Authorization for production

Hi all!
We are creating Add on for SAP Business One.
We want to authorize for user who create Production order. They only review themself documents that they created. Another user can not.
Can you help me .
Thanks!

Hi,
Why don't you give modification changes to the user who creates the documents itself.
That is nothing but pls check the user name from the document and allow to change the doccument if the current user is ths owner of the document itself. other wise generate the message says that he/she is not the person to change the production order.
Regards
Chidambaram

Similar Messages

Role authorization for product selection

Hi All,
i have a requirement for which i need your help. Now my Account Manager can see all products while placing an order. I want to restrict his selection to only 5* and 6* products. That means when he will look for placing an order in the next time, he should only see 5* and 6* products not all products. Can you please tell me how to go about this role authorization.
your valuable inputs will be appreciated.
Regards,
Sasmita

Hi,
I feel Access Control Engine would be the most elegant and futuristic solution.
However, you need to review all the solutions suggested. Solution suggested by Shalini and Ashish are more practical. However, generally partner product range is used in case of Sold-to parties.
Please review all the solutions suggested and take decision based on circumstances at your client's end.
You can get more information about Access Control Engine at
http://help.sap.com/saphelp_crm40/helpdata/en/04/0177f9bb67ac4cafb84bb4d4c1d8fc/frameset.htm.
Also there are several guides and cookbooks on ACE at service market place.
Regards,
Deepak

Authorizations problem for Product Hierarchy

Hi,
We have a requirement in which we need to restrict authorization for the product hierarchy based on secret products. The material object has an attribute called secret indicator which has Y/N values. We need to restrict the users based on this attribute. The restriction should be such that the users should not even be able to see the nodes for secret materials in the product hierarchy if they are not entitled to it.
Any pointers ?
Thanks
Shailesh

Can you create two different hierarchies, one with secret nodes and one without? Then you could create an authorization object on the Secret attribute and check the authorization in a user exit.
You would then use a user-exit variable that is filled automatically (no user input) and fill it depending on the authority check with hierarchy 1 or 2.
You could also write an ABAP that filters the secret products out of the first query. It is a bit complicated.
Best regards
Dirk

Authorization for Cost Analysis in Production Order

Hi,
Can I maintain the authorization for displaying cost analysis in production order.
I try to create transaction variant....into ZCO02 and ZCO03
but in COOIS it is still branching to CO02 when changing and CO03 when displaying.
I want to disable the cost analysis view in production order so PP people can not access it.
is there any idea?
Please help.
Best regards,
Freddy Ha

Hi,
as i know K_ORDER is authorization for internal order.
We have activate the check in SU24,
but when we tried to trace the authorization when CO02 -> GOTO -> COST _> ANALYSIS
this auth K_ORDER is never check.
Did I miss something here?
Best regards,
Freddy Ha

Authorization check for production order settlement

Hi All,
Production order settlement currently can be done by any user of any company code. there is a high risk involved in the same since unauthorized postings may happen. Hence we need to add authorization check for production order settlement. Can we maintain the same at the plant or the company code level?
Waiting for your replies. Thanks in advance!
Regards,
Aman Goel

hi
What venki has told abt the exit, its absolutely correct.Even i have used the same exit
 From table CAUFV pick Material(PLNBEZ),Basic Start Date(GLTRP),Plant(WERKS) .
 Pass parameter Material(PLNBEZ) and Plant(Werks) in table MBEW in respective fields i.e. Material(MATNR) and Plant(WERKS).
 Pick the latest record for the current period(LFMON) and year(LFGJA).
 Pick Product Cost Estimate number(KALN1) from the record and pass it to table KEKO.
 Check if Production Order Basic Start Date(GLTRP)<= BIDAT, if NO post Error Message.
This is the FS for EXit PPco0007
Reward if useful
Amit

Add new authorization object for production order creation/change/display

As mentioned. I definded new authorization object using "Production scheduler" (Field Name : FEVOR) by SU20. then use SU21/SU24 to add authorization object for some transaction code such as COOIS. use PFCG maintain new role and assign a fixed production scheduler value and assgin transaction code COOIS to this role. create new user ID and assign to that role.
logon system with new ID, run COOIS. but system don't check new authorization object(production scheduler). who can tell me why it is and how i can add new new authorization object for standard transaction code?
Thanks.
Kevin.WU

Hi,
there is an icon of generation. just click there in PFCG and also in su21.
then add this object in new role.
Assign this role to user id
while assigning the role also there is a generation.
Please take a help of BASIS consultant also as this is entire a BASIS process.
Regards
Amit parkhi

Error during goods receipt of Finished goods for production order

hi friends
pls help me iam struggle this issue and mentioned the issue .
when i do goods receipt for production order system getting error like
No price could be determined for material/batch FG/ plant ZTP
     Message no. CK 465
Diagnosis
     The system could not calculate a price for material/batch FG/ in plant
     ZTP for valuation view 0, because none of the valuation strategies in
     valuation variant 007 was successful.
System Response
     User-defined error management enables you to specify whether the message
     is an error message, a warning message or an information message.
     o   If you have defined the message as a warning message or an
         information message, the costing item will be entered in the cost
         estimate with a value of zero.
If you have defined the message as an error message, the cost
estimate contains an error or errors.
-   In the case of a material cost estimate, the system sets the
    status KF.
-   If it is a cost estimate without quantity structure, or base
    object cost estimate (that is, a unit cost estimate), the
    system cannot proceed with costing until you have corrected the
    errors.
If the system issues a termination message, the cost estimate cannot
be processed, and processing is terminated.
procedure
    o   Check the master data for material/batch FG/ in plant ZTP.
    o   If you have authorization for Customizing, check the valuation
        strategy for materials in valuation variant 007.
    Note
    If the message is a warning message or an information message, there is
    a danger that materials with errors will be ignored by the system.
    If, because of this, you issue a warning message and at the same time
    include materials with a zero value in cost estimates, you can make the
    following settings for these materials in the costing view of the
    material master:
1. Enter a very low price in the planned price 1, 2 or 3 fields
      manually, for instance 0.01 USD. These prices are used for costing
      purposes only; they are not read by other applications.
2. Enter the highest price unit possible, for example 10000.
      Note: If you enter a new price unit that is higher than the costing
      lot size, the system increases the costing lot size accordingly.
3. Change the valuation strategy, such as strategy 4, where you could
      enter the planned price field in which you entered the low price.
      The system now costs as follows:
      Using the valuation strategy, the system finds planned price 1, 2 or
      3. Due to the low price and high price unit, the system rounds the
      value to zero. However, the cost estimate still obtains status KA
      (free of errors), and no error message is issued.
      This procedure can be used for all materials that have caused error
      message CK465 to be issued.
with regards
dinesh
Edited by: code acess on Nov 8, 2010 4:06 AM

hi ragavendra,
this is dinesh .i maintained the costing view and planned price. but again i have same error.so please reply me where i missed the data
with regards
dinesh
Edited by: code acess on Nov 9, 2010 4:01 AM

Best Practice for Production environment

Hello everyone,
can someone share the best practice for a production environment? or is there a SAP standard best practice to follow in a Production landscape?
i understand there are Best practices available for Implementation , Migration and upgrade. But, i was unable to find one for productive landscape
thanks.

Hi Siva,
What best practise are you looking for ? If you can be specific on your question we could provide appropriate response.
From my basis experience some of the best practices.
1) Productive landscape should have high availability to business. For this you may setup DR or HA or both.
2) It should have backup configured for which restore has been already tested
3) It should have all the monitoring setup viz application, OS and DB
4) Productive client should not be modifiable
5) Users in Production landscape should have appropriate authorization based on SOD. There should not be any SOD conflicts
6) Transport to Production should be highly controlled. Any transport to Production should be moved only with appropriate Change Board approvals.
7) Relevant Database and OS security parameters should be tested before golive and enabled
8) Pre-Golive , Post Golive should have been performed on Production system
9) EWA should be configured atleast for Production system
10) Production system availability using DR should have been tested
Hope this helps.
Regards,
Deepak Kori

Authorizations for which transactions are required in BW?

Hi,
Can any ony please give some information regarding
Authorizations for which transactions are required in BW Production Support?
Regards,
Aryan

Hi Aryan,
Authorizations for the following transactions are required in BW
1. RSA1
2. SM37
3. ST22
4. ST04
5. SE38
6. SE37
7. SM12
8. RSKC
9. SM51
10. RSRV
11.RSPC
13.RSMON
The Process Chain Maintenance (transaction RSPC) is used to define, change and view process chains.
Upload Monitor (transaction RSMO or RSRQ (if the request is known)
The Workload Monitor (transaction ST03) shows important overall key performance indicators (KPIs) for the system performance
The OS Monitor (transaction ST06) gives you an overview on the current CPU, memory, I/O and network load on an application server instance.
The database monitor (transaction ST04) checks important performance indicators in the database, such as database size, database buffer quality and database indices.
The SQL trace (transaction ST05) records all activities on the database and enables you to check long runtimes on a DB table or several similar accesses to the same data.
The ABAP runtime analysis (transaction SE30)
The Cache Monitor (accessible with transaction RSRCACHE or from RSRT) shows among other things the cache size and the currently cached queries. The Export/Import Shared buffer determines the cache size; it should be at least 40MB.
****Assign Points If Helpful****
Regards,
Ravikanth

BW authorizations for standard development

For a training workshop, I need to define some authorizations for the trainees. They shouldn't be allowed to do whatever they want on the BW and R/3 systems. So I can't give them the SAP_ALL profile!
On the source system, the users would be allowed to do something like the following:
- Activate DataSources as local objects (in the package $TMP or in test packages T*);
- Edit the DataSource's active version;
- Edit the function EXIT for the LO DataSources (can the EXIT be a local object?)
On the BW side:
- Replicate the DataSources;
- Create DataSources for the FILE source system;
- Create export DataSources for the myself source system;
- Develop data models and flows;
- Start InfoPackages;
- Develop and run BEx queries.
All these BW objects would be local (yes, this is the default behaviour in BW -- but how can I be absolutely sure a user is prevented altogether from putting an object in a productive package by mistake?)
I'm not a security expert.. Can you give me some good advice and send me some links to useful docs on this topic?
Thanks, <a href="https://wiki.sdn.sap.com/wiki/display/profile/Davide+Cavallari">Davide</a>

Hello David,
using BI Authorizations in BW and then adding data level security in the Universe on top of that will only lead to situations like you have now.
Data Level security goes into BW alone or into the Universe alone, mixing both will lead to issues and remember that the Universe has far less capabilities in this area.
0BI_ALL is only related to data level security, so the fact that you see the request for 0BI_ALL in the trace clearly shows that your defined data level security entries contradict each other somehow and that BW then requires 0BI_ALL for the user to give the data that was requested.
like I said above, not a good idea to mix those data level security concepts. all data level security should be in BW already.
Also - why even use the Universe inbetween ?
regards
Ingo Hilgefort, SAP

'Authorization for replace' sy002

SAP System gives me this error in debbuging mode. I suppose it is something related to authorization when modifying the content of variables (which is what I was doing).
What would be the problem ?
Thanks in advance.

> The message is 'No authorization for replace' - message type sy002.
I am not logged on and still dont know which program you are debugging... The system might be throwing an error message which does not relate to the real cause. Unlikely... Most likely an authorizations issue. If I may be honest with you (no offense!) if you do not know which object controls debugging and what it does to a SAP system..., then I would personally not give you debug authority in a system (I also do not have any debug authority - it was removed from my roles at my request). Only in some lab systems... (an one or two temporary exceptions).
> The change mode is not activated however I am supposed to be able to debug a program in Test System even changing the value of a specific variable defined in the program. In fact, I am allowed to debug the program but I can not change the value of a variable in debugging mode. (Perhaps it is because of the change mode status). That's why the system is showing me the error.
So you cannot activate the change mode? Are you setting a break-point, a watch-point or are you running a it from the start in the debugger? Are you executing it in the debugger from the tcode, or from Se38 etc? It the "productive" test client, the system might also react differently (which release are you on and which SCC4 settings does that client have?).
> Is it possible to change the authorization without having to make any more changes in the System?
Don't do that. I would reject the development and ask the developer to join you for the debugging session to see why those variables are incorrect. Your debugging mthod (or mode) may be incorrect (likely), or, the developer will have to go back to the drawing board in a development system or sandbox (sort of equaly likely, depending on the developer).
> The change mode can not be activated instead I want to grant access in order to be able to change the value of some varibles defined to see the results given.
See above. Besides that, the developer should ideally have handled those exceptions so that you do not get an incorrect variable; you only get an incorrect output in display mode (and send their code back for a rework, or invite them over...).
Hope that helps, sorry for the many questions...
Julius

How check the Strategy, if no authorization for SPRO?

Hello Experts,
                       Can someone please help on how to check the Strategy for the Release codes, if we dont have the Authorizations for SPRO in the Production Server.
Please help
Thank in advance.
Regards,
Yawar Khan

Hello Yawar,
You can use the below DB tables to see the release strategy configurations.
T16FB     Release Indicator: Purchasing Document
T16FC     Release Codes
T16FD     Description of Release Codes
T16FE     Descriptions of Release Indicators: Purc
T16FG     Release Groups
T16FH      Descriptions of Release Groups
T16FK      Release Statuses
T16FL         Release Indicators: Service Entry Sheet
T16FM         Descriptions of Release Indicators for SES
T16FS         Release Strategies
T16FT        Descriptions of Release Strategies
T16FV        Release Prerequisites
Regards
Greg

Issue for Production

We are getting the following error when we use the "Issue for Production" form
"StoreDocData: 0 : The Loged on User does not have permission to use the object"
Is there an authorization I have missed?
Thanks,
Rob

Hi,
Please check if you are using any add-on and the user has relevant permission.
Also please check the code if any, given in SP_Transaction Notificication.
Regards
VIkas
SAP Business One Forums Team.

You have no authorization for this transaction in plant: M7120

Hi guys.
I am getting the error message(M7120) "You have no authorization for this transaction in plant XXXX" when performing 101 movement for production order using MIGO.
/nsu53 doesn't return any object. Why?

Hello Arun,
It is a standard message. SU53 should show the exact authorization object which has been blocked. Or you can also try to check this with T code ST01.
Refer the below threads & seek help from your basis consultant to get this resolved.
Authorisation missing
authorization error in mbbs transaction | SCN
Regards
Mangesh S

Demand Planning - No authorization for all characteristic values selected

Hello All,
I am trying to load the data and it is giving error "You do not have authorization for all the characteristic
values selected". I can access the data in sandbox but not in Development. SU53 of both are same.
Also the roles are same in both the system. /sapapo/mc77 - maintain selection assignments is also same in both the systems.
Thank you for the help.
Regards
Pratap

Hi,
This is a case of inadequate authorization for display or execution of demand planning.
I don't understand what you exactly mean by
"su53 of both are same".
SU53 gives you a list of the authorization check that the system last executed on the ID.
Here r some suggestions. do an su53 immediately after the authorization error message is flashed.
It shall give you the authorization object which is required for that activity that you were attempting.
Also it suggested the name of role/s which have the required authorization object already present.
It is possible that you might have ALL authorizations in dev system, but the quality and production systems are usually the area where selective authorizations are to be used.
Hence the basis team might not have given you all the authorizations in the higher system where you are facing the above issue.
Hope this helps
Regards

Authorization for production

Similar Messages

Maybe you are looking for