BW 3.5 which authorization objects available rssm (checks for infoprovider)

Hi all,
How does SAP generates the list of authorization objects in RSSM when you enter a specific infoprovider (checks for infoprovider)? Are only the authorization object related to this infoprovider listed?
Is there any documentation about the purpose in RSSM for the button 'update check status (Authorization objects, infoprovider).
thanks for your help.

Based on which criteria?
Is there somwhere detailed documentation available about the RSSM part in BW authorizations? It seems hard to find any...
Thanks,

Similar Messages

BEX 3.5 , enter to role, which authorization object?

Hi all,
I want to give user an authorization in BW 3.5 in BEX to enter a query into role, but i can not find authorization object that is used for this.
Regards,

Hi,
For Publish query in to role you must have authorization of perticular role.
Go to query designer -> open query -> Query -> Publish-> To Role.
Here you select the role and save it.
try this.
Regards,
Ganesh

Authorization Object to Control access for ContactData in Dispute Managmt

Hello Experts,
Do you know which Authorization Object is necessary to use to be able to control Contact Data available in Dispute Management? Any hint will be much appreciated.
I want to have greyed out the contact data fields (contact person, e-mail, phone and fax number) in change mode.
Thanks in advance.
Best Regards,
Vanessa.

Hi Ravi,
Thank you very much for your reply, but I have done this already.
Transaction is UDM_DISPUTE but they are so many authorization objects available and none of them seems to be related to contact data. Please kindly check within transaction the part of the screen that I am talking about.
Also check the list of objects in SU24 to Transaction UDM_DISPUTE. Do you know which one is related to 'contact data' part of the screen?
I need to know which authorization object valid to Transaction UDM_DISPUTE is the one related to contact data. Any other idea?
Thanks in advance.
Best Regards,
Vanessa Barth.

CVS extension no longer available via "Check for Updates" ?

Hi,
It seems that CVS (or any other Versioning support tools) SQLDev extension are no longer available via "Check for Updates".
I've just downloaded 2.1.1.64 and tried to setup whatever extensions we used to use and they simply do not appear in the list.
Can this extension be downloaded as a bundle and installed from local file? Where from?
Oracle SQL Developer 2.1.1.64
Version 2.1.1.64
Build MAIN-64.45
IDE Version: 11.1.1.2.36.55.30
Product Version: 11.1.1.64.45
Java(TM) Platform 1.6.0_11
Oracle IDE 2.1.1.64.45
Versioning Support 2.1.1.64.45
Cheers
Arek
Edited by: Arek on Oct 12, 2010 7:11 PM

Thank you, Sue. Much appreciated.
FYI. I've just downloaded SQLDev 3EA release and I'm still facing the same problem.
Default Update Centers available are:
1) Oracle SQL Developer ( http://www.htmldb.oracle.com/pls/otn/f?p=raptor:updates )
2) Oracle Extensions ( http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/162031.xml )
3) Third Party SQL Developer Extensions ( http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/162031.xml )
When I mark the first two all I get at the next screen is two entries:
Oracle Product Extensions for SQL Developer (Hide) (- which is simply a header I suppose)
Oracle Rdb Extension 7.3 (Details)
The CVS extension jars can be copied from previous SQLDev installations (download used to work a couple of releases back), but it should be still available for download via "Check for Updates" or bundled with the product itself.
Regards
Arek
Edited by: Arek on Oct 15, 2010 2:05 PM

Authorization Object - Availability Check in Sales Order

Hi,
Restriction is required for availability check (i.e. button 'check item availability') in sales order for a given user.
Is there authorization object to control the same ?
Regards,
RS

Hello RS,
Availability check is controller by FM AVAILABILITY_CHECK_CONTROLLER and there is no authority check in it. As per previous reply you can add additional checks in user exit EXIT_SAPLATPC_001 which is called before an atp is run.
Thanks
Amber

Which authorization object we have to use for direct cube request ?

Hello,
In Analyser, when we would like to request directly to Cubes, whe have 'No authorisation' message.
Do you know wich authorisation objet we have to use for that ?
Thanks in advance for you help.
Best regards
Nicolas Trinquand

Hi Nocolas,
Authorizations are two levels one is object level means if you want to access cubes, infoareas etc.
second is data level, for this you need to create datalevel auth objects at RSSM.
If you want to give authorization to queries relating to cube
Use S_RS_COMP and give which cube you want.
If you want to give authorizations to cube use
S_RS_ICUBE .
IF you have anyauthorization object ( Customized) data level select the infoprovider on which you want to activate this object at RSSM.then give permissions in your role.
Check link
http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/content.htm
Hope it is clear now.
Assign points if you felt it is useful.
Regards,
Vijay.
Message was edited by:
Vijay G

Cannot modify an authorization object in pfcg role for a business role

Hi Experts,
I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow. Am I doing anything wrong?
Please help me.
Thanks
Ajith C

Hi Leon,
Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in the code. The pfcg configuration, I am skipping it for now. I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
Thanks,
Ajith

Which BUs Object should I use for archiving and linking to SalesDocuments

Hi,
I want to archive documents and link them to SalesDocuments, but I don't know which BUsiness Object I should use. Special Ones like BUS2030, BUS2031,... or the general Type VBAK. If I use VBAK I have the problem, that when I archive manually all with VBAK linked documenttypes are proposed, so that I can't control, which documents are allowed to be linked with for instance CustomerQuotation or SalesOrder.

Hello Marc,
For Sales Order user object type as BUS2032
Customer Quotation- BUS2031
Customer Inquiry - BUS2030
BUS2033          Customer complaint order
BUS2034          Customer Contract
BUS2035          Customer scheduling agreement
BUS2051          Customer outline agreement
BUS2094          Credit memo request
Hope this will answer your question.
-Thanks,
Ajay

PFCG authorization objects vs SU53 checks

Hi all,
I was thinking I have understood for a long time authorization checks. But no.
So Here's my question.
When I ahd a transaction in PFCG menu, PFCG gets the authorization objects to maintain automatically (from SU24 checks). OK.
When testing the role in ECC : : error. SU53 qays that authorization objects are missing. How the tests are working regarding SU53 and PFCG ?
i.e tcode_de = MDBT in PFCG, PFCG gets M_MTDI_ORG object to maintain => OK
When testing my role, SU53 says that other objects is missing, i.e S_ADMI_FCD. I don't understand because this object is checked with 'NO' in ECC.
Thx.
Laurent

Hi
> When testing the role in ECC : : error. SU53 qays that authorization objects are missing. How the tests are working regarding SU53 and PFCG ?
The auth checks performed are dependent on lots of things: system config, functional config, master data setup, use of the transaction.
The config in SU24 can't cater for all of those options so SAP gives us the ability to make them more accurate for our particular situations.
> i.e tcode_de = MDBT in PFCG, PFCG gets M_MTDI_ORG object to maintain => OK
>
> When testing my role, SU53 says that other objects is missing, i.e S_ADMI_FCD. I don't understand because this object is checked with 'NO' in ECC.
You can't deactivate a check on an S_ or P_ auth object. These auths are fundamental methods of protecting the SAP application (S_) and personal data (P_)
As David says, the SU53 only shows the last auth failure and there is often lots of spurious stuff reported that isn't required to allow the transaction to process. In this respect ST01 is more useful as it (usually) shows you all the auth checks being evaluated so you can more easily focus on the important ones.

Which info object should be used for Financial statement line (BPS and BCS)

Hi experts.
A rather easy and straightfoward questions for someone out there.
In BPS as we know, we use the info object '0SEM_POSIT' (account groups, or financial statement line) to summamrize and store amounts from groups of accounts or for example data from COPA's value fields, and which is already an attribute of the info object '0ACCOUNT'.
I am told that there is another BCS related info object called '0CS_ITEM' that serves the same purpose, and uses it for the same reason for the purpose of consolidations.
We'd obviously like to use just the one of these info objects because of planning and reporting.
Can someone out there with knowledge in BCS recommend which one to use, and from their experience in the past how they combined the use of both (if you in fact did use both).
Also, is it true that in BCS you cannot use a two characteristic BW hierarchy for consolidations, and it can only consolidate a one characteristic BW hierarchy?
Thanks dearly

Hi Eugene,
I kind of understood what you said, but just incase, let me explain my situation a little clearer. In BPS I'm using 0SEM_POSIT for two reasons:
1) To create hierarchy based on 0SEM_POSIT info object, and making each node postable. This is because on this project we don't plan at account level. Only at a kind of account group/financial statement line level. So each node is postable so that they roll up to the higher levels.
2) I will have 0SEM_POSIT as an attribute of 0ACCOUNT (which is standard delivered as an attribute in BW). This will ensure that I derive the actuals at that the same level as the planned. This is required for two reasons:
                           a) I can have the actuals as comaprison column in the Planning
                               layout.
                           b) I can report on the Actuals vs. Plan at the postable node
                               level in BW queries.
So having explained this, what I understood from your explanation is:
a) I can continue to 0SEM_POSIT as my info object for my postable node hierarchy, and
b) I can also use 0CS_ITEM as a consolidation unit specifically for BCS only.
So what I really didn't understand is:
1) your explanation of the mapping of 0SEM_POSIT to 0CS_ITEM, and what this mapping actually does. For example does 0CS_ITEM derive the values from 0SEM_POSIT because of this mapping? Can you explain this a bit? Is Datastream a tool in BCS by which BCS readinf financial data from other components?
2) Can BCS use a 2 characteristic postable nodes hierarchy as a consolidation unit? For example, if I create ONE hierarchy using 0SEM_POSIT, and 0ACCOUNT. Both will be postable at any level of the hirarchy.
Can BCS consolidate using this 2 characteristic hierarchy structure? OR, must it use 0CS_ITEM info object?
3) How does both 0SEM-POSIT, and 0CS_ITEM co-exist together, in terms of planning, consolidation, and reporting. For example if I report using the 0CS_ITEM hierarchy, then I will not be able to read plan data, because plan data is posted on the 0SEM_POSIT? and vice versa......? This question kind of ties in with 1).
Sorry for the long message, but I wanted to make sure I explained it better.
Thanks for your help

HT2311 I try to update as the pop up suggests : 11.1 is available ; but, check for updates results in none available. What's up?

currently have iTunes 11.0.5 and it won't update, but it says 11.1 is available - it's "STUCK" Mac OS X ( 10.7.5 ) Lion

Try iTunes 11.1.

Authorization object required for materail and vendor.

Hi All,
I have Z report where material and vendor are there on the selection screen.I need to put authorization check on materail and vendor. Can u plz suggest which authorization object I should use for this?
thnks
MSi

On the other hand, assuming your program will run in a properly maintained SAP installation, I would always use standard authorisation objects as much as possible. Try finding a standard SAP report with similar selections and output and see how it is done there. Trace the execution via ST01 and see which objects are being checked.
Also use the repository infosystem to browse the available standard objects. Talk to a functional and/or security expert to clarify your requirement regarding necessary authorization checks.
Thomas

Transporting authorization object (RSSM)

Hi,
I am having problem transporting my BW Custom authorization object over to the Quality system.
I have successfully transported the table contents RSSTOBJDIR to the Quality system. However, when I search for the authorization object in RSSM in Quality after the transport , it complained saying u201Cobject is not available. Create?u201D
How can I transport the authorization object?
Thanks for your time.
Regards,
Raja

Yes you can transport an authorization object.
It should give you an option to create a TR which creation of the auth obj in RSSM. If you have not done that then try to make a small change and see if it requests you to create a TR. If still you are not able to do it, then try adding the objec of typr R3TR - SUSO and give your authorization object name in SE03.
Regards,
Gaurav

Use of RSSM to create authorization objects

I have a few questions on the way of using authorization objects via RSSM.
First, i would like to know if there is a limit in the number of values used as a filter in the authorisation object.
First, what is the quantity limit of values that we can use as filter? CC00000010, CC00000011, CC00000012, ..., n. In this case what would be the value of n. In our fonctionnal need, ranges of values would not be an option.
My second question is in relation with the use of an authorization object composed of two characteristics. Is there a way to build a case in witch the authorization check return a positive answer to a logical OR between the two characteristics?
Example 2, lets say that you want to perform an authority check on the cost center OR on the profit centre. Is there a way to build the authorization object to make sure that there is no error messages when the user has the authorization for the cost center CC00000010 OR the profit center PF00000011.
Best regards,
Stéphane Beaudoin

why would you use Pages when there are templates in iweb
as for the URL question, that is determined by the host, not iweb which just writes the page. but I would not use tinyurl since it has become a favorite of phishers and other web nasties. it might be worth getting a domain name if you can find a good deal.
i would search for some realtor sites to see the kinds of information they are giving and how they are laying it out. and make sure that all photos look really really good. nothing is more off putting on a house ad than crappy photos

How to assign authorization objects to a cube

Hello,
My cube includes 0profit_ctr which is marked as authorization relevant. Still in RSSM my cube is not included in the list of infocubes for an authorization object (zprofit) linked to 0profit_ctr. I'm therefore not able to enable that authorization object for my cube. I have a few ODSs which are included in the list. Why is my cube missing? Is there something I must do to include it, or is it a bug?
When checking the infocube for authorization objects in RSSM this list is empty as well. I don't see any option to add authorization objects in that list.
I have read the following document:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b849e690-0201-0010-9b88-c00cca40736f
I'm using BW 3.5.
Regards,
Christoffer

Hi Christoffer,
In RSSM you will find a button "Update Check Status ( Authorization Objects, Info providers) ". After this update you should find your cube in the list.
Jaya

BW 3.5 which authorization objects available rssm (checks for infoprovider)

Similar Messages

Maybe you are looking for