Authorization control based on responsible persons

Hi Experts
My project structure is operated by several users.
To have a control on each WBS (based on responsible person) i have set up authorization control for auth object C_PRPS_VNR.
I have acheived control on WBS elements.
However, the activities and network are still editable.
Please suggest the auth control for the wbs and resp NWAs based on resp person.
warm regards
ramSiva

Hi Ram Siva,
If you are using individual Network header for different WBS element,you can use MRP controller field in the assignment tab page of Network heade for this authorisation.You can create the equal number of Person responsible as MRP controller and control the authorisation.

Similar Messages

Authorization control- WBS specific

Hi Experts
My client handles major projects.
Each WBS is owned by a management personnel like:
DGM Mehanical: Mechanical activities
DGM Electrical: Electrical engg activities
DGM Civil: Civil engg activities
Like wise various other responsible teams handle each work package (WBS).
In this context, can we ensure authorization control WBS wise?
It means, the WBS owned by Mech DGM should be editble to him only, and rest users should not be allowed for editing the sub objects of Mech WBS?
Or, if this can be managed using user status, please suggest how the required functionality can be achieved.
warm regards
ramSiva

Hi,
You can use Person Resposible field in the WBS master data for the purpose.
In T-code OPS6 you enter Person Responbile , Name , Office User.
Create Three roles , DGM Civil (12), DGM Elec (13) , DGM Mech (14).
For Authorization object C_PRPS_VNR enter for field PS_VERNR = 12 and PS_ACTVT = 01,02 & 03 for DGM Civil Role.
Similarly for other roles.
Key in 12 in person responsible field of the WBS belongs to DGM Civil.
Assign DGM Civil role to DGM Civil user.
Then he can only edit and ret can only view.
Option 2 :
You can also use Project Type.
Object = C_PRPS_ART
Create three project types Civil, Elec, Mec . In respective WBS select the project type as desired and assign that project type to the concerned role.
You can take help of Basis consultant for clear understanding.
Thanks
Saikishore.Ganga

MF70-Plant authorization control object -reg

Hi,
While giving MF70 authorization to user we need to control based on Plant
Once i give MF70 t code authorization its authorizing the user all plants by default
is there any object to control plant (WERKS) in MF70 ?
regards,
madhu kiran

HI
Check the Profile attached to the used id and also whicle creating or changing the roles attached to the used in PFCg check for MF70 check for REM Backflush >plant > aganist it give the plant for which you want to assign
I hope it will work
Check and revert
Regards
Anupam Sharma

MD61 -Authorization control for Version , requirements type -reg

Hi,
We have an issue in providing MD61 -Create Planned Independent Requirements to the users
By standard authorization objects available , Plant level authorization control only is there
if we have to give authorization for many users in the same plant based on teh VERSION , REQUIREMENTS TYPE etc... is it not possible ?
can the authorizations objects be created manually for these and assign to teh concerned user's roles ?
please provide your thoughts
regards,
madhukiran.

Dear Madhu,
Authorization objects can be added for an individual T Code also in SU24.
Check with your Basis consultant,Also i think its possible to give the authorization for versions as well
as requirement type also.
Regards
Mangalraj.S

Authorization control for Z fields

Hi all,
We have appended a structure to VBAP; our requirement is to update these Z fields based on authorization control.
Other than creating Z auth objects and checking them in our exit before updating Z fields, is there any other standard option to control updating of these Z fields.
Regards,
Krishna.
SAP SD Techno Functional.

Hi all,
We have appended a structure to VBAP; our requirement is to update these Z fields based on authorization control.
Other than creating Z auth objects and checking them in our exit before updating Z fields, is there any other standard option to control updating of these Z fields.
Regards,
Krishna.
SAP SD Techno Functional.

Authorization control for cost analysis/itemization view

Hi Experts,
Can we control the access to cost analysis/itemization report in CO03 by authorization control ?
Thanks

Hi,
Most probably it may not be possible.
moreover, Why do you want this? Cost analysis will be in display mode only. Infact it benefits the user. They can analyse and correct the master if required.
Think once again before making control. Because, everytime people has to come to authorised person to see the cost difference, which will disturb the authorised person.
This is my personal opinion.
Madhava

Authorization control in Web Dynpro

Dear experts,
I have a question about setting authorization in Web Dynpro. For example, how can I control if a button can be pressed or what kinds of data should be displayed based on user role in UME.
Moreover, if I have security settings declared in EJB (ejb-jar.xml). Then I use this EJB in Web Dynpro. Can the UME role be passed to the EJB, i.e. the security setting in EJB still valid? Thanks.
Best regards,
Ken

Hi
I have created a webdynpro component that interacts with SAP. I have done the authorization control through SLD. Well for individual elements of a webdynpro application i dont know if it is possible to restrict through authorization control.Maybe its something that needs to be worked upon.
thanks
ravi

Authorization control on material reservation creation and change (MB21 & M

Hi Friends
Please help me to find a solution on Authorization control on material reservation creation and change (MB21 & MB23).
Client looking for a control over end user on those T.Code s but not at T.Code level;
Client looking for control either based on "Storage location" and/or u201CProduct hierarchyu201D.
More specifically, user A and B both can Create/Change MR but user A only can do it for the MR which related to storage location say YY while B authorized for storage location ZZ
Thanks in advance.

Hello Partha,
Only available Standard SAP Authorization Objects, related to Reservations, are M_MRES_BWA (Reservations: Movement Type) & M_MRES_WWA (Reservations: Plant) where you can maintain authorizations based on Movement Type & Plant respectively and hence seggested enhancement.
You can use Tcode-SUIM to search for Basis authorization details i.e. Roles defined for specific transaction/authorization object / profiles.
Revert if any further info required.
Regards,
Anup

Plant level authorization control for Internal Order

Dear Sir,
We create Internal Order using tcode KO01 and being a multi plant scenario , we want to have an authorization control on Internal Order creation/change so that plant or profit-center level authorization rights can be given to the users .
We request you to Kindly guide us about the steps to be followed for addressing such requirement .
With thanks and Regards
Sonia Agarwala

Sonia-
It can be done. You have two options.
1. SAP security - when your security person can limit a user by plant, profit center etc using authorization objects.
2. Validations - Here you can create a validation where you define you logic. In your logic you can restrict set of users who can access a set of fields (profit center, plant etc). If he deviates, the system can issue error messages which is maintained in validations. Use transaction GGB0 to create validations.
Hope this helps.
Shail

Authorization check based on personnel sub area

Dear experts,
         I would like to know if there's a way to do the authorization checking based on personnel subarea? Currently we can perform the authorization check up to Personnel Area only in P_ORGIN.
          Please advice.
          Thanks in advance.
Regards,
Yen

The feature Administrator groups (PINCH) is designed to deal with such a situation.
Example
Administrator A is responsible for personnel areas 1 and 2, Administrator B is responsible for the employee subgroups X and Y within personnel area 3, Administrator C is responsible for all other employee subgroups within personnel area 3.

Search help for a field in table control based on another field value

Hi,
I want to attach the Search help for a field in table control based on another field value.
Please help me asap.
Will be highly rewarded

HI,..
Check these links
search help in table control
Re: How to create Search Help for a field in Table control !!
How to create Search Help for a field in Table control !!
F4 Help In Table Control
Control table F4 help
Problem in F4 help in screen field
check this code
DATA: BEGIN OF it_value4 OCCURS 0,
         TEXTCODE LIKE ZXX-TEXTCODE,
         TEXTDESC LIKE ZXX-TEXTDESC,
       END OF it_value4.
progname = sy-repid.
dynnum   = sy-dynnr.
         SELECT TEXTCODE TEXTDESC
           FROM xxxx
           INTO CORRESPONDING FIELDS OF TABLE<b> it_value4</b>
          WHERE LOSS_CODE =<b> IT_VALUE1 .</b>
CALL FUNCTION 'F4IF_INT_TABLE_VALUE_REQUEST'
    EXPORTING
      retfield    = 'TEXTCODE'
      dynpprog    = progname
      dynpnr      = dynnum
      dynprofield = 'ITVALUE-TEXTCODE' "-->UR 4 th filed value in screen
      value_org   = 'S'
    TABLES
      value_tab   = it_value4.
endmodule.
Message was edited by:
        veereshbabu ponnada

Authorization control for batch master

Hello Experts,
I have a special requirement from client on authorization control on batch master. The requirement is user should not be allowed to change the batch header details but allow to change selected characteristic values. For e.g If I have a batch A, the header values such as prod date, country of orgin etc should not be allowed to change. In classification view few characteristics only should be editable, rest all should only be displayed.
Is there any option to do this. Either through authorization control or exits. We dont want to create a custom transaction to achieve this.
Thanks in advance
Prathib

Hello
The following document explains how to check which authorization objects are called on each transaction:
How to analyze authorization issues in debug
BR
Caetano

NULL values and Data Control based on Web Service

One of my ADF control is based on a Data Control created through a web service. Every thing is working fine except the way ADF control is handling the null values return by the web service based data control.
For example for null columns the web service is sending the following:
<ns0:beginDate xsi:nil="1"/>
or
<ns0:sourceCode xsi:nil="1"/>
But the corresponding column in my ADF data control is trying to initialize itself using the value [{nil=1}]. It fails with the following error.
2006-04-20 13:31:37.510 WARNING JBO-25009: Cannot create an object of type:java.util.Date with value:[{nil=1}]
I will appreciate if someone could help me resolve this issue.
Thanks,

I tried again, but it seems that I'm unable to reproduce this in a test project which uses another data controls but is still as similar as possible to the original project in which I've encountered this behaviour.
However, using a data control based on the same web service as in the original project, [{nil=1}] appears again instead of emtpy values.
Is it possible that there is a significant difference in the generated wrapper classes? The underlying PL/SQL is the same (in strucutre) and the corresponding elements in the response XML of the web service are the same in the two cases, always like <ns0:someResponeValue xsi:nil="1"/>, so I don't know how it is possible that I can't reproduce this behaviour.
A short description of the projects:
Services/Model:
I created a PL/SQL funcition in a package that returns a user type object. This return parameter consists of a non-empty string and a null value string. On top of this I created a PL/SQL web service and a data control for that.
View/Controller:
A JSF JSP page which has a read-only form showing the return values of the web service.
Regards,
Patrik

How to map the user to Responsible Person for Proj/ Capital Investment Prog

Hi All,
Could you please help me in mapping the user to Responsible Person for Proj/ Capital Investment Prog.
Here is the scenario. I am trying to restrict the user to access only WBS under a cost center but not to have complete access to the Cost Center. I in my way to do, I found out that we can create a user name using OPS6 tcode and use the reference number of the user we created in CJ20N, so as only the person who was added in the Responsible Person for Proj/ Capital Investment Prog list will be able to access particular WBS.
Now my question is, How to map the user which I created using OPS6 tcode to user in user master record. I am not able to map the user, as its taking any random name to add in the list. Could some one please help me in mapping the user created in the list with the user master record.
Hope I managed to put the question clearly. If you have any queries, please feel free to ask. Appreciate your time and thanks in advance.
Farooq.

Hi Stephan,
Thanks for your time and finding SAP note for me. I got the problem fixed. The solution for the above problem is, When we create a responsible person for the project through OPS6 tcode, we have a column called "Offer User", next to the person responsible. We must add the user name next to it. And we can add only the user name which is present in the user master record.
It solved my problem, but when I pressed F1 for help in this column, there is nothing mentioned about its mapping or anything.
Thanks again for the help, Cheers,
Regards,
Farooq.

Workflow change to get cost responsible person

Need help from workflow experts.
One standard workflow 14000089 (One-Step Approval of Purchase Orders) is used to approve the PO.
It is going to Head of purchasing org all the time for approval.
The requirement is to change the workflow so that it will go to individual cost centre responsible person for each article rather than going to one person all the time.
Please help me what needs to be done.

Hi Arun,
Check table DPR_ENTITY_LINK with:
- ENTITY_GUID = the task GUID
- RESPONSIBLE = 'X'
--> in PARTICIPANT_GUID, you get the concrete (resource) or abstract role (project role) that is responsible for the task.
BR
Matthias

Authorization control based on responsible persons

Similar Messages

Maybe you are looking for