Collection Authorization

Dear SAP friends,
There is a field "collection authorization" in the Customer and Vendor master data, under the payment transactions.
What is the function of this field?
If we check this, how will it work?
What else to do for this?
Points will be assigned for great help.
Thanks & Regards,
Paul

http://www.copacustomhelp.state.pa.us/infopak/nav/finance/accounts%20receivable/file9/index.htm
Collect. auth.
D
If you have agreed with a customer that they pay you by bank collection and the payment program is to pay with the corresponding payment method, this field must be selected for at least one bank in the customer's master record. This bank will then be authorized to collect payment from this customer.
Also the below link would be useful:
http://help.sap.com/saphelp_47x200/helpdata/en/01/ff5ca65a7911d1a9080000e8a6f09e/frameset.htm
Special Features of Collection Authorization
You execute collection authorization (debit memo) using the payment program of Financial Accounting.
You have to make the following settings to avoid incorrect postings:
· Customer master record of partner management
Maintain the following in the master record of the master tenant with customer account or subsidizer with customer account:
- Bank details
- Indicator for Collection authorization
- Payment method for collection
Pls assign points as way to say thanks
Message was edited by:
Ravi Rana

Similar Messages

Dunning letter (wizzard) and payment options

Hi there,
we have got some trouble with the dunning wizard. e.g. we have got 4 type of different payment options:
- collection authorization
- bank transfer
- reserve invoice, it means payment before delivery by bank transfer
- cash on delivery by the postman
So far so good. of course cash on delivery and reserve invoices should not be dunned. If i start the dunning wizard differs between collection authorizations and cash transfer; the cash transfer invoices are dunned, the authorization collection invoices aren't dunned.
But the reserve invoices and the cash on delivery invoices are dunned, too. Is there a possibility in the payment methods, that these won't be dunned.
Regards

Hi Steffen
Do customers always use a specific payment method? If so, you can block dunning per customer under the accounting tab of BP master for customers that get reserve invoices for example. The other option is to change your dunning terms to start a few days later. Are there terms of less than 15 days from posting date, and in this case are there customers getting reserve invoices that take more than 15 days to pay for example? You can try changing customer terms to a longer period for due date to exclude them from dunning as well.
Let me know what your payment terms are for reserve invoice customers, and the dunning terms you are using.
Kind regards
Peter Juby

Automatic payment program error

Hi,
I have finished Automatic Payment Program ( F110 ) Generally Credit note / Manual TDS Entry not yet adjusted while making Payment in F110. T D S and Credit Note amounts not deducted .Kindly do the needful on urgent basis.
Regards
Vijay

Hi,
I solved that problem and getting below error:
"Customer/vendor does not have suitable bank details for pmnt method C"
Message no. FZ019
Diagnosis
Either no bank details have been entered in the customer/vendor master record or the bank details cannot be used for the payment method entered.
For example, a payment method can require that a collection authorization exists or that the customer's/vendor's bank be in its home country.
System response
The payment method entered is not accepted.
Procedure
If the customer/vendor master record is maintained incompletely, complete the bank details.
But i maintained bank data in master record and assigned payment method to that bank
Rgds
sunfico

Pmnt Methods In Country.

Hello ,
i need ask us some quetions...
First, when i run the transaction F110, ( automatic Payment Transactions) and i am trying to clear some open items .. i found that the master data vendor ( general data - Payments transactions ) have got a Internacional bank .. then i cant use my Pmnt Methods in country cos is just for nacional payment.
Where can i change it ?? The Pop up is that:
Either no bank details have been entered in the customer/vendor master record or the bank details cannot be used for the payment method entered.
For example, a payment method can require that a collection authorization exists or that the customer's/vendor's bank be in its home country.
System Response
The payment method entered is not accepted.
Procedure
If the customer/vendor master record is maintained incompletely, complete the bank details.
Proceed
, but it is cover i saw it, the problem is that it the BANK is internacional no Nacional.
ANy help Please=???

Hi,
You can enable the payment run for international payments by selecting the cust/vendor bank abroad allowed check box in the payment methods at company code level step in FBZP.
Please check this setting. Hope it helps.
Regards
Suresh

Exclude customers from payment run F110

Hello,
I have a question for exclusions in transaction code F110 (Automatic Payment Transactions).
We have 2 different payment methods for Direct Debit (D) and Direct Debit SEPA (F).
When we select payment method D or F, we get a very large log file, for all self paying customers, that do not have a payment method at customer master.The messages in the log file looks like this:
Additional log for customer K09777 company code 1000
Payment method selection additional log
Payment method selection for items due now to the amount of EUR 434,17
None of the pmnt meths "D" has been entered in mast.rec.or in doc.
Because of the size of the log file (we have over 10.000 customers), we added payment method P (Paying Customers) to the customer master data of all self paying customers.
We then exclude payment method P in transaction F110 when processing payment method D and/or F.
That works fine, we don't get a large log file anymore, only the "real" errors are shown.
But now we have a "problem" in FSCM.
The amount to be collected is empty (zero). I think the reason is that we now have payment methods at every customer (I found this in another discussion on SCN).
There are two options: We look for a solution in FSCM to get the amount to be collected again, or we use another exclusion in F110.
We would like to know if there is another possibility in F110 to exclude customers, other then exclude payment method P, so the log file will still show only the real errors.
If someone knows a solution for showing the amount to be collected in FSCm again, that would be fine as well.
These are options I found, but I don't know what is best or how to do this:
1 Collection authorization field, but I cannot find that anywhere. Where should that be stated in master data? Can't find it in Customer master or BP? Neither in Payment terms?
2 Use Badi Amount to be Collected available.
I am not a programmer, but I am afraid that can only be done by a programmer?!
The (default) calculation of SAP is fine, that amount to be collected should be used. Is there some "default" Badi available that I can impement without writing ABAP code?
Thanks in advance.

Hello!
I'm not sure concerning the relationships between APP and FSCM, but I think that there should be some link between FSCM and EBS. Go to transaction OT83 ("Make Global Settings for EBS") and choose tab "Assign External Transaction Types to Posting Rules".
Choose the external transaction relevant to your customers and check the entry in the column "Planning Type, Transaction". I think some of them (e.g. General planning) might be helpful.
Hope this will help.
Best Regards,
The Wirtschaftsmann

APP ... credit Memo

Hi experts,
Is it possible ,credit memo payment in APP.?
what is the configuration required for processing credit memo in APP.
Thanks in advance
chin

Hi Chin,
The credit memo can be offset with any other outstanding invoices (if the vendor has any) so that the net amount can be paid.
If vendor balance is zero and if there is credit memo, money can be pulled from vendor's bank account using direct debit. This direct debit requires withdrawal authorization (Collection Authorization LFBK-XEZER) from the vendor.
The same payment program F110 can be used for direct debit.
Sreeram

What is process for payment run

Hi guru,
Can any one tell what is process for Payment by F110.
Point will reward.
thanks&regars
Durgesh

Hi
COpy the Script F110_PRENUM_CHEK to some ZFORM and attach it in the F110 tcode for the related company code and payment method..
You can do the required modifications to the script as per your requirement.
Generally we use the Preprinted stationary for printing the cheque
in which on the top vendor address and the fi doc line items will be printed.
in the last cheque is printed.
We have to print just few fields on that pre printed cheque like Vendor name, Amount, Date and amount in words etc.
You have take some rought stationary xerox copies and to check by printing the fields whether they are correctly matching to the fields on the cheque exactly or not..have to adjust the positions and map.
see the doc
Run Payment Program (F110)
Purpose
Use this procedure to run the automatic payment program. The payment program is used to create cheques, BACs payments, electronic transfers, etc. for vendors. It is also used to create a direct debit file for customer payments. The payment program runs in three specific steps, which must be run in order.
Create Payment Proposal. This is a listing of proposed payments. The proposal should be reviewed for accuracy and edited or deleted if incorrect. No postings or payments are created at this step.
Create Payments. This step creates posting documents in the system, clearing the customer/vendor subledger accounts and posting the offsetting item to a cash or cash clearing account.
Create Payment Media. This step creates the actual payments, sending cheque forms to the printer or creating files of electronic payments to be sent to the bank.
Trigger
Perform this procedure when you are ready to create vendor payments or to create a direct debit file for customers.
Prerequisites
You must have the following master data prepared:
Banks and bank accounts with associated general ledger accounts;
Appropriate payment methods assigned to your company code;
Customer and vendor master records with the appropriate details completed.
If you wish to create a cheque payment, the vendor/customer master record must contain full address details.
If you wish to create an electronic payment, the vendor/customer master record must contain full bank details.
If you wish to create a direct debit transaction for a customer, the 'Col' (collection authorization) checkbox must be selected. This field is found on the General Data - Payment Transaction Data tab.
Navigation Path
Use the following navigation path to begin this transaction:
Select Processes è Purchase Requisition through to Payment è Payments è Automatic Payments è Run Payment Program to go to the Automatic Payment Transactions: Status screen.
for more information please check out the link below it
might help you
http://www.hostlogic.hu/caghelp/Transactions/Finance/content/f110%20-%20run%20payment%20program/cc/html/index.htm
Regards
ANJI

Outbound BDC's

Hi all,
Can any one let me know wats outbound BDC and the process n procudure associated with it..And if possible can throw some light on F110 transaction..
Thanks.
Jar....

Hi
BDC is always Inbound,
If you are retriving some data from outof SAP and putting it in SAP then it called as Inboud.
If you are retriving data from SAP and thrpughing out of SAP then it is called as Outbound.
so always the BDC is inbound
Go through the following Document
In ABAP context , interfaces are only of two types.
1) INBOUND interfaces
2)OUTBOUND Interfaces.
INBOUND:(from external system data is fetched as flat files which is moved to SAP database tables).
in this process we get data in the form of flat files(.txt or .xlx). we will read this data from the files using FM like UPLOAD/WS_UPLOAD/GUI_UPLOAD into internal
tables. And using BDC methods or LSMW tool, we will update the database tables with this data.
OUTBOUND:(Data from SAP dtabase is retrieved adn stored as flatfiles on presentaion server or application server)
In this process we retrieve data using select statements from the database tables and will populate the internal tables. based on the requirement, we will use FM like DOWNLOAD/WS_DOWNLAOD/GUI_DOWNLOAD to write data from internal tables to flat files on th presentation server.
*the above mentioned Fm will work for files on presentaion server(local file system) . IF u want to handle files on the application server, use DATASET.
Other technologies that u mentioned like RFC, BAPI, EDI,ALE, IDOCS etc might be used as apart of interface code.
Run Payment Program (F110)
Purpose
Use this procedure to run the automatic payment program. The payment program is used to create cheques, BACs payments, electronic transfers, etc. for vendors. It is also used to create a direct debit file for customer payments. The payment program runs in three specific steps, which must be run in order.
Create Payment Proposal. This is a listing of proposed payments. The proposal should be reviewed for accuracy and edited or deleted if incorrect. No postings or payments are created at this step.
Create Payments. This step creates posting documents in the system, clearing the customer/vendor subledger accounts and posting the offsetting item to a cash or cash clearing account.
Create Payment Media. This step creates the actual payments, sending cheque forms to the printer or creating files of electronic payments to be sent to the bank.
Trigger
Perform this procedure when you are ready to create vendor payments or to create a direct debit file for customers.
Prerequisites
You must have the following master data prepared:
Banks and bank accounts with associated general ledger accounts;
Appropriate payment methods assigned to your company code;
Customer and vendor master records with the appropriate details completed.
If you wish to create a cheque payment, the vendor/customer master record must contain full address details.
If you wish to create an electronic payment, the vendor/customer master record must contain full bank details.
If you wish to create a direct debit transaction for a customer, the 'Col' (collection authorization) checkbox must be selected. This field is found on the General Data - Payment Transaction Data tab.
Navigation Path
Use the following navigation path to begin this transaction:
Select Processes è Purchase Requisition through to Payment è Payments è Automatic Payments è Run Payment Program to go to the Automatic Payment Transactions: Status screen.
Helpful Hints
If you are running the payment program in testing, or for the first few times, you should set the 'Additional Log' on. This will create a very detailed log of the proposal creation, and detail exactly why a payment was not possible. To do this, click and select the checkboxes Due date check and Payment method selection in all cases and Line items of the payment documents. Enter the range of customers and vendors you are including in the payment run, and save.
You must always return to the tab in order to run each subsequent step (i.e. proposal, payments, printing).
Field Description Tables
The R/O/C column of each Field Description table indicates whether the field usage is:
R - Required in SAP.
O - Optional in SAP.
C - Conditional in SAP.
Procedure
1. Start the transaction using the navigation path:
SAP Easy Access Main Menu
2. Double click on Run Payment Program to go to the Automatic Payment Transactions: Status screen.
Automatic Payment Transactions: Status
3. Complete the following fields:
Run date
Identification
Automatic Payment Transactions: Parameters
4. As required, complete the following fields:
Posting date
Docs entered up to
Company codes
Pmnt meths
Next p/date
Vendor (from)
To
Customer (from)
To
Rate type for conversion
To maintain your exchange rate for the payment program, refer to the procedure Maintain Exchange Rate.
5. Click to save your payment program parameters.
Reward all helpfull answers
Regards
Pavan

What is the meaning of ISU

Pls give me answer isu full meaning and what work we can do in abap.

SAP IS-U is SAP's Industry Specific Solution for Utilities Industry
SAP ISU
Along with standard SAP R/3, SAP provides solutions that cater to the special demands of a particular Industry and are seamlessly integrated with the components of standard SAP. These are called Industry Specific solutions. Here is a brief overview of SAP's Industry Specific Solution for Utilities Industry called SAP IS-U.
IS-U is integrated with the Service Management (PM-SMA), Customer Service (CS) and Sales and Distribution (SD) application components, enabling you to bill service orders, service contracts, and the sale of goods.
The Contract Accounts Receivable and Payable (FI-CA) component manages the large number of postings from billing and budget billing requests.
IS-U uses the SAP Business Workflow (BC-BMIT-WFM) application component to automate business processes. Common workflows include initial creation of a service connection and the disconnection of devices.
SAP Utilities
· IS-U/CCS
¡ With Basic Functions you manage addresses and regional structures, as well as generating dates and schedules for meter readings, billings, and budget billings.
¡ With Master Data you manage data that remains fixed for long periods of time. In IS-U, this data includes the business partners, contracts and contract accounts, connection objects (buildings and real estate) and the premises, installations, and device locations contained therein.
¡ With Device Management you manage the installations, meter reading, and the certification of all devices for a utility company.
¡ The IS-U Billing component is used for billing the following standard divisions: Electricity, gas, water/waste water, district heating, and multimedia services (for example, cable TV).
¡ The IS-U Invoicing component enables you to group services and invoice them on one bill. You can also use the component to calculate and charge fees and taxes.
¡ In Kundenservice you can use the Customer Interaction Center (CIC) or Front Office to display all data and start frequently used business processes. In Internet-Self-Services your customers can send you new data or changes to their existing data via the Internet. For example, they can grant you collection authorization or register a move-in.
· Energy Data Management (EDM) is a solution that meets the requirements of interval reading, schedule management, and the billing of interval energy consumption. EDM covers the following areas:
¡ Central database for energy data (Energy Data Repository)
¡ Settlement and schedule management using the settlement workbench
¡ Billing of profiles using real-time-pricing billing (RTP billing)
· Work Management combines various SAP components and enhances them to include industry-specific functions for planning, calculating, executing, and billing work orders.
· SAP Waste and Recycling (IS-U-WA) is a comprehensive logistics, billing, service, and customer service system that covers all the business processes required by a waste disposal company.
· Intercompany Data Exchange (IDE) is a solution that covers the requirements that have arisen from the deregulation of energy markets. IDE covers the following areas:
¡ Management of deregulation data
¡ Process execution
¡ Management of data exchange processes
http://www.sapetabap.com/ovidentia/index.php?tg=fileman&idx=get&inl=1&id=4&gr=Y&path=ABAP_TABLES&file=DB_for_ISU.ppt#256,1,Slide 1
Check this link for ISU
http://help.sap.com/saphelp_utilities472/helpdata/en/c6/4dce68eafc11d18a030000e829fbbd/frameset.htm
Reward Points if found helpfull..

Revisit: collection with cacading lov...impacting field w/authorization.

I have a page with a collection EFFORT_C. The collection has an apex_item.select_list_from_LOV_xl called GEARS (c028). When this lov is changed, an application item TAB_GEAR_CODE is set. This works.
Now, I want the field LMA_CODE (apex item c029) (lobster mgmt area) to only appear when TAB_GEAR_CODE is equal to one of several values, I therefore created an authorization for LMA_CODE. In turning on the auth, the application_item TAB_GEAR_CODE is no longer set.
Is there a way to hide/show c029 dependent on c028?
Is it possible to use CASE after the onchange....and if so, could someone help with the syntax. I am uncertain how to set it up so that it works properly.
SELECT apex_item.hidden (18, seq_id) checkbox,
apex_item.select_list_from_lov_xl
(28,
c028,
'GEARS',
'style="width:150px;background-color:#FBEC5D; "'
|| 'onchange="f_set_casc_gear(this,f29_'
|| LPAD (seq_id, 4, '0')
|| ')"',
'YES',
'0',
'- Select Gear -',
'f28_' || LPAD (seq_id, 4, '0'),
NULL,
'NO'
) gear_code,
apex_item.select_list_from_lov (29,
c029,
'LMA_DE',
'style="width:150px"',
'YES',
'0',
'- Select LMA -',
'f29_' || LPAD (seq_id, 4, '0'),
NULL,
'NO') lma_code,
FROM apex_collections
WHERE collection_name = 'EFFORT_C'
my attempt to use CASE failed to work...
SELECT apex_item.hidden (18, seq_id) checkbox,
apex_item.select_list_from_lov_xl
(28,
c028,
'GEARS',
'style="width:150px;background-color:#FBEC5D; "'
'onchange="'
|| CASE
WHEN :p300_authorization2 = 1
THEN 'f_set_casc_gear(this,f29_'
|| LPAD (seq_id, 4, '0')
|| ');'
ELSE NULL
END
|| ')"',
'YES',
'0',
'- Select Gear -',
'f28_' || LPAD (seq_id, 4, '0'),
NULL,
'NO'
) gear_code,
apex_item.select_list_from_lov (29,
c029,
'LMA_DE',
'style="width:150px"',
'YES',
'0',
'- Select LMA -',
'f29_' || LPAD (seq_id, 4, '0'),
NULL,
'NO') lma_code,

Karen,
First of all, if you use authentication you will either show or hide the column in your report
for good. Second, what sense does it make to hide or show a column dependant on one
row in a table. Your requirement is doable I just don't see what the reason could be. Is there
an example accessible?
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://htmldb.oracle.com/pls/otn/f?p=31517:1
-------------------------------------------------------------------

Current Setting in Collection Mgt Authorization should give to User?

Hi All,
In SAP Easy access of collection management current setting three T.codes - UDM_STRATEGY - Strategies , UDM_GROUP - Groups, UDM_GROUP2SGMT - Assign Groups to Segments.
when these T.codes we are using and saving the activities system prompt customization request, should give authorization to user?
Regards
Arun

Hi Arun,
The Tcodes you have mentioned are solely the function of a Collection supervisor and not team members. However, if you still want to give limited access then consider the below points for individual Tcodes -
UDM_GROUP - Out of the 3 mentioned above, you may want to give this T-code to team members only for assigning substitute person in case somebody is absent. You can look at transaction variant (SHD0) to make other screens as display only.
UDM_GROUP2SGMT - This is not required on a daily basis and authorization can be left with the IT team only.
UDM_STRATEGY - This is best handled by the Collection Supervisor or Team Lead of AR and care must be taken that there are no logical misses in the rules.
Regards,
Abhishek Jain

Authorization maintenance - Create Collective Roles

Hello.
Two questions:
1- I would like to know if it's possible to create a collective role based on four other normal roles. Then create a normal role using the option copy role through transaction PFCG, based on the collective role?
2- Is the creation of the collective role trustworthy and a recommended procedure by SAP when the four normal roles are considered complex (having many objects and transactions)?
When creating the collective role will there be object or transaction loss?
Thanks!

Hello Bruno,
Here are the answers:
1- I would like to know if it's possible to create a collective role based on four other normal roles. Then create a normal role using the option copy role through transaction PFCG, based on the collective role?
Yes it is possible to create collective role based on four other normal roles. However you can not create a normal role as a copy of collective role. A collective role can be copied into a collective role. However if I understand correctly then what want is that the authorizations present in 4 normal roles should get merged into one single role. If that is case then do the following.
Create a normal role, Go to change mode and then to menu. If you want to copy role menus of 4 normal roles then please use the option copy role menu from other roles. Even if you don't copy role menu the next step remains the same. Go to authorizations tab. Here goto menu bar: EditInsert AuthorizationsFrom profile. Now supply the profiles of the 4 normal roles one by one. You might find a lot of entires in red since organization level has to be maintained. You need to do that manually. Once done generate the role.
2 Is the creation of the collective role trustworthy and a recommended procedure by SAP when the four normal roles are considered complex (having many objects and transactions)?
When creating the collective role will there be object or transaction loss?
Yes it is trustworthy. No data loss occurs.
Regards.
Ruchit.

Multiple Libraries - Authorization Question - For NON-iTune purchased music

Please help! The questions come at the end.
I have an extensive classical music iTunes library in AAC format that I ripped from CDs I've purchased over the past 20 years. NON of these were purchased from iTunes. (I have another library on my PC with other music, and I have purchased some iTunes songs for that library). I access one or the other by pressing Shift, etc. No problem.
Both my son and I listen to classical music, and I wanted to share this library with him by moving my classical iTunes Library to his computer. (I copied the entire folder structure from my PC to his, nearly 50 GB worth). So he now has 2 libraries on his computer. One (the classical library) and his own iTunes library.
He can access the classical library (hold down shift key, etc.), but gets a message to "AUTHORIZE THE FILE SOURCE" before listening to the music. So my questions:
++ Why does he need to authorize music from non-iTunes source? I'm not trying to illegally give him anything from iTunes. My family owns this classical CD collection.
++ If he does need to authorize the FILE SOURCE, I suppose he would use MY iTUNES account information to do so. Is this correct? Or should he use HIS account information?
++ And if he does use my account info, _will he retain his iTunes account setting for his other iTunes Library_? I.e., He would have a classical music library that's authorized by me (I guess my second computer?), and his regular library with his account information?
This sounds more complicated than it is (maybe it IS more complicated than I think (sic).
Any help greatly appreciated.

I could be wrong, but if that's the exact message he's getting, it sounds more like a file permssions error in Windows rather than the typical iTunes authorization message which brings up an obvious request for an iTunes Store ID and password. I'd suggest he look at the Windows permissions for the folder and it's contents and see if perhaps he doesn't have the correct permissions to access that material.
Hope this helps.

Can't play songs due to old Apple ID / Can't authorize music

I have this really ANNOYING problem where, since I went and got a .mac account and have a new Apple ID, I can't access some songs I bought a couple years ago with my former Apple ID. ITunes keeps asking me to authorize the content, brings up a window with my old ID, I enter the password and it seems to work -- but it doesn't. Every time I try to play the song, it brings the window back up... it's an endless loops and I can't access the songs!
What is the answer, Apple? Can you not correlate older and newer Apple IDs? Why can't I authorize the music with the old ID if I remember the password? Because the account no longer exists? If that's the case, my music is literally being held hostage without any known recourse. Please advise

kidsbesides74 I am with you there man, I know I sound like the usual Mac poster, but yes I have been a Mac head forever and have had every iPod/iTunes since the first, but I am STUCK, I have tried all these suggestions, but I can not get the bulk of my iTunes collection, ( 2000 of over 4000) songs to play because of the same problem, It just says that this Apple ID does not exist even though I can see it right there in the >Get Info for each of these songs. I will have to call Apple directly in the morning, I just hope they don't do that thing where they say that I must be doing something wrong. Is there a limit of two Apple ID's , I now have two Apple ID's here at the house and a third at the office could that be the problem ? if so, how do I get the songs I paid for folded into my other account?

What's the best way to do authorization for my app?

The authorization situation is somewhat complicated for my app.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM.
From what I've seen so far, there are two different options of setting the authorization for the component:
1. Set its Condition
2. Set its Security Authorization Scheme
Here is my understanding for each (from my limited experience with APEX):
1. Set its Condition
+ Can pass in parameters such as :APP_USER, page numebr, P0_ITEM. So I can just create one function that does all the authorization
- Have to combine the SQL query with the component's non-authorization display conditions, if any.
2. Set its Security Authorization Scheme
+ By name, it seems like it should be used for authorization
- Cannot take in parameters relating to the page, such as the page number --> therefore I will need to create many different schemes, for all the different pages.
#2 will end up with a long list of schemes (each with its own SQL queries) for different pages, which doesn't seem as efficient as #1 with far fewer SQL queries and just take in parameters.
Which one should I pick?
Thanks!

953006 wrote:
Thanks fac586 for the detailed response, and also everyone else who replied. You guys are very helpful and respond promptly. And we'd appreciate it if you changed "953006" into a real handle promptly.
Andre mentioned using conditions:
The way I work around this is to have two functions, one which is used at the page level as a normal authorization scheme and one which can be passed variables which is called as a Condition and the name of the item is one of the variables, in effect giving it "self awareness".But fac586 said:
You can't pass "parameters" to authorization schemes. Use application items, APEX collections or application contexts to set current context before the authorization scheme is evaluated, and access these values in the functions.Does this mean, fac586, that we can avoid conditions altogether? No, it means that I prefer to use Authorization Schemes to control access to resources based on user privileges and security, and Conditions to control rendering and processing for functional reasons. Using the approach described above I have found it possible to maintain this separation.
Say if a page has two buttons, Button_A and Button_B. Button_A has a set of requirements for displaying and Button_B has its own set of requirements (some of which are shared with Button_A). So far, the only way that I can see of using pure authorization is to write 2 different authorization schemes, and set the authorization schemes for the two buttons respectively.What's the problem with that? Consider a more concrete example using a standard APEX report/form pattern for customer maintenance. Page 6 contains the report, and page 7 is the maintenance form with P7_CREATE and P7_SAVE buttons. Only users entitled to create new customers should have access to P7_CREATE, and only users able to edit customers access to P7_SAVE. This would be controlled by the CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes respectively. Functionally, conditions are used to show P7_CREATE if the P7_CUSTOMER_ID is null, and P7_SAVE if it's not null. We don't mix non-functional security considerations with functional requirements.
The CREATE_CUSTOMER and EDIT_CUSTOMER authorization schemes are of type PL/SQL Function Returning Boolean. These are implemented using package functions. Exactly how a user has create/edit customer privilege is determined in the package. Determinants that are shared by multiple schemes can be combined at this level. These implementations can be changed as necessary without requiring changes to the application.
The authorization schemes are reusable across pages and components. On page 6, CREATE_CUSTOMER can be used on the "Create New Customer..." button; EDIT_CUSTOMER on the report column containing the "Edit" links.
Each component of the app is authorized based on not only the user, but also the page number, the value of at least one P0_ITEM. So I guess this goes back to my original concern with Authorizations:
[Using purely authorizations] will end up with a long list of schemes (each with its own SQL queries) for different pages [and page items] ....
Re: VPD policies. Note that in the example above there's no need for the authorization schemes to "know" which pages/items are being evaluated. The P7_SAVE button and the page 6 link column are involved with the EDIT_CUSTOMER operation, so that authorization scheme is applied to them.

Collection Authorization

Similar Messages

Maybe you are looking for