Authorization on item level

Hello,
is anybody there who has set BCS-items and hierarchy as authorization-relevant? Which consequences can occur? I know, it is not usual, but if it is asked for...
Thank you in advance,
Arda

Hi Arda,
Pls check the Hierarchy for the SEM BCS and then activate it via RSD1. Usually it is named by Consolidation officer which can be checked in RSA1.
If you make it authorization relevant then you can start reporting on the PGORU's and PGMRU's whcih not be any harm unles you provide the authorizations to it or add this Hierarchy to particular Analysis Authorization object.
BR,
Siddharth Kaul

Similar Messages

  • Authorization object for item level

    Hi,
    Is there an authorization object for item categories for business transactions.
    Actually our need is that partners at item level should edit the documents. Authorization objects CRM_ORD_OP and CRM_ORD_PR are not success this need.
    Regards.

    Thanks!
    I added with full authorization and still do not get any roles displayed. 
    Any other ideas?

  • Authorization scheme for display/read only conditions on item level

    Hi All,
    I have question. I want to use an authorization scheme to manage if users with a certain role have the permission to either update an item or have the persmission to only see the item or that they don't have permission to see it at all.
    So, the input for the scheme would be: 1. user role 2. the current page 3. the current item.
    The output would be: 0 (update) 1 (read only) 2 (not displayed).
    I think I can manage that.
    And I can attach this schema to the items.
    So far so good.
    But how can I make it so that the 0,1 and the 2 will actually do what they need to do?
    I have been thinking about making a function like GET_AUTHORISATON(ROLE,PAGE,ITEM) output: 0,1,2 but I still can't figure out how to connect this with the functionality I want to achieve.
    Can somebody give me a hint?
    Andre

    Thanks Hari,
    Thanks, it works, almost, but what if items are mandatory on a page, but not always mandatory?
    If a user has a certain role, some fields are manadatory, otherwise not.
    Again, a function would do the trick as far as the input and output information
    something like IS_MANDATORY(USER_ROLE, CURRENT_PAGE, CURRENT_ITEM) but how can I make it work?
    I guess a PL/SQL validation like:
    IF IS_MANDATORY(USER_ROLE, CURRENT_PAGE, CURRENT_ITEM) THEN ITEM IS NOT NULL
    END IF;
    Andre
    PS: personally I think item level security is not something you wish to implement in your system. I prefer different screens for different roles.
    Far more straightforeward. Easy for maintenance. When something disfunctions, it's far more easy to pinpoint the location of the cause.

  • How to restrict the user from making any changes in Sales order- item level

    Hi to all
    How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
    Regards
    Anish Parikh
    Edited by: anish parikh on Jan 24, 2008 5:16 AM

    Hi Anish,
    This can be achieved through the roles and authorization.
    This can be done through the basis team. they can create user profiles and roles.
    For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
    Like that ur requirement can be done.
    Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
    Hope i answers.
    Reward points if useful.
    Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

  • PO item level validation if create with ref to contract

    Hi
    Pl help me to fulfill the following client requirement:
    When user create the PO with ref to contract , system fetch the all data from the contract to PO at line item level, but in the PO, user is able to change the contract line item rate.
    Now contract line item rate is already fixed with vendor & PO creator should not allowed change this rate.
    Could you provide the any standard configuaration or development to restric the user to chage the PO line item rate if created with ref to contract
    Pl give me replay as soon as possible as it is very urgent
    Rgds
    Nishit

    Hi,
    First you have to create a separate document type which is to be used for creation of PO referring a contract . Than define functional authorisation to buyers going by the menupath -Materials management > Purchasing > Authorisation management > Define function authorisations for buyers-Function Authorizations: Purchase Order. Here enter the field selection key of the new PO document type you created . Than check the box "Display Prices" . Uncheck all other boxes .You can check reference to Contract against possible reference Objects. Than save . Than in the User id enter the User parameter EFB and allocate the aparameter to the user . Also remove other document types of POs except the newly created document type in user authorisations. This will prevent change of price field in the specific document type.
    Dhruba

  • User Exit to make Payment Term field non editable in item level .

    Hi all,
    User wants to make the Payment Term field in sales order as non editable and  Payment terms is copied from Customer Master to Sales order.
    I use user exit MV45AFZZ (USEREXIT_FIELD_MODIFICATION) to make Payment Term field non editable in header level.
    I am not able to do it in item level. Pl help to to make Payment Term field non editable in item level.
    Thanks,
    sunil

    Hi,
    You can try implicit enhancement in the include MV45AF0T_TCTRL_U_ERF_AUFTRAG_I
    use below code.
    DATA: WA_COLS LIKE LINE OF TCTRL_U_ERF_AUFTRAG-COLS.
       LOOP AT   TCTRL_U_ERF_AUFTRAG-COLS INTO WA_COLS.
       IF WA_COLS-SCREEN-NAME = 'VBAP-ZTERM'. " Check the field name
       WA_COLS-SCREEN-INPUT = 0.
       WA_COLS-SCREEN-OUTPUT = 1.
      MODIFY TCTRL_U_ERF_AUFTRAG-COLS FROM WA_COLS.
       ENDIF.
    ENDLOOP.
    It better to control it via a custom authorization object.
    put a authorization create a custom authorization object so that you can restrict it for a certain users.
    AUTHORITY-CHECK OBJECT 'ZTERM'
             ID 'ACTVT' FIELD '02'.
    IF SY-SUBRC NE 0.
       LOOP AT   TCTRL_U_ERF_AUFTRAG-COLS INTO WA_COLS.
    ENDLOOP.
    ENDIF.
    Regards
    Aromal

  • Addition of a new field in PR's Item level

    hi folks,
    I have to add a new field in the item level of the PR i.e. ME51N.
    Can any body suggest me how i should go about it.

    Hi
    Try the Badi :ME_GUI_PO_CUST.
    For better understanding of the badi .
    Goto SE18 Transaction give the badi name .Click on documentation button . See the documentation.
    For better understanding of the code:
    see the class :CL_EXM_IM_ME_GUI_PO_CUST or
    In se18, goto/ sample code/display.
    The follwing user exits and badis available for me23n transaction:
    Enhancement/ Business Add-in
    Enhancement
    MEQUERY1
    Enhancement to Document Overview ME21N/ME51N
    MEVME001
    WE default quantity calc. and over/ underdelivery tolerance
    MM06E001
    User exits for EDI inbound and outbound purchasing documents
    MM06E003
    Number range and document number
    MM06E004
    Control import data screens in purchase order
    MM06E005
    Customer fields in purchasing document
    MM06E007
    Change document for requisitions upon conversion into PO
    MM06E008
    Monitoring of contr. target value in case of release orders
    MM06E009
    Relevant texts for "Texts exist" indicator
    MM06E010
    Field selection for vendor address
    MMAL0001
    ALE source list distribution: Outbound processing
    MMAL0002
    ALE source list distribution: Inbound processing
    MMAL0003
    ALE purcasing info record distribution: Outbound processing
    MMAL0004
    ALE purchasing info record distribution: Inbound processing
    MMDA0001
    Default delivery addresses
    MMFAB001
    User exit for generation of release order
    MRFLB001
    Control Items for Contract Release Order
    MELAB001
    Gen. forecast delivery schedules: Transfer schedule implem.
    AMPL0001
    User subscreen for additional data on AMPL
    LMEDR001
    Enhancements to print program
    LMELA002
    Adopt batch no. from shipping notification when posting a GR
    LMELA010
    Inbound shipping notification: Transfer item data from IDOC
    LMEQR001
    User exit for source determination
    LMEXF001
    Conditions in Purchasing Documents Without Invoice Receipt
    LWSUS001
    Customer-Specific Source Determination in Retail
    M06B0001
    Role determination for purchase requisition release
    M06B0002
    Changes to comm. structure for purchase requisition release
    MEFLD004
    Determine earliest delivery date f. check w. GR (only PO)
    MEETA001
    Define schedule line type (backlog, immed. req., preview)
    ME590001
    Grouping of requsitions for PO split in ME59
    M06E0005
    Role determination for release of purchasing documents
    M06E0004
    Changes to communication structure for release purch. doc.
    M06B0005
    Changes to comm. structure for overall release of requisn.
    M06B0004
    Number range and document number
    M06B0003
    Number range and document number
    Business Add-in
    ME_PROCESS_PO
    Enhancements for Processing Enjoy Purchase Order: Intern.
    ME_PROCESS_COMP
    Processing of Component Default Data at Time of GR: Customer
    ME_PO_SC_SRV
    BAdI: Service Tab Page for Subcontracting
    ME_MMPUR_EINM_CUST
    BAdI Methods for Processing IDoc Data in the SUS Scenario
    ME_MMPUR_EINM
    BAdI Methods for Processing IDoc Data in the SUS Scenario
    ME_HOLD_PO
    Hold Enjoy Purchase Orders: Activation/Deactivation
    ME_GUI_PO_CUST
    Customer's Own Screens in Enjoy Purchase Order
    ME_FIELDSTATUS_STOCK
    FM Account Assignment Behavior for Stock PR/PO
    ME_DEFINE_CALCTYPE
    Control of Pricing Type: Additional Fields
    ME_COMMTMNT_REQ_RE_C
    Check of Commitment Relevance of Purchase Requisitions
    ME_COMMTMNT_REQ_RELE
    Check of Commitment Relevance of Purchase Requisitions
    ME_COMMTMNT_PO_REL_C
    Check for Commitment-Relevance of Purchase Orders
    ME_PROCESS_PO_CUST
    Enhancements for Processing Enjoy Purchase Order: Customer
    EXTENSION_US_TAXES
    Extended Tax Calculation with Additional Data
    MM_EDI_ORDERS_OUT
    Enhancements for IDoc Output of Purchase Order: Internal
    MM_EDI_DESADV_IN
    Supplementation of Delivery Interface from Purchase Order
    MM_EDI_DELFOR_OUT
    Enhancements for IDoc Output of SA Releases: Internal
    ME_TRIGGER_ATP
    Triggers New ATP for Changes in EKKO, EKPO, EKPV
    ME_TAX_FROM_ADDRESS
    Tax jurisdiction code taken from address
    ME_REQ_POSTED
    Purchase Requisition Posted
    ME_REQ_OI_EXT
    Commitment Update in the Case of External Requisitions
    ME_RELEASE_CREATE
    BAdI: Release Creation for Sched.Agrmts with Release Docu.
    ME_PURCHDOC_POSTED
    Purchasing Document Posted1
    ME_PROCESS_REQ_CUST
    Enhancements for Processing Enjoy PReqs: Customer
    ME_PROCESS_REQ
    Enhancements for Processing Enjoy PReqs: Internal
    ME_COMMTMNT_PO_RELEV
    Check for Commitment-Relevance of Purchase Orders
    ME_BSART_DET
    Change document type for automatically generated POs
    ME_BAPI_PR_IBS
    BAdI: Enjoy BAPIs for Purchase Requisitions
    ME_BAPI_PR_CUST
    Customer BAdI for Enjoy Purchase Requisition BAPIs
    ME_BAPI_PR_CREATE_02
    ME_BAPI_PR_CREATE_01
    ME_BAPI_PO_IBS
    BAdI for Inbound/Outbound Mapping BAPI_PO_CREATE1 IBS
    ME_BAPI_PO_CUST
    Customer BAdI for BAPI_PO_CREATE1 and BAPI_PO_CHANGE
    ME_BAPI_PO_CREATE_02
    ME_BAPI_PO_CREATE_01
    ME_ACTV_CANCEL_PO
    BAdI for Activating the Cancel Function at Header Level
    MEGUI_LAYOUT
    BAdI for Enjoy Purchasing GUI
    SMOD_MRFLB001
    Control Items for Contract Release Order
    ME_CCP_ACTIVE_CHECK
    BAdI to check whether CCP process is active
    ME_COMMITMENT_STO_CH
    BadI for checking if commitments for STOs are active
    ME_CIP_REF_CHAR
    Facilitates Reference Characteristics in Purchasing
    ME_CIP_ALLOW_CHANGE
    Configuration in Purchasing: Changeability Control
    ME_CIN_MM06EFKO
    Copy PO data for use by Country version India
    ME_CIN_LEINRF2V
    BADI for LEINRF03 excise_invoice_details
    ME_CIN_LEINRF2R
    BADI for CIN India - Delivery charges
    ME_CHECK_SOURCES
    Additional Checks in Source Determination/Checking
    ME_CHECK_ALL_ITEMS
    Run Through Items Again in the Event of Changes in EKKO
    ME_CHANGE_OUTTAB
    Enrich ALV Output Table in Purchasing
    ME_CHANGE_CHARACTER
    Customer-Specific Characteristics for Product Allocation
    ME_CCP_DEL_DURATION
    Calc. of Delivery Duration in CCP Process (Not in Standard)
    ME_CCP_BESWK_AUTH_CH
    BAdI for authorization checks for procuring site
    If it helpful rewards points
    or get bak if u need further assistance.

  • Proble in VA01, cant see condition types in condition tab at item level

    Hi
    Well i am facing a strange problem in VA01, i am not able to see condition type whole grid under Condition tab at item level in VA01. actually i was given a project to hide pricing data from particular users based upon Authorization object value. initially i though it might be because of that so  i revert back all the changes but the problem remain Intact.
    well do you have any idea which user exit or enhancement may affact this or do you knoe if it can be because of  SD configuration changes.
    i mean can be hide condition type in VA01 through pricing condition.
    the other thing is its working fine in VA02.
    i made changes in following include
    MV45AFZZ
    MV45AFZB
    LV69AFZZ
    RV60FUS4
    any help will be highly appreciated .
    rewards for sure
    mandy
    Edited by: mandy on Jan 15, 2008 2:11 PM

    use this
    INCLUDE MV45AFZZ. include.
    u will find  FORM USEREXIT_PRICING_PREPARE_TKOMK  
    where u can change
    princing
    i am puting my code which i did
    ok
    DATA : WA_KOMV LIKE XKOMV,
           WA_ZPRICING LIKE ZPRICING1.
    IF SY-TCODE = 'VA01'.
    IF VBAK-AUART = 'YYOR'.
    LOOP AT XKOMV INTO WA_KOMV where KPOSN = VBAP-POSNR.
    IF WA_KOMV-KSCHL = 'ZABS'.
    SELECT SINGLE *
           FROM ZPRICING1
           INTO WA_ZPRICING
           WHERE VKORG = VBAK-VKORG
           AND VKBUR = VBAK-VKBUR
           AND VTWEG = VBAK-VTWEG
           AND MATNR = VBAP-MATNR.
    IF SY-SUBRC = 0.
    delete XKOMV.
    ENDIF.
    ENDIF.
    ENDLOOP.
    ENDIF.
    ENDIF.

  • Field "Rejection For Reason" is in disble status at sales order item level

    Hi,
    I am trying to reject the items in a sales order by entering "Rejection Reason" at item level. But the problem is, this field is in disable status in WEB UI only for my user.
    However, If I use any other user, it is in enable status.
    Could you please help me out, do I need to have config settings to enable this field.
    Thanks,
    Sandeep

    Hi,
    Check TRX. SU53 and see if there you need some authorization.
    Best regards,
    Caíque Escaler

  • Modification of the ship to address in the sales order at item level

    SAP ECC6
    Sales order. Transaction code VA01/VA02
    Creation/modification of the ship to address at item level/Allowed by SAP when sold to ≠ ship to/Impossible when
    sold to = ship to
    Hello All,
    I would like to set up an enhancement on the sales order.
    > What we want : we want to have the possibility to modify the ship to party address at item level. Indeed, we sometimes make slight modifications to address, such as adding the words "to the attention of"
    > What we don’t want : create a new ship to, to take into account the address modification or manage this modification in an item text
    > What SAP allows : At item level (as at header level) SAP allows you to modifiy the ship to address when the sold to ≠ ship to. BUT, SAP forbids the modification of the ship to address when the sold to = ship to
    Is there a means on the customizing to authorize these modification address at item level each time the sold to = ship to ?
    Many thanx
    Best regards
    Vincent

    sold to party=ship to party
    goto item and tab partner
    select partner function ship to party, again enter same code and press enter
    now see item partner automaticlly selcted.
    now double click on ship to party and change addrss etc accordingly.
    Hii Vincent,
    It is possible to change address of shipt to party at item level and it doest matter if sold to part & ship to party are same or different at header level.
    Please see above images.
    All you have to do is to select ship to party again in item tab-partners and enter code.
    Please check item you are using is activated for business data.
    Regards,
    Nouman

  • Tax classification screen for item level not appearing in sale order under Billing Doc tab

    Hi Expert
    while creating sale order Tax classification screen is not appearing for item level under Billing document tab.
    Tax classification for customer and Material has already maintained. Tax classification screen is not appearing for USER but same time from our USER ID we can able to see that screen.
    please help in above issue. is this related to Authorization issue or other thing need to check.
    Regards
    Pash@SD

    Hi,
    As per standard in Sales Order Document you will be able to see the Tax Classification fields in Billing Tab at Header level (for Customer Tax Classification) and at Item level for (Material tax Classification). The values from Customer M<aster is not populated at Header level as per standard but you can populate the value by using the Exit. Material tax classification populated from material master as you can see that at item level.
    If for one User you are able to see and for other you are not able to see, kindly check first whether both are using same customer and material, and if yes, then check the User Exit.
    Thanks and regards,
    Amitesh Anand

  • Multiple Shipto values at item level

    Hi Friends,
    I'm facing some problem when I try to change the ship to value at item levels of VA02. The problem is,
    In VA01, while creating a sales order, the configuration is done in such a way that after giving an item at item level, a sub-item will be generated automatically based on that main item. Now in VA02, for that newly created sales order, if I go to the details of the main item, and if I change the value of the shipto in Partner's tab, then it'll ask for redetermining the value and also for completing the delivery. After completing the delivery, if I save and go to display mode, the shipto value of the subitem level also should update. But it is not updating with the value of main item. Can any of you please suggest me the solution for my problem.
    Many thanks in advance.
    Thanks & Regards,
    Raghuveer K.

    Hi Soumyadip,
    Many thanks for your response.
    I did the same thing. I checked it in both the userexits <b>uderexit_save_document</b> and uderexit_save_document_prepare. Even then it is not working. When I checked it by keeping a watchpoint, it is calling a function module RV_DELETE_POSITION_PARTNER. There it is deleting the subitem values. Since this is a standard prog, we don't have authorizations to avoid it. So how to overcome this issue.
    Please suggest me.
    Thanks & Regards,
    Raghuveer K.

  • Duplicate records for Sale Order Cycle Report(excluding item level detail)

    I have posted this issue in number of forums but till today no one is able to answer it correctly.Here it is:
    I need to create a report which I think most of the sd consultants have also done it.It basically covers sales order cycle without item lvel detail such as:
    Sale Order No -- Sales Order Date-- Delivery No-- Delivery Date
    Now as we all know ,sales orders and deliveries are connected through item table which means in the output I will get duplicate rows for the report above.For Example, if a sales order share 3 items with the delivery then we will get 3 exact duplicate rows in the report.
    What can be the best solution?connecting through VBFA has alos same result as it also has item level details.
    I need a good solution.This a common report and there must be some solution

    Hiiii,
    It is standard SAP rule that system will catch the document flow (document link history) at item level.
    Now your problem that you dont want to show the line item based report because of duplicacy.
    Try this.
    Brows table VBFA -
    In screen selection select the following......
    1. Subsiquent document category
    2. Preceding item
    select "J" in Subsiquent document category
    and "000010" in Preceding item  then execute the table.
    Now system will not show multple line item based delivery report. so No duplicacy will be there
    Regards
    Shambhu Sarkar

  • In report painter report, line item level drilldown report requirment

    Dear All,
    I created one report in GRR1, when I execute the report i am not getting line item wise drilldown option. For example one cost center no of line itemwise posting ( g/ls wise)posting is there. By double clicking on that specific line item we will go that ledger and see the data available in that ledger.In standard reports that option available but my own reports I unable to go drilldown at ledger level cost reports.
    Please sugget anyone, where I am doing mistake in report creation level.
    Thanks
    M Srinivasa reddy
    Ph : 9637399076

    Thank you,
    I attached reports to Library based on that I am able to drilldown line item level of the report.Is it corret or any other way for line item level drilldown option for report painter reports
    Thanks
    M Srinivasa reddy

  • Best Practice: Dynamically changing Item-Level permissions?

    Hi all,
    Can you share your opinion on the best practice for Dynamically changing item permissions?
    For example, given this scenario:
    Item Creator can create an initial item.
    After item creator creates, the item becomes read-only for him. Other users can create, but they can only see their own entries (Created by).
    At any point in time, other users can be given Read access (or any other access) by an Administrator to a specific item.
    The item is then given edit permission to a Reviewer and Approver. Reviewers can only edit, and Approvers can only approve.
    After the item has been reviewed, the item becomes read-only to everyone.
    I read that there is only a specific number of unique permissions for a List / Library before performance issues start to set in. Given the requirements above, it looks like item-level permission is unavoidable.
    Do you have certain ideas how best to go with this?
    Thank you!

    Hi,
    According to your post, my understanding is that you wanted to change item level permission.
    There is no out of the box way to accomplish this with SharePoint.               
    You can create a custom permission level using Visual Studio to allow users to add & view items, but not edit permission.   
    Then create a group with the custom permission level. The users in this group would have the permission of create & add permission, but they could no edit the item.
    In the CodePlex, there is a custom workflow activities, but by default it only have four permission level:
    Full Control , Design ,Contribute and Read.
    You should also customize some permission levels for your scenario. 
    What’s more, when use the SharePoint 2013 designer, you should only use the 2010 platform to create the workflow using this activities,
    https://spdactivities.codeplex.com/wikipage?title=Grant%20Permission%20on%20Item
    Thanks & Regards,
    Jason
    Jason Guo
    TechNet Community Support

Maybe you are looking for