Authorization in Workflow

In the Work Item , in the Inbox , the users are unable to Forward the Work item , The system gives a message 'your authorisation doesnt allow forwarding ".
Where do we set the authorisations for this ? How can i enable forwarding for the users in the system ??
Thanks

HI,
The authorizations are maintained in authorization management. You create roles there, which contain the individual authorizations. There are roles, authorization profiles and authorization objects specifically for SAP Business Workflow. These can be used for creating your own roles.
Authorization profiles give users access to the SAP System. They contain authorizations, which are identified using the name of an authorization object and the name of an authorization. If a profile is specified in a user master record, the user is assigned all of the authorizations defined in this profile.
To create the Roles:
http://help.sap.com/saphelp_nw04s/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Regards
Sudheer

Similar Messages

Authorization objects Workflow HR

Hi,
I would like to know authorization objects related to workflow .
that to restrict the user that when he forward a workitem...to which users he can forward..
Thanks,
nachy

You have to first make that particular standard task as General forwarding not allowed. After this in the Task level you have to assign the Authorization role to this Task. Now if the user tries to forward workitem to user who is not maintained in this role he will not be able to do so.
Thanks
Arghadip

Provider : Authorization Required (Workflow Provider)

I am trying to use Oracle Workflow as a provider.
I have defined an external application (using basic authentication) - that works fine.
I have created a provider.xml, it is registered, the config files modified etc - the test page works fine.
I have linked the provider to the external application.
When I add the portlet to a page I always get the following error message (from the Workflow Application Server) :
Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied >the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials >required.Here is my provider.xml :
<provider class="oracle.portal.provider.v1.http.URLProvider">
<session>true</session>
<authentication class="oracle.portal.provider.v1.http.Authentication">
<authType>basic</authType>
</authentication>
<portlet class="oracle.portal.provider.v1.http.URLPortlet">
<id>1</id>
<name>CCC_PROV_WF_JMR_2</name>
<title>Job Manager Workflow Provider</title>
<description>Job Manager Workflow</description>
<timeout>100</timeout>
<timeoutMessage>Job Manager Workflow timed out</timeoutMessage>
<showEdit>false</showEdit>
<showEditDefault>false</showEditDefault>
<showPreview>false</showPreview>
<showDetails>false</showDetails>
<hasHelp>false</hasHelp>
<hasAbout>false</hasAbout>
<acceptContentType>text/html</acceptContentType>
<registrationPortlet>false</registrationPortlet>
<accessControl>public</accessControl>
<renderer class="oracle.portal.provider.v1.RenderManager">
<showPage class="oracle.portal.provider.v1.http.URLRenderer">
<contentType>text/html</contentType>
<pageExpires>60</pageExpires>
<pageUrl>http://sirius.caprion.com:7777/pls/wf_drep</pageUrl>
</showPage>
</renderer>
<securityManager class="oracle.portal.provider.v1.http.URLSecurityManager">
<authorizType>public</authorizType>
</securityManager>
</portlet>
</provider>
ANY IDEAS ?
Thanks

The relative links need to be converted to absolute links. You can use a filter to achieve this. You need to define your filter similarly to this after the pageURL definition:
                    <filter class="oracle.portal.provider.v2.render.HtmlFilter">
                         <headerTrimTag><body</headerTrimTag>
                         <footerTrimTag>/BODY></footerTrimTag>
                         <baseHRef>your_page_url</baseHRef>
                         <convertTarget>true</convertTarget>
                    </filter>

Cannot authorize to asmx - webservice from a workflow

Hello everybody!
I made a workflow for sharepoint 2013, including the "call http web service"-action. Therein I am trying to access https://mysp.com/sites/mysite/_vti_bin/lists.asmx via GET Request. So nothing fancy one might think, but somehow it is:
I am logging the response code returned from the request which gives me a 401 unauthorized.
It is the same with every other asmx webservice (like webpartpages.asmx or copy.asmx).
If I GET a REST webservice like /_api/lists it works fine.
Also if I do the same GET request to the asmx from browser or any other client (like Postman App from Google Chrome) it works fine.
Is there some kind of special issue when authorizing from a workflow to asmx?
or how do I authorize my workflow against a asmx - webservice?
Thank you for your help...
My environment: I am working with Sharepoint Online 2013 and Sharepoint Designer 2013.

Hi,
I have seen a similar post from you. You can take a look at the following thread:
https://social.msdn.microsoft.com/Forums/en-US/db5b338d-10e2-4cdd-800e-f93a33f9801e/401-unauthorized-message-when-trying-to-access-asmxwebservice-from-a-sp-2013-workflow?forum=sharepointcustomization
I would suggest you to open only single thread for single issue. You can discuss your problem in the thread above only.
Thank you for your understanding and support.
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Control Workflow Report output using Structural Authorization

Is it possible to control output of Workflow Reports using Structural Authorizatins. E.g. Workflow Admins having access to tcode SWi2_FREQ will be able to see project wide data, but i want to restrict the workflow admins at department level from seeing workflow data for other departments. is that possible using Structural authorizations or any other mechanism?
My understanding is that Structural authorizations pretty much control PA/PD, and not other modules. I did a quick test,
1) Created a org structure
2) Created employees, users, and set up structural authorizations
Now when users are granted authorization to PA20, they are restricted to what they should be seeing, but when they are granted authorization for workflow admin reports, structural authorization don't seem to work, they are able to see data for workflow triggered for other departments as well. Is that the standard behavior or i am missing something. I don't have enough experience with Structural auth.
I will appreciate any guidance on this matter.
Thanks,
Saurabh

Arghadip, please explain how this will prevent someone from Norway from looking at the workflow log of a workflow for an employee belonging to the Danish part of the organisation.
<i>Message was edited by Kjetil Kilhavn:</i>
To explain a bit more in detail: how does this prevent me (Norwegian) from going into SWI1, SWIA or any other transaction, and looking at data from other parts of the organisation. I don't think it will work.
I think the only way to achieve this is to either modify SAP's standard code and include some structural authorisation checks - or take the standard transactions out from every user role and create your own wrappers or program copies which basically does the same as the modification would have to do.

Workflow for authorization requests

Hi
First of all
I don't normally work with SAP security and authorizations, so please tell me if my question is in wrong forum.
My question
Does any Workflow for authorization requests exist.
If I search SDN and google, I get lots of hits about authorization for workflow, but what I search is workflow for authorization requests.
Background
I often observe time wasting discussions about "who should have authorization for what", and I think this is caused by lack of well defined procedures describing the business rules and process for granting authorizations to a specific user.
Of course I understand the need for a more overall design and implementation of authorizations, but at the same time I observe, that a very common scenario is, that a new or existing employee is asked to take care of some business task or maybe a system maintenance task like customizing, but the user don't have the correct authorizations to perform this specific task.
So
Does any standard workflow exist for handling the process of requesting, approving and implementing authorizations?
Or is there a better approach to this problem?
Kind regards

Hi,
if you mean a request for new role assignment then there is no standard SAP workflow for this. You could implement. SAP offers other tools that can help you to achieve this. GRC suite has a tool for role approvals and it's super easy to implement approval workflow in SAP IdM. 3rd party IdM solutions have workflow capabilities as well. External tools such as SAP IdM allow you to perform role assignment over multiple SAP and non-SAP systems (there are other benefits as well).
If you mean request to add missing authorization object to already existing role then I don't think there is a need for workflow. In stable environment this should not happen very often and you still have to create/modify security role in DEV and then posh it through QA environment to production.
Cheers

401 Unauthorized Message - when trying to access asmx-webservice from a SP 2013 Workflow

Hello everybody!
I made a workflow for sharepoint 2013, including the "call http web service"-action. Therein I am trying to access https://mysp.com/sites/mysite/_vti_bin/lists.asmx via GET Request. So nothing fancy one might think, but somehow it is:
I am logging the response code returned from the request which gives me a 401 unauthorized.
It is the same with every other asmx webservice (like webpartpages.asmx or copy.asmx).
If I GET a REST webservice like /_api/lists it works fine.
Also if I do the same GET request to the asmx from browser or any other client (like Postman App from Google Chrome) it works fine.
Is there some kind of special issue when authorizing from a workflow to asmx?
or how do I authorize my workflow against a asmx - webservice?
My environment: I am working with Sharepoint Online 2013 and Sharepoint Designer 2013.
Thank you for your help...

Hi,
For your issue, please make sure you have activated the “Workflow can use app permissions” Web-scoped feature and grant full control permissions to the workflow.
For more information, please refer to the blog:
http://sharepointryan.com/2013/09/10/create-a-sharepoint-site-spweb-using-rest-in-spd-2013-workflow/
Best Regards,
Eric
Eric Tao
TechNet Community Support

PO change rejection by approver

Hi Gurus,
We're currently in SRM 5.0 and I have 2 requirements:
1. When approver rejects the PO changes by buyer, there should be a workitem going back to buyer and buyer should be able to see rejection reason.
2. When buyer changes PO and sends approval, there should be another workitem to buyer where he can cancel the approval in case that he wants to cancel the changes.
I tested and found out that the above are not part of standard process and flow (normal is when approver rejects, the workitem immediately completes with 'rejected' status). Is there a configuration to achieve this? Or there's really a need to change copy standard workflow template and modify it?
Thanks.
Ray

Hi,
You have to set up Authorizational level of the user in transaction SUO1 'personalization' tab.
BBP_WFL_SECURITY double click and set Authorization level for authorization
HIGH       ' Workflow never restarted when changes are made '
MEDIUM ' Workflow restarted conditionllly when changes are made'
LOW      ' Workflow always restarted when changes are made'
NONE   ' changes to the object are not allowed '
Hope it could be solve ur problem
Thanks
prasad.s

SAP_ALL and non SAP_ALL

Hello Experts,
I faced an issue here about the authorization:
When the user who have the SAP_ALL in their authorization, the workflow can find the next approval agent.
When the user does not have the SAP_ALL in their authorization, the workflow cant find the approval agents (throws out an error states cannot find agent).
Is there anyone know what is the exact cause of the authorization? There cant be all approval agents within the company to have SAP_ALL authorizations due to security reasons.
Note: I've tried to test out the rule and the bindings as well and they seems fine.
Thankyou in advance.

Hello Mike,
The 'advance with dialog is checked'.
But the workflow is built in such a way that after the generic 'decision step', there will be a container to update the workflow container (that determine the next approval level).
Then the workflow will loop back that generic 'decision step' to find the next agent based on the matching of 'approval level' container with the customised agent rule. The task of the generic 'decision step' is already been set to default 'general task'.
Thanks,
Han Yean

Future direction of User Provisioning Tools ( GRC CUP or IDM)

Hi Security Colleagues,
We all know that SAP has GRC CUP(Access Enforcer) and NW IDM for provisioing.
We can use either of toll for user provisioning.
Based on your experience , what is the best tool ? ofcourse ,It changes from one company to other depends on requirements.
I am noticed that lot of SAP devlopment activity going on around IDM.
Based on SAP's future direction, what is the best tool ?
Its a common problem for most of SAP customers as SAP is giving IDM freely as part of NW license.
please share your thoughts..
Thank You.

For Futuristic product availabliliy, I always prefer the following two places to check. Can you please also check their?
http://service.sap.com/pam
http://service.sap.com/scl
Check the following Two points under the 2nd Link:
Scenario & Process Component
SAP's Release Strategy
Now based on your query I will also stick to the suggestions given in the Other two posts. To add few more points which you may get helpful I would like to emphasize on the below discussion:
u2022 SAP NetWeaver Identity Management helps companies to centrally manage their user accounts (identities) in a complex system landscape. This includes both SAP and non-SAP systems.
u2022 The solution provides an authoritative, single source of user information and enables self-service management of user information and authorizations using workflow technology.
u2022 In many cases resources such as meeting rooms, PCs and mobile devices, which all may have their own identity in some context, can be included in an identity management solution.
Out of all other points, lets discuss about Provisioning:
u2022 The term provisioning is often used to denote user provisioning or account provisioning.
u2022 The functionality includes:
o creation of accounts
o setting initial passwords
o setting and modifying access rights
o disabling (revoking) an account
o deleting an account
u2022 The overall purpose is to make sure an identity (for example a user) has the correct access to the applications.
u2022 User provisioning products also include workflow capabilities to apply business rules to the account provisioning process and typically provide user self-service capabilities (e.g., password reset)
(All these details I picked up and pasted here from different section of a Solutioning Material I prepared for my company to introduce IDM solutions to my customer... couldn't give here properly due to space constraints). You can understand the Importance SAP is imposing on this product for All aspects of Automating Security and Identity of Living and Non-Living staffs as well. By using this you can get more benefits besides of Provisioning which is available in separate Solutions under other products like Virsa etc. Please go through the relevant materials available in the IDM Forum (Bernhard provided u the link) to understand go for an realization assessment.
regards,
Dipanjan
Edited by: Dipanjan Sanpui on Oct 5, 2009 11:42 AM

Dynamic Portal Content

Dear All
I am creataing a page on Portal will be used to display advertisements.
Advertisments have many paragraphs. How can I manage the web content of such type on Portal.
Using Webdynpro to fetch text from database is an expensive task.

hi adnan,
Web Content Management in the Enterprise Portal -
The future of traditional Web Content Management (WCM) systems is uncertain. Businesses
are increasingly implementing enterprise portal solutions that are primarily focused
on application and business process integration. However, existing Web Content
Management systems that concentrate on the creation, maintenance and provision of
web-based content, for example for intranet operation, have become established in todays
enterprise. This development presents a new challenge for enterprise IT departments:
These two very separate system worlds must be unified both in design and technology.
Enterprise portals represent a direct advancement for intranets and dynamic websites,
mainly due to the user-specific integration of applications and information in a single,
unified user interface. In order to make a clear distinction, the terms intranet and portal
should be defined:
An intranet provides employees with information using static HTML pages and/or a Web
Content Management System. Access to individual web-based applications from the
intranet is made possible by simple links. Consequently, an intranet is designed mainly
for the purpose of information distribution and is only marginally involved in process optimization.
Since there is no logical connection between the applications, users are forced
to log in separately to various applications with different user registration data. The required
user names and passwords are usually not consistent throughout a company. Furthermore,
roles are not part of intranet design and it is not possible to customize the
user interface (user customizing).
An enterprise portal is a complex integration infrastructure that consolidates application
systems, services and information from a variety of different sources within an enterprise
into a central, unified user interface (e.g. web browser) that is individually adapted for
each employee and accessible from every desktop. Enterprise portal content is individually
adapted for every employee or group; this is made possible by corresponding role
concepts.
Enterprise portals have opened a single point of entry for a variety of different business
applications. So why not simply present the complex content required directly within the
enterprise portal and completely replace existing extranet or intranet solutions? Most
new generation portal software products neglect this concept. The Content Management
they offer out of the box is rudimentary at best. Unfortunately, many IT decision makers
are either partially or completely unaware of this shortcoming.
On the other hand, there are highly sophisticated Web Content Management systems and
products on the market functionalities range from Internet building blocks for creating
simple homepages to adequate workflow integration within the Information Lifecycle.
Moreover, these systems include additional tools for generating navigational structures
as well as editing and authoring tools for managing content on websites. Link management,
approval workflows and access controls for designated areas of the web-based
solution are practically taken for granted. A Web Content Management system delivers
the technologies, tools and methods for creating, managing, storing, preserving and providing
electronic content throughout the entire enterprise. This generally recognized defnition originates from AIIM International (Association for Information and Image Management
International). Unlike document management, which can be described as a database-
supported management system for electronic documents, Web Content Management
encompasses web publishing, publishing intranet or internet pages and provides
structured publication of web-based information.
At first glance, deploying Web Content Management systems allows enterprises to unify
web-based content and application-based information within a single enterprise portal,
regardless of the format in which the information is available.
Some WCM software manufacturers have already taken action and provide specifically
for the SAP NetWeaver Portal comprehensive integration packages that integrate
their high-performance Web Content Management systems in the portal software.
But how do companies manage and supply the content to be published in an enterprise
portal created on the basis of business-oriented portal software? At a time when users
are already confronted with heterogeneous environments in their day-to-day work, every
additional system is simply another burden. Integrating a high-performance, technologically
advanced Web Content Management system in an enterprise portal is problematic
because, to a great extent, both software solutions implement competing concepts and
technologies which must be further explained.
Both systems require their own server infrastructure and rely on their own, completely
proprietary software architecture based on a separate database and/or data storage system.
As a result, additional expenditure is incurred for all of the following aspects:
· Parallel expenditure for hardware
· Parallel expenditure for operation and monitoring
· Parallel expenditure for backup & restore
· Parallel expenditure for security design and implementations
· Parallel expenditure for performance optimization
· Parallel expenditure for administrator training
From the perspective of an enterprise portal infrastructure, a Web Content Management
system is a third-party system which must be integrated via interfaces. Thus, the following
issues must be addressed:
(1) Parallel existence of two navigational structures: a) navigational structures, pages
and roles within the enterprise portal and b) menu items and storage structures
within the external WCM system.
(2) Editors are required to learn how to work with two different tools and user interfaces.
(3) A search function must be developed that can be utilized for both systems; access
rights for both systems must be given special attention here.
(4) Parallel existence of two authorization concepts. Defining access rights in an enterprise
portal is generally possible on the basis of users, groups, and portal roles in
particular. Access rights management in a WCM system has its own administrator interfaces
and authorization objects which need to be aligned.
(5) Parallel workflow concepts: An enterprise portal has application-oriented workflow
procedures that are usually based on the user administration integrated into the portal
(users, roles and groups). A WCM system often uses its own staging concept for
approving web pages based on its own workflow which exists parallel to the portal
workflow.
(6) Parallel user registration data management: Enterprise portals offer powerful features
for user administration which must be used in addition to or in competition
with the WCM system user administration. It makes sense to use a single LDAP interface
for both systems. However, this does not solve the key problem: both systems
have their own administration tools for user management.
(7) Parallel security concepts: Enterprise portals offer very powerful security design concepts
and functions; a WCM system has its own design concepts and these must also
be managed and taken into consideration.
(8) Some external WCM systems generate portal objects (e.g. menu items in portal
roles) via interfaces. Changes to these generated objects are overwritten during
each generation process making it impossible to use all of the functionality of the
portal tools. Only the features that are generated and/or supported by the WCM system
can be fully leveraged.
(9) Parallel concepts for link management: There are different methods for creating and
managing links in both software systems. A particular problem is posed by targets
that affect the role-based navigational structure of the enterprise portal which generally
cannot be conveniently selected as most editors would expect.
(10) Parallel page creation and layout concepts (look & feel): Both systems have their
own concept of performance-optimized page presentation. Similarly, both systems
offer different methods and tools for editing the look & feel of the pages.
Taking the above issues into consideration, serious thought should be given to integrating
an external Web Content Management system in an enterprise portal. From a longterm
perspective and when taking the Total Cost of Ownership into consideration, operating
two IT systems as complex as these parallel to one another is impractical, even if the
WCM system manufacturers offer portal-specific integration packages for their software.
A closer look at these packages shows that many of the interface problems and design
redundancies detailed above will nevertheless continue to persist.
From the authors perspective, every project involving Web Content Management in enterprise
portals should question whether or not the desired editing processes and WCM
requirements could be served with the standard features of the enterprise portal or covered
by an expansion package or implementation and project work. This solution path is
further explained in the following practical example.
Practical example: Web Content Management in the SAP NetWeaver Portal
With its SAP NetWeaver Portal, SAP not only provides the basis for a successful
backend system for business process optimization, but also delivers basic Web Content
Management functionalities. In order to structure the content, the SAP NetWeaver Portal
utilizes a central tool - the Portal Content Studio.
The Portal Content Studio offers a central environment for developing and managing all
types of portal content, such as portlets (iViews), pages, layouts, worksets, roles, and
packages.
Figure 1: Portal Content Studio for the SAP NetWeaver Portal (source: btexx Portal)
The most important object in the Portal Content Catalog is the role, which serves two
purposes: First of all, the role is assigned to users or user groups, achieving the typical
personalization required of an enterprise portal, secondly, the role in the SAP portal defines
the menu structure that is linked to the role at the same time.
A role can be implemented as a hierarchical tree structure with an infinite number of
nested objects. The tree structure is formed by creating folders. Pages or iViews can be
positioned at any level within the hierarchy. There are different types of iViews; typical
examples of iViews are R/3 transactions, eBusiness applications, Internet/intranet applications,
or content-based iViews (HTML content, text, graphics). iViews are typically positioned
and arranged on pages but they can also be independently built into roles.
Within a role, so-called Entry Points must be defined which are then included as a menu
item in both of the top navigation bars of the portal menu. The portal menu is generally
comprised of multiple roles (with corresponding Entry Points). However, the order of the
menu items can be defined (using the Attribute Priority).
Additionally, SAP provides an Internet platform that offers a selection of ready-to-use
portal contents in a general catalog that can be imported into the Portal Content Studio.
SAP calls these out-of- the-box solutions SAP Business Packages. Partners and other
software manufacturers are able to provide solutions and/or interfaces based on this
platform and have them certified by SAP (SAP offers a certification program especially
designed for these solutions). The iView list for the so-called Portal Content Portfolio
(formally iView Studio) includes thousands of iViews.
The SAP Portal Content Portfolio can be accessed here:
https://www.sdn.sap.com/irj/sdn/developerareas/contentportfolio
In many aspects, the tools and capabilities of the Portal Content Studio are comprehensive
and advanced yet they are not sufficient for comprehensive Web Content Management.
First and foremost, the Portal Content Studio supports the establishment of rolebased
navigational structures and the definition of portal pages on which iViews can be
positioned and arranged. This method of content creation is comparatively complex and
not suited for the daily business of an editor, who is typically less involved in changing
content structures and more involved in changing the content elements contained therein
(text, graphics, flash files, links, documents, etc.). Pragmatic methods and simple
mechanisms are desired for the management of this content. The material in the content-
based iViews must be freely definable through simple and intuitive means and editors
should be able to create content themselves.
The SAP Knowledge Management (KM) component is available for storing content and
documents in SAP NetWeaver. The content to be presented can be stored and managed
via a folder structure that must be managed parallel to the Portal Content Directory.
However, in the standard feature set of the SAP NetWeaver Portal, the KM folder where
this content is later to be saved must be defined for every content-based KM iView. An
automatic link between the current role position and the KM location is not created. Simple
shifting between read and edit mode is another feature that is not available in the
standard version despite the fact that this functionality is extremely important for editors.
Despite the multitude of existing functions, the standard SAP NetWeaver Portal offers
insufficient capabilities for comfortable Web Content Management. Editing capabilities for
XML forms, so-called docs iViews, URL-iViews or TREX searches are offered but their use
is anything but intuitive and involves a great deal of administrative expenditure. This
makes a high level of knowledge in building web content within the SAP NetWeaver
Portal a prerequisite. Above all, there are little or no possibilities for using Web Content
Management functionality such as the construction of generic content structures, link
management, multi-language support or a navigational context available from the search
results without the relevant programming or HTML knowledge.
This is where an enhancement from btexx business technologies GmbH, the Business
Package easyWCM for Web Content Management in SAP NetWeaver Portal comes in. It
uses the Portal Content Studio as a central tool yet significantly accelerates editing processes.
It allows content elements to be linked effectively with portal objects that are created
automatically through the use of easyWCM iViews. Every authorized user can create,
publish and edit information.
This Business Package automatically stores the content elements in the KM component
assigned in the navigation structure in the background and makes them available for further
editing on portal pages, greatly simplifying subsequent content management work.
This is why the editor no longer requires technical knowledge of where the content is
stored in the KM. Thanks to easyWCM, both the editor and the end-user work with the
same portal role and costly multiple management of the navigation and content storage
structure is unnecessary. Using the Inplace Editing feature, the editor is able to edit
content directly on the portal pages on which the content is presented and visualized.
The Business Package is based 100% on the SAP NetWeaver Portal and Knowledge
Management Components; no third-party servers or additional software products are required.
The portal server is solely responsible for providing the runtime platform.
A third-party Content Management System may be able to offer a larger selection of features
than easyWCM but it implementing and operating the additional solution will require
a great deal more resources. The easyWCM Business Package for the SAP Net-
Weaver Portal provides Web Content Management simply and effectively while supporting
the following essential requirements:
Complete integration for SAP Portal Content Studio
An editor does not need any tools other than the SAP Portal Content Studio. The desired
navigational structures are provided as SAP portal roles in the SAP Portal Content Studio
- the application of easyWCM iViews is thereby possible anywhere within portal roles,
worksets and pages. The main advantage of this solution is that the editors enter content
in a single environment in which all web content and navigational structures are stored
and administered.
Inplace editing:
End-users and editors work with the same portal roles. Therefore, no separate portal
roles for providing and maintaining the content are required! As an editor, easyWCM
iView offers you the ability to add and work on content components directly within the
portal (Inplace Editing). Furthermore, the editor is able to use SAP KM standard functions
(e.g. authorization assignment, workflow, feedback, rating, etc.) directly within the content
component.
Automatic creation of KM folders
A general standard is that everyone must indicate the respective KM file path in which
the content components are to be stored. This requires a great deal of effort when maintaining
portals with a large number of web content elements. easyWCM automatically
produces the necessary listings with the desired KM authorizations at runtime and simultaneously
activates the desired KM services (life span, manual arrangement, history,
workflow). During shifting or copying processes in the SAP Portal Content Studio, the
elements are automatically moved and copied within the KM!
Preview functionality from Portal Content Studio
A preview function for each form is easily accessible with a single click. It is also possible
to preview items directly from the Portal Content Studio in order to view the complete
portal page, for example. easyWCM iViews were designed in a way that also enables users
to enter and edit content directly from the SAP Portal Content Studio preview function.
Multiple use of content elements
easyWCM iViews may be adjusted in such a way as to allow content to be used more
than once. Using this option, the content is not stored by the role and/or page, but is
linked centrally within the easyWCM iView. The multiple use of content components is
important, for example, if the right column of the portal presentation is exactly the same
for several pages (e.g. for contact data, partners, advertisements, etc.).
Approval workflow
If desired, the SAP KM approval workflow may be activated in order to manage content
elements. Changes to content elements will only be visible after the approval. All XML
forms provided by easyWCM support the SAP KM approval workflow and indicate the
permission status by using traffic lights.
Version management
If desired, the SAP KM version management may be activated in order to manage content
elements. An editor with the proper authorization can specify the portal pages on
which version management should be activated. When version management is activated,
it is possible to replace older content components or to cancel incorrect modifications.
With each change, a new version is automatically stored and documented including the
date and the person who made the change.
Life span
If desired, the SAP KM life span function may be activated in order to manage content
elements. An editor with the proper authorization can specify the portal pages on which
the life span function should be activated. Activating the life span function makes it possible
to publish a content component for a specific period (this is useful for news or
events, for example).
Authorization-based search functionality
The SAP NetWeaver standard component TREX is used for the search function. One of
the key advantages of easyWCM compared to external WCM solutions is that the search
is implemented completely on the basis of the SAP NetWeaver platform and, in particular,
that it is dependent on the authorization status. A separate search machine with its
own user and authorization administration is not required.
Multi-language support
easyWCM automatically detects the language of the editor and stores the content in
separate folders. Folders for content in different languages are created based on the active
portal language.
Ready-to-use forms and pages
easyWCM contains a set of immediately useable portal roles and pages which may be
used for your desired menu structures and page layouts. As such, easyWCM provides the
ability to create and maintain Internet pages without special HTML programming knowledge.
easyWCM also contains more than 30 XML forms based on the XML forms builder
(SAP standard) which can be used for content creation. These XML forms may also be
custom designed to fit your needs.
Personalized user interface
easyWCM determines the user interface depending on portal authorizations of the
user/editor and the corresponding authorizations of the respective KM folders. The
easyWCM package contains different KM layout sets which may be activated via customization,
if desired. Working on content is simple; an editor with the appropriate KM writepermissions
regards
karthik
reward me points if it helps you

Deletion of user if he hasn't login into system for long time

Hi Experts,
can anyone tell me that does acess enforcer provides nay facility of automatic deletion of those users who haven't login into system for long time.
Please suggest.
Thanks & Regards,
Anubha Pandey

Hi Anubha,
no, Access Enforcer is a tool for assigning/removing authorizations via workflows.
Run a regularly report in ABAP to delete the users that haven't logged on.
Regards
Daniela

Workflow authorization for PS

Hello SAPians,
I am looking for some information regarding a workflow which is creting issue.
Issue is:
workflow has been created and this is the information of that.
**''Description**
**This workflow is triggered when a user attempts the release of an activity within a network contained in a project in the PS Module.**
**The workflow consists of three different authorization levels. All three levels must approve the release of the activity in order for this action to be available to the initiating user to carry out. If all three authorizations are granted, then the initiating user receives notification of this and is then allowed to release the activity in the corresponding transaction.**
**Furthermore, if an authorization fails to be given, the initiating user and any users corresponding to previous levels of authorization receive a notification that authorization has not been granted to release the activity.''**
But that workflow for authorization is wrongly sent to the wrong person who is not involved in that type of workflows.
Please let me know where I can check this?
Please let me know how I can proceed further in this regard. .what could be a solution for this?Please let me know the path for configuring this approval process route.
Please let me know if you need any information.
Regards

Hello,
I am not much aware of the workflow.Can you please let me know where I can check the table for configuring the user's.
Please let me know the Table and configuration details where I can check the PS Configurations and data relating to workflows for PS.
Thanks for your time in checking the issue.
Regards

Authorization object to disable execute Button in Workflow Inbox

I have a scenario where user can able to see workflow in Inbox but they are not suppose execute workflow(Disable Execute Icon), what is the authorization object i need to use to disable this.
Thanks,
Nar

Can you modify the method that is executed when you click the work item itself (is it a standard one)? If yes, just code a authorisation check there before the actual code.
Or user authorisation trace to find out a possible authorisation checks when executing the work item. Hard to imagine that someone would know the object for this unlikely scenario. Or check that which transaction is launched from the code, and see if there is already some nice authorisation check (also with the trace).
Regards,
Karri

You don't have the authorization to start the workflow

hi,
We are working on integration of ESS with EP.
From EP when we sent leave request, We are geting an error
"You don't have the authorization to start the workflow".
Can anyone help us on this?
Thank you very much in advance.
regards,
Uttam.

Hi Linc,
Thanks for replying so quickly.
I actually figured out what was wrong and I feel so foolish not for looking here first. But the folders themselves were not locked, it was each individual song that was. So all I did was open up the folder and the following sub-folders to reveal the songs. I then would right click on each song > get info > and then the locked button at the top would be highlighted in blue. All I had to do was click the button, and poof the song was unlocked and subsequently the entire folder was unlocked, then I could delete the whole thing. I had to do this about 150 times for each song hahaha but it all worked out.
Thanks again for your time

Authorization in Workflow

Similar Messages

Maybe you are looking for