Authorization: Prevent BP creation in CRM2007

Hello,
we are working in CRM 2007 and we would like to prevent some users to create Corporate Account. It cannot be solely achieved by removing the Logical Link from Account Management workcenter.
Indeed, the functionality is embeded in the 'Search' funcitonality where there is "Create Corporate Account" button. (See BP_HEAD_SEARCH/MainSearchResult ).
I have looked around in PFCG to determine the appropriate Authorization Objects. I have implemented  B_BUPA_RLT and CRM_BPROLE. In addition I have activated BADI: IMG =>CRM => MD => BP=>Business Add-Ins=> Implementation : Filtering of BP Roles by authorization but it does not seem to work.
Looking at the trace (ST01), only authorization object B_BUPA_RLT and CRMCONFMOD seems to be accessed.
My questions are:
1. Why my user is not prevented to create a BP with role 000000 (General)? What am I doing wrong?
2. What is the difference between B_BUPA_RLT and CRM_BPROLE?
3. Is there another (easier?) way of doing?
4. How can I deactivate the above BADI (i.e. to prevent side-effects)?
thanks a lot in advance for any piece of info.
regards,
Didier
PS: B_BUPA_RLT is "implemented" as standard. That is mostly "Display" authorizations on the roles.

1. Look at OSS note 1129682. For web ui the correct authorization object is CRM_BPROLE. You should maintained for CRM_BPROLE authorization object only 02 (Change) and 03 (Display) Activity and not 01 (Create) to prevent usrs from being able to create new BP.
2. in CRM WebClient UI authorization object CRM_BPROLE is used instead of authorization object B_BUPA_RLT
3. You could try using ACE.
4. To deactivate badi just open it and click on deactivate button.
Regards.

Similar Messages

  • How to prevent JaxB creation of 2 Interfaces for each Element?

    hi,
    does any body know how to prevent JaxB creation of 2 Interfaces for each Element (The Content Interface and the element interface)?
    I want to configure JaxB to use only one Interface and only one implementation Class.
    Thank's,

    I am sorry I can not answer your question, I have got the same problem. Could you please email me to
    [email protected] when you know the answer, please.
    I have a question for you. When and complex type is validated, I get the object which contains the error. ( or objects ).
    However. How do know the position in the actual parent object. basically. Is there a way to know exactly the position of that attribute in that object. I need to store errors strings.
    The first problem derives from this one:
    It is not possible to execute validate function for a primitive attribute inside an structure.
    I would appreciate your help.
    Thanks.
    Gustavo.

  • Preventing the creation of direct PO

    Hi there experts,
    I would like to know if there is some way to prevent the creation of direct PO. I want that the PO is always created with reference to a PR or a contract.
    Tanks in advance

    hi
    plz check that in OMET u created a object
    now check that u have given the field selection key NB or what ever ur using
    then tick for display condition and enter condition and ref to PR
    now check and try
    Note 664424 - Requisition number not mandatory in ME21N
    Re: without PR no PO creation
    Re: PR mandatory in PO Creation ME21N and ME22N

  • F110 - How to prevent multiple creation of DME file?

    Hello,
    I need to prevent multiple creation of DME file for the same Payment Run (after it has been created once).
    "Printout" bottom creates DME file and Payment Advice any time you trigger it.
    I'm searching for some User Exit / BAdi / Function that will help me to add ABAP code that will check if DME file has already been created.
    Thank You in Advance

    Hello,
    Please check if the flag "Create payment medium" is not flagged at the proposal and the payment run file.
    If it is flagged the payment file will be generated. Also when you press the print out button, the print program will be called and the system will try to created a new payment file.
    In order to avoid duplicated payments you should consider using the flag 'Payment Document Validation" in your print program.
    If the 'Payment Document Validation' parameter is not set ON, documents already processed for payment can be selected and paid again in a subsequent payment run, when posting terminations have occurred.
    Please refer to SAP Knowledge Base Article 1713825 in order to activate Payment Document Validation.
    Another option is to suppress  the"Create Payment Medium" flag at Proposal Run.
    In this case you should check the following information:
    Please restrict the activity 15 of object F_REGU_BUK in the user
    profile/role
    You may also refer to the available activities on this:
    - 02 Edit parameters
    - 03 Display parameters
    - 11 Execute proposal
    - 12 Edit proposal
    - 13 Display proposal
    - 14 Delete proposal
    - 15 Create payment medium proposal
    - 21 Execute payment run
    - 23 Display payment run
    - 24 Delete payment run payment data
    - 25 Create payment media of payment run
    - 26 Delete payment orders of payment run
    - 31 Print payment medium manually
    Kind Regards,
    Fernando Evangelista

  • F110 - How to prevent the creation of DME file in Proposal Step

    Hello,
    I would like to prevent the creation of DME file in Proposal Step of Payment Run (F110).
    Is it possible to suppress "Create Payment Medium" checkbox?
    Many Thanks

    If you are using the Payment Medium Workbench, there is perhaps a solution:
    I found the following code in function module FI_PAYMEDIUM_OFX_20
    * We abort the payment if the data is from a payment proposal. With
    * OFX we can pay only if the data does not come from a payment
    * proposal.
      IF I_FPAYH-XVORL = 'X'.
        MESSAGE E404 WITH I_FPAYH-LAUFD I_FPAYH-LAUFI
            RAISING CANCEL_PAYMENT_MEDIUM.
      ENDIF.
    So I think it may be possible to solve your problem by using the event modules in transaction OBPM3, with your own function module based on the code given above. I have not tested such solution and I have no experience with these events, but I'm currently trying to use them for another problem.

  • No authorization for the creation of resource WG10 00_1000_001

    Dear All,
    While checking SMQ1(Outbound queue), we found 2 displayed , pls check below details.
                   Queue Informationen
    Number of Entries Displayed:                11
    Number of Queues Displayed:                  2
      Cl. Queue Name               Destination                      Entries
      100 CFLDZ31CLNT100_0034      E06CLNT100                               4
      100 MCEX03                   NONE                                     7
    While Double clicking queue (CFLDZ31CLNT100_0034), Its shows Status SYSFAIL .
    Please check details log.
    Cl. Queue Name               Destination                      Entries    Status   Date 1     Time 1   NxtDate    NxtTim   Wait for queue
    100 CFLDZ31CLNT100_0034      E06CLNT100                               4  SYSFAIL  22.09.2011 12:57:11 22.09.2011 13:16:32
    Note : E06CLNT100 (SCM System).
    While double clicking SYSFAIL Its shows No authorization for the creation of resource
    00_1000_001.
    Kindly Suggest.

    And also User not able to do activate Integration Model using Transaction CFM2 , it is giving error as below .
    System:    E06CLNT100    User:  KAPGATEG 22.09.2011 12:57:11
    Function/Q/SAPAPO/CIF_RES_INBOUND4
    Text:        No authorization for the creation of resource WG10
    Kindly advise.

  • Prevent delivery creation  for less/small qty

    Is it possible to control delivery creation process to prevent delivery creation for "to small" volumes/values? At company code /plant level. I checked the min delivery qty in material master but this gives only warining message.
    We want have control at plant/company code level. Please help us with best solution
    Thanks in advance

    Hi,
    As you have already checked the min. delivery quantity at the material master and it throws you a warning message.
    Now goto the T.Code "0VLP(Zero VLP)".
    Select your delivery item category.
    Details.
    Goto Quantity tab.
    Check minimum quantity field.
    Maintain the value "B" here.
    Save.
    If you do this,error message will be displayed.
    Regards,
    Krishna.

  • Prevent auto creation of service entry sheet

    Dear friends,
    I am using maint plan for creating service entry sheets automatically. I am using framework order where I give the validity period. Now when I try to generate service entry sheets through the plans after the end of validity period given in framework order,the system is allowing creation of service entry sheets. Is it possible to prevent a maint plan triggering a service entry sheet if the call date for the service entry sheet to be generated falls outside the validity period given in framework order.
    best regds
    Arun

    Arun,
    This doesn't suprise me...
    I'm not sure if there is a standard solution, but you could do this via user-exit/BADI (see [here|http://www.sapfans.com/forums/viewtopic.php?p=648307] under maintenance plans )
    PeteA
    [www.pjas.com]

  • Entering Opportunities:  Preventing the Creation of a Bill-To Site

    Hi -
    My company has many accounts set up that have Ship To and Sold To sites but no Bill To site.
    When an order is placed for one of these accounts, the Bill To Location is different from the ship-to - it would be another account on file with a billing relationship set up with the first account. This relationship is set up on the Relationships tab for Customer Account Details.
    This set up works well for us.
    However, if we enter an Opportunity for an account that has a Ship To site but no Bill To Site (because it should bill to a parent), a Bill-To Site is automatically created for that account. This is not desirable behavior.
    Do you have any suggestions as to how we can prevent this?
    Thank you,
    Seneca

    hi
    plz check that in OMET u created a object
    now check that u have given the field selection key NB or what ever ur using
    then tick for display condition and enter condition and ref to PR
    now check and try
    Note 664424 - Requisition number not mandatory in ME21N
    Re: without PR no PO creation
    Re: PR mandatory in PO Creation ME21N and ME22N

  • Badi for preventing PO creation in shopping cart in srm

    Hi Experts,
    Here I have a senerio in SRM. In shopping carts we need to avoid purchge order cretion for particular vendors. Because for these vendors through workflow after approval PO has to be created.
    So I need BADI to prevent the purchage order creation for particular vendors.
    Please suggest me in this regards.
    Thanks in advance
    G.S.Naidu

    Hi Naidu,
    PLease try this:
    Enhancement   MM06E005       Customer fields in purchasing document  (It contains vendor as import paremeters)                    
    Enhancement  MEQUERY1        Enhancement to Document Overview ME21N/ME51N
    I hope this may helpfull.
    Thank you,
    Thanks,
    AMS

  • [RFC][Authorization] Prevent Dump on RFC Call

    Hi,
    I would like to have a tool to check consistencies throughout different SAP systems for a given user.
    For this, I call the Bapi called 'BAPI_USER_GET_DETAIL'. The problem is that, depending RFC user defined in SM59, it may end by a DUMP.
    Thus, is there a way to test the RFC user rights in order to prevent the Dump ?
    The problem is that calling another RFC function module may also result in a Dump, isn't it...
    Thanks for your replies!

    You may have to try for authorization before hand.  You have tried doing authority checks on one of the following authorization objects?
    S_RFC        Authorization check for RFC access                      
    S_RFCACL     Authorization Check for RFC User (e.g. Trusted System) 
    authority-check object 'S_RFC'
             id 'RFC_TYPE' field '__________'
             id 'RFC_NAME' field '__________'
             id 'ACTVT' field '__________'.
    if sy-subrc = 0.
    * Then do the BAPI
    Endif.
    authority-check object 'S_RFCACL'
             id 'RFC_SYSID' field '__________'
             id 'RFC_CLIENT' field '__________'
             id 'RFC_USER' field '__________'
             id 'RFC_EQUSER' field '__________'
             id 'RFC_TCODE' field '__________'
             id 'RFC_INFO' field '__________'
             id 'ACTVT' field '__________'.
    if sy-subrc = 0.
    * Then do the BAPI
    Endif.
    Regards,
    Rich Heilman

  • Prevent order creation for non costed material?

    Hi Experts,
    I want to prevent creation of production orders for materials which are not costed. How can we do this?
    --Sachin

    Sachin,
    The easiest way would be to use value of "04" (Needs Cost Estimate) in material master "X-plant matl status" field in basic data view or "Plant-sp.matl st" in Costing view for that specific plant.
    "04" status will prevent creation of production/process order. We have used this successfully in the currently client project.
    You can find all the materials that do not have a cost and then use MM17 to update the value.
    Try and revert back.
    Regards
    Swapnil

  • Cross-reference tag errors in Trados preventing MIF creation

    Our Spanish translator provides files from translation memory with unresolved cross-reference text in English; when we update the book the cross-references are translated to Spanish and the page numbers are also updated within the cross-reference text. After our DTP process, when we return the files to the translator to update the translation memory, he gets a misalignment in the tags and Trados prevents him from creating a MIF file. Trados won't let him ignore the cross-references. We're using unstructured FrameMaker 2009 and he has Trados 2007. We're in the midst of a deadline for a project due next week and he wants to charge us an enormous fee to fix the tags manually. Can anyone suggest a solution the translator can use? I'm a newbie forum user, but I checked the FAQ and did not see anything. Thanks! Sue

    As far as I know, FM cross-references (which came into Trados via MIF and S-Tagger) are handled as placeables. I suppose the mismatches stem from a "placeables differences penalty", which by default is 2%, even for otherwise exact matches.
    A possible solution could be to impose no penalties for placeables in Trados, i.e. set the placeables differences penalty to 0%. But be careful, this may overshoot the mark, as there might be relevant differences in placeables that must be reviewed. I'm not aware of a setting in Trados where you could specify this more selectively.
    Johannes

  • Custom Error Messages in Sourcing Cockpit do not prevent PO creation

    Hi forum gurus,
    We are implementing SRM 5.5 SP 9 in extended classic mode. We have implemented sourcing cockpit too.
    We have coded an error message in the 'BBP_ITEM_CHECK' BADI for the sourcing cockpit and it appears correctly in the sourcing cockpit when necessary.
    However, the system still allows the PO to be created, despite the error message being visible prior to clicking on the 'Create Purchase Order' button.
    Any ideas? I will create a customer message to SAP with this anyway, but hoped someone may know for certain how to resolve it!
    Thanks,
    Nick

    Hi,
    Use the BADi "BBP_DOC_CHECK_BADI".
    See the foll thread:
    authority check on Creation of Purchase order usin badi BBP_ITEM_CHECK_BADI
    BR,
    Disha.
    Pls reward full points for useful answers.

  • JSP - Prevent auto creation of JavaBean

    Is there is a directive which i can use in JSP to prevent the <useBean> tag auto creating a new instance of a java bean if it cannot be found in the session? As i want to manage where the javaBean is created.
    Thanks
    Ian

    Hi lan
    its simple following code will solve ur problem
    <useBean id="classId" type="className "
    scope="session" />
    it will first check classId in specified scope an if
    its not not found it will throw
    java.lang.InstantiationException. you can catch this
    exception do whatever u wantHow come ? Unless you had an unconditional throws in the bean constructor, a java bean would be created if not found in session scope.
    To the OP's question, you should probably write a custom tag that replicates the <jsp:useBean/> tag
    ram.

Maybe you are looking for