Authorization object not to allow certain user to enter sloc PO

Dear All,
i have manage to go su21 to create under mm purchasing authorization object called Y_BEST_LOC with Acty and LGORT field. other than that i have insert check item under program RM06ENHI. after that i go to su24 to assign the transaction code check for me21 and me22. under field value for me21, my new object i want to assign value (interval) = $LGORT, but don;t know how so i leave it blank.
Come to user profile i adding this object into the authorization to check, and put in only allow for 0001 and 0002 location. But the user still can save the PO when choose 0004 without error. I want to know missing step that should be done to prevent certain user to order under 0004 storage location.
Kindly suggest and guide me. thanks in advance
Regards
Aishah

ME21/ME21N doesn't even check if the material is extended to the storage location entered in the PO. I don't think what you did is enough to restrict users per storage location, you need to find a user exit or BAdi and do the authorization check in the your custom code
AUTHORITY-CHECK OBJECT 'Y_BEST_LOC'
         ID 'ACTVT' FIELD '01' "Create
         ID 'LGORT' FIELD '0002'. "Storage Location 0002
IF SY-SUBRC = 0.
" User has authorization
ELSE.
message 'Not authorized for storage location' type E
ENDIF.
You may have to use the following Business Add-in (TCode SE18)
ME_CHECK_ALL_ITEMS                    : Run Through Items Again in the Event of Changes in EKKO

Similar Messages

Allow certain users to capture quotation after bid end date

Hi
Is it possible to allow certain users to be able to capture quotation on behalf of suppliers using surrogate bid after the end date has been reached but before the opening date? How would I do this?
Regards

Hi
As the end date and opening date are at the header level common to all bidders/vendors, we cannot manually capture quotation for specific suppliers using surrogate bidding. I dont think there is even a BADI for this.
Rgds
Reddy

SU24 - Search by Auth object returns "Authorization object not available"

If I try to select by Authorization Object :
F_CLOS_BKA
or
M_MATE_DG
I got "Authorization object not available" error
I can't find F_CLOS_BKA and M_MATE_DG in the TOBJ table as well.
But if I select by Transaction :
F975
or
DGR3
It display
F_CLOS_BKA CHECK YS
M_MATE_DG CHECK YS
Question : Is this Normal?

Hi Dominick,
I recommend to open a ticket at SAP to clarify that....
The correct components should be:
F975-->IS-B-BCA-PT-GLP
DGR3-->EHS-DGP
I suggest to ask them (as they are responsible for delivering the values for SU22) why the deliver proposals for
objects, which do not exist (I have found note #1170774 for F_CLOS_BKA (but this note is 'brand new'), M_MATE_DG seems not to be delivered at all).
It would be nice, if you would post the result of your queries...
thx,
B.rgds,
Bernhard

I don't want to allow a user to enter a date that is before January 2014

I don't want to allow a user to enter a date that is before January 2014. I want to restrict users from entering a date that is or prior to December 31, 2013 in a date field. Is this possible?

Seems like it is a little more complicated just to create a new Date() object in livecycle...
the way I found to create a new Date() object is using the dateTimeEdit pattern to be 'date{EEEE, MMMM D, YYYY}'
then u can create a new Date
var date1 = new Date(DateTimeField1.editValue);
date1.getTime();
or
you can also click the following link and download the pdf from the blog...
Adobe LiveCycle Designer Cookbooks by BR001: Date handling in Livecycle Designer ES forms
using XFADate object make it easy to manipulate dates with javascript
The XFADate object created by BR001 is very good but to be able to see if a date is prior to another date you can just add this function in the object script..
you can add that function at line 200...
that.isPriorTo = function(date) {
     var toDate = newDate(date);
     if (isNaN(this) || isNaN(toDate)){
          return false;
     } else{
          var interval = this.getTime() - toDate.getTime();
          if (interval > 0){
               return false;
          } else{
               return true;
To use that function above you can just use this code:
if (XFADate.newDate(dateFrom).isPriorTo(DateTo)){
     //dateFrom is prior to dateTo
hope this help

BI authorization objects not appearing in RAR, error while generating role

Hi
I am facing certain problems relating to integration of BI module version 7 with GRC Access Controls version 5.3 and support package 06. I am describing the problems in details below:
(a) In Risk Analysis and Remediation (RAR) component, I am creating Functions and
      Risks for Business Intelligence (BI) module. For that I have downloaded the
      descriptive text and authorization object data from BI development system and
      uploaded the same in RAR. Then I have created 2 Function Ids DBI1 (having action
      RSA1) and DBI2 (having actions RSA11, RSA12, RSA13, RSA14, RSA15) and 1
      Risk Id for BI (having Function Ids DBI1 and DBI2) in RAR. But when I checked
      the permission tabs of the Function Ids DBI1 and DBI2, I could not find any
      authorization objects for the actions in them.
(b) In Enterprise Role Management (ERM), when I am trying to create a Role TEST-BI
       in DBI 100 and I put the BI transaction codes in authorization data , I get the
       authorization objects . Risk analysis is also being done successfully. But at the time
       of Role generation in background mode , it is giving an error message :
       Error generating role TEST-BI for system DBI 100: Unable to interpret * as a number.
       I am thus unable to generate any role in DBI 100.
(c) In Compliance User Provisioning (CUP), I have imported a standard role from DBI
      100. Then I have added Functional Area, Business Process, Subprocess and
      Criticality Level to this role in CUP. But when I try to assign this Role to an user, it
       gives an error Error creating request. But requests are getting created and roles are
       being assigned to users in ECC development systems using the same Initiator, CAD, stage
       and path.
Can anyone please help me ?

-

How do I only allow certain users to print in color?

Product Name: HP Color LaserJet Professional CP5225dn Printer (CE712A)
Operating System Installed: Windows 7 Enterprise (64bit)
I work at a K-12 school and purchased the HP Color LaserJet Professional CP5225dn Printer (CE712A) for use in our computer lab. I would like to know if it is possible to have it so that only certain users can print in color (possibly put a password on it). I know the cost for color is higher, and therefore, would like it so that students have to approve through teacher if they want to print in color.
We are running it on our Print Server (networked) not through USB.
Thank you for the help.

Hi,
That's a very good question actually. In my corporate networks, we are talking about hundreds of laser printers and the ONLY thing we can do: only allow people access to a set of mono laser printers, not all printers. For example, the following printer is using B&W as default but can't stop users to print in colors if they could access to the resourse:
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Analysis Authorization Object not working

Hi Gurus,
I m working on BI 7.0, I have created an analysis authorization object zz_div for 0DIVISION characteristic.
For a given report i want a given user to view only data for '32' and '33' 0DIVISION.
I have followed the below steps but still the report shows all data instead of restricted one.
1)RSECADMIN -> Maintenance ->zz_div ->Create
2) Add 0DIVISION in Auth structure , and in details
I     EQ     32
I     EQ     33
3) Add 0TCAIPROV with I     EQ     0SD_C03
4) Add 0TCAACTVT, 0TCAKYFNM, 0TCAVALID, this having details as
I     CP     *
5) Then in User tab -> Assignment -> User -> Change-> Inserted ZZ_DIV-> Save
6) In Query created a Authorization variable(with no input prompt) and restricted 0DIVISION.
Following are the authorization object in that user's Role (Reporting Only)
S_RFC
S_TCODE
S_GUI
S_BDS_D
S_BDS_DS
S_OC_SEND
S_RS_AUTH - only having zz_div
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
S_RS_RSTT
S_RS_TOOLS
S_RS_PARAM
I have surfed lots of thread for this issue but not getting a solution
Tell me what i m missing in above or any additional setting need before creating analysis authorization
Edited by: Sonal Patel on Apr 18, 2009 8:10 AM

Hi
Thanks a Ton for ur reply
I have checked in SPRO : Analysis Authorization
where the authorization mode is " OLD obsolete Concept With RSR Authorization Objects "
We have to do the same in Production system .Can u please how its going to effect to others authorizations if change it to New Concept
Thanks
Sonal....

Authorization object in procurement that checks user role

Hi Experts,
Please let me know if we have any standard authorization objects in the transactions PO or PR that checks the SAP User role. Authorization check can be done by sap role, we are not botherd checking on company code, purchase group and so on, Is there any standard procedure to find out that or any function module available to check that by passing user role. << removed >>
Cheers
Mohan
Edited by: Rob Burbank on Feb 19, 2010 12:24 PM

easiest way to find all authorization objects is to execute SU24.
There you enter the transaction code for which you want find the authorization objects.

Is it possible not to allow the user to select radio button based on condi

Hello All,
I have two radio buttons ( Relation value 1 default , famid value 0 )
can i create a situation where in the user cannnot select the famid radio based on some condition.
The conditioin is that , the user should have selected atleast one item from three list controls then only i should allow the user to select famid radio else not ?
thanks/kumar

Hi,
You can use javaScript to enable disable radio button. Call the javaScript from your select list onChange event.
Hope this helps,
Regards,
Tajuddin
web: http://tajuddin.whitepagesbd.com

Default cost center not appearing for certain users

Hi Gurus,
We are on SRM 4.0 classic scenario.
For certain users when they create SC in SRM the default cost center is not automatically taken into account even if they change it to it. The default cost center was changed for these users and some of them still refer to the old cost center no. which was maintained for them.
The users are not defective and the except the cost center all other attributes work fine. I have tested by deleting & recreating new BP no. for the users but it still doesnt help. Please advise.
BR,
Sambit

hi
check if the users are correctly mapped into org structure (ppoma_bbp)
than check if theri Position are correctly mapped with the default cost center (ppoma_bbp; tab attributes; cost center
regards
andrea

Allow privilleged users to enter into EXEC mode on login not working with public keys

Hi,
I have recently updated one of my Cisco ASA to v9.2(1) and noticed a function to get the perform authorization for exec shell access can do a auto-enable when logging in from ssh.
The problem is that if I use a private/public key authentication with a user it won't do the auto-enable feature. If I login without keys and using my password, it jumps into privilleged exec mode as it should.
Anyone else had this issue?
Config:
aaa authentication ssh console LOCAL
aaa authorization exec LOCAL auto-enable
username user password xxxxxx encrypted privilege 15
username user attributes
ssh authentication publickey 22:af:xxxxxx hashed
Any answer will be highly appreciated.
P.S I'm totally new in this forum.

Would you be able to open a TAC SR and once you do , Email me the SR no and i will look into this issue.
[email protected]
Thanks and Regards,
Vibhor Amrodia

Flash Player not operating for certain User Accounts

Flash Player functions for my Administrator account but not
the 2 User accounts. I get FP9 required messages but it is loaded
and enabled. I have found the following in my Downloaded Programs
file: 8FFBE65D-2C9C-4669-84BD-5829DCOB6O3C, status unknown 4KB
creation and last accessed dates none Ver 1.0.0.25 description,
company, language & copyright unknown.
Shockwave Flash Object D27CDB6E-AE6D-11CF-96B8-444553540000,
installed, 8KB, created 3/24/08, last accessed 9/27/08 Ver
9.0.124.0 description, company, language & copyright are
listed.
Both show Dependency as 1 file size damaged.
This looks on the surface to be wrong. How do I proceed to
correct this?
Using IE7 and XP Home.
Thanks, thomasLyn
Thanks, thomasLyn

Hi ..
From your Safari menu bar click Safari > Preferences then select the Privacy tab.
Click: Remove All Website Data
Now open System Preferences > Flash Player then select the Advanced tab.
Click Delete All under Browsing Data and Settings
Not delete the Safari cache.
Open a Finder window. From the Finder menu bar click Go > Go to Folder
Type or copy paste the following
~/Library/Caches/com.apple.Safari/Cache.db
Click Go then move the Cache.db file to the Trash.
Quit and relaunch Safari to test.
If that doesn't help, troubleshoot Safari extensions.
From the Safari menu bar click Safari > Preferences then select the Extensions tab. Turn that OFF, quit and relaunch Safari to test.
If that helped, turn one extension on then quit and relaunch Safari to test until you find the incompatible extension then click uninstall.

SahrePoint 2013 Server & Project Server 2013 - Notifications and reminders are not received by certain users

Dears,
We have recently implemented MS EPM 2013 where we started to face some strange behavior with the standard alerts and reminders sent from the system.
Minor number of the users (with different levels of privileges from administrators to team members) are receiving emails and alerts normally (either when they are assigned on project schedule tasks or SharePoint list items alerts) without any issues however
the. on the other hand the other majority number of resources are not receiving any kind of alerts from the system (neither from Project Server Nor from SharePoint).
knowing that, all the resources/users have their emails configured properly, and their other attributes are almost the same for all users. all the emails are stored on the same exchange server.
Anyone can help on this please.
Appreciate your cooperation.
Ibrahim Al-Masri Technology Manager at MethodCorp

Thanks Dinesh,
Actually the users have this global permissions configured for them and yet they weren't receiving emails.
We Just could solve this puzzle, all what we needed to do is to configure the
RBS for the majority for the users who weren't receiving emails.
Welcome to EPM 2013 UN-unannounced changes.
Ibrahim Al-Masri Technology Manager at MethodCorp

Acrobat 9 Pro will not open for certain users - Not UNC path error

Hello, I have recently installed Acrobat 9 Pro and It runs fine in an alternate account on my machine. When I go to run it on the primary account, It immediately throws an error. I have checked the registry and the account in question does not have its app data on a UNC path. Thank you in advance for your assistance.
Nick

This is a user forum, but with Adobe you might find better help here than in other places anyway. Many of the users here have been through most of the problems and if you hit one that has been there you will likely get a good answer. Some of the folks are good at making suggestions to try (as they would try) and others will try to replicate the problem if you give enough info. Many of us are a bit crazy for spending so much time here, but we learn along with helping, an aspect we enjoy - takes the edge off the day! (OK, maybe I am speaking for myself.)
If you run into some other specifics that may help others provide you ideas to try, do come back. If you find a solution to your problem, please report it also. Bill

Custom Adobe forms do not display for Certain users

Custom forms were created and the majority of users can
display them. Some users are not able to display forms
unless you give them a new user ID. Role for all forms are
attached to position, if the role is attached to the temporary user ID it works. I am looking solutions or possible causes.
Using ECC 6.0.

Lolanda,
Do you know if your users that cannot use the forms have access to the ADSCerts view in the Key Storage service? Check out slide 26 in the below link:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b08aaa7b-b2f3-2a10-5591-f472a273b90a
-Matt

Authorization object not to allow certain user to enter sloc PO

Similar Messages

Maybe you are looking for