Authorization with respect to Project profile

Dear All
i have one problem pl suggest me
I'm implementing one project ... i'm in authorization matrix i need to give the authorization with respect to Project profile
Ex . one controlling area
two company code
ten project profile
each profile have different responsible person (some time five to six person are in single project)
In one plant they are using six different project profile .this my concertino
now i need to control the authorization with respect to Project profile .i'm not able to find the any object in the authorization matrix . pl suggest me . if know the technical object name pl suggest me

You can use the following objects for controlling authorisations:
Co Area
Cost Center
Profit Center
Project Manager
Project Type
I don not believe there is an auth object for Project Profile. If you have a 1 : 1 relationship between your project profile and project type, than it would be possible to use this to secure authorisations.
C_PRPS_ART.
I hope this helps.
Ian

Similar Messages

Relative path for Download directory folder.I created a firefox profile and i wanted to use this profile in multiple machines.I wanted to use a relative path for download directory with respect to the profile folder.I need this on Linux machines

I have a use case where I need to use different download directories with different firefox profiles.I need to use this profiles in multiple linux machines.
I need to have a relative path to my download directory with respect to the profile folder.
Ex: I have a selenium test which opens a website and downloads it to my machine.I want this downloaded file to go into some specific folder relative to this profile folder.How do I do this??

That is not a practically empty xinitrc - that file only needs one line: exec WM. Other things are entirely optional, and some of them very useful, but I'd encourage you to stick with the simplest xinitrc that will do what you require.
Is slim involved? Probably. That is the source of many problems. But to start narrowing this down, I have 3 suggestions:
1) temporarily (at least) change your inittab to default to runlevel 3 ... actually, is it currently set to 5 or 3? if it is currently 3 that would explain why slim doesn't start.
2) at a tty in runlevel 3 use "xinit" instead of "startx". Startx is fine most of the time, but it is essentially just a complex wrapper for xinit. That complexity can often iadd useful functionality, but it *always* makes troubleshooting more difficult. So for now just use a vanilla 'xinit'.
3) remove dbus-launch from your exec line in xinitrc. This is done by console-kit so it is redundant and potentially problematic. Further BOTH of these are taken care of by slim, so I'd even suggest getting both a jump start on being ready for slim and simplifying troubleshooting by removing both of them. Just make that line "exec openbox-session"
Edit: adding one more:
4) temporarily switch out openbox-session for openbox. I suspect the reason feh's setting of the background is getting overridden is due to a script or setting in openbox's autostart settings - many of these are only invoked when "openbox-session" is called, while "openbox" starts *just* the window manager itself.
Last edited by Trilby (2012-10-03 17:30:36)

On-line funds checking with respect to project budgets

Hi Friends,
Does Purchasing check, in addition to available funds in GL, the funds available in a project if at PO level, the project number is set up and an expenditure type is attached and a Project Budget is setup for the expenditure type.
What are the setups involved?
How does one specify at the project budget level whether the budget checking, if possible, will be absolute and advisory.
Thanks and regards
null

Oracle Projects is not designed to support budgetary control for Purchasing and Payables.
This is an enhancement Oracle is planning to deliver on one of the next releases, on top of 11i. Unformally scheduled for the second half of year 2001.
Dina

Production Order Settlement Process with respect to a Project

Hello All,
I know about normal Production Order Settlement Process in discrete industries.
Can anyone give me the steps for the Production Order Settlement Process if the Production Order is created with respect to a Project in SAP PP- PS Integration Scenario.
Thanks in advance for your support.

Hi Experts,
Can anyone clarify my above queries.
Thanks in advance for your support

Authorization of different project profiles to different users

Dear Experts,
i have different project profiles which are to be assigned to different users. can any body tell how to restrict one user from using the profile other than the profile assigned to him.
Any pointers on this will be highly aprreciated.
A bit urgent Please.
Reagards.
Prasad.

I think whatever profiles are assigned in SU01D for a user, he will only have access to that profiles and for the other profiles user will get No Authorization Message

Mass user copy with respective authorizations

Hi,
In the coming days we have to perform the following task, I would like to know which would be the best option to go with.
From our development system we have to copy all unlocked users with respective roles to our new project environment.
There are total 5 clients in the system, and around 1000 'Z' roles in each client and about 300 unlocked users in each client. The roles are same in both environment, but user assignement is different.
I have to perform this task in 1 business day, please inform your suggestion?
Regards,
Shylesh

Solution would be to install a (fake) CUA for 1 hour to do the migration ... this is al the info regarding CUA:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/bf/b0b13bb3acd607e10000000a11402f/frameset.htm
I think this is a very clean, fast and "standard" solution
You will have to "trick" the system since you will nolt send from 1 client but from 5, this will have to be tested ( never done that before, but i don' forsee an issue), i do hope you do not have 1 user 5 times in the system...
If you are fast, then setup and config is done in 2 hours ( can be done upfront for most part) , migration will take +/- 30 minutes?
I guess you know SU10... you could bit a Batch input or ecatt around it also.

Key figure display in planning book with respect to Time bucket profile

Hi,
I am loading a key figure to planning area from the info cube for the current month. When I review the key figure in planning book with monthly time bucket profile it shows 85 for the current month. In the same planning book with weekly bucket profile, it shows 55 from the current week and future weeks and the remaining 30 goes into the past weeks of the current month.
How to make the total quantity 85 to show in the current and future weeks only.
thanks and regards
Murugesan

Hi Murugesan,
Within the Planning Area, the data is stored at the lowest level granularity that you maintain in storage bucket profile. Then during display, system will decide what data to show depending on what kind of time bucket profile you use in the planning view, and the time based disaggregation that you maintain for Key Figure.
In this below case, what time characteristic do you have in cube? Is it date, week or month?
If it's date, check how much KF data is maintained on the dates which belong to week which has days both in this month/last month e.g. if I talk about Dec 2011, how much data is stored 1,2,3 & 4 th of Dec, 2011.
This data would appear in Dec in monthly view, but in week, it would appear in the week starting 28th November.
If data is maintained in cube in weeks, then you need to calculate how time based disaggregation would show it to you in months.
If it's months, then you would need to find out how much data would go to the days in the past week of the month.
The time based disaggregation may be causing you some issues, but in that case, I would not expect 30 out of 85 to go in the past week, unless you have data in cube in days.
Data shown in weekly view for week starting 28th Nov should ideally be a small proportion of 85, unless you are using a time stream/fiscal year variant, due to which most of December is in holidays. The only other exception I can think of is that you have data in teh days mentioned above.
It would be best to help the business understand this disaggregation logic, rather than thinking of manipulating the data to shift to a later week.
If this logic doesn't explain your situation, then please provide the date/week/month at which you have data in cube, and what quantity.
Thanks - Pawan

Settlement of WBS/Project Profile (Cross Company Code)

Hello All,
At my current client, we are having 45 company codes assigned to one controlling area.My question is around setting of Project Profile/Settlement Profile. How do I manage project profiles?
Also If I am managing few project profiles allowing cross company code settlement, what are the pros and cons of doing this? What are the bare minimums for this with respect to configuration
Thanks
Shiv

projects are cross company codes but must be wuithin oine controlling area - so you are ok
the settlement will be from an object either WBS or network activity
the settlement will happen in the company code that is assigned to either the WBS or network activity
regards project profile create as less as possible - if the only difference is the company code then use templates for different companies, or make company code mandatory forcing the user to enter on creation - this will limit the number of project profiles

Restricting project profile in CJ20N/CJ01 t-code

Hi Experts,
Based on the client requirement we have created a new Project Profile named as theShutdown Project. The type of Project is ShutDown. The client wants to restrict the same only for the Plant users usage.
I know that the type of the project can be restricted thru standard authorization object -
C_PRPS_ART. The coding mask is not restricted or defined as of now.
Since we could not find any standard authorization object which restricts specifically on Project Profile, we tried creating a Z
auth.object as follows:
u2022 SU20 -CREATE AUTHORIZATION FIELD
u2022 SU21 -CREATE AUTHORIZATION OBJECT
u2022 SU21 -LINK AUTHORIZATION FIELD AND AUTHORIZATION OBJECT
u2022 SU24 -ADD THE AUTHORIZATION OBJECT IN THE TCODE CJ20N AND CJ01
u2022 PFCG-CREATE ROLE WITH AUTHORIZATIONS TO TCODES- CJ20N AND CJ01. ALSO
ADD THE AUTHORIZATION OBJECT MANUALLY. GENERATE THE ROLE AND SAVE THE
SAME. LINK USER ID TO THE ROLE
u2022 SE38- LCJWBF7S. CREATE ENHANCEMENT IN FORM PROJ_SET AND ADD
AUTHORISATION CHECK OF THE ABOVE CREATED OBJECT
The issue is that the above procedure is restricting the access for all the other users too despite it being attached to a particular role only. Every project profile other than shutdown project is getting an error -"You are not authorisedfor this activity"
Please advice if our approach is correct or are there any alternative available.
Regards
Khushali

HI,
You need not have a separate Auth Object for "Project Profile".
Make use of your standard auth object "Project Type" only.
Introduce a simple validation to say that The only project type "Shutdown Projects" should be allowed for your Project Profile "Shutdown Project"
By this, while Project creation, system throws error (Error you defined in the validation) in case both the Profile & Type are incompatible. When the user selects the appropriate "Project Type", then the subsequent standard error would be related to authorization on Project Type for the desired users.
regards

Cockpit - authorizations with hierarchy

Hello,
I have a problem in a cockpit, and it is relating to authorizations with hierarchy.
I have an object of authorization already defined with certain criteria (bucket and node of the jerarquiaa that only I want that agrege deposit a user) this object in a rol, unitedly with a profile of visualizing the cockpit. When I enter with the user to visualize the cockpit I enter to all the nodes, my question is: Why not respecting my authorization for the node of the hierarchy that alone I want to show?
thank you.
Mike

listo ya quedo

Validation of Network Profile against Project Profile

Hi,
I would like to monitor the creation of Networks with regard to the Project Profile, based on the Network Profile, so that when a Network is created with Profile "ZCN00", for example,it could be saved only if the Project Profile is "ZPS000" (taken from the Project Definition to which the Network is assigned).
I have used Validation/Substitution for similar logic regarding WBS elements against Project definition, but I cannot use Validation/Substitution for Network Header for this purpose because the Project Profile is not accessible in the Data for this Validation.
I have also tried Validation/Substitution in "Consistency check project structure" where all data is accessible - but validations here cannot be assigned in customizing to various profiles (Project/Network); as stated in thread "Validation for Proj. structure" in this forum, these can be activated using transactions CNC4, CNC5.
This does not solve my problem because I need to PREVENT the creation of a Network in the "wrong" Project - and not to trace the inconsistency AFTER the network has been created.
Is there a way to use the Consistency check project structure for my need without any other means, or do I have to use one of the exits provided in that tool?
Thanks in advance,
Eytan.

Dear Sam,
Thank you for your reply.
In our work processes, there is a main function who creates and manages the Project Structure, excluding Networks, and in many cases, certain people may work on several different projects where they create networks, so I cannot limit their authorization to specific profiles, be it Project definitions or networks.
I know my issue can easily be solved by a simple development (like the Badi suggested in Virendra's message)- but I want to make sure I have covered the possibilities in the standard system - specifically VSR - before I go there.
Regards,
Eytan.

Creation of Project Profile & Network Profile

Hi Experts,
I am new to PS. We have a customer project which has two company codes.
Company 1 has three plants and company 2 has one plant. Our client will use PS for new product development projects. That new product will be developed in a single plant itself. Each plant is dedicated to one kind of product development only.
Please let me know how many project profiles & network profiles have to be created for this scenario.
Thanks & Regards,
Kabir
Edited by: Kabir on Nov 16, 2008 8:23 AM

Hi Virendra,
Thank you for the reply.
In our case, by New product development project, my client means that they will develop a new product for their customers based on the new specifications & designs. For example, an auto component.
The client also wants to do the billing. So we will take it as a customer project here. We will have WBS for Design, Production, Delivery etc...with activities in it. In such case, is one project profile & one network profile sufficient ? Please suggest.
Thanks
Kabir

Transport roles and analysis authorization with user assigned

Hi expert,
I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
Thanks for your time,
Luis

Hi,
In role administration, you have the following options for transporting roles:
You can download the roles from one system and upload them into another
You can import the role from a remote system using RFC
You can transport the roles with the transport function.
Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
Transporting Roles with the Role Transport Function
       1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
       2.      Enter the role to be transported and choose Transport Role.
The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
For more information go thrpugh the below link
http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Marasa.

Validation for Project defination and project profile

Hello,
I have to create validation for Project Definition and Project Profile.User requirement is when the project (Exp: Z/0120) is creating with project profile Exp: Z0001_Z system should allow , If user is trying to select other than this profile system has to give the error.
I tried below validation but it is not working:
Prerequisite - PROJ-PSPID = 'Z'
Check - PROJ-PROFL = Z0001_Z
Kindly any suggest how can i give the validation for the same.
Regards,
Lakshmi.
Message was edited by: Mohamed Rafi - Many threads available on this topic search for those.

Hi,
Have you tried to save the project? Because validation rule will call at time of saving the Project.
I have created the same but for start with 'U'
When I create project and at time of saving, validation rule will call and system throw error if I don't create project start with 'U'.
Now If I am creating here, start with 'J'. System is throwing error as per validation rule.
Also Pl check if you have assigned same correct rule on project profile.
Regards
Shishir

How can I authenticate and authorize with Web Service on ESB ?

Hello,
I want to authenticate and authorize client with Web Service published
by HTTP/SOAP BC.
Simply if it is an Web Service as J2EE application, I will use
Basic Authentication with JAX-RPC and Realm.
But I think that Web Service published by HTTP/SOAP BC is not belong
to J2EE Application. Threre is no place to describe security role mapping
(like web.xml).
JBI 1.0 the section "5.5.1.1.3 Normalized Message Properties" comments
JAAS Subject is given in the NM Properties. Really in this package
com.sun.jbi.internal.security.*
implements JAAS autentication and authorization (at JaasAuthenticator).
But I can't see how to configure my Service to use this.
How can I authenticate and authorize with Web Service on ESB ?
I referred to the resources.
Mutual Authentication for Web Services: A Live Example
http://developers.sun.com/prodtech/appserver/reference/techart/mutual_auth.html
XML and Web Services Security
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security7.html
JAAS Authentication Tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
Thanks,
Takurou
- environment ---------------------------------------------
OpenESB : Project Open ESB Starter Kit
AppServer : Sun Java Systems Application Server 9.0 PE
OS : Windows XP
I don't assume to use SSL (if It's necessary I will try).
User information is stored in a LDAP Server.
-----------------------------------------------------------

Hello,
I read this resource.
SecurityDesign
http://www.glassfishwiki.org/jbiwiki/Wiki.jsp?page=SecurityDesign
Then I think [non-ssl and ssl/tls and so on] securing by basic authentication is ongoing feature at this time.
But I can't see well why this page comments 'HTTP over SSL, TLS'.
HTTP/SOAP Binding Component Overview
http://download.java.net/general/open-esb/docs/jbi-components/httpsoap-bc.html
Does BC support only "SSL server authentication" ?
Doesn't BC support "SSL client authentication" by username/password ?
Thanks,
Takurou

Authorization with respect to Project profile

Similar Messages

Maybe you are looking for