Authorization for Webtemplates needed

Hi,
I am looking for authorization (Objects) for Web reports.
All what I know is that you only can give authorization restrictions for menu roles or Data provider and queries. I never heared from a direct restriction possibility for web reports.
Can anyone help me?
Greetings from Stuttgart, GErmany
Isabel

Hi Isabel
I am not sure if you are looking to implement authorization on web reports or to have InfoObject security.
I will answer for both.
1. since using Bex or Web is the same. in both cases the report is using the under lying Query.
This means you can apply any authorization you implement (by query, work book, info area etc) on Web or Bex.
2. InfoObject authorization can be applied using transaction RSSM and by so create a profile that you can later asign to roles.
Thanks Edan

Similar Messages

I need additional authorizations for my devices

i need additional authorizations for my devices

Authorizations for what and from whom? What devices, and what are you using them for?

I need to increase the number of authorizations for my Adobe ID.

I need Adobe to increase the number of authorizations for my Adobe ID, but I cannot get in contact with them.

Hello,
contrary to kglad's hint I think it makes more sense to use this:
https://helpx.adobe.com/x-productkb/global/find-serial-number.html#adobeproductdownload >>> I lost my serial number or downloaded a product from Adobe.com >>> Find your serial number on Adobe.com
Hans-Günter

Cash book -FBCJ authorization for configuration of layout - need help

Hi All,
We are facing problem that our end users who all maintaining the cash book are all keep changing the alv layout by clicking the configuration button, I need to control this activities....
Regards
Krishnamoorthy T
Edited by: Krishnamoorthy T on Dec 28, :02 PM

Hi Krishnamoorthy,
Please arrest the authorization for all the end user and please go to the field status and make the filed suppressed.
Warm Regards,
Sivakumar Sathiaymoorthy

Need FM which create authorization for a Role

Hi,
i neeed to create authorization for the roles. can anybody tell me , is there any FM to create authorization for a Role.
it is done through PFCG transaction.
i need a FM which creates authorization for a Role.
Thanks in advance

Hi Sami
Try this link.
Re: Programatically create Security Profiles via BAPI/FM in R/3?
Regards
Neha

Hi, I need to reset my authorizations for my adobe Id. I am using Overdriv

Hi, I need to reset my authorizations for my adobe Id. I am using Overdrive Media Console and it crashes. Every time I reload the app in my iPad it has to authorize my Id and I'm now locked out. Please help

I am using Overdrive Media Console and it crashes.
This is the Adobe Bridge Forum and you are asking something about a third party eBook reader??
For your Adobe ID you probably need to log in again, if you don't have your password fill in your mail and choose forgot my password. if your mail address is known they send you a new password, if the mail is not known simply create a new Adobe ID, it's free.
But you should really contact Overdrive itself or look at the help pages on their site

I need to deauthorize three computers I no longer own, but keep my computer authorization for my current computer and add a new laptop. Is there a way of doing this without having to unauthorize my current desktop which is my main music storage devic

I just purchased a new Win 8.1 laptop and want to authorize it for my iTunes library. I operate this library on a Win 7 desktop. I have three other Windows computers that I no longer own which were authorized under my iTunes account, but I can't unauthorized them because they are broken or sold. I want to have Computer Authorization for just my current desktop running Win 7 and my new laptop operating Win 8.1. How can I selectively unauthorize a computer if I no longer have it in my possession, and if I have to unauthorize all of my computers, how do I get my iTunes library of music back onto my current desktop system?

Deauthorizing the computer will not remove the content from your library. You deauthorize all, then authorize the ones you want. See this support document. Deauthorize your computer using iTunes - Apple Support

Need authorization for business document services attachment list with user status in ps claim for clm2 and clm3

Dear Friends,
client wants to restrict the attachment list changing, deletion after the user status sets to close in PS Claims for transaction clm2 and clm3.
Currently any one can attach documents as GOS and delete even the claim is completed and status is closed.
How can we restrict all users even who created the claim can not change create and delete attachment list documents once the claim is completed and approved and user status sets to closed.

HI,
what is the claim creation transaction in that 01 is for creation 02 is for edit and 03 for display so with the help of basis consultant you can assigned transaction in user's assigned role accordingly.
But user who is authorize for create claim can not modified or edit once he save the job. this would be limitation.
Regards,
Sanjeev

We need to give field-level authorization for some fields

The schenario is as follows :
1. There are various storage locations within a plant.
2. There is one or more people incharge of creating PO and receiving
stocks for every storage location.
3. We dont want to authorise the person incharge of one storage
location to receive stock in another storage location or even view the
other storage locations at the time of creating the PO or any other
transaction. The user incharge of one storage location should not be
able to view any other storage location in any storage location field's
drop down.
regards
Manish
+91 9811647727

Hi Umesh,
Please see the documentations for authorization profile P_ABAP in the R/3 library and the following:
SU03 -> HR Human resources -> position your cursor to P_ABAP HR: Reporting -> choose button "Docu." -> the pop-up "help - P_ABAP" appears.
There is an example, which describes a similar issue regarding RPTIME00 and the Basic pay infotype (0008).
The standard reports of personnel administration are based on logical database PNP I would recommend to set your authorization as follows:
Object HR: Master data (P_ORGIN) (two authorizations)
Infotype                  0002             ' '
Subtype                   *                ' '
Authorization level       R                ' '
Organizational key        ' '              0001YYYYXXX
Object HR: Reporting (P_ABAP)
Report name                SAPDBPNP
Degree of simplification   1
Please note, that if a user has authorization for e.g. the birthday list , (s)he will be able to view the birth date through thisquery, although (s)he cannot access to IT0002 through PA20.
Another possibility would be using Customer-Specific Authorization Object P_NNNNN. I have attached a file with a very comprehensive documentation regarding HR authorizations. P_NNNNN is documented on pages 40 ff.
Hope this help
Sarah

"No write authorization for personal portfolio of user" from BW

Hi, we are working on connection from BW 3.5 InfoBroadcaster into EP 6.
When I try to publish BW webtemplate to EP to my personal portfolio I got follwoing messages:
"<i>Settings were started from the BEx Broadcaster
Processing for user AC3339, language EN
   Processing setting
    No write authorization for personal portfolio of user AC3339
    File 'ZM_P2P_SCORECARD_ORG_HIER_STAT' Was Successfully Created in the Portal</i>"
Unfortunatelly, after this I cannot find this report in EP. Can anyone help us with this error?
Thank you
Vitaliy

Did you setup authorizations as described:
On BW side: You need special authorizations to be able to use information broadcasting. System administrators need authorization object S_RS_ADMWB with the field RSADMWBOBJ = BR_SETTING. Users that precalculate business intelligence content and would like to schedule things require the authorization object S_RS_BCS. To be able to schedule broadcaster jobs in background the authorization to run batch jobs should be granted on BW side. The authorization object is S_BTCH_JOB "Background Processing: Operations on Background Jobs"
From my own experience:
On portal side: The users, to which personal folders it is necessary to publish, should exist both in EP and BW (have the same name), be active and have Business Explorer role assigned in EP (i.e. "Personal BEx documents" folder in KM should exist for them)

How to set authorization for BW Workspace in backend and Portal ?

Hello Expert,
                     I have developed one BW Workspace in development environment . I have some query regarding BW workspace authorization for access in portal . Some of the queries are as follows:
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider ?
Expecting and appreciating your guidence and suggestion asap .
Thanks & Regards,
Surajit Pal

Hello Expert,
                 Do you have any idea regarding below questionaries about BW Workspace ?
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider .
Appreciating your early responds and thanks in advance .
Regards,
Surajit

What happends when you give 2 groups with some of the same members different authorizations for a document

Hello,
I'm doing my internship at a litte Telekom company. I'm investigating how they can use MS SharePoint as their central place to put projectinformation. Now i've been thinking what happends when i do the following:
Make one document library
Add 2 groups to the Active Directory, group "A" with all the employees and group "B" with only four people working on a project. When i add a document to the document library and set the authorizations for the document as
follows:
Group B: Read/Write
Group A: Read
Does the people from group B still be able to edit the document, because they are also in group A?
I don't have a test environment to test this myself.
Why i want to know this? The company want's one place to place all their documents with projectinformation. This information is about different projects. You only wan't that people can change the specific document when they are working on the specific project
where the document belongs to.

You get the union of permissions, so if one group allows access and the other not, you will get the union of both and therefore access. Of course, you can break security settings per library/folder or document, and specify new settings,
if you need too.
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

What's the best way to do authorization for my app?

The authorization situation is somewhat complicated for my app.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM.
From what I've seen so far, there are two different options of setting the authorization for the component:
1. Set its Condition
2. Set its Security Authorization Scheme
Here is my understanding for each (from my limited experience with APEX):
1. Set its Condition
+ Can pass in parameters such as :APP_USER, page numebr, P0_ITEM. So I can just create one function that does all the authorization
- Have to combine the SQL query with the component's non-authorization display conditions, if any.
2. Set its Security Authorization Scheme
+ By name, it seems like it should be used for authorization
- Cannot take in parameters relating to the page, such as the page number --> therefore I will need to create many different schemes, for all the different pages.
#2 will end up with a long list of schemes (each with its own SQL queries) for different pages, which doesn't seem as efficient as #1 with far fewer SQL queries and just take in parameters.
Which one should I pick?
Thanks!

953006 wrote:
Thanks fac586 for the detailed response, and also everyone else who replied. You guys are very helpful and respond promptly. And we'd appreciate it if you changed "953006" into a real handle promptly.
Andre mentioned using conditions:
The way I work around this is to have two functions, one which is used at the page level as a normal authorization scheme and one which can be passed variables which is called as a Condition and the name of the item is one of the variables, in effect giving it "self awareness".But fac586 said:
You can't pass "parameters" to authorization schemes. Use application items, APEX collections or application contexts to set current context before the authorization scheme is evaluated, and access these values in the functions.Does this mean, fac586, that we can avoid conditions altogether? No, it means that I prefer to use Authorization Schemes to control access to resources based on user privileges and security, and Conditions to control rendering and processing for functional reasons. Using the approach described above I have found it possible to maintain this separation.
Say if a page has two buttons, Button_A and Button_B. Button_A has a set of requirements for displaying and Button_B has its own set of requirements (some of which are shared with Button_A). So far, the only way that I can see of using pure authorization is to write 2 different authorization schemes, and set the authorization schemes for the two buttons respectively.What's the problem with that? Consider a more concrete example using a standard APEX report/form pattern for customer maintenance. Page 6 contains the report, and page 7 is the maintenance form with P7_CREATE and P7_SAVE buttons. Only users entitled to create new customers should have access to P7_CREATE, and only users able to edit customers access to P7_SAVE. This would be controlled by the CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes respectively. Functionally, conditions are used to show P7_CREATE if the P7_CUSTOMER_ID is null, and P7_SAVE if it's not null. We don't mix non-functional security considerations with functional requirements.
The CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes are of type PL/SQL Function Returning Boolean. These are implemented using package functions. Exactly how a user has create/edit customer privilege is determined in the package. Determinants that are shared by multiple schemes can be combined at this level. These implementations can be changed as necessary without requiring changes to the application.
The authorization schemes are reusable across pages and components. On page 6, CREATE_CUSTOMER can be used on the "Create New Customer..." button; EDIT_CUSTOMER on the report column containing the "Edit" links.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM. So I guess this goes back to my original concern with Authorizations:
[Using purely authorizations] will end up with a long list of schemes (each with its own SQL queries) for different pages [and page items] ....
Re: VPD policies. Note that in the example above there's no need for the authorization schemes to "know" which pages/items are being evaluated. The P7_SAVE button and the page 6 link column are involved with the EDIT_CUSTOMER operation, so that authorization scheme is applied to them.

Error - No authorization for object while viewing transformations in BI 7.0

Folks,
In BI 7.0, In the Data flow diagram, when I had tried to click on the transformation sybmol, system is throwing an error message No authorization for object   (authorization object ) Message no. RS_EXCEPTION250
Do I need to request for authorization to just view transformations or is this error something different ?
Thanks

Did SU53 and below is theauthorization info. Does quality system usually not have access even to display/read transformations for func people ???
Authorization check failed
Object Class RS   Business Information Warehouse
    Authorization Obj. S_RS_DTP   Data Warehousing Workbench - Data Transfer Process
      Authorization Field ACTVT Activity
                                                                                03
      Authorization Field RSONDTPSRC Source
                                                                                DTP_46UAQF4V7BE5JR0I3HKLLC6D2
      Authorization Field RSONDTPTGT Target
                                                                                ZSD_DEL
      Authorization Field RSSTDTPSRC Subtype of the Source
      Authorization Field RSSTDTPTGT Subtype of the Target
      Authorization Field RSTLDTPSRC Type of Source
                                                                                DTPA
      Authorization Field RSTLDTPTGT Type of Target
                                                                                ODSO
User's Authorization Data xxxx
Object Class RS         Business Information Warehouse
    Authorization Object S_RS_DTP   Data Warehousing Workbench - Data Transfer Process
      Authorizat. Z:GEFUNONC00 Data Warehousing Workbench - Data Transfer Process
        Profl. Z:GEFUNONC   Profile for role Z:GENAPO_FUNC_ONCALL
        Role Z:GENAPO_FUNC_ONCALL Generic APO Fucntional Oncall Role
        Authorization Field ACTVT Activity
                                                                                03, 16, 23
        Authorization Field RSONDTPSRC Source
        Authorization Field RSONDTPTGT Target
        Authorization Field RSSTDTPSRC Subtype of the Source
                                                                                ATTR, HIER, TEXT
        Authorization Field RSSTDTPTGT Subtype of the Target
                                                                                ATTR, HIER, TEXT
        Authorization Field RSTLDTPSRC Type of Source
                                                                                CUBE, IOBJ, ISET, ODSO, RSDS, TRCS
        Authorization Field RSTLDTPTGT Type of Target

List of users who have authorization for a particular transaction?

Hi All,
Can anyone guide me how to know the list of users who have authorization for a particular transaction?
I need this to find out the list of authorizations that are obsolete ,when the particular trnsaction is obsolete in an Upgrade process.
Thanks in advance.

we can get the list of users for a particular transaction as below.
get the tcode and place in AGR_TCODES and we get the list of roles .
loop the roles and pass each role to AGR_USERS and we get list of users for that role.
finally we got the list of users for that tcode.

Authorization for Webtemplates needed

Similar Messages

Maybe you are looking for