Authorization relevant objects list

Hello BI experts,
I need to find out the Authorization relavant infobjects in the system. How can i do it. Is there a table where i can find this data or any transactin
Thanks in advance
BWer

hi BWER,
You want to see the authorisation relevent objects for perticuler system right.
1. Go to RSSM tr code
2.click the radio button Authorizations for several users there u have to enter ur lon-in Id name
3.right hand side 1 spects symbol is there for disply-- click on it.
It will show u all authorisation Infoobjects for u.
Thanks & Regards,
kiran

Similar Messages

Authorization Relevant Object

Hi experts,
Please suggest how to make an info object as an authorization relevant object. Please guide step by step.
Thanks in advance.
AJAY

hi ajay,
for authrization relevant info objects just mark your infoobject as authorization relevant in tha Business Explorer Tab of ur infoobject.
then if u have authrization go to t-code RSECADMIN.
here, undet the authorization tab ,
just create an Authorization Relevant object into which just
select ur actual info object name for which u want authorization.
after this just double click on ur info-object and enter your all restictions.
save it then.
hope this will help u
thanks.

Analysis authorization - which objects are relevant

Hi
We use Analysis Authorization.
Multicube XXX contains authorization relevant objects A B C.
Is it possible that some of these objects arent used for analysis authorization. Where can I check it?
Thanks

Hi there,
I don't quite get your question...
If you go to transaction RSECADMIN and create a new authorization object give it a name and a description, if you click on the Infocube button and select the MultiProvider XXX, the system will open a window with all the InfoObjects that exist on that MultiProvider XXX and are marked as authorizationRelevant on the transaction RSD1, tab Business Explorer.
If you don't want some of those objects to be checked with the authorizations, you have two ways:
1. Either you uncheck the option of authorizationRelevant for those InfoObjects in transaction RSD1 tab Business Explorer, but this will afect not only the MultiProvider XXX, but all the InfoProviders were that particular InfoObject is used, will never be checked for authorization purposes.
2. Create a new authorization object in RSECADMIN and click on the InfoCube button, select the MultiProvider XXX and choose only the InfoObjects you want to bypass the authorization for that MultiProvider. Grant * values for all those InfoObjects and click on the butto of special characteristics (button at the left of the button Infocube) and for the entry 0TCAIPROV restrict it to I EQ XXX (so that only the MultiProvider XXX will be afected by that authorization object). This will grant * all authorization values for those InfoObjects only for the MultiProvider XXX, so these InfoObjects will never need authorization values whenever you're using a query(ies) over that MultiProvider.
Hope this helps,
Regards,
Diogo.

Auth relevant Objects in a Infoprovider

Hello,
Is there a way to findout list of Authorization Relevant Objects in a Infoprovider? instead of going through all the Objects?
Thanks,
KK

Hello Kris Kamal,
If you're in the new Authorization Analysis of BI 7, then all of InfoObjects marked as AuthorizationRelevant in rsd1->tab Business Explorer that exist for that InfoProvider the query is built are check during reporting. To see what are these InfoObjects go to transaction RSECADMIN create a new authorization from scratch in "Maintenance" give a short text description and push the button "InfoCube Authorization". Insert your InfoProvider where the query is built push enter and you'll see a list of InfoObjects. Those InfoObjects are checked for that query.
Please assign points,
Diogo.

List Database Table Infoprovider, InfoObject, Flag Authorization Relevant

Dear Expert,
Im working with SAP BI 2004s user management & authorization. I have several objects that Ill have check. I dont like check one by one, I like to check for the SE16 transaction, for this reason, I need to know what is the database table have content Infoprovider by InfoObject (Characteristics) which each have the flag authorization relevant.
Moreover, in the same idea, which database has content Queries by Infoprovider which authorization variable?
Thank for all,
Luis

For your first question:
In addition to be above mentioned table, RSDCUBEIOBJ will give the information about Infoprovider and all the Infoobjects within this infoprovider.
1. Find all the authorization relevant Infoobjects from RSDCHA table and copy them.
2. In the table RSDCUBEIOBJ, paste all the Infoobjects obtained from 1 in the field "Infoobject". The result will be list of Infocubes and their corresponding authorization relevant Infoobjects.

Authorization Relevant Info Objects

Hi Experts,
In my Business scenario,Profit center infoobject is
authorization relevant for FI reports.In my FI reports,I have used profit center authorization variable.FI reports are working fine according to the authorizations.
In sales Report,users should be able to see all profit
centers(No Authorization needed for sales report)
In my sales Report,I have used value based non authorization variable.When I run the sales report,I am getting authorization error
How can I make profit center authorization relevant for only FI
Info Area?
Can Some one help me in solving this problem?
Thank you in advance.
Reward Points expected

Hi Senoy,
I suggest the following steps,
1. You should list all of Sales Report, after that you need identify all of InfoProviders of this sales scenarios.
2. In base of the InfoProviders sales scenarios, you need list all of InfoObejct authorization relevant of this scenario. In case of the "0PROFIT_CTR" is part of the InfoProvider sale scenarios, you need include in your authorization with the follow value "*" (total access) or ":" (acess agregation).
3. For avoid future problem, the InfoProviders sales scenario have to be different of InfoProviders FI scenario. Otherwise, you will have the same condition in both scenario with the 0PROFIT_CTR.
I hope help you,
Luis

Updating users profile when infoobject marked as authorization relevant

Hi All,
Consider a scenario where there are some projects in which perticuler infoobject is not authorization relevant but in some upcomming project the same infoobject needs to be authorization relevant.but when i marked this infoobject as authorization relevant then i need to manually insert this new authorization infoobject in each user profile. If there are more than 200 users available then it is not very good idea to include this infoobject in each profile manually. Is there any other way through which we can insert this infoobject in all user profile automatically.
Regards,
Deepak

Hi again.
Go to transaction se38 and create a program with the name ZCHANGE_APPEND_AUT.
Insert the following code:
REPORT ZCHANGE_APPEND_AUT                             .
TABLES RSECVAL.
DATA: T_RSECVAL TYPE RSECVAL OCCURS 0 WITH HEADER LINE,
      T_RANGE TYPE RSEC_S_AUTH_VALUES_RANGE.
SELECT-OPTIONS: ZAUT    FOR RSECVAL-TCTAUTH NO INTERVALS.
PARAMETERS:     ZOBJN   LIKE RSECVAL-TCTIOBJNM DEFAULT '0TCAIPROV'.
SELECT-OPTIONS: ZVALUES FOR RSECVAL-TCTLOW NO INTERVALS.
LOOP AT ZAUT.
   LOOP AT ZVALUES.
      T_RANGE-IOBJNM = ZOBJN.
      T_RANGE-SIGN = 'I'.
      T_RANGE-OPT = 'EQ'.
      T_RANGE-LOW = ZVALUES-LOW.
      CALL FUNCTION 'RSEC_INSERT_FLAT_AUTH'
         EXPORTING
            I_AUTH = ZAUT-low
            I_RANGE = T_RANGE.
       CLEAR T_RANGE.
    ENDLOOP.
ENDLOOP.
Activate the program.
Now when you run this program you'll be prompted for 3 parameters.
The first is a list of Analysis Authorizations names that you wish to change.
The second is the name of the InfoObject you want to insert to those authorizations, by default is 0TCAIPROV but you can change it to whatever you want
The third is a list of values that will be inserted for those InfoObject.
Therefore imagine that for authorization ZZZA, ZZZB and ZZZC you want to insert the object 0CUSTOMER with the values xpto, yyyy, and wwww.
You would in this case run the program with the following parameters:
AUT:
ZZZA
ZZZB
ZZZC
OBJN:
0CUSTOMER
VALUES:
xpto
yyyy
wwww
Please assign points,
Diogo.

InfoObject - Business Explorer Tab and field Authorization Relevant

Is their a SAP utility / table / or transaction which can identify a field flagged on InfoObjects.
I would like to determine all active InfoObjects which have the "authorization relevant" flagged on the
InfoObject - Business Explorer tab.
Version 7.0
Thank you ...... dan

Hi Dan,
trIf you have used old analysis authorizations of BW3.5, in transaction RSSM if you click on Check authorization infoobjects for all infoproviders you should find a list of all authorization object which are in productive use.
However, it does not give you the list of object which are marked as authorization relevant and have not been used in any productive cubes.
Try table RSDCHA in se16. CHARNM - Put your char name and in OBJVERS put A. Authorization relevant flag would be 'X', if it is marked for authorization relevance.
Hope it helps,
Regards,
Sunmit.

Table name for authorization relevant InfoObjects

Hi Gurus,
In which table I could see all Authorization relevant InfoObjetcs ?
Thanks
Liza

Hi,
Table RSDCHA, field AUTHRELFL.
or
1. Go to RSSM t-code
2.click the radio button Authorizations for several users there u have to enter ur login Id name
3.right hand side 1 spects symbol is there for disply-- click on it.
It will show u all authorisation Infoobjects for u.
Try this link. this might be helpful.
Program to find the list of Authorization relevent info objects for given
Regards,
Haritha.
Edited by: Haritha Molaka on Dec 7, 2009 5:47 AM

Disabling delete button in service object list fom VA03

Hi all,
i want to disable the delete and change button in attachment list of service object list (GOS) IN T CODE VA03.
I have found that it can be done by modifying the method CHECK_STATUS of class CL_GOS_SRV_ATTACHMENT_LIST,
and then calling it in t code SGOS.
i have copied this class to a Z CLASS but unable to modify the method it asks for access key.
any help is highly appreciated with example.
thanks,
pankaj gupta

Hello,
The authorizations in GOS has nothing to do with the authorization in
application level, e.g. in VA03. In standard you can use the new
authorization object S_GOS_ATT from SAP note: 1293080.
Otherwise:
A possible workaround could be the following:
Without an authorization the attachments are only deletable by the
owners or by users with sapoffice administrator authorization. If you
do not give users this sapoffice admin authorization, than only the
owners are able to delete the attachments. See SAP note: 552127
(point 3).
OR due to a modification some functionalities can be restricted.
For more information you can read the SAP note: 491271.
Regards,
David

How to generate an SE63 object list in batch periodically ?

Dear experts,
we translate program and DDIC-texts of our add-ons continiously to english and
french, in order to keep up translations with the ongoing development we create
the necessary SE63-object list once a week. Since this process is creating
several background-jobs dynamically it is not possible to mark this inital job as
to be repeated periodically. I do understand that but I don't know why there
seems to be absolutely no way to get this done automatically once a week.
Here is what I have already tried in vain in order to achieve this:
- a report performing a CALL TRANSACTION on transaction SE63/SLW3
- an eCATT-script including a TCD-Script on transaction SLW3
(the script works fine if it is started directly, but the only FM that I have found
to start a script with in batch ( 'ECATT_EXECUTE' ) does not do it, but comes
back with a returncode zero, as if it did.
- and I even tried to start the above mentioned eCATT-script by a report doing
a CALL TRANSACTION on transaction SECATT providing the necessary
field settings for the initial and following popup start screen.
Nothing seems to work. The SAP notes on this topic are as useful as the
SAP documentation on the subject "object list" (forget about it).
Who has some experience with this issue respectively ideas for my problem?
How can I generate an object list for translation once a week automatically in
background?
Thanks in advance
Andreas

Hi Lorant,
attached you'll find a download of the ABAP which is to be used as a job step
and an XML-Download of the eCATT-testscript, that processes the generation of a new object list in SE63.
As both developing objects were in our companys namespace ("/HOAG/") which you cannot use, I made a copy in the z-namespace first, from which I have removed a couple of specialties that are certainly of no value for you at all, before I downloaded them for you.
You need to give the script a name in your namespace or in the Z-namespace and then you have to adapt the scripts name in the BDCDATA generation procedure in the ABAP program appropriately.
It may be possible that the eCATT-script doesn't run properly on your system. This is due to the fact, that the sequences of dynpros and fields contained in the dynpros differ a little in all of our 4 SAP development systems that we decided to be translation relevant, This is also the reason why I recorded individual eCATT-scripts for each one of them. It may be possible that you need to record your "own" system compliant script.
An example: the popup screen with the print parameters can be personalized and may therefore look differently for every user in every system.
This is also a good reason why the background job should be scheduled and performed under the name of the same user who recorded the eCATT script before!
And just one last remark: The returncode of the job only gives you an information about wether or not the eCATT script has been executed properly but you do not know if the chain of jobs usually created by the SE63 objectlist creation functionality have been executed completely. The "system" that we set up for the automated objectlist creation is completed by a third ABAP program which is also scheduled daily as a background job. It is started about an hour after the the object list creation should be through and it verifies if the standard SAP jobs (the names of which are beginning with something like "OBJL") ran completely that day and that they are in the status "finished". If this is not the case, our "objectlist verification ABAP" sends a couple of SAP express mails to a certain selection of key users who are supposed to take a look at the system). This all works pretty well in combination!
If you (or the person that you are going to give this task to) know enough of the german language to read it, you won't have any problem with adapting this to your needs because you'll find everything neatly commented in the source code.
regards
Andreas

What is Piece List, Work List and Object List

Hi All,
Can you please give idea about Piece List, Work List and Object List in BI.
What are their uses?

Hi,
Piece lists
You can use this request type to set up your own object lists and save them under a name of your choice.
For more info on this go through the link below
http://help.sap.com/saphelp_sm32/helpdata/EN/57/38e1b64eb711d182bf0000e829fbfe/content.htm
Worklists
Worklists are the quickest and most convenient way of accessing the objects that you need to translate. Translators can call up a worklist in SE63 once a system has been completely set up for translation.
For more info on this go through the link below
http://help.sap.com/saphelp_sm310/helpdata/en/77/571a1f492011d1894a0000e829fbbd/content.htm
Object Lists
The Object Lists tab page in transaction SLWB enables you to create and manage object lists in the Translation Planner.
An object list should contain all objects relevant for translation. You can create object lists according to a variety of criteria
For more info on this go through the link below
http://help.sap.com/saphelp_sm32/helpdata/EN/d4/341964249711d3b29e0000e817ab98/content.htm
Regards,
Marasa.

SAP BI authorization relevant

All,
I tried to create a custom authorization object for an infoobject otcaactivity (just for eg) .Before that I used RSD1 to make that infobject authorizartion relevant.But after that I inserted the infobject which is made as auth.relevant to the custom object and tried to assign value for the intervals.I got an message as the characteristic value is not authorization relevant...why is that?I tried in sand box..is it any way related to info cube which is not yet created for the particular info object in the sand box thats the reason I get error message ?
Whats the reason to secure characteristics and key figure values?

Hey,
Activating business content mean making authorization relevant?
For BW3.5 there is no need of the mandatory info objects?(0TCAACTVT ,0TCAIPROV ,0TCAVALID ,0TCAKYFNM)
Whats the difference between securing through reporting authorization object and securing through BI specific object??
Thanks

Access to object list of type "BusinessSystem" using the InternalEOAService

hi experts
Try to revive this message:
I got the exactly same error message. Here is my case:
-created two business systems (third-party) in SLD
-In Integration Directory, Service Without Party --> Business System --> Assign Business System, in step 2 Assign Party, leave the field blank and click Continue, the error message showed up and no business systems were found._
and getting error message as
***Access to object list of type "BusinessSystem" using the InternalEOAService BusinessSystemAccessor failed_***
XI 7.0 is installed in windows 2003 server.
Anyone any clues?

Hi Murali
the user that u r using to logon to IB may not have sufficient authorization.
pls check...
http://help.sap.com/saphelp_nw04/helpdata/en/c4/51104159ecef23e10000000a155106/content.htm
or may be you can synchronize your IB with SLD then can check

Authorization Relevant Infoobject restriction for particular value

Hi All,
We have infoobject - 0COMPCODE which is authorization relevant. In query designer authorization variable - ZAUTH1 has been created.
Now users want to restrict one particular Company Code (Ex- RU10) globally, so that none of the users will view this particular company code.
We can't restrict this in query designer. Users can select among the company codes in the input selection of the report.
Authorisations have been mantained in BW3.5 version
Need help on this urgently.

Hi Asish,
Two ways.
1. You can exclude the company code in the default values section, so that they would be able to view it in the list they see.
2. You can exclude it in the authorizations assigned to the roles of the users. Give all the company code values in the authorization, except this company code, so that since the auth variable is createed in the query, you woulld view only the company codes that are authorized.
Hope this helps.
Regards
Snehith.

Authorization relevant objects list

Similar Messages

Maybe you are looking for