Authorization for documents display in query navigation

Hello
I defined a document linked to my masterdata on BI 7.0.
The query is flagged "Displaying Document Links " on the masterdata, and everything goes well in the navigation as I have SAP_ALL.
But my users are not abble to see that document link !
I already set the authorisation object S_RS_ADMWB in their profile but nothing appends...
Can anyone help me ?
Tnahk u

The authorization objects are :
u2022 S_RS_IOMAD
u2022 S_BTCH_JOB

Similar Messages

Authorizations for document management

Hi,
I'm trying to figure out what every authorization means and which effects it has...
I created a new user, gave him all the necessary authorizations to use certain transactions in Document management by making a new role/profile for him
After trying everything out, I still have a few questions:
- with Authorization for change object link (C_DRAD_OBJ)I have the following properties:
Activity: change, display
document type: DRM-DRM
linked SAP object: *
document status: *
I know how to display my object link, but how can I change it? Do they mean with changing the object link, the creating of long text for the link or is there more to it?
- with authorization for document access (C_DRAW_DOK), I can't figure out what the options "Display Application archive" and "Change application archive" mean. Which effect does it have when I choose them? Where do I consult the application archive? What is the application archive? => SOLVED
- Do I also have to give the authorization "Display" when I want to give the authorization to delete something? How can I delete a document info record without displaying it? =>SOLVED
- With "Status dependent authorizations for documents" (C_DRAW_TCS) what do the following options do?
 *change application start (which difference with change?)=>SOLVED
display application start (which difference with display)=>SOLVED
 *request
 *display archive =>SOLVED
 *change archive=>SOLVED
I know it are a lot of questions but I'm making documentation on the authorization profiles of document management and when I figured those few last things out, I can share my documentation with the rest of you...
Message was edited by: Vicky Liesens

Good morning,
Havent been watching this thread for some time now, so please shout if you do have any questions.
Just a quick note on deleting documents:
Setting the deletion indicator will simply mark the DIR for deletion, but, it will still be on the dB.
After you have set the DIR for deletion, you need to run the program "MCDOKDEL", which has a test mode and a real mode.
This program will physically delete the documents that you have marked for deletion.
Regards,
Freddie Botha
www.documation.co.za
SAP DMS, CAD Integration, Data Archiving, Imaging and Scanning and Workflow
[email protected]

Authorization for Document type AA

Hi,
I would like to assign authorization for document type AA only(related to FI), let me know how to assign ?
Urgent ....
Thanks in advance
Vijay

HI,
You may ask from user to provide you SU53 screenshot or if you know how to simulate the required authorization, you can trace the object using tcode ST01.
Thanks
Tarmizee

Authorization for Document type in FB60.

Hello everybody,
On executing FB60 transaction code, i want to control the document type entry means
we have basically 2 types of document V1- Pune vendor bill and V2 Mumbai Vendor bill.
I have to give V1 document type authorization only for pune location user and V2 for Mumbai location user.
I had check the object in FB60 but I can't find the authorization object for document type.
I tried by creating test role name z:test and assign transaction FB60 in that role. when I assign this role to
test user he can post both the document type invoice.
So please suggest me how to give the authorization for the V1 and V2.
Thanks

Hello Ganesh!
I believe that authorizations object F_BKPF_BLA is what you're looking for. To use it, however, you will first need to define an authorization group for document type you want to protect. This is done in transaction OBA7; select the document type you want to protect, go into details view and define a value for "Authorization Group" field (this is freely defined, you can enter any value you want).
After you've done this, a check will be performed on auth. object F_BKPF_BLA with the authorization group value you defined for the document type and activity.
(I've never implemented this in our system, but I'm fairly certain that this will work.)

User based Authorization for Documents

Hi All,
Is it possible to have following scenario?
1)
There is a folder A. Inside this folder there is a file abc.txt & xyz.txt.
Now User 1 & User 2 both has access to folder A.
User 1 can read / download the file abc.txt & xyz.txt
User 2 can see only the name of the file inside this folder, but he cant download this file. And he can read / download xyz.txt file.
and instead of user can it be given role based also???
like abc.txt can be downloaded only by R&D role and noth any other users.
The main perpose of this feature is to let user know there is a document stored in a particular folder but he can only see the name of this document.
Regards,
Purav

Hi Jitendar,
From permission we can do only read, write, read & write, Full control thats it.
see the scenario I have given.
User2 cant even read the file, he can only see the name of that file.
I have seen the KM Permission link http://help.sap.com/saphelp_nw04/helpdata/en/4c/9d953fc405330ee10000000a114084/frameset.htm
but still counldnt find the solution to my scenario.
Regards,
Purav

Authorization control for document status

Dear All,
I want to control the status change of Documets created,
How can i achieve this, so that a perticular user /ID can change the perticular status,
I have ,
01
02,
03,
04, Rel.
05,
Do i need to put some trace anf find Objects to control...
or there is any standard method to do this..
Please guide me..
Regards
Raghu

Hi Raghu,
Here are DMS authorizatoins objects. For handle status it should be C_DRAW_STA
C_DRAD_OBJ          Create/Change/Display/Delete Object Link
C_DRAW_BGR          Authorization for authorization groups
C_DRAW_DOK          Authorization for document access
C_DRAW_MUP          Authorization for Markups
C_DRAW_STA          Authorization for document status
C_DRAW_TCD          Authorization for document activities
C_DRAW_TCS          Status-Dependent Authorizations for Documents
C_DRZA_TCD          Document Distribution: Authorization for Recipient Lists
C_DRZI_TCD          Document Distribution: Authorization for Distribution Order
S_ECL_CAT          ECL Viewer: Authorization Object for Stamp Categories
S_ECL_STP          ECL Viewer: Authorization Object for Printing with Meta Data
S_ECL_STP2          ECL Viewer: Authorization Object for Printing with Meta Data
Hope that it will help you
//Håkan

How to restrict a list of available attributes in query navigation?

Hi Experts,
is there any possibility to restrict the list of characteristic's display attributes in query navigation?
I need to secure Annual Salary from displaying in query navigation...
Regards,
Dorota

Hi Dorota,
You can provide the authorization for the object.if you do that only authorized user will be able to see that. See the below document :
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9315?QuickLink=index&overridelayout=true&50452981137364
Regards,
Neha.

Data Ownership Authorization for JEs & Banking

Hello All,
Is it possible to have data ownership authorization for documents other than Sales & Purchase documents? For a company with multiple branches, we need to block access of Financial related information such as JE, Incoming & Outgoing payments, Deposits of one branch to the other. Can this be done?
Any help on this would be highly appreciated.
Thanks & Regards,
Gyanesh Rupani
Edited by: Philip Eller on May 27, 2008 11:48 AM
Edited by: Philip Eller on Jun 10, 2008 9:13 AM*

Hello Suda,
Thanks for the reply. The requirement is that a user from one branch should not be able to see what the other branch is doing. However, stock levels at all the branches should be visible to any branch.
Hence, similar to marketing documents, the display of Journal Entries, Vouchers, Posting Templates, Inventory Transactions, Banking transactions of any given branch should not be visible to other branches.
Can this be accomplished using Transaction notification stored procedure or by some other means? If yes, I would appreciate if you can throw some light on it.
Thanks & Regards,
Gyanesh

Performance Appraisal documents display on portal

Hi All
I am working on PMS in EHP 6 environment. We have implemented column layout configuration for documents. My query is in the attached screen shot , how can we reduce the blank space between two columns. Also , is there any way to increase the width of note box so as to map with the full screen.
In the screen shot attached , the note box are also not coming in the sync , how can we arrange all the notebox and dropdown in symmetric way.
please guide
Thanks

Hi,
Please refer below link.
http://scn.sap.com/docs/DOC-53289
We have done changes in standard layout for leave. The same way you can change for PMS.
It is just for reference.
Thanks,
Ketul Patel

Multiple - Documents Display

All,
I am using fuction module ALINK_DOCUMENTS_DISPLAY to display Content server Documents.
So my question is
1. This function module have option to display only 1 document at a time. Is any other function module that can display multiple documents ?
2. Is any class available with the same functionality of the above said fm does ?
a®

Hi a®s,
I don't know of any FM for this purpose, but I think it should be possible.
For document display, SAP will always download a copy of the server content to the local SAP work directory. You can check this, if you display a document and, when open, check the directory.
Then they call the respective application (windows, excel, word) and create an OLE application to display/edit.
My idea is to download multiple files, create docking/splitter/dialogbox containers (one for for each document) and create document viewer instance in each control
C_OI_CONTAINER_CONTROL_CREATOR=>get_container_control
will get you the DOI Container, then
* initialize the SAP DOI Container, tell it to run in the container
* specified above and tell it to run application in-place
CALL METHOD mo_container_control->init_control
    EXPORTING
      r3_application_name      = 'whatever your title is here'(001)
      inplace_enabled          = 'X'
      inplace_scroll_documents = 'X'
      parent                   = mo_excel_container
      register_on_close_event = 'X'
      register_on_custom_event = 'X'
    IMPORTING
      error                    = mo_error.
*   get document proxy
CALL METHOD mo_container_control->get_document_proxy
    EXPORTING
      document_type = mc_document_type
    IMPORTING
      document_proxy = mo_document_proxy
      error          = mo_error.
Refer to this document Desktop Office Integration (BC-CI). It helped me a lot when I tried to integrate an excel application.
But to be honest, I did not try more than one instance of OLE application. But I do not see any obstacles.
If this seems too complicated, you may try to call your function
DATA:
gv_task TYPE char08 VALUE 'T0000000'.
    ADD 1 TO gv_task+1."increase numeric part of task name
    CALL FUNCTION 'XYZ'
      STARTING NEW TASK gv_task
This will open a new session.
Good luck, let us know...
Kind regards,
Clemens

Object level authorizations for reports

HI
I have 20 charactesr in cube , around 15 have navigational attributes.
i need to give authorizations for 5 objects only .( navigational attributes).
i have 10 reports, i need 2 reports only authorizations relavant.
if i restrict 5 objects authorizations , its effect all queris? in this scenerio i need to create 2 cubes?
ple let me know

hi suneel,
As you said you require authorization for 2 reports, you can restrict those Infoobjects with the authorization variables and in the other 3reports use that object but do not restrict to the authorization variables..
So, the user will be able to see whole data for 3 reports where authorization is not used.
Hope it is clear.
Thanks
Lavanya

HR authorization for Display the documents in SAP DMS

HI experts,
We want to control display authorization depending on the entry made in object link tab in DMS( DOcument Management System). We developed screen for HR master object link. When user executes cv03n and enters document No. system should check hr master number entered in object link. If the user has authorization for that hr master number in PA (personnel administration), then he should be allowed to display the document. Otherwise it should restrict him to display the DIR.
Now my query is how to achieve it. Can anybody provide me some solutions
I have one solution, whenever user enter document number in cv03n screen, system will first check hr master number entered in object link and it will check the Personnel Area, Employee group and employee subgroup aginst this hr master number. Say for ex: PA:1000, EG:1 and ESG:01 for HR number xyz.
Now system should check in roles assigned agaist user id for these PA, EG and ESG values. If user has got authorization for PA:1000, EG:1 and ESG:01 in HR roles,then he should allowed to display the document.
Now my query is how feasible this approach? is this tough task for abaper? or is there any easier approach than this.
regards
sham

Hi,
Try to use the User Exit: CNEX0002.
Check with your ABAP er for the enhancement.
Hope it helps..
Thanks!!!

How to create authorization role for just displaying query prefix Q and X.

Hi Expert,
I hope someone can help me on how to create authorization role for just displaying and executing BEX Queries prefix Q and X. I'm currently using SAP BI 7.1.
Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
-->Manually Business Information Warehouse
--> Manually Business Explorer - Components
Activity : Display, Execute, Enter, Include, Assign
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : *
Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
--> Manually Business Explorer - Components
Activity : Display, Execute
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : Q* , X*
Type of a reporting component : Query
But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
Please assist. Very much appreciate your help. Thanks.
Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

Question close. This issue has been resolved.

Need your help !!! -- Authorization error for Real-Time Bex query

Dear experts:
I have a Bex query built on a multiprovider, this multiprovider is consist of one standard cube and one real-time cube(virtual provider). When I run this query, I can retrive the data and no error occured, but when others execute this query, they will get the error message below:
Operation Generate a Request could not be carried out for DTP DTP_D7JVT8DGBQWPWL13VIUITNODG
You do not have authorization for the data transfer process
Errors occurred during parallel processing of query 2, RC: 3
Error while reading data; navigation is possible
Row: 54 Inc: WRITE_MESSAGES Prog: CL_RSDR_AT_QUERY
I used tcode rsecadmin to track the authorization, when I execute as user XXX, I can get the same error above, but when I go to "Display Log", no error showed there.
Did anybody meet the same error before? How to resolve that?
Any post would be appreciated and thank you all in advance!
Tim

I think there is some missing authorization,here
the user has no access to execute the DTP.
You can analyse it in rsecadmin or also see
which object you are getting in su53.
Thanks,
Saveen

Authorization for navigational attribute

Hi Gurus,
I am facing an authorization issue with respect to infoobject hierarchy. I have created authorizations as below.
There one infoobject 'A' and a navigational attribute 'B' in infoobject 'A'. This navigational atribure A_B is used in an infocube. And hierarchy is uploaded to Infoobject 'B'. Now I want to give authorization for this hierarchy in infoobject 'B'.
Now coming to authorization.
1. I have made Infoobject 'B' as authorization relevant in Business explorer tab.
2. Created authorization object say ABC in RSSM and inculded infoobject 'B' & 0TCTAUTHH (since I want to authorize the hierarchy and we are using 3.5 authorization concepts in BI 7.0).
3. Activate this authorization object for the infocube.
4. Included this authorization object in the role included for my user. In the field 'B' of authorization object I have given ' ' (space) and in the field 0TCTAUTHH I have given the technical name of the hierarchy.
4. In 3.5 query designer I have put this navigational attribute A_B in the filter area and activated the hierarchy in the properties tab for the same hierarchy that I inculded in previous step.
5. Created a variable with processing type authorization.
Now when I run this report I get an error as no authorization for object ABC.
Can someone help me if I have done anything wrong.
Thanks,
Sandeep

Hi,
In the infoobject A maintenance screen check the chekc box for field "AuthorizRelevant" for B to make it authorization relevant navigational attribute.
Then go to RSECADMIN and ope your relevant authorization.
In the menu bar just above the "Authorization Structure" you will find the button with icon of infoobject.
Chick on this icon this will give you a screen to enter characteristic name of which attributes are to be added to authorization.
Enter the infoobject A name here and click on continue.
This will give you list of all authorization relevant navigational attributes present for A.
Add B from this list to the authorization.
Hope this helps.
- Geetanjali

Authorization for documents display in query navigation

Similar Messages

Maybe you are looking for