Authoriztion Objects

Hi Friends,
Here I Have Problem with authorization objects,
We are developing RFC function Modules, in function  modules we need to check the some authorizations for that we created some authorization objects as DUMMY,and those are working fine for checking those Authorizations,
These function modules are used in BSP applications for developing Interface, for that BASIS people create some ACDOM ID's for these Authoriztion Objects.
When we trying to run this interface with our SAP ACDOM ID's it is working Fine, when we Trying to access with newly created ID's it was ended with SAP Internal error 500.
with those id's Standard BAPI's Are not returning Result.
Please let me know the your comments on this.

Hi again,
1. Ya, its the responsiblity of basis team.
2. There can be two issues :
   a) u said we have used / created
      authorisation objects and used
      in the FM.
   So rights for these objects and their values
   is required.
  b) second issue can be to
    run a RFC enabled FM.
  For this, there might be some
   sap standard auth objects,
   which the basis team might
  be able to find out.
regards,
amit m.

Similar Messages

  • Authorization object in SE54...

    Can anyone tell me how to use authoriztion object in SE54?
    I am using a custom tcode for table maintenance generator for a custom table and I want to put certain checks while maintaining the table.
    Can anyone tell me the right way to do it?
    Thanks,
    Amrita

    Hi ,
      you should write a code at EVENT of this table maintainnace generator..
    Follow the path :
    click on Environment -> Modification -> Events

  • Authorization Object for Purchase order Message control

    Hi ,
    Is there any stadard authoriztion object to control the print and print preview options for Message control .
    I am requied to control the print and print preview options for purchase order messages for certain users depeding on there authorizaion.
    Thanks in advane.

    Hi,
    When you click on the 'print preview' button on ME22N/ME23N the system
    makes an authority check on transaction ME9F activity 04. The current
    logic forces the print preview functionality to be accessed ONLY by the
    users who print. Therefore, only users that have authorization to use
    ME9F are authorized to use the Print Preview button in ME22N/ME23N.
    Kindly try the authorization objects M_BEST_EKG, M_BEST_BSA and
    M_BEST_EKO = 04.
    You can
    also have a look the  user exit
    EXIT_SAPLMEDRUCK_001 in enhancement LMEDR001 for print program
    SAPLMEDRUCK.
    INCLUDE ZXM01U04
    you can create own coding for all possible AUTHORITY-CHECK.
    BR
    Nadia Orlandi

  • Cost Center Authorization

    Dear Friends / Experts
    We have around 10 HR (BW/BO) reports. All are woking fine. Now the users wants to restrict the report based on cost center.
    Hence, I have created one DSO with relevent information and extracted the data from ECC ( Used id, Cost Center belonging, Etc....).  Created one customer exit variable and lookedup this used cost center data in CMOD. This is perfectly working.
    My Doubts
    1) This logic no where related with authorization. Do i still need to consider authorization object and handle further ?
    2) If the Logged in user not available in the DSO, i am not able to edit the query in BO-Webi .
    Can anybody advise ?. Good advise awarded with points.
    Regards
    Saravanan Raju

    1) This logic no where related with authorization. Do i still need to consider authorization object and handle further ?
    The concept of authorization is only similar, instead of a DSO, you use a Z*COST time-dependent authorization-relavent IObject & start to set the time-intervals for access. I assume the DSO concept, although is a quick fix is not a long term solution, as there needs to be loads, corrections at irregular time intervals & this needs to reflect on the BEx. This holds okay for lesser # of users, but you might never estimate the size, as the business would consider adding more in months to come. As rightly said, you need not have an authoriztion object to handle, but if you make cost center object's customer exit to refer this using a SSO-details (like sy-uname), this will restrict entries & authorization based on this field in your BEx. But still you need to work on the DSO concept & try to migrate towards a authroization-releavant IOBject for good sakes, as there is a possiblity the data is exposed -or- completely not avalialbe even for testing & you need to add the same set of ccenters repeatedly for all users again & again, month-on-month, issues like that.
    2) If the Logged in user not available in the DSO, i am not able to edit the query in BO-Webi .
    Yes, as stated above, this is the drawbacks in this model. Hope it helps.

  • Disable 'Delete' button for posted invoices  in GOS Attachment List

    Hi,
    when i open the attachement list of a generic object i see the attached files. In this dialog i want to disable the   "Delete" ( attachment)  button  for Posted invoices ( In MIR4 tcode -> If the invoice is already posted it should not allow to delete the attachment )
    I read oss notes and some ides of copying diverse classes but nothing really helps.
    I found two badis
    GOS_SRV_REQUEST
    GOS_SRV_SELECT
    but i dont know where we have to write our code .
    I read so many posts related to attachments but all the places described about authoriztion object .
    Can you please give some ideas to disable the delete button for posted invoices.

    Hello,
    For GOS there is no SAP Standard authorization concept. The only way to
    manage GOS authorizations is implementing it via custom code as
    described in SAP Note: 491271.
    Please have a look at the SAP notes:
    491271 Authorizations for generic object services
    701609 Authorizations for services: Final classes
    For the use of S_OC_ROLE: this object states if a user is an office
    administrator he can create, modify or delete every document, even
    those created by other users. If the user is not an office admin, the
    user is still able to create his own attachments.
    Regarding to the issue, there is an role object S_GUI for upload.
    To match your inquiry, pleaes find the user's role and active the
    object S_GUI.
    Regards,
    David

  • Authority check in the report

    Hi All ,
    I have created a ALV report in that displaying three different reports on three radio buttons.These three reports uses same selection screen except 2-3 fields.
    Now our customer wants to create two t-codes for the same report one for  first radio  button report only and other  will have whole report.My query is how I can put a check in the report so that i can check authorization available for that user or not as he will not able to access other two reports.
    Please suggest.
    Regards,
    Sachin

    your first program event (LOAD-OF-PROGRAM) or 2nd event ( INITIALIZATION ) are good places to 1:, determine which tranacaction was used (sy-tcode), and 2:; to check the user's authorization and shut down before he even sees a selection screen, if he doesn't have authorization for the transaction code and/or the program.
    By the way, you could hide the buttons you don't want the user to see with the AT SELECTION-SCREEN OUTPUT event, which is called before the first appearance of the user screen....  That way, you only need one program for your more-than-one transaction code.  And, by utilizing a authoriztion object, and selection-screen output, you could do it all from one program and one transaction code.

  • MM and FICO document can not be updated in Production System

    Hi Expert,
    starting today we cannot posting any FI and MM document
    We can SAP system and run any t-code normally but by the timeuser want to post the document. Document numbers (from running number) are created but when we need to display the document, document is not exist.
    I have checked the table, but there is no record created for new created document number.
    Example:
    We conduct posing clearing for FI doc. From FB03 no data exist and from table BKPF no data exist also,
    Thanks
    Please help.
    Rgds,

    Hi
    You should  also check if any summarization is active in your system. The path is:
    IMG>Financial Accounting>General Ledger Accounting>Business Transactions>Integration.
    Here you need to check if summariztion is active for any fileds, like amount , plant, profit center etc for Table BKPF for reference Transactions like MKPF in MM, VBRK in SD.
    Also confirm from the Basis Consultant if enought disk space is available for data base. Generally, this kind of error would happen because of the two reasons that I have already listed. Also try searching for a suitable OSS Note. Check also from a system ID with SAP ALL rights. Run SU53 in the Transaction FB03 with the Document Number for which you are getting the error to see if any authoriztion object might  be missing. You need to involve your Basis Consultant for this.
    Regards
    Sanil Bhandari

  • SD issue

    Hi all,
    in VF01 i have many condition types
    ex: ZPAC this condition type is Change mode in VA01
         but in VF01 i want Display mode. I think it is possible with the help  of  user exit.
    pls help me in this issue. <REMOVED BY MODERATOR>.
    Edited by: Alvaro Tejada Galindo on Jan 1, 2008 10:33 AM

    Hi,
    You can do it using the concept of authorizations and roles.
    You can create an authoriztion object in transaction SU21 and assign it to role using PFCG.
    The BASIS people can help you in these activities.
    Regards,
    Renjith Michael.
    Edited by: Renjith Michael on Jan 2, 2008 2:34 PM

  • Spliting Spool Request for Dunning in background.

    Hi Experts,
    I'm having a requirement to split the spool request for every 1000 pages,as for more then 1000 pages for Dunning executed in background.
    the job is automaticaly canceled after 30 mn of execution
    => in F150, status of the printout is "Printout has terminated" .
    My requirement is to split the spool request using enhancement in print program.
    How can i split the spool request after 1000 pages and again print from 1001 to last.
    print program for F150 - SAPF150D2
    Thanks in advance.

    Hi Yusuf,
    There is no otherway to delete the spool request except giving the option delete in the authorization object S_SPO_ACT.Make sure that you havenot given the values SP01, SP0R under the authoriztion object S_ADMI_FCD. If you have given both  the authorization objects with the above mentioned values than that user will get the authorization to delete the spool requests created by the other users also. So if you want to restrict the user not to delete the spool requests created by the other users make sure , not to give him the values SP01, SP0R under the authoriztion object S_ADMI_FCD.
    Regards,
    Bharath.

  • Spool request not created in background.....

    Hi Experts,
    I have executed one report in background in sduser but it has not generated a spool request in sp01. There is no authorisation for sm37 to this user.
    In abapuser user it is generating a spool request when i checked in sp01 but not in sduser.
    What may be the problem ? Is there any authorisation problem ?
    Yusuf.

    Hi Yusuf,
    There is no otherway to delete the spool request except giving the option delete in the authorization object S_SPO_ACT.Make sure that you havenot given the values SP01, SP0R under the authoriztion object S_ADMI_FCD. If you have given both  the authorization objects with the above mentioned values than that user will get the authorization to delete the spool requests created by the other users also. So if you want to restrict the user not to delete the spool requests created by the other users make sure , not to give him the values SP01, SP0R under the authoriztion object S_ADMI_FCD.
    Regards,
    Bharath.

  • EasyDMS - Authorization

    Hello Experts,
    Can i control the authorization for display of documents pertaining to a document type using authoriztion object which is created using one of the characteristic?
    Thanks.
    Atul

    Atul
    You can certainly do it.
    Go to PFCG.
    And maintain the follwoing settings for the authorization objects mentioned:
    For Auth object C_DRAW_DOK : Document Type (Enter your document type) & Activity (53, 54)
    For Auth object C_DRAW_TCS : Document Type (Enter your document type) & Activity (03, 53)
    It should serve your purpose.
    Regards
    Amaresh Makal

  • Role without Tcode but with customized "Z" Object only

    Hi all,
    Please help my querry is that with a Single Role as while seeing that role in PFCG in Menu Tab no Tcode is assigned and in the Authoriztion Tab -> change authorization tab just a single(one) Z auth object is maintained with Display actvt and i am not able to understand how this is going how the user are able to access the the Role without TCODE assigned but with just a Z authobject. please tell How this is going and working .
    Your help will be greatly appreciated and pleas tell how this Z auth object are created.
    Thanks,
    Chandresh.

    >
    > You need to provide more infos (from the system) and just asking on site is a good idea (as mentioned by Alex).
    >
    > Cheers,
    > Julius
    I agree that asking onsite could give more insight into the Z-Object usage. I can explain the probable reason of having the Z-Object as a stand alone authorization
    In a role inheritance scenario, when you have roles with 100+ transactions (role A, B,C, .......) which act as the master roles and the derived roles being A1,A2,A3...... depending on the number of inherited roles you have in the set-up, authorization objects like customer authorization group or vendor authorization group can be a tough task (as these are not called in the organization level values) - in this situation as the authorization groups would have to maintained individually in the inherited roles and can be a time consuming task with the additional risk of passing down the values of the master role every time it is generated and inherited - a better option could be to maintain a non-existent value in the master role , inherit it so the non-existent value is passed down to the inherited roles. To give access on the specific authorization groups , create a role with only the object F_KNA1_BED or F_BKPF_BED as might be the case and maintain organization specific values in these object and assign it to the users who need it
    My guess would be that the Z-object the operator mentions is something that is developed to address such an issue

  • How to remove Collected objects in BI system?

    Hi all,
    I am a new user of SAP BI, from the above steps I came to know how to activate remotely the Data sources. My concern is, accidently I have collected the Infoobjects from PHD source system, the system prompted me to check my authoriztion, I chose don't check. I didn't had a clear idea about how this works, the system started creating D versions of selected Infoobjects. I dont want to INSTALL those Infoobjects in BI content. I havn't done INSTALL step.
    Can someone guide me on how to remove those selected infoobjects completely from BI content ? Incase if its not possible to remove, if those objects are left as it is... what kind of problem it might cause further?
    Thanks
    Jeeth

    Hi
    If you ahve not installed these, you can simply remove these collection by draging the objects to the left hand side panel.
    Cheers
    Chanda

  • Error while activating a routine  "no object list"

    hi
    I am getting a error while activating a routine Rv50c601
    "There is no object list for INCLUDEs"  Please suggest on the error and resoulution
    regards
    Nishant

    Try running program RV80HGEN.
    Regards,
    Naiimesh Patel

  • Error in VBA reference for Adobe Photoshop CS4 Object Library

    Hello,
    I'm using Windows 7 Pro, MS Office 2010 Pro and Creative Suite CS4 (with all updates).
    I will automate Photoshop via Visual Basic for Applications in MS Access.
    Befor using there the Adobe Photoshop CS4 Object Library I must reference it in VBA.
    But when I will du this, I get the message "Error loading DLL".
    When I will manually reference to the WIASupport.8LI File, I get the error: "Cannot reference this file"
    Can you give a tip, how I can solve this problem?
    Regards

    I have the same problem!  I have photoshop cc2014 (which we own) and the object library shows, but not for cs 5.1 (30 day trial).
    Does registering unlock something?
    Help please!!

Maybe you are looking for