Authorization flow Business Transactions

Hello partners,
I have a issue with the authorization flow concept.
My need is :
A.- the transaction type z01 is only for the user that belong to unit org A, object CRM_ORD_OE
B.- the transaction type z02 is only for the for own transactions of the employee, object CRM_ORD_OP
C.- the transaction type z03 is access for all users and not depend of unit org or his transaction.
So I have doubt with the combination of all of them, how can indicate to the system that for A scenary, I need the restrict only if the transaction type is Z01? and for the scenary B only for Z02, and the scneary C without restrictions?
this is the help sap documentation:
Process Flow of the Authorization Check in Business Transactions - Authorization Check in Business Transactions - SAP Li…
Regards
Roberto.

Thanks Christophe,
I analize the FM CRM_ORDER_CHECK_AUTHORITY_ACE,
but when I try to search activities in the SALESPRO, component view BT126S_APPT/ApptSQ, the break not work,
in others view like search service request, work ok the FM,
but for search activities not work,
I'm not sure if I need a specific Switch for that.
Do you know?
Regards

Similar Messages

CRM - Process Flow of Authorization Check in Business Transactions

Hello Folks:
I have implemented CRM security using Process Flow of Authorization Check in Business Transactions.
What I have in place:
CRM_ORD_OP (inactive, don't want access to own documents)
CRM_ORD_LP (inactive, not using standard org level values Distribution Channel, Sales Group, Sales Office, Sales Organization, and Service Organization.)
CRM_ACT (active)
CRM_CMP (active)
CRM_ORD_OE (active, restricted to display with dummy value ' ' for Distribution Channel
Sales Group, Sales Office, Sales Organization and Service Organization, as we are not restricting on them)
CRM_ORD_PR (active and restricted to display)
Issue:
Restrictions to display for documents works fine when using CRM backend system and the system throws out a message that you are not authorized to change. But, when i come in through Portals (PCUI), i dont get the display at all and it throws out a message insufficient access authorizations.
Traces on backend CRM reveal failing on change access for CRM_ORD_LP and CRM_ORD_PR, which we dont want to give out b/c we dont want to provide change for documents.
OSS notes to SAP have resulted in no results....please advise what is wrong here.
Thanks
KT

Thanks for the Priyanka for the reply, but what you mention is not correct.
BSP errors are different from what I am refering to.
The issue is still open...and looks like a SAP bug, which even they havent been able to fix so far.
Regards,
KT

Authorization Check in Business Transactions

Hi All,
i need to create Authorization Check for Business Transactions ( create/display/change ).
The standart sap Authorization object CRM_ORD_OP or CRM_ORD_LP is no good for me .
does anyone know a BADI or something else i can use ?
Thanks
Lilach.

I would suggest to give the authorization with CRM_ORD_OE if he isn' t in the document may be he is the organization which is selected on the activity..
For details, please have a look at this link :
http://help.sap.com/saphelp_crm70/helpdata/EN/48/a44236ceb873e8e10000000a42189b/content.htm
BR,
Cenk Sezgin

Authorization for "Accept Quotation" Business Transaction in Service Order

Hello All,
I need of Authorization Control for doing "Accept Quotation" business transaction in Service Order.
Process goes as follows.
Service Order created with Planned cost components with DIP Profile
Service Quotation got created through DP80
Then, Accept Quotation will be done in Service Order
Release of Service Order
Execution, Billing, etc.,
Here, I want to control of doing "Accept Quotation" by only authorized people.
I couldn't find any suitable Authorization Object under I_VORG_ORD under field BETRVORG.
We can control that business transaction through User status. Is there any other standard object available to achieve this??
Hope I am clear in my query & looking forward your suggestions.
Thanks in advance.

Maheswaran KD
Sorry, but I can't check at this client as we are not using CS processes.
Try popping into debug mode using "/H" and put a break-point on "authority-check" before continuing.
The program should now stop at all authorisation checks. See if any of these are suitable.
If not, then you may need to use a user-exit or BADI.
PeteA

Authorization FBCJ for Specific Business Transaction

Dear Guru,
How to create user authorization via PFCG for FBCJ with specific Business Transaction?
I have tried, but I just find authorization FBCJ for Activity (Change, Delete, Post, Read) and Account Type (GL, Vendor, Customer, Material).
Thank you.

Hello,
Normally, for casj journal the suggestion is to introduce segregation of duty. For e.g. the user who create and saves (for review, no document is posted at this point) the cash journal should not be allowed to post (SAP document will be posted) cash journal. Then another user should be assigned cash journal deletion auhtorisation shold related document required reversal. Basically, you should have authorisation for update, post and deletion in seprate user role.
Kind regards,
John Chin

BADI for restrict creation of business transaction independently

Hello Experts,
I have a requirement where I need to check if the Business activity (say any 'Z' transaction) has a opportunity follow-up document then only that business transaction need to be executed else should give the error that "Z transaction need to be created through opportunity only and can not be created individually".
I found one BADI CRM_ORDERADM_H_BADI where I can check for the condition but the issue is that as soon as I entered to CRMD_ORDER this BADI gets triggered where I need to trigger this BADI only when the user is trying to create the 'Z' business transaction individually.
Any Suggestion will be highly appreciated.
Thanks in Advance & Best Regards,
Deepak Gupta

Deepak, there is a parameter called CRM_MODE and this has the following values depending upon the transaction context:
A - Create
B - Change
C - Display and
D - Delete
Now, in the same BAdI, since you are restricting the creation of the activity, check the CRM_MODE for the Activity, if it is A, then, call the function module CRM_ORDER_READ with the GUID of the activity and extract only the document flow ET_DOC_FLOW. Check this export table and see if the parent is an opportunity (BUS2000111). If your condition is not met, add an Error message in the transaction.

CRM Middleware help for rookie needed.. Replication of Business Transaction

Hi guys,
I try to set up replication of Business Transactions from R/3 to CRM and vice versa.
I have created:
- CRM site type (CRM) , R/3 type site (R46CLNT700)
then I created a subscription: SalesDocuments (R46CLNT700 is assigned to this subscription) for publication "All Business Transactions (MESG)".
a, Is this enough configuration of MW for needed replication? Or do I need more settings set up?
b, When I try to start initial load of the Replication object BUS_TRANS_MSG (which is "in" publication All Business Transactions), I am not able to start Load from CRM to R46CLNT700).. As target I can use only CDB... What is wrong?
c, If I create some sales transaction in CRM system and I want it to be replicated to R/3 and vice versa, how will I know, which replication object represents this document? For example, I create a Sales Order. How will I know, which replication object to set up for replication?
Thanx a lot! Peter

Peter,
1.If you are looking for Initial download from CRM to R/3, this should be possible from CRM v4.0.
2. Delta flow between the systems should happen once your initial download is complete.
3. Check the Inbound and Outbound queues in CRM. If they seems to be hanging for long time, check whether you have registered the Inbound & Oubtound queues in SMQR and SMQS transaction on both CRM and R/3.
Regards,
Phani.
Wipro Technologies

Replication of Business Transaction (CRM to R/3)

Hi All,
We are creating the contracts in CRM & we maintained the Int no ranges in crm & external in R/3, still contracts are not flowing to R/3,
Can any one tel me why the contracts r not flowing to R/3, if any configuration are required pls help me.
Thanks
Gskumar

Hi Kumar,
Go to Tx SMOEAC.
Open the details of the site R/3 and check wether 'All business transactions' is subscribed or not.
If it is maintained check the queues(Out bound in CRM and inbound in R/3)
If you find any thing wrong there open the respective BDOC in SMW01 and check it.
Thanks
Nadh.

Search For business transactions

Hi All
Please help on this
when we do crmd_order and go to the search for business transaction screen there is a find tab in which we get all transaction types- I want to hide some of the transaction types from there
Gor eg- the transaction types are - Opportunity, Service, Service contract, Leads, Framework agreement, tasks, business activities- I want to hide some of them
How can I do this?
I hope you have understood my question?
Regards
Tarang
Message was edited by:
Tarang Goel

Hi Goel,
I believe that the answer of Arun is related to not having certain transaction types in crmd_order, for example, creation, display. Which means that this kind of transaction will not be used at all in the system.
But as far as I could understand, your requirement is only ignore some transaction categories show in the Find dropdown in the Find tab, isn't it? Please correct me if this is not the case.
If my understanding is correct, you might use authorization check to realize this:
in Function module CRM_ORDER_CHECK_AUTH_BUS_OBJCT
if you make a full text search for 'AUTHORITY-CHECK'
you will see a list of objects checked here.
And if for example you would like to hide Lead, then please do not assign authorization of object CRM_LEAD with activity 45 to this user id.
Then the authorization failed, then the Lead option will not be in the drop down.
please also check whether these objects are checked in other processes to avoid any side effects.
Hope this could do help!
Hongyan
Message was edited by:
Hongyan Shao

How to use task flow's transaction options with session's user data

Hi.
I have custom extension of ApplicationModuleImpl class:
package test.model
imports...
public class CustomAppModuleImpl extends ApplicationModuleImpl {
    public static final String SESSION_VAR = "MySessionVar";
    public CustomAppModuleImpl() {
        super();
    @Override
    protected void prepareSession(Session session) {
        super.prepareSession(session);
        System.out.println("######## " + this.getClass().getName() + ".prepareSession() called. AM isRoot() = " + isRoot());
        Hashtable userData = session.getUserData();
        if (userData == null) {
            userData = new Hashtable();
        userData.put(SESSION_VAR, "Useless");
    @Override
    protected void create() {
        super.create();
        System.out.println("######## " + this.getClass().getName() + ".prepareSession() called. AM isRoot() = " + isRoot());
}Inside userData I store some useful session-based values (here is just an example ;) ).
Within Model.jpr I defined that every Application Module I create must extends this CustomAppModuleImpl :
   <value n="oracle.jbo.extends.appModule" v="test.model.CustomAppModuleImpl"/>
...I have one AM with one view:
package test.model;
import oracle.jbo.server.ViewObjectImpl;
// ---    File generated by Oracle ADF Business Components Design Time.
// ---    Wed Mar 07 20:22:11 CET 2012
// ---    Custom code may be added to this class.
// ---    Warning: Do not modify method signatures of generated methods.
public class AppModule1Impl extends CustomAppModuleImpl {
     * This is the default constructor (do not remove).
    public AppModule1Impl() {
     * Container's getter for EmployeesView1.
     * @return EmployeesView1
    public ViewObjectImpl getEmployeesView1() {
        return (ViewObjectImpl)findViewObject("EmployeesView1");
}Now I have BTF (bounded task flow, with default properties) and I call that task flow on a button press. With default properties ( Transaction: <No Controller Transaction> ) I get preferred values from session's userData within Entity Object.
Code snippet inside that entity implementation looks like:
        DBTransaction dbt = getDBTransaction();
        System.out.println(getClass().getName() + " entity lives AM: " + dbt.getRootApplicationModule().getClass().getName());
        if (dbt.getSession().getUserData() == null) {
            System.out.println(CustomAppModuleImpl.SESSION_VAR + " -> NULL");
        } else {
            System.out.println(CustomAppModuleImpl.SESSION_VAR + " -> " + dbt.getSession().getUserData().get(CustomAppModuleImpl.SESSION_VAR));
...And as I mentioned output is correct:
test.model.EmployeesImpl entity lives AM: test.model.AppModule1Impl
MySessionVar -> UselessNow the trickiest part. As soon as I change property of called task flow Transaction to something else that +<No Controller Transaction>+, e.g. Always Begin New Transaction, code snippet from task-flow.xml :
    <transaction>
      <new-transaction/>
    </transaction>
..This session stuff begin to act unpredictably. Session's userData is now null. And Output looks like:
test.model.EmployeesImpl entity lives AM: oracle.jbo.server.ApplicationModuleImpl
MySessionVar -> NULLWhy in the world ADF uses oracle.jbo.server.ApplicationModuleImpl instead of test.model.AppModule1Impl or at least my defined test.model.CustomAppModuleImpl ?!?
Is this a bug? Or maybe a feature?
10x
Regards

Hi,
Why in the world ADF uses oracle.jbo.server.ApplicationModuleImpl instead of test.model.AppModule1Impl or at least my defined test.model.CustomAppModuleImpl ?!?
Is this a bug? Or maybe a feature?
ADF BC alwyas has a transaction opened even if the ADFc setting is No Transaction. So if you explicitly ask for a new transaction I assume that the ADF BC data control creates a new transaction without re-executing your AM initialization codes. Looks as if it uses an internal AM instance for this just to hold the transaction. However, worth filing this as a bug - assuming you reproduced this with a later version of either JDeveloper 11g R1 or R2
Frank

Can the business transaction be controlled using user status profile?

Hi All
there is a requirment that in a project there will be 3 stages of approval.
Each stage of approval should allow specific business transaction.
eg. When the project is apporved in 1st stage then only PR's and pln Oders can be raised.
When 2nd stage is approved then PR's can be converted to PO.
When 3rd stage is approved then and Production activity can take place.
I would like know whether user staus profile can be used to control the business transactions? If yes how?
If user status is not possible, can any one help me out?
Regards
Paimal

Hi ,
As per me this scenario can be handled without user status
When the project is apporved in 1st stage then only PR's and pln Oders can be raised.
If ur generating PR/ planned order thru MRP run it is only possible after WBS release.So give the WBS release authorisation to 1 st authority.
When 2nd stage is approved then PR's can be converted to PO.
Put release strategy to PR so that there can be check by autourised person.
When 3rd stage is approved then and Production activity can take place.
Give production order Release authorization to person who is responsible for production planning.
It is not suggestable to look at this scenario for applying user status.
Rgds

Derived business transactions and TBB1

Dear experts,
My question concerns Money Market derived business transactions.
When I enter position outflows that are not transfer postings, the system generates derived translations that update the position components (proportionate reduction) u2013 DBT_E001/DBT_E002.
These translations are not relevant for posting, but have a status Planned.
The question: is it possible to fix these derived flows during posting of operative business transactions in TBB1?
Right now I can fix them only through TPM18, which is very inconvenient to run separately.
Any help would be appreciated.
Best wishes,
Irina

Hi,
In status control the setting is status of plan and hence the derived transactions will always be generated in planned status and you have to fix them through TPM18.
In order to post it through TBB1 itself, the control setting should have same status option. But check with the business also whether this is not going to have any other effect because this is at the central company code and valuation area level. All derived transactions will have the same status of the operative transactions itself.
Regards,
Ravi

PPM 5.0: Assign cProjects New Status to Project Mngt business transaction?

hello Experts,
In SPRO -> Project Management -> Basic settings -> Create/Change Status Profile for User Status, I created my own status profile and assigned them to object types.
Now, for status synchronisation, i need to map Project / Initiative Business Transaction to DFM Business Transaction
( SPRO -> Portfolio and Project Management -> Portfolio Management ->Base System Interfaces -> Decision Flow Management Settings -> Status Synchronization -> Map Project / Initiative Business Transaction to DFM Business Transaction)
My question is :
How can I create my own Project Management business transactions?
if is not possible, how can i assign the standard ones (DX01, DX02, etc) to my own status (ZST1, ZST2, etc) ?
Thank you in advance,
Amal

Hello,
Check the trasnaction BS32 for adding new business transactions.
Cheers
Amit

Posting of Derived Business transactions

Dear SAP Gurus
Recently I had a requirement wherein the DBT was to be posted to SL. I found that DBT posting is not possible to SL and the system gave me an error message that the "amount is not available in payment currency"
The question is when the system allows a normal flow to be posted to SL in payment currency why not in case of Derived Business Transaction. Is there a workaround available
Any help would be appreciated.
Regards
Virendra Malik

Hi
You have rightly said that DBT is meant for internal posting and ideally must be posted to a GL only. However I have this special requirement when I want to do the posting through DBT for update type DBT_E002 (Translation of Negative Purchase Value). In this case I do not want to do the SL posting of foreign currency repayment which is represented by the the main flow (update type MM1130-). This main flow update type has the net amount of two transactions DBT_E002 (Translation of Negative Purchase Value) and DBT_B006 (Forex Gain (planned outflow)). I want the SL posting to be done of the amount being shown in DBT_E002 and Gl posting for the amount being shown in DBT_B006.
Hope the above clarifies.
Regards
Virendra Malik

Production planning Business Transaction Events

Hi All,
Plz provide me with a list of Production Planning related Business Transaction Events.
Thanks & Regards,
Sudheer.

Hi,
The following is the basic flow for production planning.
Step 1: Material Master
Logistics > Production > Master Data > Material Master > Material > Create General > Immediately
MM01
Step 2: BOM creation
Logistics > Production > Master Data > Bills of Material > Bills of Material > Material BOM > Create
CS01
Step 3: Work Center creation
Logistics > Production > Master Data > Work Center > ( New Screen ) Work Center > Create
CR01
Step 4: Route creation
Logistics > Production > Master Data > Routings > Routings > Routing > Create
CA01
Step 5: PIR Generation
Logistics> Production>production planning>demand management>PIR>CREATE
MD61
Step 6: MRP Run
Logistics>Materials Management>Material planning>MRP>MRP>Total Planning>Online
MD01 or
Logistics > Production > MRP > MRP > Sng-Item, Multi-Level
MD02
Step 7: Evaluation through MRP list and Stock requirement list
Logistics>Materials Management>Materials Planning>MRP>Evaluations>MRP List>Individual Display
MD05
Logistics>Materials Management>Materials Planning>MRP>Evaluations>Stock Requirements List
MD04
Step 8: Conversion of Planned order to Production order
Logistics > Production > Production control > Order > Create > With a planned order
CO40
OR
Logistics >Production > Production control >Order > Create >With material
CO01(For creating production order Without planned order)
Step 9: Order management
Logistics >Production > Production control >Order > Change >With material
CO02
Step10: Goods issue
1. Logistics >Production >Production Control >Environment >Goods Movement >Goods Issue
2. Logistics >Materials Management >Inventory Management >Goods Movement >Goods Issue
MB1A--261Movement type
Step11: Confirmations.
Logistics >Production >Production control >Confirmation >Enter >For order
CO15
or
Logistics >Production >Production control >Confirmation >Enter >For Operation >For time ticket
CO11N
Step12: Goods receipt
Logistics > Production > Production Order > Environment > Material Movement > Post Mat to Stock
OR
Logistics > Materials Management > Inventory Management > Goods Movement > Good Receipt > For Order
MB31
Step13: Techo Or Close Order.
This can be done from Prd. Order Header menue.
Complete transaction codes you will get in http://www.sap-img.com/sap-pp.htm
Apart from the listed these are also used in spro
1. Subject: Re: list of SPRO t-codes
2. Message: Define Resource Categroy OP40
3. Define Status Profiles BS02
4. Define Field Selection OPFA
5. Define Task List Usage OP45
6. Define Parameters OP7B
7. Define Standard Value Key OP19
8. Define Person Responsible SPRO
9. Define Sub Systems SPRO
Define Default Resource OP42
Define Transition Matrix OPG6
Define Control Keys OP00
Define Setup Type SPRO
Define Wage Group SPRO
Define Suitability SPRO
Define Shift Sequence OP4A
Define Period Pattern Key OP11
Regards,
R.brahmankar

Authorization flow Business Transactions

Similar Messages

Maybe you are looking for