Authorization for local objects only

Hi,
Is it possible to use authorizations in BW so that a user has read access to objects in a package, but has create/change access to local objects (i.e. $TMP)?
The reason I ask is that we don't want trainee's to damage existing objects but still have the ability to learn by developing. We do not have a BI sandbox environment, nor the time or capital to implement one.
Ian.

Thank-you for the response.
Do you mean something like flag all Z and SAP objects as not changeable for these users?
Development is still going on by different users and this should not be impeded.

Similar Messages

Create PR header text for local PR only

Dear all,
I want to create a new PR header text which is used for local PR ONLY.
I used tran. code SE75 to craeted a new text ID for PR. After created, the new header text item appeared in all PR types. May I ask how to do if I wan this PR header text appeared in local PR only.
Many thanks foe all of your ideas.
Thanks
Sunny

Hi,
As of my knowledge, the PO / PR texts CANT be created for a particular document type - It will be applicable for all document types in standard SAP. If you want the text to be visible for particular document type only, then you have to go for development.
Regards,
AKPT

Data Authorization for info-objects

Dear Experts,
We have designed a query in costing displaying the plan and actual costs by cost center. Our requirement is that that users shoul be able to see only those cost centers in the query which are relevant to them? How can I acheive this without creating multiple queries?. Is there any authorizatin abject that I can use for this purpose?
Regards
Suneeth

Hi,
Pls check the below
Data Warehousing Workbench u2013 objects/S_RS_ADMWB
Authorizations for working with individual objects of the Data Warehousing Workbench. In detail, these are: source system, InfoObject, monitor, application component, InfoArea, Data Warehousing Workbench, settings, metadata, InfoPackage, InfoPackage group, Reporting Agent settings, Reporting Agent package, documents (for metadata, master data, hierarchies, transaction data), document store administration, (Customer) Content system administration, broadcast settings.
Data Warehousing Workbench u2013 InfoObject/S_RS_IOBJ
Authorizations for working with individual InfoObjects and their subobjects.
Until Release 3.0A, only general authorization protection was possible using authorization object S_RS_ADMWB. General authorization protection for InfoObjects still works as in the past. Special protection using S_RS_IOBJ is only used if there is no authorization for S_RS_ADMWB-IOBJ.
Regards,
Marasa.

Authorization for info object

hi friends,
i have doubt in authorization. i created authorization object in rrsm, i created roles in pfcg and i need to enter my info object for this authorization, but i am unable to fing my info object in pfcg . how can i get this one. and when i want save my report in roles, can i create roles first and save that report in that role. ple give me clarification
Thanking u
suneel.

so,
i went pfcg , i created some role, some name like zrole, but i didnt find that role name when i was saving my querry in rrmx screen.
in pfcg i need create just role name or can i do any other thing.
today i was trying to create authorization for my one info object, i am not getting my output.
su ppose i have on einfo object M1_ODS , how can i give authorizations.
first businees explorer give authorization relevent
next RRSM create object and can i select radio button for object or cube. and move ur info object
in PFCG create rols and go to authorizations and give manually ur authorization object in (chnage authorization data) and i need create user and assign this user to my role. when i have seen with new use i am getting all bw liek normal when i open bw screen, i didnt find my only object in the new user.
in PFCG menu tab is red that is no problem .
Thanking u
suneel.

Copying from client through se71 is getting saved as local object only?

hi.
i am copying the form from std to z form through se71.but after doing copy from client,it is getting saved automatically s a local objct $tmp.
Also,there is no option enabled to save it to transportable object.
in se80,in the object list also that object is not reflecting.

check it
Re: local object to transport request for a form
just go to SE03 > object Directory > change object directory entries

Lightweight webserver for local testing only ?

Hi all
I use eclipse for web development and want to view my pages for local testing before uploading til www.
Are there any http servers available for this purpose only ? I've looked at the LAMP article in the wiki and I've tried XAMPP before, but it seems somewhat bloated if the only purpose is to see if my php-pages are correctly displayed :-/
And then there is the security issues!
Anyone have good experiences ?
I want to use:
- php
- MySql
- phpmyadmin
The best solution would be if eclipse has this setup built-in, but I can't seem to find a proper solution :-/

Well going on what I personally know works, I recommend apache.
But I've heard nothing but great things about lighttpd, and would definitely recommend looking into it as it's a much lighter solution.
As far as security goes, you should be fine if you take the proper precautions. And if you're only using it for local tests, you can use the hosts.allow and hosts.deny files in conjunction with apache/lighttpd configs and iptables to make sure only your local intranet can access the webserver.

Packages: local objects only for developer himself?

Hi there,
I developed a program that uses a proxy to communicate with SAP XI.
For the input data I created a dynpro.
If I call this dynpro with my credentials everything works fine. Another user
received a dump while trying to send data.
I created all these objects (proxy, abap program, dynpro) in the local package
$tmp. Is this the reason the dump appears? I thought $tmp is like a normal package
but not transportable to other systems.
The dump says that the reference to the proxy classes is null.
Do I have to create a usual package that other user can access my objects?
thx
chris

Thanks. It works. I always started the program out of se80. For other users
I defined a transaction code. The tcode directly started a dynpro without
inital the the variables.
Debbuging displays this error.
Thanks a lot.
greetz
a newbie

Authorization for adding attachments only while approving P.O

Hi
We work with SRM5 SP14.
we are intrested in adding an authorization to PO approvers for adding attachments/texts in the "documents" tab in item & header.
Is this a customizing process or role change?
Thanks
Hila

Anyone???

Would like to see on line the options (cost) for local service only

I saw a page the other day, and there was a local plan for $18.17
Now I can't find it back, no matter how much searching I do. I an area code 812-prefix 794.
Now the cheapest I can find is the Verizon Unlimited Local Service....at this link.
http://www22.verizon.com/Residential/Templates/Products/ProductDisplay.aspx
Can anyone help please?
Tia.
Sue
Solved!
Go to Solution.

I ended up calling them, and found out there is an even cheaper local land line service than what I had seen and then discussed with a rep days ago. It is just $14.17 and an additional $3.50 for call waiting, and then the usual taxes and additional charges. I have unlimited calling to 3 local towns, and have signed up for a Long Distance plan with another company that is 4.5 cents a minute, and even breaks the minute down into increments.
I'm a Verizon/Gte retiree, and will now be able to get the retiree concession rate since I no longer have one of the packages. They are practically 'giving' me my service.
Sue...a happy camper!

Use Time Capsule for local backup only

Hi there,
I think I can do what I need to but need some config assistance. Here is my issue:
I want to use a time capsule that is attached via ethernet cable to my MacBook Pro to backup via Time Machine but I do not need the TC to be used for wireless access.
I have taken the 2TB TC to my office. I have a full WiFi network there that I attach my Macbook to. I have used the AirPort utility and told it to extend a wireless network for the TC. I have given it the credentials for our office network. It seems to be attached (DHCP address assigned) but the TC light keeps flashing yellow.
I see the TC in Time Machine on my MacBook and it is doing an incremental backup (it's been about 2 weeks since the last one so it's big!). However, it seems to be backing up over the office WiFi network and not the locally attached ethernet cable.
So do I need to just disable WiFi altogether on the TC? If I do, it doesn't seem to make the Time Machine volume available to the my Mac. When I go into my Mac's Network Preferences now, and look at the physical ethernet port, it says "self assigned IP address" so I don't think the ethernet cable plugged into the TC is actually doing anything.
Can someone tell me how to correctly set the TC up to locally backup my MacBook through the Ethernet cable but let my MacBook use the company WiFi network for other network activities? Thanks much in advance for the help!

If your office network is created by non-apple routers, then the TC is working in join wireless mode and will turn off the ethernet ports.. in other words you have no connection at all by ethernet and it is irrelevant.
To get this working you will need a pretty snazzy setup..
So first and really important question.. since you are prepared to have something plugged into your MBP.. why not use a USB drive. It is much faster.. even USB2.. and if newer model with USB3 it will completely flatten any network drive. It is much more reliable.. Time Machine operates differently to local drives. And you can also use a program like CCC and create a bootable clone. This is on top of TM backup and well worth it.. A bootable clone will enable your computer to start even with a dead hard disk in a couple of minutes.. not days of sorting through TM.
Anyhow.. To get TM to work to the TC in isolation
1. Factory reset the TC.
2. Do minimal setup of the TC.. it must stay in router mode but simply ignore errors of no internet connection.
3. Here we get to the tricky bit. Open the network preferences and check the IP you get from the wireless office system.
If it is 192.168.x.x for example all will be great. If you get 10.0.x.x or indeed any 10.x address tell me.
The TC will have an IP 10.0.1.1 and will pass the computer 10.0.1.2
What you need to do now is set that statically and change the gateway (router in applespeak) and DNS values.. In most computers you can leave them blank but I found the apple computers prefer you to fill them in so you should copy the values from the wireless connection.
There is a longer discussion of it here.
Can Time Capsule be set up as a second, local network?
This is fairly old but the principles are the same albeit the utility is v5.
If you cannot figure it out post back and I will figure out a v6 set of screenshots.
What I will need to know is the values your wireless gets.. IP, subnet, router, and dns.

Authorization for credit memo only in MIRO.

Hi,
We need to provide MIRO access to an user who is supposed to do only "Credit Memo".
All other options like Invoice, Subsequent credit/debit are not to be made available to him.
Can this requirement be met with...?
If so, please provide your valuable ideas.
Regards,
Siva

Hi,
this is one possible solution:
MIRO - Subsequent Debit
Best regards.

Authorization for generic object services - GOS - payroll data

Is there anyway to restrict what people see via GOS? I can't see any authorisations behind it except S_OC_ROLE. Seem users can view payroll details of a workflow agent in the workflow logs(view with technical details). Its a wild shot that an end user will find this information in the container tab but it look like a massive security flaw.
I will be interested to know if others have the same problem and how they resolved it.
Thanks

This issue relates to authorisations. Depending on infotypes available to the user, they will be able to view data relating to the info type.
I will now have to review all authorisations to ensure there is no unauthorised access.

Object level authorizations for reports

HI
I have 20 charactesr in cube , around 15 have navigational attributes.
i need to give authorizations for 5 objects only .( navigational attributes).
i have 10 reports, i need 2 reports only authorizations relavant.
if i restrict 5 objects authorizations , its effect all queris? in this scenerio i need to create 2 cubes?
ple let me know

hi suneel,
As you said you require authorization for 2 reports, you can restrict those Infoobjects with the authorization variables and in the other 3reports use that object but do not restrict to the authorization variables..
So, the user will be able to see whole data for 3 reports where authorization is not used.
Hope it is clear.
Thanks
Lavanya

Screen 910 getting saved in Local object - not even asking for Package

Hi ABAPers,
I am using Enhancement CONFPP07 and for this created Z project in CMOD.
When I am creating the screen 910 for the screen exit SAPLCORU_S of that Z Project, that 910 is getting created in Local object not even asking for the Package and the request.
I tried to create that screen from the SE80 in the function group XCOF, there also it is getting saved in local object.
I tried to do it from SE51 also, but arrived that screen in the local object only.
Please Suggest me with your valuable comments.
Thanks and Regards
Pinaki Mukherjee

Do a version management on the screen and see if it was ever created before and then deleted. If so, reassign it to the package you want.
Rob

Object level authorizations for deffirent user restrictions

Hi
i have 1 object, this object have only 3 values?
i need authorizations for this object at report level?
rsa1- i keep authorization relevant?
rsecadmin i can include this object , here i need give from value and to value? i have 3 values only? suppose user 1 want only 1 value? user 2 need 2 and 3 value? how can i restrict like this ? ple let em know

Hi Suneel,
Go to RSECADMIN.
Here, in maintain authorizations, create authorization for your characteristics along with the special characteristics.
i.e. in your case, create authorization(assume 0plant is marked as authorization relevant)
0PLANT
0TCAACTVT
0TCAIPROV
0TCAVALID
Double click on each characteristic to assign them the authorized value set.
Thus, you will create two authorizations
Z_PLANT_1
0PLANT...................I..EQ..............1
0TCAACTVT.............I...EQ..............3
0TCAIPROV.............I...EQ..........ZPROVIDER
0TCAVALID..............I...EQ...........*
Z_PLANT_2&3
0PLANT...................I..EQ..............2
..............................I..EQ..............3
0TCAACTVT.............I...EQ..............3
0TCAIPROV.............I...EQ..........ZPROVIDER
0TCAVALID..............I...EQ...........*
Go to RSECADMIN again in user tab in assignment, assign these authorizations created to the respective users.
Like assign User1 -
>Z_PLANT_1
................User2 -
>Z_PLANT_2&3
Refer the link below for more information
[Analysis Authorization|http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm]
Hope this helps,
Best regards,
Sunmit.

Authorization for local objects only

Similar Messages

Maybe you are looking for