Authorizations to restrict Query Designer with Only Display option

Hello,
I have looked all most all possible ways in internet to find out a suggestion/solution for the below. But Invain.
I would like to know the Transactions, authorization objects and profiles  that are responsible to restrict users not to change and copy queries from QD.
I need only display option for queries.
Also,please confirm shall we restrict the same from Transaction SCC4.
Thanks In Advance.

Hi there,
Since you're talking about a QD system, you should lock it in transaction SCC4.
In case you need to change things in QD without opening the system in SCC4, you can go to transaction rsa1->transport connection and click on Object Changeability. In there you can define what paricular options are "opened for changes" even with SCC4 in close mode.
Also, for roles having that objects, you should use the authorization object S_RS_COMP and S_RS_COMP1 with Activity with value 02 - Display
Diogo.

Similar Messages

  • Authorization in BEx Query Designer: "read only" for definitions of variables

    Hello,
    I`m developing a concept of authorizations for key user who should be able to maintain certain
    objects in the query designer. For other objects they should have access “read only”.
    The users have authorizations  to  design new queries.  They should be able to use existing variables
    (SAP Business Content ( 0*) and customer variables (z*). On this point, I have a problem: in the selection window of the query designer there are only buttons to create, to delete and to edit a variable.
    The user must have authorizations for changing, although he just wants to look for the definition
    of a variable (if he wants to see their basic or global settings before using the variable).
    I can´t find a possibility to switch from “edit” to “read only”.
    The users should only see and apply variables from others (SAP, collegues), but he mustn´t be able to
    change them.
    The user needs the following authorization objects:  S_RS_COMP , activity =02 (change), also
    authorization object S_RS_COMP1. If I give the users only activity 03 (display),
    the user get the message: “display not allowed”.
    Is there any possibility to give a key user the authorization to display all variables with
    their definitions?
    Best regards
    Ricarda Seyb

    Hi raghukan,
    This is may be due to the authorization but still you can check the consistency check for these queries using RSRV.
    Regards,
    Amit

  • Restricting infoobject in query designer with authorization object

    Hi,
    We have to restrict CUSTOMER infoobject with a authorization object in query designer.
    How to do this task ? Request kindly suggest.

    thr RSSECADMIN tcode. Search with this key word you will get good docs & Wikis in SDN
    bhaskar

  • Analysis Authorization based on Hier node with multiple display hierarchies

    Hi guys - I've got a problem where s.o. might have an idea of how to switch on the light at the end of the tunnel, I am currently standing in:
    Requirement:
    Cost Center Authorization should be given through RSECADMIN, reporting should be possible for any hierarchy that exists for the authorization relevant info object.
    Preferred solution:
    The Cost Center Analysis Authorization should be given through RSECADMIN - Hierarchy node assignment.
    u2022     A dedicated Authorization Cost Center Hierarchy will be maintained in ECC6 as an alternative cost center hierarchy and extracted into BW.
    u2022     The RSECADMIN Hierarchy node assignment should be based on a particular node (Type 2).
    u2022     The display level will be specified as required (here: Level 7)
    u2022     The Authorization granted should be independent of hierarchy name and version (validity 3).
    Reporting Scenario and technical impact:
    As mentioned above, when designing and running a query the user should be able to freely select other (i.e. than the authorization) display hierarchies for the authorization relevant reporting object 'Cost Center' as well. The technical names of the semantically relevant hierarchy nodes could therefore vary. E.g. cost centers 1, 2 and 3, being assigned under hierarchy node u2018Au2019 of the RSECADMIN relevant authorization hierarchy, could be subsumed by hierarchy node u2018Bu2019 in another display hierarchy, which the user may want to display in accordance to his reporting needs. Ideally, the alternative display hierarchy should therefore display node u2018Bu2019.
    My findings so far (based on prototyping) turn out that this is not possible as long u2018Bu2019 (and its hierarchy) is not authorized in RSECADMIN. Can these findings be confirmed? And if not, would anyone have an idea of how to facilitate the reporting scenario?
    Would there be any other way to grant access, possibly based on RSECADMIN single values, and also enable the user to flexibly display hierarchies with only those hierarchy nodes whose single cost center values the user has been given access to?
    Thanks everyone for your input...
    Claus
    Edited by: Claus64 on Jul 13, 2009 4:10 AM

    HI CLause,
    On Jul 14 2009, you wrote in SDN and said:
    FYI: Found a solution...
    The hierarchy analysis authorization will be based on a navigational attribute of cost center.
    With analysis authorizations it is possible to declare the Auth object (e.g. 0COSTCENTER__RACCAUT0) as authorization relevant and leave the superior object 0COSTCENTER auth irrelevant.
    The auth will be given for 0COSTCENTER__RACCAUT0. This object will be placed as a filter of the query, being restricted by an Authorization variable for hierarchy nodes.
    Due to the concept of Analysis Authorizations, this variable will automatically pick up the nodes granted as part of RSECADMIN Hierarchy based Authorization.
    As mentioned above, 0COSTCENTER as the regular reporting characteristic remains auth irrelevant and can therefore take any hierarchy thatu2019s available. Reporting on single values will be possible, too. Only those nodes show up that hold the authorized cost centers in accordance to the authorization.
    If the auth relevant 0COSTCENTER__RACCAUT0 is not used in the query definition by either not taking it in as a filter or skipping the Auth variable, the query will launch the message that the authorization is missing. No data show up at all.
    Claus
    See this thread:
    Analysis Authorization based on Hier node with multiple display hierarchies
    I am also in the same situation as you and need to understadn your solution. I understand that you created a Nav Attr on 0COSTCENTER and made this auth relevant whilst ensuring that 0COSTCENTER is NOT auth relevant. This is all fine. The issue was you have multiple hierachies for 0COSTCENTER, how did the new Nav Attr help you solve your issue. When loading 0COSTCENTER what values did you load ino the new Nav Attribute and how did that link to the hierachies? Also, in RSECADMIN you created hiearchy nodes based on the Nav Attribute but I am confused as to what values you have in the Nav Attr.
    I appreciate if you can share your solution from the past in more details.
    many thanks

  • System with only Display Access

    Hi,
    I have the following question, is it possible to configure a system copy with only Display access (at a sap level or Oracle Display mode,
    et cetera) without creating restrictions in an authorization level?
    Kind regards,
    Luis

    Hi Luis,
    I don't think this is possible, what you can do is create a system copy and assign display only authorizations to the users.
    Regards
    Juan
    Please reward with points if helpful

  • Regarding Parameter with NO-DISPLAY option

    Hi,
    I want to create a check box with NO-DISPLAY option how can i declare it.
    Means i need to create a check box with default value 'X' and it should not be displayed in selection screen.
    How can i do it!
    Thanks in advance.
    Thanks,
    Deep.

    SORRY ,i forgot to see the check box..
    please write following code it wil work - 
    parameters: p_cbox as checkbox MODIF ID ABC USER-COMMAND CH DEFAULT 'X'.
    Check sy-ucomm = 'CH'.
    AT SELECTION-SCREEN OUTPUT.
    loop at screen.
    if p_CBOX = 'X'.
       if screen-group1 = 'ABC'.
          SCREEN-ACTIVE = '0'.
          MODIFY SCREEN.
       ENDIF.
    ENDIF.
    endloop.
    **award points****
    amit

  • Smartform with only display

    Dear Team,
    I have Check one of my User ID with T-code  smartforms
    He can Change  Form .Then He can save also & Change request Create .
    I want That In  T-code  of smartforms .he can,t change the any Form.
    Mean Change option only in display mode.
    So how I can Do This one.
    Thanks
    manu

    Hi Manu,
    First, please read the last 4 posts to this thread: Backup Log
    I have been trying to contact you...
    Specifically to your question, from the ST01 trace:
          when others.            "S_DEVELOP without package protection.
            if p_s_develop-devclass =  space.
              authority-check object 'S_DEVELOP'
                 id 'DEVCLASS' dummy
                 id 'OBJTYPE'  field p_s_develop-objtype
                 id 'OBJNAME'  field p_s_develop-objname
                 id 'P_GROUP'  dummy
                 id 'ACTVT'    field p_s_develop-actvt.
            else.                                   "S_DEVELOP with package assignment.
              authority-check object 'S_DEVELOP'
                 id 'DEVCLASS' field p_s_develop-devclass
                 id 'OBJTYPE'  field p_s_develop-objtype
                 id 'OBJNAME'  field p_s_develop-objname
                 id 'P_GROUP'  dummy
                 id 'ACTVT'    field l_develop_actvt.
            endif.
        endcase.                           " P_OBJECT_CLASS
    So, you need to restrict their S_DEVELOP authority to display only activity for object type SSFO, and possibly the name and package as well if you want some but not others.
    Cheers,
    Julius

  • The BI report created by Query designer does not display all columns

    Dear Experts,
    I have created a BI report using the Query Designer.
    When I execute the query, only 6 columns have been displayed.
    The total columns are 12. I need to display all 12 columns at the first instance.
    Could any one help me to resolve this problem?
    Thank you very much!
    Arthur

    Hi Athul,
    Thanks for your reply.
    There is not marked for '.Supress Zero' in the Rows and Columns.
    And I did not check for 'Hide repeated values' in the Display tab.
    Any other place you could suggest to verify?
    Thanks
    Arthur

  • Unable to access Query Designer with RRMX.

    I have intalled Sap GUI 7.0. I am able to run all applications vai Link : START -> ALL PROGRAMES -> BUSINESS EXPLORER -> QUERY DESIGNER.
    But when i try opening query designer from my logon pad with transaction RRMX, the query designer does not work.Kindly guide on the issue.

    You can start the BEx Query Designer using one of the following options:
    ●      Standalone, by choosing Start ® Programs ® Business Explorer ® Query Designer.
    ●      BEx Web Application Designer:
    In the menu bar of the Web Application Designer, you have chosen Extras  ® BEx Query Designer.
    ●      BEx Analyzer:
    You are in an empty cell and have chosen Extras ® Define New Query in the analysis toolbar.
    ●      BEx Report Designer:
    In the menu bar of the Report Designer, you have chosen Extras ® BEx Query Designer.

  • Query Designer with SAPNW7.01ABAPTrial

    Hello
    I am beginner on SAP BI and I want to know how to get or where to download query designer that can work with SAPNW7.01ABAPTrial. Thanks to reply sooner
    Regards

    Hi,
    Pls go to Service Market Place. www.service.sap.com--> Downloads -> SAP support Packages -> My Companys application component -> BI Addons for SaP GUI -> BI 7.0 Addon for SAP GUI 710/BW 3.5 Addon for SAP GUI 7.10.
    Regards
    CSM Reddy

  • ESS SAP ERP 2005 - Changes to Biz cards - no edit opt - only display option

    Hi Gurus,
    I have requirement where the users should not be able to edit their address information of a particular subtype. Like primary address etc. This has to go through the payroll department. What ever. So my requirement is on the Overview screens, the biz card for a particular subtype should not have edit and instead just have the display option. Has any one done this before? Any inputs??
    I tried to investigate but I see that the control to create Biz card goes to ESS/PER DC and from there on i went a bit clueless. My not so good Web dynpro programming skills might have also added to my mis adventure.
    Any help?
    regards
    Sam
    Message was edited by:
            sameer chilama

    Is this thread still open ? If yes , you have to have content administration rights.Go to the iView for addresses , ctrl+right click for each field you want to make ineditable and set it to disabled by clicking on the radio button .

  • Corrupted Query Designer with strange External Restriction

    Dear Experts,
    I have a dilemma with query, when I run the query in RSRT and debug it with OLAP, in the restriction side it appears to restrict the query with two Attributes which are not even used in my query not also their master-data.
    I have created the same query again but still it gave the same behavior.
    Please help me to remove this dilemma.
    Regards,
    Mohammed

    close all applications re-use RSRT
    hope it works

  • SELECT Query design with JOINS

    Dear Users,
    In one of our requirements, we have a SELECT query which joins a few tables together and selects a few fields from each table.
    Example: Fields 1,2 and 3 from Table 1
             Fields 4 and 5 from Table 2.
    These fields are later displayed in the form of an ALV. However, the end user wants more fields on the output, let's say field 6 from Table 2. Due to this requirement, I have to amend the SELECT query to add field 6 of Table 2.
    The above example is simple since it only involves 2 tables. However, in reality, we have a SELECT query with INNER JOINS on more than 6 tables and we don't want to change the code when someone asks for an additional field from one of these tables. Is there any way by which I can design my SELECT query (Using field symbols or dynamic selections etc) such that I don't have to amend the SELECT query and instead I should be able to maintain the field required by the user and it's source table name in a Z-Table and the SELECT automatically picks it up ? Thanks!
    Vijay

    better you can create a view on your 6 or more tables and select the fields .
    Use Select *  from <view name> every time in a select statement.
    If you need a additional column then just change the view , there is no need to change of your select query.
    with regards
    Edited by: Avenai on Jun 28, 2010 2:09 PM

  • Transaction similar to VKM1 with only display access

    Hi,
    I would like to ask, do you know the transaction which would be similar to VKM1 (Blocked SD documents), but its user would be granted with display mode only?
    I tried to check the rest of the transactions from VKM* group but it seems there are none such reports.
    This kind of transaction shall be used by our Logistics to check which current orders are blocked and what is the reason behind it (lack of credit
    limit/overdue items on customer account) – but they mustn’t be authorized to release anything.
    Regards,
    Kiran

    Just wanted to add to Siva's response that user access is regulated not just using the transaction codes but the authorization objects within those transactions. Just like in this case, the same transaction may be used for the change and display purposes.
    There is authorization trace available in ST01 transaction that can be used to see what objects are checked when running a transaction. There might be other tools as well (I'm not a Security expert), but this one worked well for me so far.

  • Settings in Query Designer that will display eact and every record

    Hi,
    First Name and Last Name are the (navigational) Attributes of an Employee_ID
    I a query user may use either Employee ID or Employee First Name or Employee Last Name
    Issue:
    If user uses Emp_ID it is displaying 100 Employees
    If the user Uses Employee First Name then it is displaying 93 Employees it is not displaying 7 employees because 7 of them got the same First Name
    Simillarly for Last Name as well
    How can i make a setting that will display every individual  record of an employee
    Thanks

    Hi,
    The reason why i am using First & last Name is as the users want First & Last name of an employee in drilldown and need to sork on either according to their requirment........
    I am not load any text data for Emp _ID
    the name based selection will not have uniqueness, only possible way is use the processing type as customer exit to chk all the records from the master data table and to display
    Could you please explain me in detail on Customer Exit option
    Thanks

Maybe you are looking for