Control Workflow Report output using Structural Authorization

Is it possible to control output of Workflow Reports using Structural Authorizatins. E.g. Workflow Admins having access to tcode SWi2_FREQ will be able to see project wide data, but i want to restrict the workflow admins at department level from seeing workflow data for other departments. is that possible using Structural authorizations or any other mechanism?
My understanding is that Structural authorizations pretty much control PA/PD, and not other modules. I did a quick test,
1) Created a org structure
2) Created employees, users, and set up structural authorizations
Now when users are granted authorization to PA20, they are restricted to what they should be seeing, but when they are granted authorization for workflow admin reports, structural authorization don't seem to work, they are able to see data for workflow triggered for other departments as well. Is that the standard behavior or i am missing something. I don't have enough experience with Structural auth.
I will appreciate any guidance on this matter.
Thanks,
Saurabh

Arghadip, please explain how this will prevent someone from Norway from looking at the workflow log of a workflow for an employee belonging to the Danish part of the organisation.
<i>Message was edited by Kjetil Kilhavn:</i>
To explain a bit more in detail: how does this prevent me (Norwegian) from going into SWI1, SWIA or any other transaction, and looking at data from other parts of the organisation. I don't think it will work.
I think the only way to achieve this is to either modify SAP's standard code and include some structural authorisation checks - or take the standard transactions out from every user role and create your own wrappers or program copies which basically does the same as the modification would have to do.

Similar Messages

  • SRM Process Controlled Workflow - Re-start using FM BBP_PD_SC_UPDATE

    Hi All,
    We are upgrading from SRM4.0 to SRM7.0 SP07 in classic scenario. We switched to Process Controlled Workflow.
    We have a CUSTOM application where the requisition items are entered and a Shopping Cart is created in SRM through Function Module BBP_PD_SC_CREATE. When the Shopping Cart is created in SRM , the Process Controlled Worflow is triggered successfully.
    In the custom application , we allow users to do changes to the requisition that are awaiting approval.The changes are updated in SRM Shopping Cart through function module BBP_PD_SC_UPDATE. It is noticed that the workflow process levels are not re-started after the shopping cart is updated through FM BBP_PD_SC_UPDATE.
    However , the process levels are re-started when the change is directly done to the Shopping Cart in SRM POWL. We want the process levels to be re-started even when the changes are done through BBP_PD_SC_UPDATE. The users are used do changes to the requisition through the custom application. We also noticed that system does not go through BAdI /SAPSRM/BD_WF_PROCESS_RESTART when changes are done to the SC through BBP_PD_SC_UPDATE.
    Is there any way that we can trigger process level re-start when SC is changed through FM BBP_PD_SC_UPDATE
    Thanks
    Sukumar

    HI ,
           This is not the correct way of updating the SC. please check the below process...
           first you try to get the SC document in Edit mode and this can be done only SY-UNAME should requester of the SC or( user who are changing the SC should be in the Org structure ).  ( This point why i mentioned is you mentioned that your editing through custom application ). 
      note : use try and endtry and catch the exception when u get the SC document in Edit mode.
      DATA: lo_pdo_sc             TYPE REF TO /sapsrm/cl_pdo_bo_sc_adv.
          "Instance SC PDO Layer
          lo_pdo_sc ?= /sapsrm/cl_pdo_factory_sc_adv=>get_instance( iv_header_guid   = p_guid "ps_shopping_cart-guid
                                                                    iv_mode          = /sapsrm/if_pdo_constants_gen_c=>gc_mode_edit ).
       now you do what ever changes to the document. I mentioned points below.
            "Get Item Details
          lo_pdo_sc->/sapsrm/if_pdo_bo_sc~get_item_detail
    do changes to the items of the SC.
           "Update SC Items
          lo_pdo_sc->/sapsrm/if_pdo_bo_sc~update_items
           "Submit Update
          lo_pdo_sc->/sapsrm/if_pdo_base~submit_update
           "Save SC
          lo_pdo_sc->/sapsrm/if_pdo_base~save    
          or  order  the SC again.
          COMMIT WORK AND WAIT.
    regards,
    Devi

  • Controlling web report output

    Hi, I would like to find out how to control the web report output generated by the server. Any help and ideas would be most welcomed.
    I'm trying to get rid of the extra pair of <html> </html> tags generated by the report server. Below is an example of the html output generated by the server
    <html>
    <head>
    <base href="http://server_name:port/reports/rwservlet/getfile/HW/YX+JyF1XNS6sQmfjO3063/39488071.htm">
    </head>
    </html>
    <html>
    <head>
    </head>
    </html>
    What I want is
    <html>
    <head>
    <base href="http://server_name:port/reports/rwservlet/getfile/HW/YX+JyF1XNS6sQmfjO3063/39488071.htm">
    </head>
    </html>
    Apart from manually removing the tag myself, I can't find any documentation on how to do that. Is that even possible? I also notice that if I try to use paginated html reports builder, it doesn't give me the extra pair of <html> tags.
    Thanks,
    genie

    Hi Genie,
    Currentlty it is not possible. This is something that will be possible in one of the upcoming releases / patches of Oracle Reports.
    However, this extra pair <html> tags will appear ONLY when you send the output directly to the browser, ie, when you use destype=cache in your command. If you send the output to a file, ie, destype=file, there will be no extra <html> tags. When you generate a file from Builder, it is equivalent to destype=file, that is why you do not see these tags in the output file.
    The reason for having these extra <html> tags is: when you send the output to browser, the browser needs a BASE url, ie, a base path where the browser will look for any images etc. This BASE url is not part of the HTML output, but is written by Oracle Reports to tell the browser where the associated images etc are located.
    Navneet.

  • Change order of key figure is not working in Web report output (using WAD)

    Hi,
    We are using BI 7.0, release 701 and level 008. We are facing problem in WAD (web report output). When ever we do 'Select filter' for key figures and 'change the order' of key figures, it does not get reflected in new order. Though drag and drop of key figures is working.
    Though same change order is working fine in Bex Analyser.
    Kindly suggest some inputs.
    Thanks.

    Hi,
    On Which Service Pack are you on?WAD has this feature of re arranging the keyfigures in BI 7.0 for SPS 14...
    Regards,
    Bhagyarekha.

  • Selection Variables display in report output using BEX ANALYSER 7.0

    HI All,
    I am using BEX Analyzer 7.0 , I want to display the Variables  selected in the selection screen, to be printed in the
    Report Output.when i execute the same query in 3.5 , i am getting all hard coded and selected variable values in report  output.
    But in 7.0 analyzer  i am not getting any filter values.can i know the reason for this ? do i need to do any settings ? how to display all filter values in report output.
    Thanks and Regards,
    Joseph

    Hi Joseph,
    I feel there might be personalization of variables.
    After executing the query click on "Change Variable Values" which is on Bex Tool Bar and there click on personaliztion icon and check if any personalizations are there.
    Regards
    Ravi

  • R/3 reports related to structural authorization

    Can anyone advise which standard reports/transcation codes in R/3 relate to structural authorization? are some better than others? I am interested in viewing allowable objects etc,.
    Thank you,
    Meghan

    Hi Jim,
    As you have mentioned you have worked a lot on structural authorizations,
    I would request you to kindly help us on the below mentioned scenerio..
    Issue : (Scenario)
    C directly reports to B, and B Reports to A.
    In the above scenario we have logged as B and did the compensation planning for C. A is the approver for the C’s compensation planning.
    As C is HOD for HR Org unit. He will submit compensation plans of his subordinates to B for approval. That means B has to have approval authorization for C’s subordinates and he should not have approval authorization for his direct reporting employees.
    In our scenario, B is able to perform the compensation planning as well as able to approve the same for his direct reporting employees. This shouldn’t happen in our process.
    How can achieve this, Please advice
    Regards
    Raghav

  • Webi Report Output using dynamic Filter

    Suppose my report output contains doc. number & document date which shows data of one year which filter is applied on global level means at query filters level.
    Now I want to show output of only last 3 months from current date(report run date) on the basis of document date.
    So how to proceed further in such scenario.
    Please reply ASAP.
    Thanks
    Pradip

    You can filter it on the report level or the block level. Highlight either one and then add the filter (make sure the filter window is open).
    Thanks

  • Do not display field in report output using ALV

    Hello friends,
    I have a dilemma here. I sorted my report using a dummy field named asset_dum. now, this is my basis of sub totals but I do not need to show it in the display. Is there a way or an option to do this?

    Hi,
    The problem with NO_OUT is that if the user changes the layout he can see the field and there is nothing in the system that would stop him from displaying the same.
    However TECH field should be useful in your case.
    TECH
    If this field is set, the relevant field is not displayed on the list and cannot be shown interactively. The field is only known in the field catalog. (For example, it must not be specified as a sorting criterion).
    Regards,
    Ravi
    Note : Please close the thread if the issue is resolved and mark all the helpful answers

  • Execute report output using RUN_REPORT_OBJECT built-in  in  Oracle Forms 10

    hello,
    am executing report when am pressing the Button
    in the WHEN-BUTTON-PRESSED Trigger i wrote the below code
    Declare
         v_report_id report_object;
         v_report varchar2(100);
         vjob_id varchar2(100);
         vc_rep_status varchar2(100);
    BEGIN
    v_report_id := FIND_REPORT_OBJECT('new_test_report');
    v_report := RUN_REPORT_OBJECT ( v_report_id );
    vjob_id := substr (v_report,31); -- ( vc_ReportServerJob, length(vc_reportserver)
    +2, length(vc_ReportServerJob) );
    vc_rep_status := REPORT_OBJECT_STATUS (v_report);
    IF vc_rep_status = 'FINISHED' THEN
    WEB.SHOW_DOCUMENT ('/reports/rwservlet/getjobid'|| vjob_id||'?server=rep_mohahubkpcomp_ORaHOme_IAS'||'&userid=bedman/bedman@bedman'||'&paramform=no','_blank');
    ELSE
    message ('Report failed with error message '||vc_rep_status);
    message ('Report failed with error message '||vc_rep_status);
    END IF;
    END;
    the above code is executing the output but it is asking the AUTHENTICATION TO OID(Oracle Internet Directory). If i give this id then only the Output is displaying..
    in WEB.SHOW_DOCUMENT i mentioned that userid is DB id... if it is wrong
    which id i have to specify.
    and The report is located in Reportserver . and it is added to Form. in report node.
    it is an urgent requirement.
    Thanks & Regards
    Gagan.

    Hello,
    Have you created a "reports object" in Forms ?
    (watch under the Reports node in the "Object Navigator".
    Regards

  • How to open Report output in RTF format using concurrent request form.

    Hi
    I have created a report using BI publisher and RTF format. This report is working fine in PDF format. User can submit report using consurrent request form and can see report preview in PDF format.
    Now user wants to submit another request and wants to see report output in RTF format.
    User submitted a request, request successfully completed and generated a output RTF file in unix box but when user wants to see report output using concurrent request form (View Output) then window is showing raw data instead of RTF output.
    Can any body tell me about solutions?
    Thanks
    Ravi

    Hi Ravi
    I did little R&D on it and found following 2 solutions.I am sure that you also find something but for my shake i am putting it here.If you already find the solution then ignore it.
    I) 1st Solution
    1)Change the profiles 'Viewer: Application for Text' and put value as 'Browser'
    2) Change the profiles 'Viewer: Text' and put value as 'Browser'.Either change it system level or concerned user.
    3) Log out from Current session and close all internet explorer application.
    4) Log in again to check the result
    II) 2nd Solution
    1) Navigate to: Sys admin --> Install -> Viewer Options to open the Form "Viewer Options".
    Do the entry as shown below:
    File_Format     Mime Type               Description
    RTF          application/rtf Microsoft Word(.rtf)
    RTF          application/msword          Microsoft Word(.rtf)     
    2) Then ensure that the profile option Viewer: Application for Text is set to BLANK at the Site Level and User Level.
    3) Then ensure that the profile option Viewer: Text is set to 'browser' at the Site Level.
    -- It will pop-up the screen to choose application name from above two values.
    Hope this will work it for you. For me i replicated the scenario and both solutions were working for me.
    With Best Regards
    Darshan Bhavsar

  • Approval preview process controlled workflow

    Hi,
    We are using process controlled workflow (N step) for the shopping cart workflows.
    While sending the reminder mails to the approvers, we would like to include the approval preview in the email.
    In application controlled workflows we could use FM BBP_WFL_DIN_APPR_CONTAINER_GET to get the approval preview details.
    Is there a similar function module to pick the approvers/approval status/step name etc for the process controlled workflows so that we can simulate the approval preview?
    Thanks
    BR
    Swetha

    Use class /SAPSRM/CL_WF_APV_FACADE. This is used by standard SAP WF Analysis.
    Methods - RETRIEVE_PROCESS_HISTORY, GET_CURRENT_PROCESS_STATE, CREATE_PROCESS_FORECAST.
    To analyze more, check the program /SAPSRM/WF_CFG_ANALYSIS_002. Check lines 209...216 (These Lines pull Previous Approved Steps, Current Process Step & Gets the approval forecast). However the REJECTED Items (Accept Decision) work little different (which is not captured by this report).
    To Identify the current approval process awaiting decision by the requester of the cart, use method GET_CURRENT_PROCESS_STATE, return parameter structure /SAPSRM/S_WF_PROCESS-PROCESS_LEVEL_LIST-DECISIONSET_LIST-ITEM_STATUS_LIST gets you the current status of the item (ACCEPTED, REJECTED, OPEN, INQUIRED). If ITEM_STATUS_LIST-ITEM_STATUS EQ 'REJECTED', then the WF is waiting for acceptance/resubmission from the requester.
    To your specific need, pass DOCUMENT_GUID to the class /SAPSRM/CL_WF_APV_FACADE=>GET_CURRENT_PROCESS_STATE get the return parameter /SAPSRM/S_WF_PROCESS. It will give you PROCESS_LEVEL_LIST. Then loop through DECISIONSET_LIST. It contains Table Types of AGENTS_LIST, ITEM_STATUS_LIST, WORKITEM_LIST. At /SAPSRM/S_WF_PROCESS level, you can get all the details of the current process level details
    Thanks,
    SC

  • SRM 4.0 & structural authorizations

    Hi all,
    I have discovered that using structural authorizations (OOSP & OOSB) I can control all match codes and filter users on creating P.O.
    Does anyone have used OOSP & OOSB in SRM ?
    Is this supported ?
    Thanks
    Andrea

    Paula,
    Since SRM 3.0, we can not create private templates and item favorites anymore. Only public templates.
    even if corresponding status still exist in SC search criteria...
    For a RU SRM 5.0 customer upgrading from EBP 3.0, we asked SAP SRM Development to propose a solution to bring back private templates.
    Consulting note 911241 was created for this (not yet translated).
    Rgds
    Christophe

  • Oracle Matrix Report output to XML Publisher

    We have an Oracle matrix report (rdf) registered in our applications and we are trying to format the report output using XML publisher.
    I have taken XML output of the report by changing the Report output to XML in concurrent program definition. Using this XML output we have started designing the RTF template using Template Builder for Word 5.6.2.
    I am not able to get the MAtrix output in XML publisher. I am not sure how to design a Matrix Report using Template builder for word. I am not sure whether the XML output of Original Report has Tags mentioning Matrix report attributes or Not.
    Can anyone help me by explaining how to design a Matrix Report template using XML report output. Appreicate your help.

    I have posted a Blog on our blog site about how to create a matrix report in XML-Publisher
    http://technology.amis.nl/blog/?p=1558
    Perhaps this helps.
    Marcos

  • Error Occured when Applying Structural Authorizations in E-Recruitment

    Dear Experts,
    The E-Recruitment functionalities were working fine when no structural authorizations are applied. However, when structural authorizations are configured for the user on the backend SAP system (I configured structural authorizations for the user to have access to only his own department), the E-Recruitment module does not work.
    When I tried to access requisitions-> maintenace, application management->applications, etc, (i.e. when the E-Recruitment module tries to retrieve data from the backend), the the following error message occurred.
    Error when processing your request
    What has happened?
    The URL http://<hostname>:<port>/sap/bc/bsp/sap/hrrcf_start_int/application.do was not called due to an error.
    Note
    The following error text was processed in the system ABC : <b>RAISE EVENT statement nested to deep.</b> The error occurred on the application server XYZ and in the work process 0 .
    The termination type was: RABAX_STATE
    The ABAP call stack was:
    Method: ON_CHANGE of program CL_HRRCF_INFOTYPE=============CP
    Method: INSERT_RECORD of program CL_HRRCF_INFOTYPE=============CP
    Method: READ_RECORDS of program CL_HRRCF_REQUISITION_INFO=====CP
    Method: GET_RECORDS of program CL_HRRCF_INFOTYPE=============CP
    Method: GET_RECORDS_BY_DATE of program CL_HRRCF_INFOTYPE=============CP
    Method: ON_REQUISITION_UPDATE of program CL_HRRCF_REQUI_BL=============CP
    Method: ON_CHANGE of program CL_HRRCF_INFOTYPE=============CP
    Method: INSERT_RECORD of program CL_HRRCF_INFOTYPE=============CP
    Method: READ_RECORDS of program CL_HRRCF_REQUISITION_INFO=====CP
    Method: GET_RECORDS of program CL_HRRCF_INFOTYPE=============CP
    Please advice if E-Recruitment supports structural authorizations. If it does, are there additional configuration required to enable structural authorization. Kindly enlighten me on how to resolve this error. Any help will be much appreciated.

    Hello Louis,
    I implemented e-recruiting with structural authorizations for a customer and encountered exactly the same error. Anything in the e-recruiting implementation leads to this problem. When you miss some object authorizations the implementation generates an infinite callstack which results in this short dump.
    So be sure you assigned all necessary objects to recruiters and also candidates (NA, NB, NC, ND, NE, NF, BP, CP, P, Q, QK, VA, VB, VC) but this might be difficult esp. with the P object, when you use structural authorizations for other purposes, too. This usually generates problems in manager involvement (e.g. manager can't choose a recruiter to approve his requisition as he has not the structural authorization for the hr department members).
    It is also a bit strange that candidates need for example change rights for the requisition (NB) although they won't actually change it but without it the relation application->requisition, candidacy->requsition cannot be created correctly.
    Last but not least be always sure that you refreshed the authorization buffers after changing structural authorizations. They are usually switched on for better performance.
    Best regards
    Roman Weise
    PS: be aware that using structural authorizations will keep you busy for some time. we needed ~2 months to set up the system in a way that e-recruiting worked as the custoimer wanted without interfering any other productive hr component (admin, org. mgmnt., managers desktop).

  • Support of structural authorizations in IdM?

    I am currently working on an IdM implementation where structural authorizations are handled individually on the various backend systems. Would it be possible to implement a mechanism that would allow IdM to distribute privileges that in the backend system essentiall would translate into entries in the T77UA table? If not, would it be possible to make IdM call a customer RFC in the backend system?
    Best regards,
    Anders

    Hello again, I can see now that it is evident that I am a little confused about structural authorizations in general
    With our version of structural authorizations I meant that we have implemented a BADI to create a customer specific check of structural authorizations. In fact our implementation is not using the authorizations main switch table in HR as the requirement is to use structural authorizations in some areas of HR and not in other areas. When I wrote that we do not use position based security that is of course not true. What I meant to say, was that we do not use indirect role assignment, which I had confused with the position based assignement of structural authorization profiles. Sorry, about that....
    It is probably our customer specific implementation that is causing the problems we are experiencing, so I will look more into that. Thank you for your explanations.
    Best regards,
    Anders

Maybe you are looking for