Can we restrict user not to switch debug on?

Hi All,
Can we authorize a user to execute a transaction, but restrict/prevent him to switch debug ON on the same transaction?
For eg: user A is authorized to run VA01. But, he should not be allowed to issue a command '/H' when in VA01 transaction.
Regards,
Raj

Normally business users will not have debug authorizations on a production system . Restrcition can be controlled by authorization object S_DEVELOP .
OBJTYP -> DEBUG
( from documentation )
DEBUG: Debugging
Special activities are checked here:
Aktivität 03: Display
Aktivität 02: Change field values and (as of release 6.10) function Debugging->Goto statement
Activity 01: Display in system programs and kernel debugging
You need to tell basis to withdraw above authorization from user master of users whom you want to restrict debug.
Cheers.
Sanjay

Similar Messages

How can i restrict user to access database object (procedure) or JSP

Hi
I have 9ias infrastructure 902, on win2k box with 9i DB.
and I have one PL/SQL web application and another J2EE application both are hosted by 9ias 902.
Now we are looking forward to couple both with SSO.
I have deloyed samples of both and works fine.
Each application have different set of users, i mean there is no common user.
How can i restrict user not to view the web page which is not authorised to them.
as far as i understand from the Grocery demo is pick the role (which is a string only) from OID and programaticall apply security via if else endif construct.
can any one through light upto my concern.
regards
[email protected]

Hey Mary
No i haven't try to do that via pl/sql....
as the our application is j2ee app... deployed in oc4j.. with sso and ldap....
still finding to do so....
what i have realized that LDAP is just to store user information in inverted tree... and one have to build separated access security mechnisum that will be applicable to j2ee system....
thanx...
samir....

Restrict User not to enter more than 4 character number in UITextField.

Hi i want to restrict user not to enter number which is 4 character long and not to enter a number after 4 decimal points.
can ne1 help me on this??

funmania wrote:
To show alert view, one must use IBAction, but i am dealing with many text field and 1 button, how can i show alert views for all UITextFields?
create an IBAction called finishedEditingTextField:(id)sender. In that method, check the sender against the text fields. For example,
- (IBAction)finishedEditingTextField:(id)sender {
if (sender == textField1) {
if (textField1.text = @"String 1") {
UIAlertView *alert = [[UIAlertView alloc] initWithTitle:@"String 1" message:@"You typed String 1 into the first text field" delegate:nil cancelButtonTitle:@"Ok" otherButtonTitles:nil];
[alert show];
[alert release];
if (textField1.text = @"String 2") {
UIAlertView *alert = [[UIAlertView alloc] initWithTitle:@"String 2" message:@"You typed String 2 into the first text field" delegate:nil cancelButtonTitle:@"Ok" otherButtonTitles:nil];
[alert show];
[alert release];
if (sender == textField2) {
// Some more code
Hook up this method to each text field's didEndEditing (or something similar), or the button's Touch Up Inside event.
BTW, you don't need an IBAction to show an alert; you just need to alloc/init it, show it, then release it. You can do this "inline," in any part of your code.
Check out my blog—Cups of Cocoa

UCM 9.1 7975 Sets can't restrict user preferences

We have CallManger 9.1 installed and just noticed that we can't restrict the settings on the 7975 sets to only User Preferences - all 7 options are showing
Is there a patch with the 9.1 for the 7975 sets?

Mac OS X now uses the clang compiler, and it is possible the package has not been ported to work with the pickier clang compiler.
If your system has gcc, you could maybe try hacking the Makefile to use gcc instead of cc (or maybe export CC=gcc, again assuming you have an older copy of gcc on your system). You might also try specifying some CFLAGS to disable some compiler checks. It is possible you will need to modify the sources to fix obnoxious coding violations that both clang and gcc will not ignore.
Or you might check if one of the Mac OS X package managers have already ported the package: http://MacPorts.org, http://brew.sh, http://www.finkproject.org

How can i restrict user through material group

Dear Guru's
We have two business process CDMA and GSM
Two purchase organisations, different document types and different material groups
our user is procuring a materials for CDMA using GSM materials codes.
How can i restrict him.if he selects GSM purchase organisation he should procure only for GSM using GSM materials codes.
IS it possible to restrict through material groups
Regards
subhash

Hi Ha Tran,
Thanks for your suggestion.
But the problem is that we have two business CDMA and GSM business.
The enitity and reporting will be in the same company code.
So we came up with two purchasing organisation because the first purchase organisation was already assigned to company code.
and the business want different material groups for difeerent business.
Ex: one material 100000000 DESC : Switching with material group NWTR
the same material with different number 1000000001 Desc: Switching material group : GNWTR
Now the user while creating purchase order for GSM ,he is using CDMA material.
I want to restict the users that if he selects document type and purchasing organisation of GSM. System should allow only GSM materials.
Regards
Subhash

CRM PCUI how can I restrict Users

hi all,
We are having 5 Portal Users for each User I assigned role in Portal called sales representative which is a part of standard CRM 5.0 Business package.
Each user use to create Account, lead and opportunity.
My requirement is, whenever User created account, lead and opportunity, the other Users should not see those details.
So how can I restrict them?
In CRM GUI we have created new role and changed,its working fine, But in CRM-Portal (PCUI) its showing all other users details.
There is any other way without using Access Control Engine (CRM-ACE), I can restrict the User.
regards,
Naresh

Hi Naresh,
While working on one project we had faced same problem for this we had used diffrent approch.
for achiving this u can do below things:
1) Create diffrent iview for each user. (Assign it for each user for PCUI Portal)
2) In each iview in Show Advance Search window u have to make "Belonging To " field Freeeze with Value "Me"
3) Using MAC(CRMC_BLUEPRINT_C) u can achive above steps.
After doing above step u'll come to know that the respective user can only search and access only their Transaction and not others.
Hope it'll help u, let me know if u want further help.
Thanks,
Dipesh.
Edited by: Dipesh Date on Oct 8, 2008 1:21 PM

How can we restrict users from changing the data in HFM.

Hi All,
We have requirement from users where, They don't want the base data being loaded from SAP to HFM via FDM through ERPi to get changed in HFM at <Entity Currency>. They want data to be read only and no body should be able to change neither Grid nor Forms and neither Smart View. If we restrict by Shared services access then again they can't change ownership management value.
Regards,
Sushil

Hi Thanos, Thanks for your reply.
Yes i am aware of the security class, so your suggestion is to use security classes to restrict users? And how can i use the phased submission for the same? I am new to HFM so please bear with me.
I have one more question that my Application is HFM EPMA application. So is it necessary to have Application Administrator to change hierarchy and Deploy the Application from EPMA?
Thanks,
Sushil

How can we restrict users from marking service orders as deleted

Hi,
Please guide me :
Is it possible to restrict users (who are having authorization of marking service orders as deleted) from marking some service orders as deleted, if they have not created these service orders?
In other words, requirement is : only the person creating the Service Order should be authorized to delete.
Please guide.
Thanks and Regards

There are many BADI and EXITS available, you have find the appropriate place to put your code.
USER - EXITS
CNEX0013 Order: Cust. enhancement: Default item category comp. assgmt
CNEX0026 Customer enhancement for general inspection of material
CNEX0027 Customer enhancement: Plant, storage loc. finding for comp.
IWO10004 Maintenance order: Customer check for order completion
IWO10005 Maintenance order: Cust.-specif. determination of profit ctr
IWO10006 Maint. order: Fcode exclusion through cust. enhancement
IWO10007 Maint.order: Customer enhancement - permits in the order
IWO10008 Cust. enhancement: Determination of tax jurisdiction code
IWO10009 PM Order: Customer Check for 'Save' Event
IWO10010 Maint. order: Cust. enhancement for determining WBS element
IWO10011 Maint. order: Customer enhancement for component selection
IWO10015 Maintenance order: F4 Help for user fields on operation
IWO10016 PM Order: Cust. enhancement to check operation user fields
IWO10017 Determine external order number by customer logic
IWO10018 Maintenance order: User fields on order header
IWO10020 Maintenance order: Automatically include task list
IWO10021 Automatic task list transfer when creating order from notif.
IWO10022 Determine calendar from user exit
IWO10023 Service order: Change header data for advance shipment doc.
IWO10024 Service order: Changes to items for advance shipment
IWO10025 PM/SM order: Finding responsible cost center
IWO10029 Inclusion of bill of material in PM/SM order
IWO10030 Preset Fields for Event Object
IWO10031 Hide personnel number in PM/SM order
BADI
Name of a BAdI Definition
ARC_PM_ORDER_CHECK
ARC_PM_ORDER_DELETE
ARC_PM_ORDER_PREPROCESSING
ARC_PM_ORDER_WRITE
ARC_PM_QMEL_CHECK
ARC_PM_QMEL_DELETE
ARC_PM_QMEL_PREPROCESS
ARC_PM_QMEL_WRITE
IWO1_ORDER_BADI
IWO1_PREQ_BADI
IWO1_SCREEN_MODIFY
IWO1_TL_INTEGRATION
IWO1_TL_INTEGRATION2
Edited by: Manish Bisht on Jul 11, 2009 9:27 AM
Edited by: Manish Bisht on Jul 11, 2009 9:28 AM

How can i restrict users for entering manual expenditure batch for inventor

Hi,
Can someone explain me how to restrict users to enter manual pre approve batch for inventory expenditure class in projects??
Regards,

Forms Personalization.
Regards
Dharam

Infopath form Restrict users not to delete the attachments uploaded by others

Hi ,
Could any one please help me on the below requirement ,
In infopath form, can we restrict the users to delete the attachments(multiple) which are uploaded by other users and one shold be able to delete the attachments which are uploaded by him/her self,
Any ideas are highly appricated ,
ANIL

Hello,
This trick will work if you want to do for all users. Somehow you have to store the current user name, who has attached the files then hide show section based on user using conditional formatting.
Your job can be easy if only one person is uploading file in one form. In that case you can use UserName() function to get current user name and based on this name you can add rule on section.
But if multiple people are allow to upload file in same form then you are in trouble.
Hope it could help
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

Can one restrict users with SMTP rules?

I am running Mac OS X 10.9.4 with OS X Server 3.1.2 and Workgroup Manager 10.9. These applications are running on a Mac Mini Server (Late 2012).
Between the Mac Mini Server and the Internet sits a WatchGuard XTM 25 Firewall & Router.
I have been tasked with limiting all user accounts except for a select few with respect to SMTP rights. The rules should be as follows:
All employees have the ability to email another employee.
All employees have the ability to email a single remote address, which receives electronic faxes.
Only 3 employees will have unrestricted rights to mail outside addresses.
Mail accounts must be created and destroyed by the OpenDirectory maintained on the OS X Server, ideally via the OS X Server app.
Is it possible to do this with the equipment and applications listed?
Is it possible with equipment and applications not listed above?
All ideas and suggestions are appreciated.
I have tried looking for SMTP servers that can be installed in conjunction with OS X Server, but not yet found anything that seems viable. I have also attempted to find any information about setting advanced rules for OS X Server Mail, but have mostly found rules regarding incoming mail, and not outgoing mail. The documentation on OS X 10.7 seemed promissing, as it suggested that the version of OS X Server available at that time had firewall settings which might do the trick; however, OS X Server 3.1.2 does not appear to offer firewall settings.

Thank you, MrHoffman!
I have actually been playing with the header filters and other internal postfix settings since I made the post. Sadly, attempts at restricting my own mail usage have all failed, so I do not yet know what I might be doing wrong.
On Mac OS X there are two postfix folders: /etc/postfix and /Library/Server/Mail/Config/postfix. Naturally, it is the second folder which we must focus on, as this folder is the one maintained by OS X Server.
I have backed up main.cf (/Library/Server/Mail/Config/postfix/main.cf), and edited the header_check value to the following:
header_checks = regexp:/Library/Server/Mail/Config/postfix/header_checks
And then added the following to /Library/Server/Mail/Config/postfix/header_checks:
#Added by Jared Clemence
/^From:.*jaredclemence/i REJECT Test successful. Mail is blocked.
/^Subject:.*reject.*\s{1}me\s{1}/i REJECT Test successful. Mail is blocked.
The documentation for HEADER_CHECKS(5) notes that header checks will not check the "From:" field in the "bugs" section. So I added the "Subject" line to at least verify that the filter was taking effect.
After making these changes, I ran:
postmap /Library/Server/Mail/Config/postfix/header_checks
as well as turning off and then back on the Mail Server from the Server app.
So far, none of my tests have produced a successfully rejected message.
Any tips?

Can't Restrict users form accessing folders

I have just installed my Mac osx server and i have created my users and shared my folders but it looks like all the users are able to access my folders even though i set permissions for them.even if i Deny in Acl the user still has access to the folder.i want to give specific users access to certain folders.what am i doing wrong? your help will be greatly appreciated.

If this is a production server, I'd suggest acquiring some IT coverage or an escalation path for issues, or both. As nice as Mac OS X Server is, you're still running a Unix server, and a month and a half of problems is going to be something that the users will take issue with.
Your /Users folder looks somewhat problematic by what's not present there; I'd expect to find (more) users' home directories there, and I'd expect the users' directories to be owned by the specific user and by "staff"
Here's what the home directory for user zork2 looks like in /Users directory, for a configuration with the users's homes in /Users.
drwxr-xr-x+ 12 zork2 staff 408 Aug 31 2009 zork2
0: user:_spotlight inherited allow list,search,fileinherit,directoryinherit
This would be a common case for OD users created under the /Users directory on the server.
The user edem parallels this and looks OK, but (if that's the entire contents of your /Users directory) it looks like the users are created elsewhere.
You'll need to use Workgroup Manager (WGM) to locate that elsewhere, and then go check that area for its protections and ACLs. The commands involved in listing protections over in that path are similar (albeit adjusted for the different directory path), and the outputs should match what was posted for zork2 or edam in the existing /Users directory.
Apparently I was insufficiently clear with the +ls -ale /users/somefolder+ command reference and had intended to look at the settings within one of the problematic user's directory, but it does appear that the first command showed enough to indicate that the users' homes are elsewhere.
I'd also suggest getting an IT escalation path, first and foremost. Another good option (albeit from personal experience with following this path, one that can occasionally lead to frustration and outages) is going to be the school of hard knocks and whatever classes and books you can get your hands on or can attend; the proverbial crash-course in Mac and Unix server IT management. I've not viewed the tutorial videos available at Lynda.com, though various folks posting around the forum do indicate those can be a good resource.

Restrict user not to change the Price (Tx ME58)

Hi,
I have one requirement the User should not able to change the Price at the time of Converting PR to PO (Tx ME58) System should take the price from Pur Info Record and should not be able to create PO with different Price.
Is it Possible?If yes please help me.
Thanks
Prasad

Hi,
I have one requirement the User should not able to change the Price at the time of Converting PR to PO (Tx ME58) System should take the price from Pur Info Record and should not be able to create PO with different Price.
Is it Possible?If yes please help me.
Thanks
Prasad

Restrict user not to modify the lead when status is CLOSED

Hi,
Is it possible to configure the system not to allow any modifications to the lead once the status is set to CLOSED (one of the user status)?
Any input is appreciated.
Regards,
Venu.

Hi,
This is little interesting!
Now Im not able to set the REASON though we havent saved the lead
Initially problem didn't get solved as suggested. i.e., Business Transaction Control -> No Change Allowed (Set Influence to Allowed)
I don't know why?
But i'm able to solve by setting LNCH (No Change Allowed) for status Closed in User Status Profile (last column in the table i.e., Trans).
But now because of these settings as soon as i change the lead status to CLOSED before setting a reason it self system is internally making the lead 'transferred' and hence not saving the REASON.
How to configure the lead in such a way that: When i set the lead status CLOSED, i should be able to set the REASON for the corresponding status and should be able to save now. From next time onwards system should not allow user to edit the lead as the status is CLOSED.
Please suggest whether its possible with configuration. If not then i want to know why SAP reverting back the changes we are doing for lead "after setting status to CLOSED and before clicking on SAVE".
Regards,
Venu.

Restricting User-Defined Layout in CV04N

Hi All
A user having cv04n authorization can change the layout and save as User-Specific Layout. We may be giving various information via CHARS / Values and users add those to layouts and see
Now a User who do not have Authorization to a Document type , say FIN (for Finance) , can get the details in the CHARS and Values of FIN Document Type using cv04n, by modifying the standard layout.
Any Authorization to control user not to change layouts in cv04n...?
I have found one Authorization S_ALV_LAYO which restricts to make Global layout, but it allows to make User Defined layouts..
Any solutions to restrict User not to modify default layout in cv04n?? Or in way can we restrict User not to add CHAR s into search layouts?
Regards
Aby

Hi Aby,
We can restrict the user from viewing the documents based on document type and authorization group. This can be achieved by implementing BADI "DOCUMENT_SEARCH01" and interface "CHANGE_SEARCH_ORDER". Inside this we can do an authority check on each document (DOKAR), using standard authorization object for document type C_DRAW_TCD. And similarly authorization group (BEGRU) can be checked using auth obj C_DRAW_BGR can be checked.
The authority check can be done in following way,
LOOP AT EACH DOC.
    AUTHORITY-CHECK OBJECT 'C_DRAW_TCD'
         ID 'DOKAR' FIELD LV_DOKAR                              " LV_DOKAR is doc no.
         ID 'ACTVT' FIELD '03'.                                           " 03 is display mode
Similarly check for auth grp.
Hope this will help you. If you need any more inputs let me know.

Can we restrict user not to switch debug on?

Similar Messages

Maybe you are looking for