cannot control PS reports access. So a PS area can see the budget of another area and this is the main issue.
So I suppose I could control all reports with C_PRPS_VNR authorization object in order to allow access using diferent roles with C_PRPS_VNR value according WBS.
I run a test with S_ALR_87013558 report and in the authorization trace I found the following:
10:27:27:305 AUTH    - - -   C_PRPS_VNR RC=12 PS_VERNR=01010101;PS_ACTVT=03;
10:27:27:305 AUTH    - - -   C_PRPS_VNR RC=12 PS_VERNR=01010101;PS_ACTVT=24;
10:27:27:305 AUTH    - - -   C_PRPS_VNR RC=12 PS_VERNR=01010101;PS_ACTVT=26;
10:27:27:305 AUTH    - - -   C_PRPS_VNR RC=12 PS_VERNR=01010101;PS_ACTVT=28;
Even with the RC=12 I can see all data!
I found the same symptom in a lot of S_ALR_* reports.
My question is: why the RC=12 donu2019t deny my access?
Best Regards,
LMG

Hi LMG,
1. I would suggest you to build a role with the reports you are trying to run with a test user and see if you get the same result.
2. I am guessing that you have another role which might be performing the same actions/activities or you have SAP ALL/SAP NEW
3. I found these definitions for you to understand what RC -12 could be.
4 User has no authorization in the SAP System for such an action. If necessary, change the user master record.
8 Too many parameters (fields, values). Maximum allowed is 10.
12 Specified object not maintained in the user master record.
16 No profile entered in the user master record.
24 The field names of the check call do not match those of an authorization. Either the authorization or the call is incorrect.
28 Incorrect structure for user master record.
32 Incorrect structure for user master record.
36 Incorrect structure for user master record.

How to create the Custom project System as Web Project

Hi,
I have created a custom project system using this walkthrough. But
this walk through is targeting Visual C# project system. I need to create the Custom project system as Web project and set the start up page as index.html file. How can I achieve this?
Note:
I have got the Custom project system sample from VS2013 SDK samples(https://mpfproj12.codeplex.com/).
But it demonstrate the Custom console applications only.
- Abbas K

Hi,
So you didn't even follow this walkthrough yet? If you did, how did you do it?
I failed to create such a web project system because I finally messed up my VS experimental instance. But it's possible to create a custom web project system, by following this walkthrough. Someone else has successfully made it, check this
link.
The difference is that you have to use web project type instead of the console application project type. You could copy a web project's .csproj file into the VSPackage project and rename it to xxx.myproj. There's an error in the walkthrough that the AssemblyInfo.cs
file should be put into Properties folder and set the "Build Action" property to Content, "Include in VSIX" to true.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

HR ABAP Custom Authorization Check

Hi all,
We know that Implicit authorization check is carried out. The system determines whether the user has the authorizations required for the organizational features of the employees selected with
GET PERNR.
I have a question, if we create a custom authorization then, whether this custom authorization is checked or not.
Thanks in Advance.

There is no difference in the coding of the check, which as RJ has stated needs to be somewhere at the correct coding location... otherwise it is going no where.
Some special differences are:
- The object class of the custom object in SU21 => Authorization objects in HR cannot be deactived context specifically in SU24. You can create custom objects within SAP classes.
- Depending on the transport type of your system, you will have to maintain transaction SU24 with a check indicator for the object - so make in known that the transaction has the capability to check the object. This does not affect "customer" systems, but is still a very good practice for the same reason that SAP forces it in their own development systems.
- Additional object checks in SE93 (which are typically "plausibility" checks) are not subject to this restraint. The check is always there, and your ability to bypass it is limited if you check the tcode authority of the caller at initialization of the (called) coding context. CALL TRANSACTION will skip this check, unless the called transaction is sy-tcode already (as it is in variant transactions... which urban legends claim to be secured to use for CALL TRANSACTION).
This concept is to a large extent influenced by SAP's own development guidelines and "settings" - but it is advisable to understand them and the intended authorization concept - to be able to create consistent customer implementations of SAP products.
Of course there are exceptions to the rules... but they generally cause problems and sooner or later need to be corrected as well when the auditors get hold of them....
Cheers,
Julius
Edited by: Julius Bussche on Apr 27, 2009 9:03 PM

Report Painter Drilldown on Cost Element for Project Systems

I am currently working on a report for Project Systems. I am trying to copy the functionality of the Internal Order summary (60I2-001) into report group 6P3. I was able to copy the whole layout and also the values of 6oI2-001 into a copy of 6PP4-001 but when I double click on "Balance" it is bringin up the ALV report that 6PP4-001 is using. I would like to call another report which looks like 6LS0-001 but contains Project System info made in report painter when I double click on Balance. Is this possible? Please let me know how.

Hi Avinash,
See my replies below.
1 a & B: You are planning Qty on NWA and capturing costs - labor & Equipment on NWA elements.
When you are having elaborated to NWA-Element level, split your total work on each NWA-element and post labor cost. Thus you will have planned Vs actual costs at one place.
coming to equipment cost - are you capturing using PO through GR?.
2.a : Option1- create a separate WBS elements for materials and plan cost at WBS level. That value would be your total planned cost of material procurement as estimated. Under this WBS elements create NWAs and assign the materials. With this set up you can assign material and procure so that will have actual costs coming from GR.
Option 2: Create a one General Cost activity and assign the total planned cost of material on this NWA.
When you assign the material components, diligently you have to reduce the equivalent amount from the general costs activity. Also note that on component screen, you have to check box "Cost relevant" so that material cost will add to Cost NWA. Let the different materials have their own valuation class and have default CEs accordingly. that would not be big issue.
Please discuss with your MM team to get more information. Also my suggestion is to leave blank CE field in configuration.
The option2 is very cumbersome and high risk but one have to be very cautious to reduce the value from Cost NWA in order to sustain the planned material costs whenever they added.
3. I have answered the relevance of Cost relevance check box in above.
Hope above makes sense.
Thanks,
Sudhakar

Technical spec for Project systems report

Hi all,
My requirement is to create technical spec's on this Project Systems monthly and yearly budget and actual tracking with drill down capability
And the char and KF are:-
Char
Project Definition
WBS Element
Cost Element
Vendor
Purchase Order No.
Purchase Order Item
Requester
Created On
PO Description
Final Delivery
KF
PO Value
Value - Quantity Delivered
Amount Invoiced
To be invoiced - Value
To be Delivered - Value
Can anyone help me that which standard query is suitable for this requirement.

Hi,
Check the below business content queries:
0PM_MC01_Q0001     Budget Comparison (Actual Costs)
0PM_MC01_Q0002     Budget Comparison (Planned Costs)
0PM_C06_Q0002       Budget Proposal (Periodic)
0PM_C06_Q0003       Budget Proposal (Objects)
Check this might be useful:
http://help.sap.com/saphelp_nw2004s/helpdata/en/e8/858f40f5767d17e10000000a1550b0/frameset.htm
Hope this helps.......
Rgs,
Ravikanth

CRM - Process Flow of Authorization Check in Business Transactions

Hello Folks:
I have implemented CRM security using Process Flow of Authorization Check in Business Transactions.
What I have in place:
CRM_ORD_OP (inactive, don't want access to own documents)
CRM_ORD_LP (inactive, not using standard org level values Distribution Channel, Sales Group, Sales Office, Sales Organization, and Service Organization.)
CRM_ACT (active)
CRM_CMP (active)
CRM_ORD_OE (active, restricted to display with dummy value ' ' for Distribution Channel
Sales Group, Sales Office, Sales Organization and Service Organization, as we are not restricting on them)
CRM_ORD_PR (active and restricted to display)
Issue:
Restrictions to display for documents works fine when using CRM backend system and the system throws out a message that you are not authorized to change. But, when i come in through Portals (PCUI), i dont get the display at all and it throws out a message insufficient access authorizations.
Traces on backend CRM reveal failing on change access for CRM_ORD_LP and CRM_ORD_PR, which we dont want to give out b/c we dont want to provide change for documents.
OSS notes to SAP have resulted in no results....please advise what is wrong here.
Thanks
KT

Thanks for the Priyanka for the reply, but what you mention is not correct.
BSP errors are different from what I am refering to.
The issue is still open...and looks like a SAP bug, which even they havent been able to fix so far.
Regards,
KT

Authorization Check in Project System-CJ30

Similar Messages

Maybe you are looking for