Authorization Check in Status Profile

Hello All,
I'm trying to restrict "Closed" User Status to some users in Service Ticket Transaction of IC Web Client.
Here are the steps that I followed.
1) Created a Authorization Key - "TEST"
2) Assigned the "Authorization Key" in the Status profile for all other User Statuses except "Closed" Status.
3)Created a new role in PFCG
4) Under "Cross Application Auth Object" -> Status Management for the Authorization Object B_USERSTAR I entered the following detais.
- Activity - All Activities
- Authorization Key - TEST
- Object Type - COH, COI
- Status Profile - Our Status Profile
So, I expected the Users in the new Role not to have the authorization to "CLOSE" the status.
But it is not working as expected. Did I miss anything?
Please Advice,
Thanks in Advance,
Points will be rewarded.

Hi Meghana,
Check the profile and roles attached to your user profile. SU01
create a new role using transaction : PFCG. and attach the required authorization object: TEST.
Assign the user.. check the compare user consistency..
Do all this and then you test it with both kind of users, with and without this role.
Best Regards,
Pratik Patel
<b>Reward with Points!</b>

Similar Messages

Assigning authorization to status in cFolder status profile

Working with cFolders, I've written a function module that creates a status profile with statuses for use in a collaboration. The status profile, several statuses and status transitions are being successfully created. I am adding user group and role authorizations to the status profile using cl_cfx_api_authorization->set_authorization.
I am trying to add user group and role authorizations to a couple of the statuses as well but that isn't working for me. I'm trying the same set_authorization call as above but I get an error back saying the object doesn't exist. The message gives me the ID for the status which does exist in the cfs_status table. In stepping though the code it doesn't appear that this method works with statues. I have used it successfully with collaborations, work areas, and status profiles that I've created.
Does anyone know how to add user group and role authorizations to a status? Or could someone point me to some documentation? I'm having trouble finding anything on the cFolder related classes and function modules.
Thanks
Terry

Hello Everyone,
The statement that,
According to SAP at this time there is no api call for adding authorizations to the status or status transitions of a status profile. This has to be done through the user interface.
still holds good? Has anyone tried setting authorizations for cFolder?
Ganapathi

User status profile for Contract block in SAP SD

Dear All
We have a business requirement. Let me explain this first.
Requirement is that every contract which is created by any user should be blocked. Some authorized users can release them. Sale order can not be created until the sale order is released.
Once the contract is released it should allow to create sale order. But after releasing contract if there is any change in quantity or net value or payment term etc. It should go in block status again and again those authorized user should release it for further processing.
I have done following things so far.
I have created status profile Z_SD_CON and assigned this in contract type in VOV8. I have also created "Authorization Key" Z0000001 and assigned in user master. But when i crated contract type CQ. It gave me following error.
Status profile Z_SD_CON is not allowed for "Sales order header"
Message no. BS020
Diagnosis
Status profile Z_SD_CON may not be used for object type 'Sales order header'.
Procedure
Use another status profile or allow the use of status profile Z_SD_CON by object type 'Sales order header'.
Please suggest.

Hi,
You can control by defining various Statuses (Individual status of an object) . Once you selected the check box in object type come back and select each status and click on details (f2) now click on New entries (f5) system will show you the Business transactions. Here you can give the Influence and next action for each business transaction.
Like this way you can define en number of status profiles and assign to your document types as per your requirement.
TIP:
1.Authorization object for status profile is : B_USERSTAT
2. you can define the authorization groups also (t code:BS52) to assign against each status
The above both you can assign in user profile (role) ask your basis people to help on this.
Example: Suppose if you defined authorization group as Z123 & assigned against REAL status. Then the user who have the authorization for object B_USERSTAT & group as Z123 can only release the sales order.
Read the below thread also
[Status Profile|Sales Order Release Strategy;
Hope this will clear your query

Thir Party Sales with Status Profile and Credit Block

Hello All,
I have did configuration for Third Party Sales its working fine without Credit Block. The Problem is when I an creating a Sales Order I need to Confirm the Status to Rel and then save the Sales Order. Since the Credit of the Customer Exceeded So Purchase Requsition not created. I released the sales Order using T-Code VKM3 and then checked the Sales Order the Status again changed to Initial Status from Relesed Status and Purchase Requition was also not created.
Please suggest.......What is to be done.
Regards
Tanushree

Hi,
Check your status profile setting for status "REL", in customizing ,may be Credit related transaction maintained for this status
Transaction-BS02
Or
check your ABAper to debug why system resets the status to initial after credit block release
Thanks
Chidambaram

Sales order status profile

Hi,
I have made a sales order status profile & assigned it. It is working fine. However, i am having difficulty in assigning authorisations to the particular users. The Basis consultant has advised that it is a purely functional issue. How do i go about authorising the particular users to status profiles.
Kindly help in this regards,
Thanks in advance,
Hussain

Hello,
Use Tcode PFCG. Enter role and click on change button. Authorizations tab.
Click on authorization data .
Expand the Cross-application Authorization Objects tree. Expand Status Management:
Set/Delete User Status using Transaction.
Authorization key button, assign Authorization key.
status profile. Assign status profile.
Maintain authorization key (authorization code) in status profile with Basis help
To add authorization code use Tcode BS52.
Also, refer Status Profile Settings
Thanks & Regards
JP

How to assign the status profile to that particular user..?*

Hello Everyone..
I have created a status profile for the particulat sales order type so that a particular user can confirm the sales order and the pass it,so that further changes can be avoided.The profile has been assigned to Item category also.
Now My problem is ,How to assign the status profile to that particular user..?
so that only the user is allowed to change the order.
Thanks

Hi,
Maintain authorization key (authorization code) in status profile.
We do not assign directly to user. We assign to role E.g sales manager / sales employee etc...
We assign T.codes to role and assign role to user.
Goto Role T.code PFCG. Enter role and click on change button.Goto Authorizations tab.
Click on authorization data .
Expand the Cross-application Authorization Objects tree. Expand Status Management: Set/Delete User Status using Transaction.
Click on Authorization key button, assign Authorization key.
Click on status profile. assign status profile.
Regards,
Chandra

Checking authorization of user status

Hej there!
In our CRM-system I would like to check whether a user has authorization to set a particular user status in a servicecontract.
I know it is possible to check whether a user is authorised for a status scheme via object S_USERSTAT, but I can't find an authorization object which checks on a particular value within the status scheme.
Is it possible to make such a check via an authorization object or BADI or ....???
Regards,
Henry Helderop

Hi Henry,
I have no access to a CRM system.
In other systems like R/3 or APO user status are handled with object B_USERSTAT or B_USERST_T.
There you can check on values for
o activity
o authorization key
o object type
o status profile
maybe this is the way to restrict the access to service contracts.
Regards
Ferdi

Check Transaction Code in Status Profile Config

Dear,
Has anyone knows how to check or what tcode can check the availability of Transaction Code for a certain transaction when setting status profile?
Example :
For complaint, FINI or INPR or else...
I want to use the transaction for Campaign.
Please help me
Thx in advance
Robin

Dear,
thanks for your reponds, but I think I give you a false description.
I have set the status profile using SPRO --> IMG etc.
When we config the user status profile, we will find the most right coloumn called "Transaction".
I want to know which code I can use for Campaign or Marketing. With this, I might control the accessability of the transaction. Which status will the transaction enable or disable.
I found the tCode is BS13, there we can find which transaction allowed to be set at the status profile.
But, has anyone succeed to set the transaction?
I have tried many transactions, but nothing can lock the transaction.
BR,
Robin

Check Sales Org for Sales Org Status profile activation

hi,
I am not good with ABAP. i am wondering whether it is possible to modify an existing requriement to check sales Org.
Our company use Transaction Flow, Field: Status Profile to control Sales Order discount. We wrote a requirement to force user to change the Header level status to MD02 before they can apply a discount condition.
Right now, our business requriement changes, we only want to allows 1 of the many sales org to be allowed to use the status field for discount, other sales org will not allows to apply the discount.
Hopes I have provides clear infromation.
thanks & Regards,
Rebella

Closed as no action

Authorization in Status Profile

Hi Expert,
I have to give an authorizations for one user status in a status profile.
Status profile so fare is very clear, as well how to create the authorization code, but how do I assign the authorization to a group of users? Is ist for trx. SUIM?
Could you help me please?
Cristina

Hi Cristina,
Step1) execute transaction PFCG
Create authorization roles in which you need to maintian all the authorization objects.
Step2) Once authorization object is decided and assigned to role, in the user tab or role you can assign the users you want to have the current role.
else
you can execute transaction su01 and select required userid. then roles tab assign the newly created role.
Best Regards,
Pratik Patel
<b>Reward with Points!</b>

Status profile prob

Dear All,
My client wants the two statuses at the time of creation of contract 1.CRTD and then after creation checked by another person they wants 2.REL(released) status for that(in T code VA42).
For that i created the status profile e.g. ZSTATUS and assign it to the contract order type and item category and i also created the authorization key e.g. z001 in transaction BS52 and assign the same in the status profile for the REL status.
please tell any thing more i have to do in configuration part to give the one user the CRTD access and another user to REL access.
please suggest
warm regards
ravi k

hI
In the status profile BS02, select a row & click details tab.
then click new tab.
You will get Business transactions with allowed, warning & forbidden options.
Select the Business transactions that you want to forbid & save.
Now, if the option of contract change is not there in Business transactions column then I dont think you can do it.
Also in BS02 waht have you assigned in Object types Tab.
It should be Sales document I suppose.
revert if you req. more help

Authorization check without writing password?

Hi experts!
I could really use a help with this issue...
There are several statuses available for transport requests in our SManager. Those are:
1. import of request
2. development finished
3. transported to test
4. test finished
5. approval
6. transported to production
Now we're facing the problem that every SOL user can set any status he wants, which is not very wise thing to do (some external programmer can easily set status 'approval for production').
We tried to accept usage of digital signature (method: System signature) but couldn't deal with it, because it takes to much time to enter password for each and every one of the requests you want to change status... Everybody is full of administration and we want some kind of user exit that will perform authority check and inform user is he or is he not able to set the status.
Now, I realize there is another possibility to implement digital signature using another kind of method, but don't know what to do, where should I start with my programming :)?
I suppose I need to have some kind of Z* function module or BAPI or ABAP program to provide this?
Please help me.... Any kind of information will be useful...
Thanks and best regards,
Sanja

Hey Sanja,
My answer to this question would differ depending on our scenario..
Since your are working with URgent or normal corrections which are also classifed as change transaction, your best bet would be to go for use of authorizartion code..
Detailed xplanations:
This could be done using Authorization codes assigned to status..
Now there is an authorization object B_USERSTAT which can be used to achieve this..
So Follow these steps:
1) SPRO-> SAP solution manager->scenario specific settings-> status profile-> Change Status profile for user status..
Now here navigate to the status profile attached to your Urgent correction transaction type..
Generally status profile is SDHFHEAD.
If your using a Z status profile navigatte to that status profile.
2) After this done, against each status, you will find auth Codes assgned to status
For Status 30 ZUTE Zu testen( TO be tested) find the corresponding auth code, generally ( SDHF_02).
Similarly for status 60 PROD Produktiv( production) find the corresponding auth code..
3) Assign the relevant auth code to appropiatate roles by including new authorization object in that role( B_USERSTAT) so assign relevant values to that roles..
Important:
if you dont want to use standard auth codes, you can also create custom auth codes..
i dont remember exact path in spro, but just search for keyword authorization codes and you will get it.
So only users with valid auth codes can set that particular status and no other user can set it, if he/she tries the system will throw an authorization error..
Please do reward points for usefull answers...
Revert for any clarifications..
Regards,
Anand..

CL_GOS_SERVICE - Authorization check before activating GOS

Hi,
I am trying to figure out if it is possible to restrict the activation of GOS button depending on the user authorization for the selected object.
Based on my very basic level understanding of abap, i think that we would need to inherit a class from CL_GOS_SERVICE And then status of service VIEW_ATTA would be set to active or inactive/invisible based on the authorization check.
Scenario detail:
Transaction: PA20 or PA30
Authorization object in user's profile:P_ORGINCON
When user enters the transaction PA20, the GOS button is not visible by default. After entering any personnel number (whether authorized or not) and pressing enter key, the GOS button becomes visible. I want to prevent this when the personnel number entered by user is not authorized based on the values contained in authorization object P_ORGINCON in the user's profile.
Apprecaite if someone can guide me whether this is possible or not.
Many thanks
Regards,
Zubair Naseer

HI,
Please check this sap note 491271 might be helpfull.
Regards
Hiren K.Chitalia

User status profile - help needed

Hello,
We would like to use a status profile in which there are three possible states:
1: Open (Users can enter and change data)
2: Closed (When this status is set, no data can be changed)
3: Re-open (If a trasaction has the status closed, but for some reason something needs to be changed, setting this status allows it to change data)
The problem lies in the fact that in order to prevent data being changed in status "Closed", we set the entry in the last column to "FINI"and the Business Transaction "Change Document" to forbidden. This works since all the fields are no longer editable, including the status field.
Is there a way for us to make suure that all fields are not editable, at the same time allowing (certain) users to change the status to reopen so that changes can be made?
Help will be much appreciated.
Regards,
Alex van Vondelen

Sorry, can't have the cake and eat it too.
Only way is to do it through another custom program. For example, see if the process of Reopening requires any workflow type of authorizatrion. Then you can sneak that in the approval process. We had a very similar process of not allowing a class of users to change the document (and status) and there was a workflow involved in the process.
Easiest way is to write a small dialog program, get the transaction number and check the authorization of the user, to start the process. You may have to directly modify the status tables - remove (delete) the "Closed" status after authorization check.

Status profile could not be set according to transaction type

Hello,
Error Status profile 'ZXXXXXXX' could not be set according to transaction type 'ZYYYYYY'.
Possible causes are:
1. Status profile 'ZXXXXXXX' has not been assigned to object type COH by the system administrator.
2. Initial statuses can be set in status profile 'ZXXXXXXX', which cannot be set using the current document attachment.
3. The current user XXXXXXX does not have the authorization to set an application status.
Though i have assigned Object type COH . and the user has the autherization. Pls Help.

Hi ,
Please check you have assigned status profie to object type that is using this status profile. Ex. If you are assigning status profile to campaigns , you also need to check mark object type campaign under allowed objects types.
Nitin

Authorization Check in Status Profile

Similar Messages

Maybe you are looking for