Authorization issue within a table in BI

Hello All,
Here is my authorization issue :
We have set up an authorization on infoobject Zapplication. End user is allowed to choose "HR" only.
In Rsecadmin, infoObject Zapplication is restricted to "HR"
Then, this authorization object has been assigned to end user.
This user go to a specific table to select an application and a date.
When user display the possible value he only see "HR". Which means our authorization is correct.
However, this user can enter another value such as "SD". This value does exist in infoObject Zapplication. So, it means that there is an issue with our authorizations settings.
We have added a control table, it's even worse in this case, authorization are not checked at all and all available values are displayed.
Any idea to prevent the user to entered a value within this table ?
Why our authorization does not check the value entered directly in the table ?
Thanks &
Regards
Cath

Hello
For info we manged to restrict acces on this table by using event table from table maintenance and we have combined it with a specific authorisation object.
Regs
C.

Similar Messages

  • Secured WebDAV Mounted Volume Authorization Issues

    I use a secure WebDAV mounted volume from myDisk.se and up until the latest Security Update have had zero issues being able to manipulate files and folders as I would on a normal volume. However, since the installation of the Security Update (2009-004 (PowerPC) 1.0) I find weird things happening with this mounted volume:
    1) I am able to mount the secured WebDAV share using my security credentials.
    2) I can create a default "untitled" folder but when I try to change its name, the WebDAV authorization dialog pops up and despite entering the same credentials (why, I am not sure as the volume has already been properly credentialed in order to be mounted), access is denied.
    3) Trying to create a file within a folder on the mounted WebDAV volume I previously created pre-update causes the same authorization issue.
    I have no other WebDAV shares I can try to mount from any other companies so I am not sure if this is a myDisk issue or one borne from the Security Update. I am not a .Mac/MobileMe user and that info is not filled out in System Preferences. The internal hard drive has been meticulously maintained with Disk and Permissions repair being run both before and after each and every software update installed. Likewise, the volume's structure is also checked both before and after and shows no need for repairs.
    Any ideas? Perhaps there is a corrupted file somewhere that's affecting the authorizations needed by this third-party WebDAV volume?
    The machine that has this problem is the last model iBook G4/1.33GHz 12" display, 1.5GB RAM, and a 100GB 5400rpm HD which replaced the stock OEM 40GB 4200rpm drive about one year ago.
    I'm not willing to do an Archive and Install at this point as the loss of the WebDAV access to my online volume is not critical. Inconvenient as heck but not to the point where I'm willing (or able) stop my normal work to spend the hours it will take to get WebDAV access back.
    Thanks in advance for any insights.

    same problem here with webdav, I can't mount my idisk from university network on Mac Pro 10.5.3 (although it mounts fine from home network on both ibook and PMG5 10.5.3). Everything was fine with 10.5.2 and I already re-installed 10.5.3 combo. Other bugs as well with .Mac prefs (keeps crashing, sometimes it shows the available space on idisk but still no mounting, with error -35 or -8086), but .Mac sync is OK
    Jun 11 12:34:21 webdavfs_agent[579]: mounting as authenticated user
    Jun 11 12:34:22 kernel[0]: webdav server: http://idisk.mac.com/[username]/: connection is dead
    Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 received VQ_DEAD event (32)
    Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
    Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 type 'webdav', mounted on '/Volumes/[username]', from 'http://idisk.mac.com/[username]/', dead
    Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
    Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 found 1 filesystem(s) with problem(s)
    Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
    Jun 11 12:34:52: --- last message repeated 1 time ---

  • Report S_ALR_87013105 : no authorization for the report/ table 7KU6_001

    Hi Gurus,
    While executing the program S_ALR_87013105 (Detailed Reports 
    For Sales Order : Plan/Actual Comparison ) system showing the selection log.
    "Have no authorization for the report/table  7KU6_001 and 7KU6_002".
    But for the user the authorization check through SU53 was successful.
    Pl can any one suggest on this issue.
    Thanks in advance,
    Vijay

    Hi,
    Contact your basis consultant to provide the missing authorisation. This is one of the authorisation object.
    Regards,
    Sankar

  • S_CTS_ADMI Authorization issue

    Hi Experts,
    Every now and again a user sends me a SU53 with the error requesting access to S_CTS_ADMI field TABL. The user of this morning is trying to release a purchase order using transaction ME29N. Why would the SU53 indicate that the user want to maintain the control tables of the Change and Transport System in Production when they are trying to release a purchase order? I am running a trace ST01 but it's not helping.
    Could you please help me to resolve issue.
    Thanks
    Pavel

    Hi
    Gowri is perfectly ok. Below Objects checked.
    M_BEST_BSA
    M_BEST_EKG
    M_BEST_EKO
    M_BEST_WRK
    Along with that M_EINK_FRG also get checked.
    Check for access to all of the above Objects in user master records. Before that check with MM team to get these values of the PO that the approver is trying to release.
    1) Document Type : Relate with M_BEST_BSA
    2) Purchasing Group : Relate to M_BEST_EKG
    3) Purchasing Organization : Relate to M_BEST_EKO
    4) Plant : Relate to M_BEST_WRK
    5) Release code & release Group : Relate to Object M_EINK_FRG
    You also can get these information through ME23N
    If all of the above matches with user master record and PO then there is no further authorization issue. Rest on MM team !!!!!
    Best of luck...
    Arpan

  • Style sheet changing when applied to text within a table

    Hi everyone,
    I'm using ID CS2.
    I've defined a paragraph style sheet with the regular weight of a certain typeface, however when I apply this style to text within a table, the typeface changes to the bold version of the font even though the regular version is specified in the style.
    Does anyone know if this is a known issue with styles being applied to tables or is it a sign of a corrupt file or something? Is there a fix?
    Thanks

    Is there a character style applied to the table or text in the table. I had many issues with this over-riding my paragraph style.

  • Slide Effect within a Table

    I'm trying to add a simple Spry slide effect to some text on
    one of my web sites, however the text dissapears in IE7. I've
    managed to cut it down to the most basic code where the problem
    occurs and it turns out to be a table cell. I took the slide
    example and cut it down until it doesn't work. I'm referencing the
    css and js that comes with the spry 1.6 prerelease build. This code
    works fine in Firefox. If you remove the table tags, it also works
    in IE7. However, with the table tags present, the text doesn't show
    up at all in IE7 (although the background color does slide up and
    down). I'd like to be able to keep the table tags in my actual site
    because it helps to keep the shape of the page. I can't believe
    know one else has run into this issue, but I haven't found anything
    online. If you have any tips, please let me know. Otherwise,
    consider this a bug report.
    Here's the code:
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0
    Transitional//EN" "
    http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional-dtd">
    <html xmlns="
    http://www.w3.org/1999/xhtml">
    <head>
    <meta http-equiv="Content-Type" content="text/html;
    charset=iso-8859-1" />
    <title>Spry Slide Effects Sample</title>
    <link href="../../css/samples.css" rel="stylesheet"
    type="text/css" />
    <script src="../../includes/SpryEffects.js"
    type="text/javascript"></script>
    <style type="text/css">
    .animationContainer{
    height: 220px;
    .demoDiv{
    background-color: #CCC;
    height: 200px;
    overflow: hidden;
    .hideInitially{
    visibility: hidden;
    </style>
    </head>
    <body>
    <table><tr><td>
    <form method="get" action="grow_sample.html">
    <input type="button" onclick="slide_hidden.start();"
    value="Slide Example" />
    </form>
    <div class="animationContainer">
    <div class="demoDiv hideInitially" id="example5">
    <p><strong>Example - Slide from 0% to 100% in 2
    seconds</strong>
    <br />
    Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed
    diam nonumy eirmod tempor invidunt ut labore et dolore magna
    aliquyam erat, sed diam voluptua. At vero eos et accusam et
    justo duo dolores et ea rebum. Stet clita kasd gubergren, no
    sea takimata sanctus est Lorem ipsum dolor sit
    amet.</p></div>
    </div>
    <script type="text/javascript">
    var slide_hidden = new Spry.Effect.Slide('example5',
    {duration: 500, from: '0%', to: '100%', toggle:true});
    </script>
    </td></tr></table>
    </body>
    </html>

    I am also having this problem. I've written a custom JSF
    component that could technically be used in all sorts of situations
    within an HTML page. During the initial component development, the
    case of adding the component within a table on IE was never tested.
    Only later when some other developer was reusing the component in
    another project did the Slide effect within a table in IE issue
    crop up. As it's a JSF component, there really isn't a very elegant
    way to move the javascript to another location within the HTML page
    and a previous poster pointed out. Help!

  • Block individual field within a table

    Hello everyone,
    Is there an option to block a specific field within a table observed by SE16, without building a "view" for it?
    I'll explain myselfu2026. There is a table containing credit card numbers, but this table also containing critical data for my client, that can not be drawn from elsewhere.
    I'm looking for an option that would allow him to watch the whole table through  the SE16 , without the credit card numbers.
    Thanks,
    Julia

    Hi Julia,
    The alternative option is to use SAP Queries using SQVI transaction code. You have an option to select the required fields for the table.
    Further, you can assign the query to a transaction code in SE93 and assign the same to the users. Below are the steps to create a transaction code.
    1. Goto SE93
    2. Enter the transaction code name and description.
    3. Select the option "Transaction with Parameters"
    4. Transaction should be START_TRANSACTION.
    5. Check Skip initial screen
    6. Under the default values, enter the following:
    D_SREPOVARI-REPORTTYPE     AQ
    D_SREPOVARI-EXTDREPORT     Query name
    D_SREPOVARI-REPORT     Query user group to restrict (not SU01 user groups)
    However, the users should be assigned to the query user groups. These are further maintained using SQ03 transaction code.
    Ofcourse, my recommendation would be to stick to SE16 views and restrict the authorization to the table views
    Hope this helps!!
    Regards,
    Raghu

  • PA30 Display Facsimiles Authorization Issue

    Dear All,
    I am facing one authorization issue in PA30 Transaction. User trying to display the archived documents from PA30 > Extras > Display All Facsimiles, when user trying to execute he is facing the below authorization issue.
    You have no authorization to display the facsimile
    Message no. PG424
    I have analyzed this issue this is lack of infotype authorization, but I am not sure which infotype we have to give under P_ORGIN authorization object. SU53 not showing anything for infotype, it is showing  ' ' in infotype.
    I checked the below SAP notes also.
    1562091 - Display all facsimiles: Incorrect Message PG424/PG425
    1990223 - HRFORMS : Can not view archived documents in PA20
    373063 - Authoriztn for applicnts opticl archv does not work
    User getting access If I maintained Star (*) or (' ') . Please help me to solve this issue.
    Thanks
    Kishore ch

    Hello,
    You can check which Infotype your archived document is linked to in table V_T585O. A user will require read authorization for that infotype as well as an authorization for S_WFAR_OBJ for the document type. If I'm not mistaken you may even need S_TCODE or P_TCODE for transaction SDV.
    Secondly, I would not advise you to rely only on SU53 data for authorization checks as it only shows the last failed authorization check. You'll get a better view on what's going on by using the system trace (ST01) or the authorization trace (STAUTHTRACE).
    It seems a bit odd to me that assigning P_ORGIN with value ' ' for INFTY would solve the problem as that is the dummy value and should match with any other INFTY value your user has. Seeing as he/she has PA30 then I assume he/she will already have an authorization for P_ORGIN. Check the settings in V_T585O for the document type. Maybe someone made a mistake there and left the Infotype cell empty instead of "-".
    Good luck
    Brent

  • Authorization issues MM/PP STATUS   Changes

    Hello,
    I'm getting the following error  even with SAP_ALL SAP_NEW
    BDC Transaction Report for ZM02. Report: ZUCC0026
    Run by:      KHALIFAO                            page:     1
    On:          11/11/2009                          at : 09:06:12
    In System:   Q47
    Authorization issues  MM/PP STATUS               Changes
    M365SC1110020      ZFIN M680 MM/PP STATUS 00 Not authorized to change MM/PP status
    One of my user is having the following error when she excuted the following steps :
    Steps:
      SE38/ ZUCC0026   - Material Mass update program for Costing View
    Enter the following fields before executions
    Material : M365SC1110020
    Plant: M680
    Check off  update material
    Field to update: select MM/PP status
    New Value: 00
    Execute transaction 
    Thanks
    Osama
    Expected results: output document should states that update of MM/PP status was changed from XX to 00. 
    This message

    Hello Julius,
    SY-UNAME
    ZUCC0026                           550   WRITE: / 'BDC Transaction Report for ZM02. Report:'(b01),
                                                     / 'Run by:     '(b02) ,sy-uname COLOR 5,
                                      1167 *  IF sy-uname <> 'BATCH'.
                                      1183   READ TABLE itab_zusrgroup WITH KEY group_id = group_id
                                                                                user_name = sy-uname.
                                      1212     SELECT SINGLE update_ind scop_ind
                                                   FROM zusrgroup INTO (itab-update_field,l_scop_ind)
                                                          WHERE user_name = sy-uname
                                                          AND   group_id  = itab_fields-group_id.
                                      1219 *               WHERE user_name = sy-uname
                                      1223     READ TABLE i_zplant WITH KEY
                                                                      user_name = sy-uname
                                                                      werks = itab-werks.
                                      1422   SELECT werks FROM zusrplant
                                                          INTO zusrplant-werks
                                                          WHERE user_name = sy-uname.
                                      1453     MOVE: sy-uname TO i_zplant-user_name,
    Parameter  :
    188 *PARAMETERS: p_mode TYPE c DEFAULT 'N' NO-DISPLAY.    JHSIR35508-
    189 PARAMETERS:      p_field LIKE itab_fields-descriptio.
    190 PARAMETERS:      p_name  LIKE itab_fields NO-DISPLAY.
    191 PARAMETERS:      p_newval(14) TYPE c.
    193 PARAMETERS:      p_file(100) TYPE c LOWER CASE.
    194 PARAMETERS:      p_filval AS CHECKBOX.                      "0001+
    195 PARAMETERS:      p_unix   AS CHECKBOX.                      "0004+
      33 PARAMETERS:          P_UPD AS CHECKBOX.
    Thanks
    Osama

  • Loop at Conditions within internal table

    I have not been ABAPing long so primarily have been using keyword help...
    I am trying to loop round an itab and only select and process unique keys from within the table!
    However the table I am using to obtain the records has multiple records with the same reference and I am only interested in each unique occurrence of the IBASE_COMPONENT_GUID field.
    So there could be four items for one Appliance and four for another one. So of the eight records, I would only need to loop round and select the unique GUIDS.
    So there would only be two unique appliances I need to extract the records for.
    Basically I am trying to do something like this:
        LOOP AT GT_ITEM_DATA INTO GS_ITEM_DATA WITH UNIQUE KEY IBASE_COMPONENT_GUID.
    Is there a way to select each unique occurrence?

    Basically, I use the COLLECT statement when I need to get the unique field (character only) field from the internal table.
    Create a table with only one field, GUID.
    LOOP through your main table, assign its GUID to new table's field GUID
    Use COLLECT new_table.
    Other option is,
    Sort the table by GUID
    Loop through it and use AT NEW GUID or AT END OF GUID
    Fill out the table with this GUID.
    Regards,
    Naimesh Patel

  • BI 7.0 Analysis Authorization issue: some reports displaying a blank page.

    Hi All,
    This is regarding BI 7.0 Analysis Authorization issue.
    Overview:
    we have restricted some queries at infoobject level.
    Issue:
    a. For some of the queries, we can see the selection screen but when we try to execute the query by clicking on the execute button (Queries WAD) we get a blank page, meaning nothing is displayed on the output (white/Blank screen).
    b. When we execute the same query through RSRT, we get a message which says "Disconnecting from BW server..".
    c. Let me explain further on this. Basically we are doing this in order to have limited access to Auditors at the client side. At the same time normal users should not get impacted due to this, hence we created two roles. One for normal users and other for Auditors.
    d.  Now the thing is that we execute the same report with normal user ID's the report executes properly and displays the output. it does not show the blank page.
    e. But when we execute the same report with Auditors ID then we get a blank page.
    Any idea why this is so?

    Hi Neha,
    I tried the below also,
    GL Acnt
    I EQ 0000134010
    I EQ :
    but still it didn't work.
    No Infoobject is missing in Authorization Object.
    For your point, "rsecadmin - > analysis -> execute as -> check for the desired user & analyze the log" it didnu2019t allow me to analyze, since as soon as click on execute button a pop-up comes up saying "Disconnecting from the BW server..."
    As mentioned earlier also it is giving me the below message,
    ""I>> Row: 103 Inc: AUTHORITY_02 Prog: CL_RSR_RRK0_AUTHORIZATION                                                                       RS_EXCEPTION        301CL_RSR_RRK0_AUTHORIZATION                         AUTHORITY_02"
    Kindly suggest, since this is a show-stopper for us!
    Thanks,
    Ishdeep Kohli.

  • Variable screen/variant screen authorization issue

    HI All,
    We have implemented standard Cost Center Overview Report(0SR_C02_Q0002) in BI 7.
    We have three selection fields:
    1.Company Code which is mandatory
    2.My controlling Area which is also mandatory
    3.Costcenter which is not mandatory
    The requirement we are facing over here is that in the Variable screen/variant screen when I enter a company code, then I need to display dynamically only those "My Controlling Area" values which are assigned to that particular company code and not all. In the same way after selecting the appropriate "My controlling area" value, I need to display only those cost centers in the cost center selection field which are assigned to the selected company code and My controlling area combination and not all.
    can anyone guide me on how to go about on this authorization issue at the variable screen itself.
    Please treat this issue/requirement on high priority.
    Appreciated in advance.
    Regards,
    raps.

    Hi,
    I think that an alternative to solve your concern could be using Web Application Designer (WAD).  In this respect, there are several design options, with different levels of complexity.
    As the simplest alternative, you could create a WAD including your query and three Dropdown Boxes: one for Company, a second for Controlling area and another for Cost center.  The four mentioned elements should be linked to the same dataprovider so, when you select a company, the options in the other two Dropdown boxes and the information in the query are updated.
    In order to enforce mandatory filter selection at Company and Controlling area level, you should set NO_REMOVE_FILTER='X' in both two Dropdown boxes, so that "All values" option -which would mean no filtering- is not offered.
    I hope this helps you.
    Regards,
    Maximiliano

  • Authorization issue - help request

    Hi guys,
    One of the consultants is having an authorization issue ( He is not abele to run a t-code)
    I ask him to run a su53 report and i am not sure how to proceed with this.
    Please help.
    Here are the details from the SU53 report.
    DISPLAY AUTHORIZATION DATA FOR USER VYXXXX
    User : VYXXX                       profile parameter authorization buffering    4
    Authorization Object: F_KNA1_GRP
    Description
    Authorization check failed:
          + Authorization object F_KNA1_GRP Customer Account Group Authorization
                Activity                                08
                Customer Account Group     ZM01
    Users Authorization Data :
          +  Authorization object F_KNA1_GRP Customer Account Group Authorization
                   Authorization  T-PD19002300
                  Authorization  T-UG39000900
                  Authorization  T-UG39001000
    Please help me guys what need to  be performed.
    Regards,
    Vamsi.

    Hi Vamsi,
    SU53 shows us the last failed authorization for a user. However, it might not only be the failed authorization object failed.
    Hence, "just to learn" , you can use transaction ST01 to enable and run a trace for particular users. Be sure to use in a test environment first, and with proper filters. (for a particular user only).
    Then check-> which auth object is failing.
    RC=4 means a object value is failing.
    RC=12 means an object is missing!
    Check, which tcode is calling that object and this tcode is present in which role. Then.........proceed.
    You can check the SAP documentation on running traces on the help portal of SAP.  I think you will find the answer yourself by troubleshooting more and may be massaging some test roles here and there!
    Likewise, if you are new to security, I would encourage you to start by reading some books on SAP security. Authorizations made easy is a good book to start with.
    Let me know if you have any questions
    EOD for me :P . take care
    Abhishek

  • Authorization issue during Jump

    Hi all,
    I am faced with an authorization issue when I am jumping from a BW report into an ABAP report in R/3. The particular BW report is built on a Multiprovider and when I jump to the R/3 report it displays a message saying that I have no authorization to display the R/3 report. Now the issue is that when I run the same report on the base infocube and perform the jump there is no problem. It works just fine.
    Both the multiprovider and the base infocube have the same authorization objects checked.
    Can someone please help?
    Regards,
    Ashmith Roy

    Pls have a look on the below thread:
    Authorization by InfoArea
    Regards
    Ganesh
    *Assign points if this helpful

  • Authorization issue in Info spoke

    Hi all,
    I am facing some authorization issue when executing info spoke in process chain.
    Info spoke is working fine in direct Scheduling (both background and Dialog).
    Am getting this error after execution of process chain
    "System error: RSDRC / FORM AUTHORITY_CHECK RSDRC / FORM AUTHORITY_CHECK R"
    "System error: RSDRC / FUNC RSDRC_BASIC_CUBE_DATA_GET RSDRC / FUNC RSDRC_B"
    "System error: RSDRC / FORM DATA_GET RSDRC / FORM DATA_GET RSDRC / FORM DA"
    "Extraction Cube : Error in DataManager API".
    I dont know why this problem comes.
    Can anyone tel me what went wrong and how to solve it.
    Thanks in advance.
    Kind regards,
    Shanbagavalli.S

    Hi All,
        The above issue is getting due to # character in text at end(e.g ljdfsaa##). After removing # characters in text issue got resolved.
    Thansk,
    Manjunatha

Maybe you are looking for