Authoriztion Objects
Hi Friends,
Here I Have Problem with authorization objects,
We are developing RFC function Modules, in function modules we need to check the some authorizations for that we created some authorization objects as DUMMY,and those are working fine for checking those Authorizations,
These function modules are used in BSP applications for developing Interface, for that BASIS people create some ACDOM ID's for these Authoriztion Objects.
When we trying to run this interface with our SAP ACDOM ID's it is working Fine, when we Trying to access with newly created ID's it was ended with SAP Internal error 500.
with those id's Standard BAPI's Are not returning Result.
Please let me know the your comments on this.
Hi again,
1. Ya, its the responsiblity of basis team.
2. There can be two issues :
a) u said we have used / created
authorisation objects and used
in the FM.
So rights for these objects and their values
is required.
b) second issue can be to
run a RFC enabled FM.
For this, there might be some
sap standard auth objects,
which the basis team might
be able to find out.
regards,
amit m.
Similar Messages
-
Authorization object in SE54...
Can anyone tell me how to use authoriztion object in SE54?
I am using a custom tcode for table maintenance generator for a custom table and I want to put certain checks while maintaining the table.
Can anyone tell me the right way to do it?
Thanks,
AmritaHi ,
you should write a code at EVENT of this table maintainnace generator..
Follow the path :
click on Environment -> Modification -> Events -
Authorization Object for Purchase order Message control
Hi ,
Is there any stadard authoriztion object to control the print and print preview options for Message control .
I am requied to control the print and print preview options for purchase order messages for certain users depeding on there authorizaion.
Thanks in advane.Hi,
When you click on the 'print preview' button on ME22N/ME23N the system
makes an authority check on transaction ME9F activity 04. The current
logic forces the print preview functionality to be accessed ONLY by the
users who print. Therefore, only users that have authorization to use
ME9F are authorized to use the Print Preview button in ME22N/ME23N.
Kindly try the authorization objects M_BEST_EKG, M_BEST_BSA and
M_BEST_EKO = 04.
You can
also have a look the user exit
EXIT_SAPLMEDRUCK_001 in enhancement LMEDR001 for print program
SAPLMEDRUCK.
INCLUDE ZXM01U04
you can create own coding for all possible AUTHORITY-CHECK.
BR
Nadia Orlandi -
Dear Friends / Experts
We have around 10 HR (BW/BO) reports. All are woking fine. Now the users wants to restrict the report based on cost center.
Hence, I have created one DSO with relevent information and extracted the data from ECC ( Used id, Cost Center belonging, Etc....). Created one customer exit variable and lookedup this used cost center data in CMOD. This is perfectly working.
My Doubts
1) This logic no where related with authorization. Do i still need to consider authorization object and handle further ?
2) If the Logged in user not available in the DSO, i am not able to edit the query in BO-Webi .
Can anybody advise ?. Good advise awarded with points.
Regards
Saravanan Raju1) This logic no where related with authorization. Do i still need to consider authorization object and handle further ?
The concept of authorization is only similar, instead of a DSO, you use a Z*COST time-dependent authorization-relavent IObject & start to set the time-intervals for access. I assume the DSO concept, although is a quick fix is not a long term solution, as there needs to be loads, corrections at irregular time intervals & this needs to reflect on the BEx. This holds okay for lesser # of users, but you might never estimate the size, as the business would consider adding more in months to come. As rightly said, you need not have an authoriztion object to handle, but if you make cost center object's customer exit to refer this using a SSO-details (like sy-uname), this will restrict entries & authorization based on this field in your BEx. But still you need to work on the DSO concept & try to migrate towards a authroization-releavant IOBject for good sakes, as there is a possiblity the data is exposed -or- completely not avalialbe even for testing & you need to add the same set of ccenters repeatedly for all users again & again, month-on-month, issues like that.
2) If the Logged in user not available in the DSO, i am not able to edit the query in BO-Webi .
Yes, as stated above, this is the drawbacks in this model. Hope it helps. -
Disable 'Delete' button for posted invoices in GOS Attachment List
Hi,
when i open the attachement list of a generic object i see the attached files. In this dialog i want to disable the "Delete" ( attachment) button for Posted invoices ( In MIR4 tcode -> If the invoice is already posted it should not allow to delete the attachment )
I read oss notes and some ides of copying diverse classes but nothing really helps.
I found two badis
GOS_SRV_REQUEST
GOS_SRV_SELECT
but i dont know where we have to write our code .
I read so many posts related to attachments but all the places described about authoriztion object .
Can you please give some ideas to disable the delete button for posted invoices.Hello,
For GOS there is no SAP Standard authorization concept. The only way to
manage GOS authorizations is implementing it via custom code as
described in SAP Note: 491271.
Please have a look at the SAP notes:
491271 Authorizations for generic object services
701609 Authorizations for services: Final classes
For the use of S_OC_ROLE: this object states if a user is an office
administrator he can create, modify or delete every document, even
those created by other users. If the user is not an office admin, the
user is still able to create his own attachments.
Regarding to the issue, there is an role object S_GUI for upload.
To match your inquiry, pleaes find the user's role and active the
object S_GUI.
Regards,
David -
Hi All ,
I have created a ALV report in that displaying three different reports on three radio buttons.These three reports uses same selection screen except 2-3 fields.
Now our customer wants to create two t-codes for the same report one for first radio button report only and other will have whole report.My query is how I can put a check in the report so that i can check authorization available for that user or not as he will not able to access other two reports.
Please suggest.
Regards,
Sachinyour first program event (LOAD-OF-PROGRAM) or 2nd event ( INITIALIZATION ) are good places to 1:, determine which tranacaction was used (sy-tcode), and 2:; to check the user's authorization and shut down before he even sees a selection screen, if he doesn't have authorization for the transaction code and/or the program.
By the way, you could hide the buttons you don't want the user to see with the AT SELECTION-SCREEN OUTPUT event, which is called before the first appearance of the user screen.... That way, you only need one program for your more-than-one transaction code. And, by utilizing a authoriztion object, and selection-screen output, you could do it all from one program and one transaction code. -
MM and FICO document can not be updated in Production System
Hi Expert,
starting today we cannot posting any FI and MM document
We can SAP system and run any t-code normally but by the timeuser want to post the document. Document numbers (from running number) are created but when we need to display the document, document is not exist.
I have checked the table, but there is no record created for new created document number.
Example:
We conduct posing clearing for FI doc. From FB03 no data exist and from table BKPF no data exist also,
Thanks
Please help.
Rgds,Hi
You should also check if any summarization is active in your system. The path is:
IMG>Financial Accounting>General Ledger Accounting>Business Transactions>Integration.
Here you need to check if summariztion is active for any fileds, like amount , plant, profit center etc for Table BKPF for reference Transactions like MKPF in MM, VBRK in SD.
Also confirm from the Basis Consultant if enought disk space is available for data base. Generally, this kind of error would happen because of the two reasons that I have already listed. Also try searching for a suitable OSS Note. Check also from a system ID with SAP ALL rights. Run SU53 in the Transaction FB03 with the Document Number for which you are getting the error to see if any authoriztion object might be missing. You need to involve your Basis Consultant for this.
Regards
Sanil Bhandari -
Hi all,
in VF01 i have many condition types
ex: ZPAC this condition type is Change mode in VA01
but in VF01 i want Display mode. I think it is possible with the help of user exit.
pls help me in this issue. <REMOVED BY MODERATOR>.
Edited by: Alvaro Tejada Galindo on Jan 1, 2008 10:33 AMHi,
You can do it using the concept of authorizations and roles.
You can create an authoriztion object in transaction SU21 and assign it to role using PFCG.
The BASIS people can help you in these activities.
Regards,
Renjith Michael.
Edited by: Renjith Michael on Jan 2, 2008 2:34 PM -
Spliting Spool Request for Dunning in background.
Hi Experts,
I'm having a requirement to split the spool request for every 1000 pages,as for more then 1000 pages for Dunning executed in background.
the job is automaticaly canceled after 30 mn of execution
=> in F150, status of the printout is "Printout has terminated" .
My requirement is to split the spool request using enhancement in print program.
How can i split the spool request after 1000 pages and again print from 1001 to last.
print program for F150 - SAPF150D2
Thanks in advance.Hi Yusuf,
There is no otherway to delete the spool request except giving the option delete in the authorization object S_SPO_ACT.Make sure that you havenot given the values SP01, SP0R under the authoriztion object S_ADMI_FCD. If you have given both the authorization objects with the above mentioned values than that user will get the authorization to delete the spool requests created by the other users also. So if you want to restrict the user not to delete the spool requests created by the other users make sure , not to give him the values SP01, SP0R under the authoriztion object S_ADMI_FCD.
Regards,
Bharath. -
Spool request not created in background.....
Hi Experts,
I have executed one report in background in sduser but it has not generated a spool request in sp01. There is no authorisation for sm37 to this user.
In abapuser user it is generating a spool request when i checked in sp01 but not in sduser.
What may be the problem ? Is there any authorisation problem ?
Yusuf.Hi Yusuf,
There is no otherway to delete the spool request except giving the option delete in the authorization object S_SPO_ACT.Make sure that you havenot given the values SP01, SP0R under the authoriztion object S_ADMI_FCD. If you have given both the authorization objects with the above mentioned values than that user will get the authorization to delete the spool requests created by the other users also. So if you want to restrict the user not to delete the spool requests created by the other users make sure , not to give him the values SP01, SP0R under the authoriztion object S_ADMI_FCD.
Regards,
Bharath. -
Hello Experts,
Can i control the authorization for display of documents pertaining to a document type using authoriztion object which is created using one of the characteristic?
Thanks.
AtulAtul
You can certainly do it.
Go to PFCG.
And maintain the follwoing settings for the authorization objects mentioned:
For Auth object C_DRAW_DOK : Document Type (Enter your document type) & Activity (53, 54)
For Auth object C_DRAW_TCS : Document Type (Enter your document type) & Activity (03, 53)
It should serve your purpose.
Regards
Amaresh Makal -
Role without Tcode but with customized "Z" Object only
Hi all,
Please help my querry is that with a Single Role as while seeing that role in PFCG in Menu Tab no Tcode is assigned and in the Authoriztion Tab -> change authorization tab just a single(one) Z auth object is maintained with Display actvt and i am not able to understand how this is going how the user are able to access the the Role without TCODE assigned but with just a Z authobject. please tell How this is going and working .
Your help will be greatly appreciated and pleas tell how this Z auth object are created.
Thanks,
Chandresh.>
> You need to provide more infos (from the system) and just asking on site is a good idea (as mentioned by Alex).
>
> Cheers,
> Julius
I agree that asking onsite could give more insight into the Z-Object usage. I can explain the probable reason of having the Z-Object as a stand alone authorization
In a role inheritance scenario, when you have roles with 100+ transactions (role A, B,C, .......) which act as the master roles and the derived roles being A1,A2,A3...... depending on the number of inherited roles you have in the set-up, authorization objects like customer authorization group or vendor authorization group can be a tough task (as these are not called in the organization level values) - in this situation as the authorization groups would have to maintained individually in the inherited roles and can be a time consuming task with the additional risk of passing down the values of the master role every time it is generated and inherited - a better option could be to maintain a non-existent value in the master role , inherit it so the non-existent value is passed down to the inherited roles. To give access on the specific authorization groups , create a role with only the object F_KNA1_BED or F_BKPF_BED as might be the case and maintain organization specific values in these object and assign it to the users who need it
My guess would be that the Z-object the operator mentions is something that is developed to address such an issue -
How to remove Collected objects in BI system?
Hi all,
I am a new user of SAP BI, from the above steps I came to know how to activate remotely the Data sources. My concern is, accidently I have collected the Infoobjects from PHD source system, the system prompted me to check my authoriztion, I chose don't check. I didn't had a clear idea about how this works, the system started creating D versions of selected Infoobjects. I dont want to INSTALL those Infoobjects in BI content. I havn't done INSTALL step.
Can someone guide me on how to remove those selected infoobjects completely from BI content ? Incase if its not possible to remove, if those objects are left as it is... what kind of problem it might cause further?
Thanks
JeethHi
If you ahve not installed these, you can simply remove these collection by draging the objects to the left hand side panel.
Cheers
Chanda -
Error while activating a routine "no object list"
hi
I am getting a error while activating a routine Rv50c601
"There is no object list for INCLUDEs" Please suggest on the error and resoulution
regards
NishantTry running program RV80HGEN.
Regards,
Naiimesh Patel -
Error in VBA reference for Adobe Photoshop CS4 Object Library
Hello,
I'm using Windows 7 Pro, MS Office 2010 Pro and Creative Suite CS4 (with all updates).
I will automate Photoshop via Visual Basic for Applications in MS Access.
Befor using there the Adobe Photoshop CS4 Object Library I must reference it in VBA.
But when I will du this, I get the message "Error loading DLL".
When I will manually reference to the WIASupport.8LI File, I get the error: "Cannot reference this file"
Can you give a tip, how I can solve this problem?
RegardsI have the same problem! I have photoshop cc2014 (which we own) and the object library shows, but not for cs 5.1 (30 day trial).
Does registering unlock something?
Help please!!
Maybe you are looking for
-
How many Apple devices can you use on one computer?
I am using a single PC which I use to connect my IPod classic, my IPad, my IPhone and my very old Ipod (which my partner now uses) to Itunes, so that's 4 devices. In the past, on the same computer I had used another Ipod classic which only lasted for
-
I'm currently running Arch on my Surface Pro, and I'm having an issue with the wifi. I'm using wpa_supplicant with wpa_gui, and whenever I connect using the mwifiex_usb module, it works for a bit (like 3 minutes), then it stops working and I have to
-
My imac is not recognizing any external dvd writer drive. I have imac with Core i7 and Mac OS 10.6.8. I have tried external dvd writers from Samsung and Amazon Essentials but the computer does not recognize any of them. Which Dvd writer is compatible
-
Cost Element Creation against COGM & COGS
Dear Experts, Some person suggest that while creating COGS GL Codes in FS00 cost element should not be assigned. According to him if this is done then COGS will flow to COPA and thus COPA profitability report will be wrong. Can you please tell whethe
-
TS1398 why is my ipad trying to connect to 3g network?
ipad picking up 3g network instead of wi-fi