Authorizations for users to change their own data

Hi
All the employees are given the userids to logon to sap when these employees log on to sap with the particular userids they should be able to change /Display only the details pertaining to them not others
We have not implemented ESS but this is in pipeline but only after 3 -4 months But Authorizations are required for users now only
How to design role which should apply to all user requirements and they should get their Personnel no by default
Kind Regards
Vinod

Hi,
   For your requirement goto transaction SU21 and select the object P_PERNR and click DOCUMENTATION. Refer the Documentation for the steps to be followed.
(i.e) For a user to be able to maitain his or her own data. You should assign the user an authorization for the HR: Master data - Personnel number check object (P_PERNR), with the following specificatons:
1. Authorization level: *
2. Interpretation of assignment
   User - personnel no: I
3. Infotype           : 0002
4. Subtype            : *
A related link http://www.sapfans.com/forums/viewtopic.php?p=502235&sid=cd1bde22eb24059e4d5a2eae086b7c96

Similar Messages

Is there a way to prevent an end-user from changing their own password?

All you guru's out there, I need your help. Is there a way to prevent an end-user from changing their own password? Is there a function or procedure I can create or what?

In this case, you do not want someone (whoever they are DBA etc) to connect as that
particuler user to change the password.Yes, but I wouldn't expect the users to[i] know that password. The connnect would be handled automatically, behind the scenes.
The clear implication of the OP's question and response was that users would not be allowed to change their own passwords. I'm guessing this is in response to a policy that says users mustn't have simple passwords like 123abc or mom. In such a scenario a better approach would be to apply regexp to a user's password to ensure it contains a mix of letters, numbers, punctuation, etc to achieve the desired level of complexity.
So questions, should not be regarded as daft Agreed, but the same is unfortunately not always true of business decisions. As the OP has told us not to ask we cannot know why they want to do this. Personally, I think a user's individual password should always be their responsibility; anything else strikes me as insecure. YMMV.
Cheers, APC

User's changing their own password

Is it possible to allow user to change their own password when logged onto a portal applicastion I have written ?

Presumably, the application you say you have written, is a Login Server partner application. So changing the user's password means changing it on the login server.
The URL that you need to go to, to do this, is something like: http://server.domain.com/pls/portal30_sso/portal30_sso.wwsso_app_user_mgr.change_password?p_done_url=xxxxx
Where xxxxx is the URL where you want control to go after the user submits their new password.
null

How to enable ebs users to change their own passwords.

Hi,
Is there any profile option which will enable the users to change their passwords on their own from EBS front-end applications...?

Hi,
Is there any profile option which will enable the users to change their passwords on their own from EBS front-end applications...?Users can change their password from the application itself (Edit > Preferences > Change Password).
If you want to force all users to change their password, see (How To Force All Applications Users To Change Their Password? [ID 414976.1]).
Also, see old threads for similar discussion -- http://forums.oracle.com/forums/search.jspa?threadID=&q=414976.1&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Many Portal users mapping one R/3 user and query their own data ?

Hi everyone :
I want to discuss a issue as follow with all :
Precondition : The SSO had done between Portal and R/3.
Issue : Many Portal user(vendor) mapping one R/3 user(pulic vendor user),when they logon Portal, they can query the report, but the data was for the vendor logon now !
Any discuss is welcome!
Best Regards,
Jianguo Chen

Hi everyone :
I want to discuss a issue as follow with all :
Precondition : The SSO had done between Portal and R/3.
Issue : Many Portal user(vendor) mapping one R/3 user(pulic vendor user),when they logon Portal, they can query the report, but the data was for the vendor logon now !
Any discuss is welcome!
Best Regards,
Jianguo Chen

Using one azure table storage account for many customers with their own data

I'm developing app that will allow the customers to store their data in azure. However, currently I have no idea how to split accounts of the customers in azure. Yes, I'm just started to read the documentation, but maybe someone can point me to the
right topic?

It seems like it might be worth starting from the general guidance to developing multitenant cloud applications - this resource might help: http://msdn.microsoft.com/en-us/library/ff966499.aspx
The patterns covered in this guidance might apply to data storage mechanism chosen for the application - whether it's Azure Storage , Azure SQL DB or else.

Client updating/changing their own form data

We've added some fields to our form for a 4th day of volunteering after many people have already signed up. We want them to be able to sign up for the added day.
Is there a way to for individuals to update their own data on their form or do we have to do it from the backside?
This is our form:
https://adobeformscentral.com/?f=OH3E-aGP4i0WAwYAhSt3BA
We added the option for Monday after 50 or so people had already signed up.
There are lots of required fields and show/hide fields within the form.
We don't want duplicates which is what would happen if I just asked people to repeat fillingout the whole form.
Any options???
Terri

Users cannot go back to the form and update their data. I would just create a new, shorter form that has only their name/email address and info about 4th day. You can then merge the data sets from the 2 forms using the email address.
Hope that makes sense and is helpful...
Randy

Any possibility to assign a user to maintain his own data in SU01

Hi All,
For all the developers we have assigned only display view to SU01. Can we give them access to su01 to change their own data (Only tabs Address, Logon Data and Tabs should be changeable. Tabs Roles, Profiles ahould not be changeable becoz. they can assign SAP_ALL).
Is there any way to do this?
Thanks,
Subbu

Hi,
Thanks for ur response...and sorry for asking this basic question..
I am seeing all these in PFCG --> At present in the Authorization object "S_USER_AUT", i have given the following:
Activity as 03, 08 (Display and Display change documents)
Authorization name in user mas *
Authorization Object *
I am confused how to restrict SU01 and provide only SU3 transaction..For the Authorization object "S_USER_TCD" which is under BASIS: ADMINISTRATION i have given *, even if i restrict here i think it won effect...could you pls. guide me how to restrict?
Thanks,
Subbu

Command #user can change there own password (inside script..without passwd)

HI,
I have prepared one script, from which user can change there own password across all the nodes he wants.But problem is script is not working because the following command is not working
echo -e "$oldPassword\n$newPassword" | passwd
i have tried to run it manually but it is showing the folowing error....
[testuser@xxxxxx01 ~]$ echo -e test\ntest123|passwd
Changing password for user testuser.
Changing password for testuser
(current) UNIX password: passwd: Authentication token manipulation error
[testuser@xxxxxxx01 ~]$
any idea how to resolve this , or is there any other command where user can change their own password (inside a script).
Regards,
Ani

When you change the password and are not root user, the passwd utility will ask for the current (old) password. You have specified a wrong old password, plus the utility will ask for confirmation of the new password.
<pre>
$ passwd
Changing password for user dude.
Changing password for dude.
(current) UNIX password: asdfasdf
passwd: Authentication token manipulation error
$ passwd
Changing password for user dude.
Changing password for dude.
(current) UNIX password: correct_password
New password: How_will_1_ever_remember
Retype new password: How_will_1_ever_remember
passwd: all authentication tokens updated successfully.
$ old_pwd='How_will_1_ever_remember'
$ new_pwd='My_secret_passord_1'
$ echo -e "$old_pwd\n$new_pwd\n$new_pwd" | passwd
Changing password for user dude.
Changing password for dude.
(current) UNIX password: New password: Retype new password: passwd: all authentication tokens updated successfully.
</pre>
Edited by: Dude on Sep 25, 2012 4:36 PM

Control to Stop Users Changing their Own Employee Master Data

Hi all. I'm carrying out a security review of users on a SAP HR implementation as part of this we are looking at users that can change bank details, basic pay etc. I was wondering if there is a control in place on SAP that would stop a user with access to make changes from changing their own Basic Pay on the system. Thanks

Hi Jonh,
Sure there is a way to stop it; you have to use infotype 0105 + security object P_PERN, please follow this link to get more details: HR Authorizations Backend v/s ESS
Hope that helps,
Best regards,
Federico.

Users changing their own passwords

we have set up an Open Directory and are going through the steps to deploy. One issue we have yet to find an elegant solution to is user's passwords and changing them on a regular basis. Many of the contracts we deal with stipulate user passwords are to be changed every 45 days.
Now - there is no way we want our users monkeying around in Workgroup Manger changing their own passwords - and the last thing we on the IT team want to do is perform data entry tasks every couple of months to change everyone's password. Plus - for security reasons - this is a terrible idea.
so - is there an easy way to have a user update their password without going through Workgroup Manager?
thanks

And you can set the password lifetime and reset and character-content policies in Server Admin > Open Directory > Policies > Passwords, if you've not already found that set of knobs.
I'd also suggest looking to two-factor or certificate-based approaches, if you're having requirements around password resets.

How to verify that the user has changed table row data before db update

Hi all,
Iam using Oracle ADF with EJBs.
I have a single selection table that displays rows of data returned from a function of my data control.
The columns of my table are editable so that the user can change the data. The user selects a row, changes the data in one or more columns of the row and saves the data by means of a submit button. The code in the submit button, identifies the row of the corresponding iterator that the user clicked on and updates the data in the database (using the 'mergeEntity' function of the EntityManager)
Before saving the data, I want to put some logic to check whether the user has actually changed some data to avoid unnecessary updates in the database . But for this I need a technique to detect that the user has indeed changed some data in the table row.
One technique I have been using so far was to isolate the iterator row of the table and then query the corresponding row in the database table and compare their values.
Except from dummy, this technique is not efficient if the table contains many rows.
Moreover, in my case I have observed that on successive updates on the same row , the query on the database returns the new values (user changed values) and not the actual values contained in the database table. This means that when the user updates an iterator row the cached data affect also the results of the SELECT statement from the actual database table!!! Isn't this strange ?
Can somebody propose me a neat method to detect when the user has changed the the data of an iterator row ?

Hey Alan,
The below solution seems overly complicated to me and can not be implemented without a custom screen and/or the use of JavaScript. Also, if your main concern is that a user may accidentally loose all their data because they closed the browser window or the session times out before they hit the save button then this solution does not help you.
There are a couple of simpler approaches you can take here:
# If the use of JavaScript is permissible you can hook into the windows 'onUnload' event, and pop-up a message box which gives the user the opportunity to cancel closing the window and save their case if they haven't already.
# Implement an autosave feature by hooking into one of events provided by web determinations. A simple (but rather naive) way of doing this would be to hook into the OnRenderScreenEvent and call save on the interview session every time the event fires. This guarantees that all the data the user has submitted will aways automatically be saved, thereby removing the need to make sure the user manually saves their data before closing the browser.
Automatically making Web Determinations close a browser window has to be done using JavaScript. However, doing so means that a) it won't work for people who turn off JavaScript, which is commonly done for accessibility reasons b) you'll likely run afoul of the browser's security mechanism (they generally won't let you close a window that you didn't open and some really don't like you doing that at all).
Thanks,
Kristy

How to Control authorization for users with certain status for level 2 WBS Element

Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib Usman

Hi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement

How to restrict users cannot change their password

Hi all,
If i logon to E-Business Suite home page, click on the preferences icon on the right hand top corner of the home page, i have an option to change my password.
How will i diable or restrict this such that no users can change their passwords after first time creation.
Regards,
Prasad

hi prashant,
i could do this by logging in as sysadmin, personalizing that particular page (preferences) and setting it for only site and org. it is effected for all the users
Thanks for reply
Prasad

ISE 1.2 Guest portal user cannot change their passwords

I have a WLC 5508(version 7.6) and a server installed the ISE (version 1.2.1.198)，Now we configured the CWA，Use guest portal as an employee and guest login url，We can use the manually create internal user and password successfully logged in, and we set up allow guest users to change password in Multi-Portal, but the user can not change the password in the guest portal ,I suspect the change password option on the Guest Portal actually works? Can anyone tell me how to change their own username password in the guest portal ?

Requiring Guests to Change Password
You can allow or require guest users to change their password after their initial account credentials are created by the sponsor. If guest users change their passwords, sponsors cannot provide guests with their login credentials if they are lost. The sponsor must create a new guest account.
You can either allow guests to change their passwords, or you can require that they do it at expiration and at first login. To require internal users using a guest portal to change their password upon their next login, choose Administration > Identity Management > Identities > Users . Select the specific internal user from the Network Access Users list and enable the change password check box.
Before You Begin
Create a Guest portal or modify the DefaultGuestPortal. This setting is specific to each Guest portal.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configuration.
Step 2 Check the Guest portal to update and click Edit .
Step 3 Click the Operations tab.
Step 4 Check either or both options:
Allow guest users to change password
Require guest users to change password at expiration and first login
Step 5 Click Save .

Authorizations for users to change their own data

Similar Messages

Maybe you are looking for