Authorization-problem for standard users when running WDR_TEST_ZCI

hi
we've developed a WDA application incorporating several interactive forms. it all runs fine in QA--environment when a user with developer-role are running the application, but when standard users are running it, it fails.
the same happens with the demo-app WDR_TEST_ZCI.
i so belive this to be caused by missing authorizations for the users. can anyone shed any light on which these might be?
the error as reported in the browser:
The following error text was processed in the system Q97 : Access via 'NULL' object reference not possible.
The error occurred on the application server xx-x168_Q97_05 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: PARSE_XML_SCHEMA of program CL_WD_ADOBE_SERVICES==========CP
Method: GET_SCHEMA_VERSION of program CL_WD_ADOBE_SERVICES==========CP
Method: CONSTRUCTOR of program CL_WD_ADOBE_SERVICES==========CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/LADOBE==================CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/LADOBE==================CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L8STANDARD==============CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L8STANDARD==============CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L8STANDARD==============CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L7STANDARD==============CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L8STANDARD==============CP
any input appreciated.
cheers
tom

Hi Tom,
When you are familiar with authorizations in PFCG trabsaction you are finaliar with S_DEVELOP if not ask the authorization team on your project.
Basically this authorization object handles the read/write etc authorization related to devlopment objects. If you implement Adobe forms you will probably develop your own forms or at least copy the SAP forms to customer namespace.
For Adobe you will therefore have 2 custom development objects (1 for the form and 1 for the interface that is automatically generated). The end-user shoulf have at least READ access to these objects. If not the portal will trow an error on this.
To determine the tech names of the objects find the form and related interface in transaction SFP. These should be inserted in the object S_DEVELOP in the role for the end users.
You may want to consider to put the value Z* in the object which will give authorization for all the custom developed objects.
If you can't find the object reply again and i will send a screenshot.
Finally, make use of the splended transaction ST01!! It will make your life a lot more easy in portal! It traces all the authorizations needed and missing for any user you specify. After activating the trace and running a portal scenario the log will tell you want went OK and what not on an authorization object level.
Good luck,
Thomas
ps. Thanks for the appreciation you gave in my other thread. Now we have the answers in both threads as well. Take Care.

Similar Messages

  • Reader not showing pdf with long file names in IE8 for standard user

    Hi,
    I have this problem for standard users, that is, not Admin level.  Admin level users have no problems.
    If a web site opens up a pdf file with java, usually in a new window, and the file name is very long (I haven't figured out how long, but visually long) then the reader plug-in won't work and opens a blank page.  If the file name is small then there is no problem, and reader opens the pdf without problem.
    Interestingly, if I edit the document name (say for example the link has something on the end like "&Doc_Type=Statement" which is obviously not part of the document name but part of the SQL used to find the document by the web page) then reader will open the file no problem.
    Again, this doesn't happen for Administrative level users.
    Any ideas on how to fix?

    I'll crosspost to the reader forum.
    Yes, reader works in all other situations.

  • Can't change home directory for standard users (admin is OK)

    I'm can't relocate home directories for standard users.  Relocating works fine for admin users.
    When a standard user logs in, they get a message (paraphased) saying "the home directory is not available.  If it is located on a server, the server might not be online".  If I change the standard user to admin, this message goes away, and everything is fine.
    I created a standard user
    moved the home directory using the terminal as root: mv UserName  /otherlocation/UserName
    I then went into users and groups, other options and changed the home directory location.
    Rebooted, then tried to log in as the standard users.
    Next try - Deleted the standard user and created the same user with admin rights.  Followed the above steps and everything works fine.
    I don't want this user to have admin rights on my system.  Any ideas

    Hi,
    the AFP is has always been switched on. As for the path I believe this to be correct. The path I am using is:
    afp://musicserver/Users
    I'm not at the server right now so I mat have got the afp and : and / in the wrong order here but they are correct on the server.
    This however does not seem to put the a folder in the Users folder. Could it be something to do with my external hard drive? I am using a Mac Mini as our server (not ideal but fine for us, or at least was) this is booted from our external hard drive. This is the main system drive which is where the Users data is also stored. I have tried all possible paths I can thing of from replacing the 'musicserver' with the IP address. I have also tried adding the name of the drive to the path (System) but all does not work.
    Are you able to suggest anything I have missed? Perhaps I'm doing the path wrong?
    Thanks again
    Chris

  • Authorization key for a user

    Hi experts,
    How can i get the authorization key for the user.

    thanks for the reply
    when iam creating a sales order , i need to check wheather the user creating the sales order has authorization depending on the authorization key

  • Launching application in admin mode for standard users from start/menu

    hi
    i am currently working on an application which runs fine for admin users but for standard users it ask for admin user name and password. creating shim is not working. what will be the other option so that application can be run for standard users without
    asking admin credentials?
    thanks all

    hi i am developing this application and we are deploying silently to some user's machine. Also i tried to use ACT and shim it as "Run as admin","Run as involker","Run as highest"but nothing works so far. so dont know which option to use. Any registry capture
    would be good? or can i know how to apply shim?
    I am following the route like
    1) create the shim.
    2) install application
    3) run as standard user. or 1)  install application 2) install shim 3) run as standard user.
    Nothing works....
    Thanks all

  • Creation of HR master record For a user when a time entry role is added

    Hi,
    Description summary:Automating creation of HR master record For a user when a time entry role is added to a user account
    Description detail:When time entry role is provisioned to a user account,the HR master record is linked,It is compleated after a user is created because a user id must exist .
    It is part of the record.In addition the user must be hired into SAP in order for the HR Master Record to Appear in SAP.
    What we need to do is when a 'Time and Personal Data Maintainer Role "is Added by the VIRSA_ADMIN user,automate the creation of the HR Master Record.
    Transaction code :SU01 to add the role to the Account.
    How to Create the User Exists For this Request…Its very urgent pls help me on this.
    Thanks.
    Vipin

    Why do you need a User Exit? You can create a BDC on PA40 & kick it off upon adding the role..
    ~Suresh

  • How to set a welcome message for a user when he is login

    in my server i am creatin a user "john" in solaris10 box when ever he logins in to the server he should get a message like "welcome john" what is the option to set the message ....
    how can i set a welcome message for a user in solaris
    please guide me the process how i can do
    Thanks in Advance

    THANK YOU FOR YOUR REPLY
    i have checked it out in /etc/motd
    its working fine but the message is coming for every user when they login
    i want message lilke
    if john is looged in
    than message like "welcome john"
    can u please tell me the procedure where to change in /etc/profile and /etc/.login

  • HT204291 how do get the media icon for mac mirroring when running airplay on itunes?

    how do get the media icon for mac mirroring when running airplay

    Airplay mirroring requires a Mac from 2011 or later, running OSX 10.8 (or later)
    http://support.apple.com/kb/HT5404?viewlocale=en_US&locale=en_US

  • Authorization problems with oranetb user

    We have set up Apex in an oracle database, that are installed on unix operative. We have problem with the authorization
    for the oranetb user. On the unix system we have one user that can call scripts with for example unix command like ls,
    cp, etc.
    Now we want this oranetb user to run unix commands in scripts, without change the user in unix environment. We have
    been told that we can use something in the script, with PATH’s and authorization for oranetb user. Have you ever done
    something like this? And can you help us with something that you think can help us?
    We also have the same problem to run workflow (Informatica) from a script in unix, when apex is calling the script.
    If you want more information, please send a mail to me.
    Email: [[email protected]]

    hunt3r,
    iTunes Store menu -> View my account... Once you've logged in, there's a button to deauthorize all your current machines and start you back at zero machines authorized. Try that.

  • Finder is not available for standard user

    Hi,
    I recently installed OS X (10.8.2) from app store. We created "Data" folder and created few admin and non admin users. Granted access to both users to same folder. When admin logged off and standard user logged in, he could not find Finder. Repeated this with 8 standard users and Finder is not available for all 8 standard users. For 2 admin users Finder is available.
    We did not change any settings whatsoever, so not sure this behavier is by design or I am missing something.
    Please help
    Thanks in advance.

    Are you running OS X 10.8 client or Server (is Server.app installed)? If you are using OS X Server, are these local accounts or network accounts?
    What do you mean by "could not find Finder?" As in could not log in? Could not access this 'Data' folder in Finder?

  • Authorization Problem for Ztcodes

    Hi All,
           I m having a problem in zdevelopments that every user can access these
    T-code  without any authorization. I want that there should be proper autorization to access these tcodes like standard tcodes. when i told to basis guy to restrict these tcodes , he is not getting these tcodes in his roles & authorization group. How can i do that. Plz help me .
    Thanks in Advance
    Jitendra Singh
    9999966736

    aa

  • Authorization key for the user profile

    In SAP, there is a provision where we can create the authorization key and assign this key to the various user statuses in the user status profile.
    The application is that when the user status is changed from one to other and if to the user status, the authorisation key is assigned then the authorised person should be only able to change the status.
    But my query is that i have not come across any customization where a SAP user can be assigned to the auth. key so that he can only change the user status.
    Can anybody let me know that whatever i understood, is it correct? And if yes, let me know where to assign the user to the authorisation key?
    Thanks

    Hi Iyer ,
    Please see the below,if it solves your requirement
    M/CS Autorisation Objects
    SAP Standard Authorisation Objects:
    I_ALM_ME: Mobile Asset Management  (ACTVT)
    I_AUART: Order Type  (IWERK, AUFART)
    I_BEGRP: Authorization Group  (TCD, BEGRP)
    I_BETRVORG: Business Operation  (BETRVORG)
    I_CCM_ACT: Configuration Control authorization object  (CCACT, ACTVT)
    I_CCM_STRC: Structure gap maintenance authority  (ACTVT)
    I_ILOA: Change location and accounting data in order  (IWERK, AUFART)
    I_INGRP: Maintenance Planner Group  (TCD, IWERK, INGRP)
    I_IWERK: Maintenance Planning Plant  (TCD, IWERK)
    I_KOSTL: Cost Centres  (TCD, KOKRS, KOSTL)
    I_QMEL: Notification Types  (TCD, QMART)
    I_ROUT: Task List  (ACTVT)
    I_ROUT1: Task Lists by PM Planning Plant, Work Sched., Status  (TCD, IWERK, VAGRP, STATU)
    I_SOGEN: Permit  (SWERK, PMSOG)
    I_SWERK: Maintenance Plant  (TCD, SWERK)
    I_TCODE: Transaction Code  (TCD)
    I_VORG_MEL: Business Operation for Notifications  (QMART, BETRVORG)
    I_VORG_MP: Business Operation for Maintenance Planning  (MPTYP, BETRVORG)
    I_VORG_ORD: Business Operation for Orders  (AUFART, BETRVORG)
    I_WPS_MEB: Maintenance Event Builder  (DIWPSMEBAR)
    I_WPS_REV: Revision authorization object  (REVTY, ARBPL, WERKS, WPS_REV_AC)
    S_NUMBER: Number Range Maintenance  (NROBJ, ACTVT)
    C_TCLA_BKA: Authorization for Class Types  (KLART)
    *Authorisation Tables:*
    TOBJ: Authorisation objects
    TOBJT: Authorisation object texts
    AGR_1250: Authorisation object assigned to role
    AGR_USERS: Users assigned to a role
    AGR_TCODES: Assignment of roles to Tcodes
    Authorisation Objects for System-Statuses:
    Order: I_VORG_ORD  (AUFART, BETRVORG)
    (REL = BFRE, TECO = BTAB, delete component = RMKL)
    Notification: I_VORG_MEL  (QMART, BETRVORG (NOPR = PMM2, NOCO = PMM4))
    Maint. plan: I_VORG_MP  (MPTYP, BETRVORG)
    User-Exits:
    CPAU0001: Enhancement for Authorization Check in Task Lists
    IMRC0005: Measure point: Exit in AUTHORITY_CHECK_IMPT
    IWOC0003: PM/SM authorization check of ref. object and planner group
    QQMA0026: PM/SM: Auth. check when accessing notification transaction
    QQMA0030: Check validity of status change
    BADIs:
    DIP_SET_USERSETTINGS: Initial Object Check in DP Processor
    INST_AUTHORITY_CHECK: PM/CS Enhanced Authorization Checks
    IWO1_ORDER_BADI: Maintenance, Service, and Refurbishment Order
    NOTIF_AUTHORITY_01: Additional Authorization Checks for the Notification
    WORKORDER_GOODSMVT: PM/PP/PS/PI orders: auto. goods movement
    Authorisation Groups:
    These can be created via TCode SM30 and table T370B. They can then be assigned to the following objects:
    a.     Equipment (IE02)
    b.     Functional Locations (IL02)
    c.     Maintenance plans (IP02)
    d.     Entry List for Measurement Documents (IK32)
    e.     Object links (IN05, IN08)
    f.     User-statuses
    Authorisation Debugging:
    TCode SU53: Evaluate Authorization Check

  • Remote Desktop repeatedly installs ARD Client for standard users...

    ARD 3.2 running on OS 10.5.4 on MacBook Core2Duos...
    These are machines imaged from an asr disk image...
    No issues with admin users...
    Every time Remote Desktop is launched by a standard user, a admin user name / password is required and the Apple Remote Desktop Clint is reinstalled. After, ARD runs normally until it is quit and relaunched, even without a user logout...
    Making the standard user an admin user resolves the issue. The issue returns when the admin right are removed from the user...
    Have run permission repairs, removed and reinstalled Remote Desktop, manually checked permissions, etc...
    It appears that from the standard user perspective, the ARD Client software needs to be updated. ...
    Any ideas out there? I have to deploy these machines NOW and I am running out of ideas on this...
    Thank you! Les

    Dave,
    Thank you for the ideas. While you are pretty much correct in what you have said, these are unfortunately not my issue(s). I wish they were!
    1) ARD will run fine for a standard user (at least it did in Tiger) as long as it is properly setup and licensed by an admin user ahead of time (especially the entry of the license code). This I have done, and the license code is recognized just fine. I too thought of the promote / demote idea and have tried it. While promoted, it launches fine for the user, but upon demotion goes back to reinstalling the ARD Agent at each launch of the program (this install process does not run while the user is promoted)...
    2) The systems are from the same disk image. However, I have given system its own unique, valid, legally purchased serial number. Though the program is loaded on the image, it has been installed only. It is not run or licensed on the master, only on the end-user client machines...
    It appears to me that from the standard user perspective, the system thinks that the ARD Agent needs to be updated. I have verified with the PackageMaker SnapShot utility that the ARD Agent and its related files are being installed when this happens, and they appear to be the only thing being installed. The Remote Desktop Admin program itself seems to be fine.
    Does anybody know exactly what happens at the file system lever when Remote Desktop is launched? I am thinking my standard user is lacking access to a particular file or directory or right, and I am sure I could quickly find it if I new what to trace. Watching fs_usage has yielded lots of information, but nothing that has helped...
    I have also removed and reinstalled Remote Desktop to no avail. Disabled all ACLs on the file system, placed known-good receipts and run permission repairs, and forced chmod -R 777 down the path of everything I can find with the names Remote Desktop, ARD, etc...
    I am a little worried at this point that the issue is created by the imaging process something like the question marks in docks in the latter updates of 10.4. I have seen similar issues come up (launching apps under Rosetta being one) with users' LaunchServices property lists after moving their home directories from one volume to another, making the issue very hard to track down, as they reside in files that do not contain the name of the app being affected...
    Any further ideas would be much appreciated!
    Les

  • Privileges required for a user to run a form with menu security with ROLES?

    The Scenario
    I granted role DBA to SCOTT.
    I connected to SCOTT.
    I create a database role MANAGER.
    I GRANT ALL ON EMP TO MANAGER.
    I create a new user TEST
    I granted CONNECT,RESOURCE,MANAGER to TEST.
    I created a menu module and wrote MANAGER in its MODULE
    ROLES property and set its USE SECURITY property to yes
    I created a menu in it.
    I created a menu item in it.
    In Item Roles Property I selected the role MANAGER.
    I set DISPALY WITHOUT PRIVILEGE to NO.
    I created form module based on EMP.
    In Form Module properties, I gave Path of the menu module
    as C:\Folder1\emp_menu.mmx in its MENU MODULE property
    I wrote MANAGER in its MENU ROLE property.
    Now connected to TEST when run this FORM MODULE I get
    error ORA-00942 table or view does not exist and then
    FRM-41810 Error Creating Menu.
    But when connected to SCOTT it didn't gave the error.
    And when i revoke DBA from SCOTT there was the same error.
    Then I created a synonym EMP for SCOTT.EMP but the same
    problem.
    I think there will be some privilege which comes with role
    DBA and user not having role DBA problems.
    I urgently needs its solution. Please help me.

    Hi,
    I read that you need to run
    <racle_home>\tools\db\forms60\frm60sec.sql for Forms 6i and grant users access to this table. Since this needs to be run as system/admin I guess that you did this but didn't grant privileges to the users.
    Frank

  • HR Authorization issue for specfic User

    Dear all,
    One of the HR user , he can run payroll on particular site ,
    i have assigned Org key of site to master data on the particular role .
    User tried to run payroll using pa30 with personnel no (one of store user) .
    but system is not take any value and its not showing any error also .
    For example pls check below detail i have tried my user id and system has shows below details of the user (below details is one of the store user ).
    Personnel no.   2941
    Name         A  Mohammed Younus
    Personnel ar ZOSO                            EE group   A
    Subarea      STCH                            EE subgrp  3E
    Kindly suggest to resolve the issue
    Note : 1, i have deleted the user and i have recreated role .
    2, i have copied another user role (he can run payroll) to effected user ,even though he cant able to run payroll.
    Edited by: satheesh0812 on Dec 17, 2010 9:29 AM

    Dear all,
    I dont thing so there is no issue with Role  ,only issue with Structure Auth..
    Becoz pls check below Authorization Object.
    Changed    HR: Master Data
      Authorization level            E, M, R, W
      Infotype                       *
      Personnel Area                 *
      Employee Group                 *
      Employee Subgroup              *
      Subtype                        *
      Organizational Key             20000156, 20000157, 20000201
    In OOSP for particular Org key .
    Auth profile              Auth.Profile name
    CTHR_CHENNAI     CTHR_Chen
    Auth profile             No  Plan Vers Obj Type   Object I         Maint Eval.path Status vec
    CTHR_CHENNAI     1     01               O                   20000156              O-S-P     12
    CTHR_CHENNAI     2     01               O                  20000157             O-S-P     12
    CTHR_CHENNAI     3     01               O                  20000201            O-S-P     12
    In OOSB details
    IN OOSB I have assigned Authorization profile to UserXXX, user can see all employee details in PA30 except one employee details , can
    User name Autho.profile                           Start date        End date            Exclustion Display Objects
    XXXX          CTHR_CHENNAI                     01.01.2005     31.12.9999
    If i give Autho.profile --> all instead of CTHR_CHENNAI ..
    HR executive can able see all employee details in PA30 ...
    Let me know where exactly issue is there ...
    Kindly suggest...

Maybe you are looking for