Authorizations for the users lost after applying SP15

Hi,
Is it possible that after applying any support package, authorizations of the users gets lost?
Because when we imported SP15, authorizations of the users are affected...
If yes, what are the precautions to be taken before importing any support package to avoid this....
The problem is that as a user of the system who does not have full access,
when they try to run a report either through the Analyzer or through the
web all they get is "No Authorisation". Prior to SP15 being applied they
did have access to the system.
Now how to restore the authorizations....
Thanking you,
Tarun Brijwani

Tarun,
This is a normal occurence with SAP support packs and I suggest you to open up an SAP note with SAP support and see if they respond to it. I exactly don't remember the note number but I think there is a comprehensive note that describes in detail about what you are getting in SP and what might be affected. Try installing Service pack stacks and I think SAP releases these once in a quarter and these are more error proof. ( from my experience that's what I gathered). Anyways, hope this helps.
Thanks,
Bobby

Similar Messages

Authorization for the user to write/read/create a file in application serve

Hi experts.
I am uploading some data to a file in a folder in application server, created in AL11 tcode.
In my program i need to restrict the unauthorized users to create/write/read a file in app server.
I dont know how to do this.
Kindly give me the code, please it wil be helpfull for you all.
I dont know how to use the auth object or function module, to do this.
Is the basis/security people need to do something.
Kindly revert me back ASAP.
KK

Or use AUTHORITY_CHECK_DATASET function module before the open data set
This function module allow you to check the user's authorization to access files (with the key words OPEN DATASET, READ DATASET, TRANSFER and DELETE DATASET). A check should be performed before opening a file.
The authorization check is performed uwing the authorization object S_DATASET.
Description of function parameters:
PROGRAM: Name of the ABAP/4 program that contains the file access. If no program name is specified, the system assumes the current program.
ACTIVITY: Access type. The possible values are:
READ: Read file
WRITE: Change file
READ_WITH_FILTER: Read file with filter function
WRITE_WITH_FILTER: Change file with filter function
DELETE: Delete file
FILENAME: Name of accessed file
Example
Notes
The values to be passed as the ACTIVITY are defined as constants in the TYPE-POOL SABC.

For my user id, I have the authorization for the transaction, but still iam getting the error that, you don't have authorization, plz suggest?

Hello ,
For my user id, I have the authorization for the transaction, but still iam getting the error that, you don’t have authorization, plz suggest?????
Thnks

Hello Sampath,
after you have received the error message about the no authorization, run transaction SU53.
This transaction shows which authorization has failed last time.
Best regards,
Laszlo

After a quiz can you show the questions and answers for the user to review from passing the quiz

After taking a quiz, is there a way to show the questions and answers for the user to review from passing the quiz.
And the ones who has failed the quiz would be directed to the first slide again to take the quiz over.
Thanks

Rod
I see that information about adding the review quiz button but on that last slide where it shows results, I want it jump back to slide 1 but it jumps to the first question of the slide. Is there a way around that?

Mapping-source column(for the measure)disappears after pressing apply

I am using AWM 11.2.0.2.0B and Oracle 11.2.
I have successfully mapped my dimensions. Then I defined a stored measure, say DISTANCE and I want to map it to a column in my database. When I click the "apply" button, the mapping disappears! And I can not find any error messages. I have tried mapping another column to it (defining a different measure), still the mapping disappears after applying.
The type of the data(measure) is number(22) in my database, so I choose Data type: Number, Precision:22 and Scale=0 in my cube(storage section) and I check "use compression", therefore the measure will inherit the mentioned data type (of cube). I also tried using integer as the data type, no success. I first doubted that it expects some different type of data to be mapped, but seems that is not the problem. Every column I put there as my source column disappears after clicking on apply!
Any idea what the problem is or where I should find a log?
Edited by: 903009 on Dec 17, 2011 10:03 PM
Edited by: 903009 on Dec 17, 2011 10:05 PM

Hi Veeresh,
As per my understanding, this error happens when the OLE DB Source component cannot find the corresponding source column in the database table. Possible reason is the the column name in the external database table has changed or
the column has been removed.
To verify this issue, please go to the Advanced Editor for OLE DB Source Input and Output Properties tab to see the External columns and Output columns. To fix it, please refresh the data or recreate the Source.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Transported Roles not Visible for the User Log-in

I have three roles in the development system. These roles show up in the top level navigation for the users in the dev system. All these roles and the underlying BSPs are transported to QA successfully. I could assign them to users without any problems, but when the users log-in they can not see any of these roles at the top level navigation (In fact, they just get a blank screen). "Entry Point" setting and "Sort Priority" is maintained for all the three roles.
As a test, I created a new role with the same BSP links in QA itself and assigned it to the users. This shows up in the top level navigation for the users. I am wondering what's wrong with the transported roles! If someone could help me here that would be great and I will assign points to helpful replies. I have a very basic knowledge in portal.

After applying SP12 in the portal landscape (EP 6.0), the role transports only work in our test environment, but not in production. Even the manual corrections suggested in OSS note 1002832 didn't help. I can preview all the iviews in the roles with my user id (admin id), but as soon as I log-in with the end user id nothing shows up [Not even the top level navigation tabs show up]. The following is the portal authorization methodology I chose.
1. I assign users to the user groups
2. I assign user groups to the roles
I want to emphasize that all is well in our test environment, it is the production environment that shows inconsistency. Let me know if anyone has any pointers.

Windows 7 very slow logon, Waiting for the User Profile Service, winlogon event 6006

Hello,
Every so often one of our Windows 7 clients which is not normally having any delay at logon will take a very long time to login. This may be 10 or 20 minutes or up to an hour in some cases.
Typically the event log will contain entries like
The winlogon notification subscriber <Profiles> took 572 second(s) to handle the notification event (Logon).
There is no further information available from Event Log Online Help, nor any additional detail as to why the logon event was so slow. During the delay the user will just see "Waiting for the User Profile Service" on their screen.
We first started seeing this problem with Windows Vista and if anything the situation has not improved since then. It has never happened with any of our Windows XP users.
We are currently planning a migration of computers to Windows 7 but stuff like this which has not been resolved in Windows over a 2 year period will stall that migration. The least improvement is to increase the event notification to give a lot more
information on why the user profile processing has stalled.

Hi,
When did the issue begin to occur? Did it occur after installing certain application or applying certain policy?
To troubleshoot the issue, please perform the following step.
1. Restart the machine in Safe Mode with Networking to check whether the system can login quicker.
2. Type “gpedit.msc” in Search box and press Enter. Navigate to the following location:
Computer Configuration->Administrative Templates->System->Logon
Please double click “Always wait for the network at computer startup and logon” policy and disable it.
3. Perform a
Clean Boot to check the result.
Thanks,
Novak

Doesnot ask for access key. error No authorization for the 'S_DEVELOP'

Hi,
After applying patches,in transaction F-43 one of the field Inv Recd Date( BSEG-ZOLLD) is not getting displayed.
after analzing we found that ZOLLD is not there in screen SAPMF05A(0302).
in my development server when i try to change the screen it says "You have no authorization for the authorization object 'S_DEVELOP', which would allow you to change the screen concerned"
my profiles contains sap_all and sap_new rights even then I am getting this error.
Why doesnt it ask for access key ?
Kindly guide me .
Regard

> Please check in Su24, if iy has S_develop object or not,
In SU24? why? and what or who is "iy"?
> since you say you have SAP_ALL access please regenerate SAP_ALL its a composite profile this should work fine.
What does the fact that it is a composite profile matter? Besides that I've already made a remark about regenerating it.
> But you need to check at SU24 against f-43 whether S_develop missing or not,if missing please insert manually
Ehm, do you really think the SU24 settings for a transaction influence the changeability of it's underlying screens/programs etc? It will not matter at all what you do with S_DEVELOP in SU24.

No authorization for activating user status PLIM

Dear Gurus,
I'm a newbie to SAP. Currently i'm facing the problem with Tcode KO01 while i'mtrying to create Internal Order. I can initialize the program but after i entered the Order type and pressed enter. Error msg "No authorization for activationg user status PLIM" pop-up. Pls help on this urgently.
Thanks.

Dear Payal,
I checked /nSU53 just after i got the error msg. It said authorization check failed. Authorizaton object B_USERST_T status management: Set/Delete User Status using Transaction.
Activity:01
Authorization key: <Dummy>
Object Catagory: ORC
Status Profile: 00000002
What should i do after this???

Authorization for the report

Hi
I have made one report, I needed to check the authorization for the report, how to do it.
Eg. One employee is executing the report, he only needed to select his transaction
If somebody from one sales organisation, they only needed to take the data belongs to the sales office.
SELECT-OPTIONS: p_vkorg FOR tvkot-vkorg.
SELECT-OPTIONS: p_pernr FOR pa0001-pernr
for example two selection parameter is displaying. if my employee no is 100, while trying to enter execute the report for 200 employee no. no data should show. like that vkorg filed also should work.
Please let me know how it possible.
Regards
Sebastian John

Hi,
You can change the code below
*---Authorization for Company code entered by the users.
*---This code will restrict users to see data for company
*---codes which they are not authorized to.
*---Select all the company codes based upon selection entered by the
*---user
SELECT bukrs
   FROM t001
   INTO TABLE li_bukrs
WHERE bukrs IN z_bukrs.
IF sy-subrc EQ 0.
*---Clear Screen variable for Company code
   CLEAR z_bukrs.
   REFRESH z_bukrs.
*---Filter and prepare Select options for Company code table to be
*---passed to query. Table will only have values of company codes he is
*---authorized to for display.
   LOOP AT li_bukrs INTO lwa_bukrs.
     AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
                       ID 'BUKRS' FIELD lwa_bukrs
                       ID 'ACTVT' FIELD '03'.
     IF sy-subrc = 0.
       z_bukrs-sign = 'I'.
       z_bukrs-option = 'EQ'.
       z_bukrs-low = lwa_bukrs.
       z_bukrs-high = space.
       APPEND z_bukrs.
     ELSE.
       lv_flag = 'X'.
     ENDIF.
   ENDLOOP.
*---Give warning message to the user in case he is not authorized to see
*---data for all the company codes that he has entered.
   IF lv_flag = 'X'.
     MESSAGE ID 'ZFNG' TYPE 'W' NUMBER '015'.
   ENDIF.
ENDIF.
This code does an authorization check at company code level and removes all the company codes that user has entered but is not authorized to look for. After that we pass the filtered list of company codes for which user is authorized to in the select query and fetch the results. You can first select all the records from database for PERNR and VKORG. Then filter them and prepare new list of VKORG and PERNR after performing authorization check and pass it further to select queries in your program.
KR Jaideep,

Report S_ALR_87013105 : no authorization for the report/ table 7KU6_001

Hi Gurus,
While executing the program S_ALR_87013105 (Detailed Reports
For Sales Order : Plan/Actual Comparison ) system showing the selection log.
"Have no authorization for the report/table 7KU6_001 and 7KU6_002".
But for the user the authorization check through SU53 was successful.
Pl can any one suggest on this issue.
Thanks in advance,
Vijay

Hi,
Contact your basis consultant to provide the missing authorisation. This is one of the authorisation object.
Regards,
Sankar

Authentication and authorization for AD users in UCM11g

Hi all
we are using webcenter content server 11g. I read some where that for 11g users authentication is done in weblogic server environment, mean content server for 11g in now managed by weblogic server only, am i right?. we have successfully integrated Active Directory with weblogic sever and user of AD are able to log-in UCM but they don't have any role like contributor or Admin. How to do this role mapping for AD user in UCM i.e. authorization for these users. Please provide any guidence on this issue any doc or blog, we are new to webcenter suite.
Thanks
Somesh

As you already have weblogic integrated with AD, remains only role mapping and Single Sign-On integration. For authorization, AD must contain groups with exact names as roles in the Content Server. Those groups should be where Group Base parameter in the weblogic ActiveDirectoryAuthenticator point (like OU=Roles,OU=Oracle,DC=example,DC=com). Assigning AD user to the AD group named contributor, will add contributor role to logged Content Server user.
As for SSO, refer to the:
http://docs.oracle.com/cd/E23943_01/web.1111/e13707/sso.htm
and
http://docs.oracle.com/cd/E23943_01/doc.1111/e10792/c05_security.htm#autoId21
Procedure steps are:
Create a user account for the hostname of the web server machine in Active Directory
Create krb5.ini file, and locate it in the C:\Windows directory at both machines (Domain Controller and WLS host)
Generate the keytab file
Create a JAAS Login File named krb5Login.conf
Put both keytab and krb5Login.conf files to …/user_domains/domains/my_domain/
Configure the Identity Assertion Provider
Adjust Weblogic Server startup arguments for Kerberos authentication
Redeploy CS (and optionally other servers) server with the documentation given deployment plan
Check web browser configuration (IE and Firefox only)
Take a deep breath and test
If successful have a cake and cup of coffee else goto step one
Regards,
Boris

"Please Wait For The User Profile Service" message when logging on to TS 2008

I have a Windows 2008 AD Domain with 2 Windows 2008 Terminal Servers. Both are configured identically. I have the TS Roaming profiles stored on a 3rd server and a GPO pointing all users to the roaming profiles. On one of the servers everything works perfectly. On the second server the users, after they input their credentials, get the following message "Please Wait For The User Profile Service". The message can stay there for up to 3 minutes, then they are logged innormall with the correct profile. This problem does not occur on log off. Any help would be appreciated

99% of the times I had this problem it was caused by either DNS issues or network bindings.
Are your servers multihomed? In other words: do you have multiple network cards? If so, make sure your "production" card is on top in the network connections -> advanced settings -> adapters and bindings.
You could also enable user env logging (search microsoft how to do that)

No authorization for the component (query name)!

Hello all,
when i am publishing the query in web, the following error message is displayed!
"No authorization for the component (query name)!"
i had installed and configured everything here, so the person responsible for authorization is none other than me. what i shud do now? shud i add any other authorization profile to the username created? or still any configuartion is required?
please let me know!
Thanks,
Ravi

Hi ARK,
thanks for the info.
i had assigned SAP_ALL and SAP_NEW profiles to the user.
let me say clearly that when i am executing the Query in the designer it is working fine,no issues in Bex browser too. but when i want to publish safely exexuted query in web (clicking the button publish the query in web) i am getting the above mentioned error!
do suggest me what is the authorization profile that is needed to serve my purpose?
hope this time i am clear!
Ravi

Send the billing output by e-mail for the user

Hi,
Can you tell me if it's possible to send the billing output by e-mail (Medium = 5 - External send) for the user that create the billing document? the e-mail of the user is in SU01D.
Thanks in advance
Dora

Hi Dora,
What you can do is when you want to send a mail to customer after you receive the email for bill is do the following settings.
1) Create a condition record VV31 with the required Key combination where you can give the name of the Employee or end user with the email id.
2) Select the trasmission medium as 7 ( Simple Mail)
3) Once the Billing is done E-Mail will be triggered.
4) Downlaod it or forward it to your client with the additional text in the E-Mail.
Hope this helps.
Thanks and Regards
Rohit Dujari

Authorizations for the users lost after applying SP15

Similar Messages

Maybe you are looking for