Authorization for project (table PROJ)

Hi experts !
I would like create role for PS modula which is limited to field Object Class equal Investment. Itu2019s impossible. How I can check which field I can use for authorization for project (table PROJ).
Rgds Stenwa

Stenwa,
there are no user fields in the project definition. Instead you will find them in the WBS element. In that case, you can use standard authorization objet C_PRPS_USR to check on the user fields, but, as I say, it will not point to PROJ but to PRPS.
CNEX0002 is a user exit to enhance authorizations in PS. You can check it in SMOD and create an implementation in CMOD but you will need the help of an abaper to create the necesary coding.
Rgds
Martina

Similar Messages

Authorization for project relase

Hello PS Guru's,
1. I have a requirement, for a user ID he have authorization to use tcode CJ20N. but in this tcode he should not be able to release the project. I know this can be achived through user status management, but we dont want to implement any user status. Can anyone plz suggest me how to achive this with the help of authorization.
2. Also User is authorized for X company code, this is maintained at org level in his role, but the system allow him to create the project for Y company code?
I have also tryed to trace the process but there is no specific object hit during company code assignment as well as for status change.
Please through some highlights for the same.
Regards,
Tushar

Hi,
For authorisation b/w company codes you can try with object A_S_ANLKL
Controlling area authorisation for project def. - C_PROJ_KOK
Or else use user exit on saving to check the value while saving
or else try VALIDATION
regards
pv

Authorization for User Table (User-Defined Windows)

Hi Experts
I want to restrict access for specific users to User Defined Tables. Is this possible?
Regards
Nabeel

You can do it by using Additional Authorization Creator Winow
1. Open Additional Authorization Creator Window.
2. Click on 'Add Same Level ' Button
3. On the Right side window, Type in
Authorization ID = 'Activity Subject'
Name = 'Activity Subject'
Option = 'Full/ ReadOnly/ No Authorization"
4. In form ID, press 'Edit Butto' and type Form Id of the UDT
5. press OK to close this window
6. Open 'General Authorization' Screen
7. On the Right Side, navigate 'User Authorization'
8. Scroll down ''Activity Subject' and select the user and Set appropriate authorization('Full/ ReadOnly/ No Authorization")
9. Now Log off and Login with user.
You can see the authorization in effect.
Similarly you can do for any window which are missing in 'General Authorization'

Authorizations for Projects (Restricting Read/Write to users )

Hi
I want to know how I can .
1) Restrict one users from editing projects of each others in xMII Workbench.
(for ex. User A shud not be able to modify the projects created by user B)
Tell me the steps.
Regards
Tulip

Just some info on MI 12.1 if you are thinking about upgrading...
MI 12.1's Content Management could solve your issue. In this version of MI, you can restrict content developers to shared projects. Shared projects are versioned by the repository thereby allowing developers to track revisions to all MI objects (queries, display templates, HTML pages, etc.). So if developer 1 makes incorrect changes to developer 2's web page, developer 2 can create a new version based on his previous correct version. You should evaluate CM if you are upgrading to 12.1 and have curious developers deleting important content.
Regards,
Kevin

ECC 6.0 and BI Authorizations in Project Implementation Phase for Dev only

I ) ECC 6.0 Authorizations for Project Team
     I have browsed through SDN and gone through several documents and perhaps trying to post our senario as clearly as possible for better answers
Aim : 1) To give appropriate authorizations to
      a) Functional Consultants
      b) ABAP developers
      c) BI consultants
      in Development environment only on Customizing client,
      sandbox client and unit testing client
There is no inhouse security consultant in house at this time.
Type of Oragnization : Midsize
project Life cycle phase : Bluprint-Realization
Question1:
     What role and profile should I assign to functional consultants by preparing a role from the SAP standard role and what is the best way to restrict functional consultants from sensitive areas.
eg: Modifying SAP_ALL option and assigning it to functional consultants.
II.
BI 7.0 Authorizations for BI consultants in Development environment
Aim: 1) To give authorizations to BI 7.0 consultants (using only ABAP          stack)
Question: I have read through some forum and wiki answers in sdn and many explain that give SAP_ALL and SAP_NEW to BI consultants and in addition give 0bi_all, SAP_BW_DEVELOPER and much more.
    Can some body list what are the needed Roles for this kind of users ?
I know in theory many talk, do not assign SAP_ALL, but the person who advice this never explained the best alternative, and none of them I know have practially told that they have not assigned SAP_ALL.
Please explain . I think asnwering my question will bury many questions in this fourm .

Hi Nick,
Did you get the answer? I'm lookinf for the same information about profiles.
Thanks!!

No authorization for maintaining

hi
i am trying to enter the tcode VOFM system shows this massage
Authorization for displaying table TFRM only (authoriz. grp VS)
Message no. VP260
Diagnosis
You do not have the authorization for maintaining object S_TABU_DIS and the authorization group relevant for the table (maintained in table TDDAT).
System Response
No authorization for maintaining
Procedure
Enter the authorization for the object and the group in the user master record, if the user is to be authorized.
help

Hi sdnguna ,
when the message was displaed, use
Menu system->ustilities->Display authorization Check.
Send this screenshot to responsible team.
Regards,
Clemens

S_TABU_LIN for multiple tables.

Hi all,
I've tried to switch on S_TABU_LIN authorizations for few tables. I've found for one
attribute you can define just one field from single table.
When I've tried to customize few attributes (all of them for the same field -> WERKS) and for each of attribute define different table it doesn't work. Does it exist andy method to customize few tables for chack against S_TABU_LIN?
Or maybe the only way is to define for each table different oranizational criteria?
Best regards:
Lukasz Tylutki

Hi,
As said,The flag is not set because I need it for just few tables.
Then you can restrict only for one table.
If you want to restrict for mutiple tables,then you have set the flag.
go thru these documents...
http://csc-studentweb.lr.edu/swp/Berg/Conferences/SAP_NW2008_and_Admin_2008/ADMIN/Track3/Track3_session4.pdf
http://www.cumulusiq.com/contents/search_detail/1409-line-oriented-security-in-sap-with-s_tabu_lin
Thanks,
Sri

Table name and field required for Project name

Hi Guys
I need to print Transfer order print out
Which Table and field I need to take to print Project number (Original format) BSA01.000045.00002

hello,
if i am right in understanding your question, then you wanted to know the technical details about the project number or should i say project id, from which wbs elements are created, on which we finally place the orders.
if this is what you want, then for getting the prject number for a particular order, at the table level, follow the below steps -
using the po number or order number as an input in ekkn table, along with the po line item, you will get the wbs element for the order number for that particular po line item.
and using this wbs element as an input in prps table, you can find the current project number.
finally using this current project number as an input in the table proj, you can find the project id or project number = proj-pspid
so you will require 3 tables to get the required details.
hope this helps you.
Regards,
Zafar.

Lock for PRPS table(CJ20N) project.

Hi
I am trying to LOCK the project(table PRPS) using OPEN FI Func module.
But its not possible.
Below is my observation.
using Below FM to lock
L_V_PSPID = PRPS-PSPHI
   CALL FUNCTION 'ENQUEUE_EC_PROJS'
    EXPORTING
      MODE_PROJ_ENQ = L_V_ENQMODE "E
      TYP            = L_V_ENQTYPE "P
      PSPID          = L_V_PSPID   " XXX-1234457 "project
    EXCEPTIONS
      FOREIGN_LOCK   = 1
      SYSTEM_FAILURE = 2
      OTHERS         = 3.
When i execute in OPENFI, Lock record is created for XXX-1234457
But when i update using transaction CJ20N, new lock record is created
as XXX1234457(without hyphen) and lock is not done.
Which parameter should be used in PSPID?
Should i have to use PROJ-PSPID? or PRPS-PSPHI?
Regards
prince

Hi Prince,
    CALL FUNCTION 'ENQUEUE_EC_PROJS'
         EXPORTING
              TYP   = 'P'
              PSPID = PROJ-PSPID
         EXCEPTIONS
              FOREIGN_LOCK   = 01
              SYSTEM_FAILURE = 02.
The above functional module works fine and in your code remove the mode you r passing and you need to pass PSPID values not psphi.
Regards,
S.C.K
Edited by: Chandrakumar S on Jan 12, 2012 2:49 PM
Edited by: Chandrakumar S on Jan 12, 2012 2:50 PM

Table for project management

Hi,
I want to know the name Table which is used in the Project Buider or in creation of the WBS Element.
Regards,
Kapil.

Hi
For project preparation table is PROJ
and for WBS table is PRPS
Thanks & Regards,
Krish

Report S_ALR_87013105 : no authorization for the report/ table 7KU6_001

Hi Gurus,
While executing the program S_ALR_87013105 (Detailed Reports
For Sales Order : Plan/Actual Comparison ) system showing the selection log.
"Have no authorization for the report/table 7KU6_001 and 7KU6_002".
But for the user the authorization check through SU53 was successful.
Pl can any one suggest on this issue.
Thanks in advance,
Vijay

Hi,
Contact your basis consultant to provide the missing authorisation. This is one of the authorisation object.
Regards,
Sankar

Display authorization for particular line of table

Hi Experts,
I have a Z table contains sales area data. I want to display those records only which user has authorization for the sales area. It is possible through the table maintenance event or there is any other way to achieve this.
Quick response will be appreciated.
Thanks in advance for your sincere help.
Cheers,
Anil

Hi Anil,
Yes,Its possible through table maintainance event itself.
Only thing u need to do is check for the sales area the user is authorized..using
FM: SUSR_USER_AUTH_FOR_OBJ_GET
SEL_OBJECT:- CRM_ORD_OE.
Hope it helps!!
Regards,
PePe

RFC-enabled authorization checks for specific tables?

I am developing an Excel application which calls several BAPIs and RFC-enabled FMs, most notably RFC_READ_TABLE. While I will provide security at the FM level by checking S_RFC for these FMs, I need to find a way of restricting access for users to specific tables based on certain table fields? Is there any SAP-delivered FM/BAPI that will let me do this?
My understanding is that although RFC_READ_TABLE does check S_TABU_DIS, it only checks tables based on their belonging to a particular table classIt is not checking authorization for an individual table. What this means is that users will need to have access to the table class or classes to which the table or tables belong, for any tables that are being read by RFC_READ_TABLE.
Please correct me if I am wrong in my understanding, or if there is a standard solution for a situation like this.

Hi john,
1. What this means is that users will need to have access to the table class or classes to which the table or tables belong, for any tables that are being read by RFC_READ_TABLE.
U are perfectly right.
2. The users will have to be given rights
   NOT TABLE WISE,
   But authorisation group wise.
3. Note : S_TABU_DIS
   The main purpose of this authorisation object
   is for standard tools like sm30 only.
   Its also used in the FM RFC_READ_TABLE .
regards,
amit m.

What is authorization object and how to create it for a table

Hi All,
What is authorization object and how to create it for a table?
Thanks

Hi
Authorization
For authorization checks, there are many ways of linking authorization objects with user actions in an SAP system. The following discusses three possibilities in the context of ABAP programming.
Authorization Check for Transactions
You can directly link authorization objects with transaction codes. You can enter values for the fields of an authorization object in the transaction maintenance. Before the transaction is executed, the system compares these values with the values in the user master record and only starts the transaction if the appropriate authorization exists.
Authorization Check for ABAP Programs
For ABAP programs, the two objects S_DEVELOP (program development and program execution) and S_PROGRAM (program maintenance) exist. They contains a field P_GROUP that is connected with the program attribute authorization group. Thus, you can assign users program-specific authorizations for individual ABAP programs.
Authorization Check in ABAP Programs
A more sophisticated, user-programmed authorization check is possible using the Authority-Check statement. It allows you to check the entries in the user master record for specific authorization objects against any other values. Therefore, if a transaction or program is not sufficiently protected or not every user that is authorized to use the program can also execute all the actions, this statement must be used.
AUTHORITY-CHECK OBJECT object
                        ID name1 FIELD f1
                        ID name2 FIELD f2
                        ID namen FIELD fn.
object is the name of an authorization object. With name1, name2 ... , and so on, you must list all fields of the authorization object object. With f1, f2 ... , and so on, you must specify the values that the system is to check against the entries in the relevant authorization of the user master record. The AUTHORITY-CHECK statement searches for the specified object in the user profile and checks the useru2019s authorizations for all values of f1, f2 ... . You can avoid checking a field name1, name2 ... by replacing FIELD f1 FIELD f2 with DUMMY.
After the FIELD addition, you can only specify an elementary field, not a selection table. However, there are function modules available that execute the AUTHORITY-CHECK statement for all values of selection tables. The AUTHORITY-CHECK statement is supported by a statement pattern.
Only if the user has all authorizations, is the return value sy-subrc of the AUTHORITY-CHECK statement set to 0. The most important return values are:
·        0: The user has an authorization for all specified values.
·        4: The user does not have the authorization.
·        8: The number of specified fields is incorrect.
·        12: The specified authorization object does not exist.
A list of all possible return values is available in the ABAP keyword documentation. The content of sy-subrc has to be closely examined to ascertain the result of the authorization check and react accordingly.
REPORT demo_authorithy_check.
PARAMETERS pa_carr LIKE sflight-carrid.
DATA wa_flights LIKE demo_focc.
AT SELECTION-SCREEN.
AUTHORITY-CHECK OBJECT 'S_CARRID'
                  ID 'CARRID' FIELD pa_carr
                  ID 'ACTVT' FIELD '03'.
IF sy-subrc = 4.
    MESSAGE e045(sabapdocu) WITH pa_carr.
ELSEIF sy-subrc <> 0.
    MESSAGE e184(sabapdocu) WITH text-010.
ENDIF.
START-OF-SELECTION.
SELECT carrid connid fldate seatsmax seatsocc
    FROM sflight
    INTO CORRESPONDING FIELDS OF wa_flights
    WHERE carrid = pa_carr.
    WRITE: / wa_flights-carrid,
             wa_flights-connid,
             wa_flights-fldate,
             wa_flights-seatsmax,
             wa_flights-seatsocc.
ENDSELECT.
Regards
Hitesh

Authorization for all the maintenance views from one table

I have one table with data related to 5 systems.
I have created views with related data for each system.
These all are from one table only. while i am editing in one view, i must be able to edit the another view also. at a time 2 users cant edit the same view but at a time two users have to edit two different viws from same table.
I have to provide all authorization to all views at the same time.How to achieve this?.
Thanks.
Edited by: pagidala Ramesh on Oct 27, 2008 10:52 AM

Hi Pagidala,
This is my idea how much it can help you i am not sure but, create txcode for views and assign the authorizations for the txcodes according to your requirements. May be your issue will resolve.
Cheers!!
VEnk@

Authorization for project (table PROJ)

Similar Messages

Maybe you are looking for