Creating Authorisation for a Transaction
Dear all,
I am developing a 3 screens and a Tcode for these screen.
I have been asked to set authorisation on these screens for certain users.
how should I go about it. I need instructions on creating Profile and setting the profiles to those users.
Please help!!
Regards,
Vj
Hi,
A simple way is to control the authorization for the 3 tcodes by using the S_TCODE authorization object for each user types.
This way only those users who have access to S_TCODE for the transaction can access those transactions.
Cheers
VJ
Similar Messages
-
How to created exit for CS02 transaction to maintain bom details of a mater
hi ,
plz explain how to created exit for CS02 transaction to maintain BOM details of a material. what is the BOM component . give me sample example.Hi,
these are the user-exits for CS02
Transaction Code - CS02 Change Material BOM
Exit Name Description
PCSD0001 Applications development R/3 BOMS
PCSD0002 BOMs: Customer fields in item
PCSD0003 BOMs: Customer fields in header
PCSD0004 BOM comparison
PCSD0005 BOMs: component check for material items
PCSD0006 Mass changes user exit
PCSD0007 Check changes in STKO
PCSD0008 WBS BOM: Customer-specific explosion for creating
PCSD0009 Order/WBS BOM, determine URL page
PCSD0010 Order/WBS BOM, determine explosion date
PCSD0011 Knowledge-based order BOM, parallel update
PCSD0012 Customer - Mat. number/mat. number during material exchange
PCSD0013 Customer-specific processing of an explosion for BOM browser
Regards
Nilesh -
Display Authorisation for ALL transaction ....
Hi Experts,
Our companys wants full authorisation ( sap_all + sap_new ) for Auditors but in Display Mode only.
What I did, I created Z_auditor role and selected all logistic ( Not Tools ) and in authorisation S_TABU_DIS I kept only display.
But in many transaction i seen that there is create, change option available.
Pl. guide us what to do, urgent ?
YusufPlease DO NOT try to create SAP_ALL_DISPLAY.
There are standard roles for auditors which should be a great start for your roles.
Please look at http://service.sap.com/ais , there you'll find lots of information about the Audit Information System.
Auditors are used to this, usually.
Hope that helps,
Frank. -
How to create LSMW for a transaction having scroll bar
Hi all,
I am trying to create an LSMW for MP)! transaction for Uploading AMPL (Approved Manufacturer Parts list data) data.
For this LSMW is not working fine when i need to upload more number of records. Suggest me some way to solve it out,Also provide me some code samples and process if it can be handled with BDC.
Thanks,
Pavan.you can solve it with bdc:
e.g. a table control contains only 10 entries , you've to program the dynpro-change ( in german "Bildwechsel")
with sth like this:
ERG = BUZEI MOD 10 .
IF ERG = 1.
Dynpro darf nur alle 10 Zeilen prozessiert werden -
PERFORM BDC_DYNPRO USING 'SAPMF10B' '0150'. "ins
ENDIF.
add 1 to buzei.
A. -
Using exit/BADI to create settlement for the Transaction COR1
Hi Experts,
My Requirement is when we are creating Process Order in the Transaction COR1, Settlement Rule will be automatically created by using some User Exit or BADI to assign the cost centre, account assignment category, and settlement percentage for the setup to the Settlement Rule.
I have tried with the User Exit: EXIT_SAPLKOBS_001 Enhancement COOM0003 and also tried with EXIT_SAPLCOI1_027 enh. IWO10027.
The Problem is above mentioned User Exit are not triggering though I have activated project.
What is wrong with my exit or please let us know correct User Exit or BADI?
I appreciate every help.
Thank you.
NimaiTry with below Exits related to COR1 transaction.
Exit Name Description
CCOWB001 Customer exit for modifying menu entries
COIB0001 Customer Exit for As-Built Assignment Tool
COZF0001 Change purchase req. for externally processed operation
COZF0002 Change purchase req. for externally procured component
PPCO0001 Application development: PP orders
PPCO0002 Check exit for setting delete mark / deletion indicator
PPCO0003 Check exit for order changes from sales order
PPCO0004 Sort and processing exit: Mass processing orders
PPCO0005 Storage location/backflushing when order is created
PPCO0006 Enhancement to specify defaults for fields in order header
PPCO0007 Exit when saving production order
PPCO0008 Enhancement in the adding and changing of components
PPCO0009 Enhancement in goods movements for prod. process order
PPCO0010 Enhancement in make-to-order production - Unit of measure
PPCO0012 Production Order: Display/Change Order Header Data
PPCO0013 Change priorities of selection crit. for batch determination
PPCO0015 Additional check for document links from BOMs
PPCO0016 Additional check for document links from master data
PPCO0017 Additional check for online processing of document links
PPCO0018 Check for changes to production order header
PPCO0019 Checks for changes to order operations
PPCO0021 Release Control for Automatic Batch Determination
PPCO0022 Determination of Production Memo
PPCO0023 Checks Changes to Order Components
STATTEXT Modification exit for formatting status text lines
Regards,
Saurabh -
Creating webservices for CRM transactions
Hi ,
I have a requirement wherein certain CRM functionalities have to be done from outside the SAP system and as a result need to expose certain functionalities as web services.
For e.g. i have a requirement to
1) view activity details ,
2) update date and time of activities ,
3) status of activities ,
4) create activities etc .
Kindly let me know how to proceed to achieve the same.
Regards,
Madhu.Hi,
If you want to create a web service definition then below are the steps,
1. Create a RFC enabled function module with your functionality
2. Then in menu bar go to Utilities->More Utilities->Create Web Service->From the Function module.
3. This will open a wizard, Just follow the wizard. This will create your web service.
4. You can see the web service in SE80. Enter the package in which the webservice was created. Then select Enterprise Services and select your web service.
5. To test the web service, go to transaction SOAMANAGER
6. In the web interface select Application and Secario communication tab, then select Service Administration
7. In the web service administration page you can search for your web service and test it.
You can refer this Wiki,
http://wiki.sdn.sap.com/wiki/display/CRM/CreatingWebServiceinSAP+CRM
Also, search whether there are any standard web services available for your requirement. Go to tcode SOAMANAGER, follow the steps i have mentioned and in the web service adminstration page enter your search pattern and search.
Regards,
Arun Kumar -
Create of (demo for)OVAI (transaction for create entries for each vendor)
hi all,
can anyone plz tell me how 2 create (demo for)OVAI (transaction for create entries for each vendor)
thans & regards,
srinivas reddy.hiii
yes you can call transaction like that..take tcode in that parameter then you can use it in your program with statement like
call transaction (variable)..in background process.
regards
twinkal -
Restricting Authorisations for different controlling areas
Hi SAP Gurus,
I am facing a problem in restricting authorisations for CO Transactions in different controlling ares. We have a new controlling area started recently. But the CO user in this new controlling area is able to create master data in a differnt controlling area (i.e. the old existing controlling area). we have already maintained the new controlling area as org. unit for the relevant company code.
Giving below an example.
For t.code KAH1 & KAH2, we have maintained authorization object K_CCA for New Cont Area with Cost Center group X (Where X is standard hierarchy). Even after that user is able to make changes in KAH2 for another controlling area. We also tried to put value of profit centers instead of "*". This too is not helping.
Similarly the user is able to create master data in Tr. Codes KO01 / 02, KE51 / 52, KCH2 etc where this user in new controlling area is able to create / change master data from exising old controlling area.
Can anyone help me please ?
Thanks.Dear Prasad,
Create a new Role using T Code PFCG and assign the new controlling area and the other relevant
details and you can assign it to the users.
I think in your case that particular user is assigned many roles where he has got * value and its allowing
to make changes on some other controlling area.
Regards
Mangalraj.S -
Authorisation for Semi Finish Product Only....
Hi Experts,
I want to give authorisation for MM01 transaction and for only material type 'Semi Finish'. How to give only for Semi Finish to create?
For display I want to give full authorisation ?
YAB
Message was edited by:
YUSUF BHORI1. Use transaction MMB1 which is specially designed for creating semi-finished products. However I don't know of this really blocks the road for creating materials of another type.
2. If you really want to authorize on Material Type you need to set an authorization group on the material type. In SPRO: Logistics - General --> Material Master --> Basic Settings --> Material Types --> Define Attributes of Material Types. Select Material Type HALB and type in a ctext of your choice in the Authorization Group field (tip: just use the name of the Material Type: HALB).
Restrict on Authorization object M_MATE_MAR as follows:
M_MATE_MAR
Activity 01, 02
Authorization Group HALB
M_MATE_MAR
Activity 03
Authorization Group 0-HALA, HALC-Z
Good luck!
Points are always appreciated!
Kind regards,
Lodewijk -
Finding Userexit or BADI for vl10batch transaction
Hi All,
We are using the VL10BATCH transation for creation of delivery note which can create one Delivery document for multiple line items.
VL10BATCH transaction which inturn creates variants for VL10 transactions based on material, partner, Salesorder details and batch job will be scheduled once the variant is saved.
I have a requirement to change the VL10BATCH transaction, that it should create 1 Delivery document per 1 line item. Is there any BADI or any userexit available which is called before Delivery document creation, so that I can enhance the userexit or BADI and can restict it to only 1 Delivery for 1 line item.
Any inputs on this will be a valuable help for me.
Thanks and Regards,
Reddem.Hi Reddem!
Try one of them userexits
LV50R_VIEWG01 - LV50R_VIEWG17
Otherwise you can make a lot of settings in VL10 on the User Role tab. E.g. Dlv creation profile, you can find some user-exits with F1-Help and F4-Help on input fields.
br
Kalman -
How to create authorisation object for save button please help in abap
how to create authorisation object for save button please help in abap
Hi
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Regards
ANJI -
How to create authorisation object for report
hi
experts..
hw can u create authorisation object for the custom report.
Thanks& Regards
SpandanaHi,
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Sy-SUBRC values
4 User has no authorization in the SAP System for
such an action. If necessary, change the user
master record.
8 Too many parameters (fields, values). Maximum
allowed is 10.
12 Specified object not maintained in the user
master record.
16 No profile entered in the user master record.
24 The field names of the check call do not match
those of an authorization. Either the
authorization or the call is incorrect.
28 Incorrect structure for user master record.
32 Incorrect structure for user master record.
36 Incorrect structure for user master record.
http://www.sap.ittoolbox.com/groups/technical-functional/sap-basis/please-how-to-create-an-authorization-object-386391 - 78k -
http://www.sap-abaprogram.blogspot.com/2007/11/what-is-use-of-
authorization-checks-to.html - 75k -
www.sapworld.hpg.ig.com.br/download/ab4query.pdf
with thanks,
Abaper. -
How to create messages for Validation in transaction type OB28
Hello All!
I am creating a validation in transaction type ob28. I have created the first point "prerequisite", second point "Check" and in the third point "Message" I want to put the message number 016 but the next error appears "Entry E ZFI 160 does not exist in T100". How can I create this messages number?
Thank you in advance!Hi Leyre,
This message applies to a problem with change requests. When creating a message, it's a workbench request that system has to create. Apparently, when you try to create a message, it tries to catch 'tramp' on existing CR which is assigned to a different client in your system. You should try assigning a new CR for this change; you could ask your BASIS team to help you on this.
Regards,
Eli -
How to create F4 for the standard transaction
Hi all ,
How to create F4 for the standard transaction for a particular field .
ByeSantosh,
You can create F4 values for a field in a standard Transaction .
1. First search for a standard search help meeting your requirement .
2. If you don't find one, create your own custom (z) serach help .
( 1 is preferable )
After that, include that serch help to the standard field in the transaction .
For this u need to go to the screen
( F1->F9-> screen-> Field )
Click on the property of the field and include the search help .
You ll require the access key from the basisi guys as u r changing standard .
Hope it helps,
~ laxmi
Reward for helpful answers -
How to create varient for transaction code
hello expert,
I created one Mod. pool program and transaction code.
while run this tcode, Save button is disable and unable to create varient.
could you please guide me hw to enable this save button and create varient. please
with best regards
srinivasHi,
You can create variants for transaction using transaction variants. That is meant to simplify these kinda scenarios.
The tcode for transaction variants is SHD0. You can create variants as you wish. It is simple only. No coding required. Just take SHD0. Give your transaction name.
Then press create variant.
It will guide you.
Regards,
Renjith Michael.
Maybe you are looking for
-
I already had itunes installed on my pc. I received an update and tried to install it. I got a message This application failed to start because MSVCR80.dll was not found. Reinstalling may fix the problem. I uninstalled itunes and tried to reinstall.
-
Subscription, automatic recharge, Skype Credit, mo...
I have found some answers on these questions, but they were separate. I have a question which includes them all. I have subscribed with 2 accounts to call landlines in Brazil (60minutes per month). Because I have paid for full year, I got 15 minutes
-
What to delete to make space ? apps dont some
up to what itunes say they take if ill leave the "other" alone its arount 1 giga no videos songs pics not even close i do have over 100 apps but most of them are under 50 mb lets asume the apps actualy take 6 or 7 gb so some of them have hidden files
-
To have to recreate courses in html5 just for apple mobile products is not practical.
-
Hi, I am using FW CS3 and I have accumulated too many slices on my page. Is there any way to remove slices? Or maybe if I cannot remove them, is there a way to easily reorganize them?