Authorizations for Office Documents

Hi all,
It is possible to control the access to office documents that can be created/deleted/modified that is used in "Attachment List" (for instance, in a FI document viewed in transaction FB03) ?
Is is possible to control what actions can be executed by a user ? (for instance, don't give the delete access)
I've search for possible authorization objects and find two that are use in standard authorizations checks, but the second object only checks if the actual user is a Administrator (that can perform any operation) or the attach owner:
S_OC_DOC
S_OC_ROLE
Any help appreciated.
Thanks in advance!
Nuno

Thanks for the reply BN,
I've managed to debug the code, and find that in method 'EXECUTE' for class 'CL_MSG_AL_ITEM', the authority check uses the 'S_OC_ROLE' and tries to check if the user have Administrator privileges.
        WHEN cl_gos_attachments=>gc_cmd_delete.
          AUTHORITY-CHECK OBJECT 'S_OC_ROLE'
                          ID     'OFFADMI'
                          FIELD 'ADMINISTRATOR'.
          IF sy-subrc = 0 OR sy-uname = gp_owner.
            CALL METHOD lo_docsrv->delete_url
              EXPORTING
                is_lporb = gs_lporb
                ip_url   = lp_objkey.
            rp_commit = 'X'.
.. and if you have administrator access, the user can do any activity in the attached document.. is this correct ?
Thanks!

Similar Messages

What happends when you give 2 groups with some of the same members different authorizations for a document

Hello,
I'm doing my internship at a litte Telekom company. I'm investigating how they can use MS SharePoint as their central place to put projectinformation. Now i've been thinking what happends when i do the following:
Make one document library
Add 2 groups to the Active Directory, group "A" with all the employees and group "B" with only four people working on a project. When i add a document to the document library and set the authorizations for the document as
follows:
Group B: Read/Write
Group A: Read
Does the people from group B still be able to edit the document, because they are also in group A?
I don't have a test environment to test this myself.
Why i want to know this? The company want's one place to place all their documents with projectinformation. This information is about different projects. You only wan't that people can change the specific document when they are working on the specific project
where the document belongs to.

You get the union of permissions, so if one group allows access and the other not, you will get the union of both and therefore access. Of course, you can break security settings per library/folder or document, and specify new settings,
if you need too.
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

Insufficient authorization for sales document

Insufficient authorization for sales document
We are getting an error message as insufficient authorization in spite Sales Order fully approved. We are using Credit Card Processing without clearing house as payment process on sales order processing. Sales Order is process correctly with credit card pre-authorization.
Creating delivery and billing document is giving an error as Insufficient authorization.
We have completed configuration related to payment card. Also Maintain Clearing House...
Chart of Accounts              ***
Payment card receivables       ####        CASH CLR-CREDIT CARD
Clearing account               ####        CASH - PNC
Authorization                            CCARD_AUTH_SIMULATION
Initialization Authorization SET
Result Authorization (SET)               SD_CCARD_AUTH_CALL_RFC
RFC destinations of functions
Settlement                               CCARD_SETTLEMENT_SIMULATION
RFC destination of functions
Settlement answer                        CCARD_SETTLEMENT_RSP_EXECUTE
Thanks
PP

Yadav,
The new documents are working fine. The documents already created when try to release billing to accounting getting
message..Insufficient authorization for sales document 90000055
Message no. V/032
Procedure
Check the authorization amounts in the payment card plan and repeat authorization. Or reauthorize at a later time.
Thanks
PP

Programmatically creating postscript files for office documents

Hi All
I am in the process of experimenting with vb.net to open up a word document in the background and create a postscript file, which i would then use to create a pdf. This currently is a windows service and seems to run ok when the same code runs through a windows form application.
The problem i am having is with the "When creating a postscript file you have to sent the host fonts" error message, which seems to be fairly common judging by numerous articles on various forums. However, none of the solutions seem to solve my problem.
I have set the "Do Not Send Fonts To Adobe PDF" option to OFF on printer defaults, on the current printer setup and even on the printer settings for that application (go to print, properties etc from within Word).
However, whenever i run the code i get the error message. I then made the instance of word visible and checked the application settings for the adobe pdf printer.... the "Do Not Send Fonts To Adobe PDF" is now ticked. But when i close this down, and open word as a normal user would and check the setting it is off! Why would this be?
Can i programmatically change this setting when word opens and before i run the post script file creation code? Where is this value for the setting stored? I do not understand why this is resetting in the instance of word through code? Is it something to do with setting the active printer and at this point using the default setting?
Any help would be appreciated.
Thanks in advance
Nic

You say you are doing this as Windows service – does this mean you are running this on a server of some sort? If so, that is NOT ALLOWED.
From: Adobe Forums <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Wed, 26 Oct 2011 04:31:13 -0700
To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
Subject: Programmatically creating postscript files for office documents
Programmatically creating postscript files for office documents
created by nic.eastham<http://forums.adobe.com/people/nic.eastham> in Acrobat SDK - View the full discussion<http://forums.adobe.com/message/3990878#3990878

Authorization for Measuring document creation

Hi,
i have one issue. I want to provide authorization for measuring documents creation. That has been done by providing the different authorization groups in roles for T codes IK11, Ik12 etc to the users. Now users with a authorized authorization group for perticular measuring point can create a measuring document fo that. But the problem is that despite the authorization group, if user goes to t code iw41 for order confirmation , there he can create measuring documents of any authoprization group. How to control that thing. I also give authorization group authorization for t code IW41 but still it is allowing for the creation of documents. any help on this thing.
Regards,
Aman Sharma

Hi
there are two ways you can control the measurement reading entry
1. Block the authorisation of IK11.When you go to confirmation screen through IW41 , there a button for measurement document update. Even the user will press it system will not allowed to enter in it as he is no authorisation
2.You can configure the screen template for overall confirmation and use this profile while doing overall confirmation using iw42. There you can hide the measurment detail screen.
customising node " Set Screen Templates for Completion Confirmation "
Regards
Amar

REMOVED " V/032 Insufficient authorization for sales document"

We are having serious issues with the multiple credit card authorization at the time of releasing the billing document to accounting. Everything is with fine with a single payment card. But as soon we split the order value into two payment card and try to release it to accounting, It gives me this error " Insufficient authorization for sales document XXXX". It was working fine sometime back in July and i had tested it many times, i have no clue what happened in the system or what triggered it. I have checked all the config and settings, everything is fine, and i am unable to understand what is causing this issue. Any help from anywhere would be greatly appreciated....
thanks all in advance for their input..
Message was edited by:
Yathish K

Hi,
Please read rules of engagement before posting.
Step 1: Finding An Answer
Rule number one: Try to find the answer first. There are tons of resources out there, show that you have tried to find the answer. A question that shows that the person is willing to try and help themselves is more likely to be answered than one which simply demands information. Tell us what you have done to try and solve the problem yourself - often we can learn from that too!
Search the forums, the articles, the blog posts and the Frequently Asked Questions (FAQ) in the Wiki for your topic.
Step 2: Asking Your Question
Once you have verified that no resources are available for solving your problem, ask your question. Do the following:
- Use a Good Subject Line
The subject header is your golden opportunity to attract qualified experts' attention in around 50 characters or less. Don't waste it on babble like "Workflow question". We all have busy jobs, often we just skim through the list headings and read those that interest us. Also, DO NOT reply to an unrelated post to ask a different question. This confuses those reading the thread and may lose people that would be interested in your question. Always start a new topic with a new mail.
Bad subject: Urgent problem with workflow
Good subject: Error after transport: "Inconsistent workflow definition"
Do not use words in capital letters and any of the words: urgent, quickly, burning, etc in your message. Especially not in the title! This just irritates and does not help you get to your goal. From our side, we definitely do not answer faster when we see these words.
The same goes for such things as ??? or !!! in appends. In the English language one ? or ! is sufficient to terminate a sentence.

Insufficent authorization for sales document 2321.....

hi gurus,
i have got a issue in credit card sales scenario .in this case while i am releasing the invoice to accounting i m getting this error
insufficent authorization for sales document 2321.....
message: no:-V/032
procedure:check the authorization amount in the payment card plan and repeat autorization or reauthorize at a later time
i have checked the sales order there payment card amount is authorized n the sales order showing green signal and card authororization is sucessful and before that preauthorization was also there but final authorization is done.after that delivery also done. but while doing invoice releasing to accounting i am getting above issue.anybody plz help me no guess please need solution
regards,
Debesh

This link is applicable to you
[Read This Before Closing your Threads|Read This Before Closing your Threads;
As indicated therein, please dont add any such unwanted letters or characters just to close the thread. You can just click the Answered button. If you really want to show that you respect forum members time, better try to develop the habit of updating the forum properly if your issue is resolved.
thanks
G. Lakshmipathi

Authorization for UB document type in PO create

Hi All,
We wanted to restirct some user from creating PO other than UB. We want them to give authorization only for UB document type in ME21N. What is teh best way to make it work?
Thanks for your support.
KHAN

Hi Khan,
If you want to restrict the User for creating PO other than UB document type. You need to discuss with Basis consultant.
For that particular user you need to restrict the activites like Create, Change , display for the authorization object "M_BEST_BSA" which is assigned for Document type for Purchase order.
Based on your requirement inform the basis consultant to remove the all other document type or * symbol and assign only UB document type to that user. So he/she will be restricted to that document type only when ever he creates any PO.
rgds
Chidanand

Need authorization for business document services attachment list with user status in ps claim for clm2 and clm3

Dear Friends,
client wants to restrict the attachment list changing, deletion after the user status sets to close in PS Claims for transaction clm2 and clm3.
Currently any one can attach documents as GOS and delete even the claim is completed and status is closed.
How can we restrict all users even who created the claim can not change create and delete attachment list documents once the claim is completed and approved and user status sets to closed.

HI,
what is the claim creation transaction in that 01 is for creation 02 is for edit and 03 for display so with the help of basis consultant you can assigned transaction in user's assigned role accordingly.
But user who is authorize for create claim can not modified or edit once he save the job. this would be limitation.
Regards,
Sanjeev

OWA 2013 - No download option for office documents

Using Chrome, Firefox and IE browsers I do have a "download" option right next to the attachment as long as the attachment is NOT an office document (.doc,xls,ppt,etc). If the attachment is an image, a download link is right next to the attachment
as expected.
But if the attachment is for example a .docx file I only have a preview option available and no download. Also right-click to Save-As only shows an HTML download.
I have enabled in ECP
Permissions - Outlook Web App Policies - File Access
Public or Shared - Direct File Access and Web ready document viewing
Private - Direct File Access and Web ready document viewing
and
Servers - Virtual Directories - Owa
Public or Shared - Direct File Access and Web ready document viewing
Private - Direct File Access and Web ready document viewing

Hi,
How many users encounter this issue, all users or some specific users?
Please use the Get-OwaMailboxPolicy cmdlet to check all Microsoft Office Outlook Web App mailbox policies in a Microsoft Exchange Server 2013 organization:
Get-OwaMailboxPolicy | FL
Thanks,
Winnie Liang
TechNet Community Support

Livecycle connector for sharepoint Set Document Content for Office documents

Hi,
I'm trying to figure out how the LiveCycle 9.5 connector for sharepoint works. It all works like a charm, exept for the set document content activity in a LiveCycle process.
When I have a file named test.txt on my Sharepoint server, and I execute the process with the "set document content" activity to replace the content with the content of the same test.txt files' content which I changed for the experiment, it gets updated without any problems.
Yet, when I have a file named test.docx on my Sharepoint server, and I try to replace the content with that of the content of the same test.docx file with altered content, the document content doesn't get updated to the new content.
Is there a certain configuration that I need to do, to make this work or is this a known issue of the connector?
Thanks in advance for your answer
Kind Regards,
Ronald Kamp
Junior Flex/Java/LiveCycle Consultant at iDA MediaFoundry.

Hi Ronald,
I could not get this reproduced at my end. We were successfully able to replace contents of a .docx file as well.
Can you please attach the livecycle process along with the thread in case issue has not yet been resolved at your side?
Thanks
Raghu

BASIS--to restrict authorization for a PO document type & 122 movement type

Dear All,
Plz guide me how to restrict authorization for a PO document type & for a movement type 122 i.e. for eg. if a user has authorization for PO document type IC then he should not be able to rum movement type 122 for any T-code he runs.
Thanks in advance
Arpit
Basis

Hi,
Your request was not too clear to me.. As per my unde
Here is some details of Authorization object related to Purchase Order:
Document Type in Purchase Order( M_BEST_BSA )
Purchasing Group in Purchase Order (M_BEST_EKG )
Purchasing Organization in Purchase Order (M_BEST_EKO)
Plant in Purchase Order (M_BEST_WRK )
Document Type in Outline Agreement (M_RAHM_BSA )
Purchasing Group in Outline Agreement (M_RAHM_EKG )
Purchasing Organization in Outline Agreement ( M_RAHM_EKO )
Plant in Outline Agreement ( M_RAHM_WRK )
This can be helpfull to you to restrict authorization to PO..
In Organization Level, it can be restricted by Purchasing group, Purchasing organization and plant..
Regards,
Sandip

Release authorization for Posting FI document nor Parked document

hii guru
I am facing a problem as below. i have created a release authorization for parking document using workflow variant, created event - Created, object type - FIPP, receiver type - WS10000051, and when i am parking the document its working fine, wants release authorization to post parked document. but my client requirement is to set release authorization for posting FI document in fb50. not parked document.
please give me a solution how do i cofigure the release authorization to post directly FI Document in fb50.
thanks & regards
Rajesh

i have solved by myself

SharePoint search using Term-IDs doesn't work as expected for various document types and items

If items or documents are tagged with managed metadata terms from the term store (no social tags, but pre-defined terms), you can find this content later on (after crawler has finished) using the following URL query:
http://myserver/search/Pages/results.aspx?k="85f915a2-bd9e-4c94-a840-4323d37e8df9"
The guid is the term ID (from the term store).
Issue:
That works great for office documents. It seems to be not working for several file types like txt, zip, aspx (inside page libraries) etc. All file types are generally registered with search crawler and are found correctly using the normal search, e.g. for
the term name or other content. It also not works for me with custom lists that are tagged with a term.
Questions:
1. Is using this type of search url a documented and advised feature, to find content that is tagged with terms?
2. How to setup search to find this items and documents consistently with "normal" search AND by term ID?
Thanks, Frank
Thanks, SharePointFrank http://www.layer2.de/en/products/

Hello Frank,
SharePoint contents tagged with managed metadata Terms can be searched by doing a search on “TermName”, and the search result could be refined by managed metadata. Please ensure your SharePoint site content source was crawled and Managed Metadata
Service Application was running. Personally, using a TermID involved in the URL to search items tagged with metadata isn’t advisable due to difficulties when manipulating a ID number.
Fabian Williams has included a managed metadata search section in his informative walk through:
http://www.endusersharepoint.com/EUSP2010/2010/06/01/understanding-managed-metadata-in-sharepoint-2010-its-impact-on-taxonomy-navigation-and-search-part-1-focusing-on-managed-metadata-term-store-navigation-and-search/
Let me know if I misunderstand you.
Thanks & Regards.
Lily Wu || Microsoft Online Community Support Engineer || SharePoint

Office document workflow.

Dear all,
           The requirement is when an office document is created , workflow should trigger and the workitem should go to the approver who may edit and approve or reject.
           Is there any standard transaction for office document creation?If not,please suggest me how accomplish this scenario for which I will be grateful.
           Standard bus objects like SOFM and MESSAGE has methods like EDIT to serve the purpose.I suppose, the events given in these bus objects can also the purpose.But to how to make these events to raise?
Thanks and regards,
S.Suresh

Dear Narin,
               Thank you so much for your caring response.
               First let me clarify your points :
               1) What kind of document you want to create - related to which module.
                  The word document which I want to create do not belong to any module.
                  The content of document could be like a circular letter say the body is about code for employees in office premise.
               2)Can it be done like Create a word document offline and upload the same document.
                  Creating a word document and uploading to SAP is O.K.But how to do this?
               I thought to create the word document in SAP system itself if there could be any standard transaction for the same.Once the document is created workflow should get triggered and carry the document for approval.
             You have stated "for more information check this program....",may I know that program name?So that I can check whether it will be suitable for my requirement.
               Please suggest for which I will be grateful.
Thanks and regards,
S.Suresh

Authorizations for Office Documents

Similar Messages

Maybe you are looking for