Disable Business Workplace at user level

We need to block the ability to create email messages for particular users.  We have disabled the objects S-OC_ROLE, S_OC_TCD, S_OC_FOLDER, S_OC_SEND, and S-OC_DOC.  But the users are still able to send an email thru the services for object thru ME23N.

change the overall GOS authority checking. depending on your release that could be a modification. check on note 491271.

Similar Messages

  • Send spool to SAP Business workplace by a job

    Hi All,
    I have scheduled one job in sap for a report. I have to send the spool created to a SAP Business workplace's user.
    I have made it by the botton 'Spool list recipient' in SM36. The job is running successfully and spool list is sending successfully too, the problem is that the user doesn't receive the complete list.
    Nevertheless, if I access to spool order (SP01) and I try sending the list by menu: Spool request >Forward>Send using SAPoffice, the spool list is sending completly!!!!
    Does anybody has any idea about this?
    Thanks in advance

    Hi.
    I'll try it.
    Thanks.

  • I want to add user in business workflow  like user which is already present

    hello  experts how can i add user in business workflow like other user which is already present there. i want to take other user which is already present as reference for the new user.

    Hi,
    see my problem is user ABC doesn't get any messages in his
    Business workplace.
    User XYZ is having messages in his business
    worplace.
    SO I WANT user abc should get messages same as xyz.
    If you know the workitem id then you can use the FM SAP_WAPI_FORWARD_WORKITEM to send the workitem multiple  user.
    In Fm SAP_WAPI_FORWARD_WORKITEM you need to pass the workitem id in field WORKITEM_ID and all the user id in the table USER_IDS.
    If you need to know the responsible agents of a particular workitem then you have can use FM SAP_WAPI_GET_WI_AGENTS where you need to pass the workitem number.
    Thanks and regards,
    SNJY

  • Disabling external sharing in OneDrive for Business for selected users

    Hello,
    I have a requirement to disable external sharing option in OneDrive for Business for a few user and allow external sharing for a selected users. Is this possible?
    What I know is, we can enable or disable external sharing for all the users who use OneDrive for business by configuring Sharing option for My site collection at "xxx-my.sharepoint.com". But I want to know is if it is possible to handle this at
    user level by doing changes to "xxx-my.sharepoint.com/personal/user_domain.com" site collection.
    Thanks,
    Lakshmi

    Thanks Vasil for your reply. Yes, as you mentioned, removing edit option or admin access is not the right solution for my requirement. I just want to know why My site collection is tightly coupled with personal site collections. Many users will use OneDrive
    to store data and share it with others internally and externally. So, as a security measure there should be some option to enable this only for a specific users. Hoping someone will give me idea to achieve this.

  • Disabling or Removing Forward icon(option) from business workplace

    Hai All,
    My user is asking to remove or disable the forward icon from business workplace. Is there any config setting to do this. Please let me know how to solve this problem,
    Thanks & Regards,
    H.K.Hayath Basha.

    Hi,
    I don't know if the icon will disapear, but what you could try is that you change the autorisations for the user. Check object s_wf_wi and remove the activity 25.
    As fas as i know, the user can't forward an item.
    Also check object s_oc_role, make sure that the value isn't administrator.
    I hope it helps,
    Kind regards,
    Maarten.

  • How to send a message to a users Business Workplace? (which FM)

    Hi guys!
    How can i send a message to a users Business Workplace inbox?
    Can you help me out with a FM or where i find information to this topic.
    thanks!

    See https://www.sdn.sap.com/irj/sdn/wiki?path=/display/snippets/sendingEmailsandSAPMail
    In the receiverlist you can set the type of user (external mail, internal mail by SAP userid is B i believe)
    regards,
    Hans

  • Disable the Advanced tab at user level while scheduling concurrent requests

    How can I disable the Advanced option at user level while scheduling concurrent requests ?
    In the Schedule Form you have:
    Run the Job...
    - AS soon as Possible
    - Once
    - Periodically
    - On Specific Days
    - Advanced
    Thank you.
    Edited by: user635184 on Jan 27, 2012 1:49 AM

    Hi,
    The steps are the same except that you need to do the personalization at the responsibility level (ie Condition Tab> Context>Level should be set to 'Responsibility')
    You have to apply the personalization for all responsibilities(except Sys Admin) individually.
    See the following Metalink notes for information on Form Personalization:
    279034.1: Information About the Oracle Applications Form Personalization Feature in 11i
    744069.1: Sample Testcase For Using Form Personalization In Oracle Applications
    1266606.1: OM: Sample Codes For Form Personalization In Order Management
    Regards,
    Sujoy

  • Disable profile option updation at user level

    I want to disable the profile option HR: Security Profile or for that matter any other profile option at user level. The user should be able to see the value set by the system administrator (Field should be grayed out) and user should not be able to update it.
    How to do it??

    Try a personalization combined with custom PLSQL, like this:
    1) Acces System Profiles
    2) Help->Diagnostics->Custom Code->Personalize
    3) In the newly displayed Form Personalization form, create a line with a description like this: Prevent modification of USER_VISIBLE_VALUE
    4) In the Conditions tab, set Trigger Event = WHEN-NEW-ITEM-INSTANCE
    5) Set Trigger Object = PROFILE_VALUES.USER_VISIBLE_VALUE
    6) In the Condition text area, enter:
    apps.xxror_test_sysprofile(:PROFILE_VALUES.USER_PROFILE_OPTION_NAME,'USER')=1
    7) Set Processing Mode to Both
    8) Switch to the Actions tab and create two actions:
    first:
    type = property
    description = Don't update
    Language=all
    enabled=yes
    object type=Item
    target object=PROFILE_VALUES.USER_VISIBLE_VALUE
    property name=UPDATE_ALLOWED
    value=false
    second:
    type=property
    description=Don't enter
    language=all
    enabled=yes
    object type=Item
    target object=PROFILE_VALUES.USER_VISIBLE_VALUE
    property name=ALTERABLE_PLUS
    value=false
    9) Repeat steps 3-8 if desired for other levels, such as:
    Prevent modification of SITE_VISIBLE_VALUE
    Prevent modification of APPL_VISIBLE_VALUE
    Prevent modification of RESP_VISIBLE_VALUE
    Prevent modification of SERVER_VISIBLE_VALUE
    Prevent modification of ORG_VISIBLE_VALUE
    paying attention to update the corresponding names for xxx_VISIBLE_VALUE.
    10) Create the following PLSQL function:
    CREATE OR REPLACE function xxror_test_sysprofile (
    prof_opt_name in varchar2,
    lvl in varchar2
    return number
    is
    v_ret number;
    s_prof varchar2(1024);
    s_uname varchar2(100);
    s_lvl varchar2(10);
    begin
    -- returns 0 if the user "uname" must be granted access the profile named "prof_opt_name" at the "lvl" level
    -- returns 1 if the user "uname" must be forbidden to access such a profile at such a level.
    -- important assumption: the "lvl" parameter may have only one of the following values:'SITE', 'APPL', 'RESP', 'USER', 'SERVER', 'ORG'
    -- or else this function will return 1, thus forbidding the access
    s_uname:=substr(upper(trim(nvl(fnd_profile.value('USERNAME'),''))),1,100);
    if s_uname in ('MY_ADMIN_1','MY_ADMIN_2','SYSADMIN') then
    v_ret:=0; -- no restrictions
    else
         if s_uname in ('MY_POWERUSER_1','MY_POWERUSER_2') then
         -- restrict to only the below mentioned profiles
         s_prof:=substr(upper(trim(nvl(prof_opt_name,''))),1,1024);
              s_lvl:=substr(upper(trim(nvl(lvl,''))),1,10);
              if
              (s_prof like '%WHATEVER%')
              then
                   if s_lvl in ('SITE', 'APPL', 'RESP', 'USER', 'SERVER', 'ORG') then
                        v_ret:=0; -- level acceptable for these users on these profiles
                   else
                        v_ret:=1; -- unknown level, so reject
                   end if;
              else
                   -- these users may not access these profiles, so reject
                   v_ret:=1;
              end if;
         else
              if s_lvl = 'SITE' then
              -- no way any other user than those above may modify site-level profiles
              v_ret:=1;
              else
                   -- any other user than those above may modify lower-level profiles, but
                   -- for now reject all
                   v_ret:=1;
              end if;
         end if;
    end if;
    return v_ret;
    end;
    Pls be aware that testing first on a test instance is always advisable.

  • Merge business workplaces of 2 users

    Hi all!
    I would like to merge two business workplaces.
    For those who care, some users are using two different logins, which is against the security rules of the company.
    Unfortunately, some of those users are using the business workplace of there two logins.
    I have managed to merge many things from the two logins into a unique one, but i am not able to give these users the content of theire business workplace (i.e. Inbox, Outbox and Personal Folder) of the two accounts into a single one.
    Any clue about how to handle this?
    Thanks a lot!
    Yann
    Edited by: Yann Portrait on Dec 8, 2010 2:58 PM

    Hi Yann,
    You can define a substitution.
    Regards,
    Ronit.

  • Business Workplace mail

    I have a Workflow that sends a mail to an employee in some cases.  The employee can see it at SAP Business Workplace, but he has to check it periodically to know if there are or aren't a new message for him.
    Are there any way to tell him he has a message with a pop up a message or something like this?
    I know on TX SO16 there is the parameter "No notification of unviewed mails at logon" wich is usefull, but only for logon.  If the user is on the system and doesn't logout for whole day he will not know he has a new message until tomorrow, unless he check it explicitly.
    Thanks!

    Hi,
    Have you thought about the option to send a mail to the outlook of the user? As Glauco mentioned you can either send the mail to the outlook user by sending the mail through the send mail step of the workflow or make use of the report RSWUWFML2 to send the workitem itself to outlook and he can execute it from there.
    Hope this helps,
    Sudhi

  • No Reply Function in ESS Business Workplace for SAP Mail

    Hi ESS Experts,
    We sent a short message using ESS Business Workplace. The receiver of the message was able to read the message but is not able to reply to it. We need to make sure this is not just a settings issue since replying to short message is allowed in R/3 Business Workplace. Is this expected behavior? Is there a way to enable a reply for ESS Business Workplace?
    Thanks in advance for your help.
    -Vlad

    hi vlad,
    please check the following user role is there are not SAP_BC_SRV_GBT_USER. and also further doucumentation please refer this [link|http://help.sap.com/saphelp_47x200/helpdata/en/1e/31a40415b711d4a39200a0c943858e/content.htm]
    letme know how much i understood u rproblem
    ravindra

  • This is regarding CBMA in SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the mails to Business workplace inbox in ECC.

    This is regarding CBMA in single stack SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the alert mails to Business workplace inbox in ECC.
    So I need to set up PI to redirect mails to ECC Business workplace user inbox (sbwp). From here rules are set up & routed per distribution list.
    Please guide me how I can achieve this requirement.

    Hi,
    yes, it is a little bit different. This is the issue.....  
    But I am not sure if your links will help:
    1) /people/william.li/blog/2008/02/13/sap-pi-71-mapping-enhancements-series-using-graphical-variable
    is about a different solution. I do not need to count the number of lines of the source message.
    And the second variable is about concat line by line from unbound node to unbound node.
    My issue is:
    Souce:
    Message line (0...unbound) ! ! ! ! ! ! ! !
    .    ResultLine   (1..1)
    Mapping:
    =>   ResultLine1
           ResultLine2
           ResultLine........          => into UDF to an element  (1..1) in one mapping operation.
    So that all "ResultLine"s are included.
    The result is explained in the given link for Mail attachment with UDF.
    So I am not sure how to use this thread for my issue.
    In the comments of that blog Christoph Gerber writes that the new variable feature can only handle single values.
    So it is not suitable for my purposes as I have a list of values here that needs to be moved into the target message field.
    2) http://wiki.sdn.sap.com/wiki/display/Java/UsingEditJavaSectioninMessageMapping
    shows where to find the button "Java section" which is not available here in 7.1
    3) /people/sap.user72/blog/2005/10/01/xi-new-features-in-sp14
    too is about the nice little button for Java Section that is no longer existing on PI 7.1 screen for mappings.  
    So my issue is: How to replace the Java section function with global variables in PI 7.1?
    Best regards
    Dirk

  • Issue in User Level Simulation in GRC 10.0

    Hello Every one,
    Before i Jump into the question, please find below the screen shot which tells about the B.P(Business process),Functions created in test system(GRC 10.0), where as the roles and corresponding users which have been created in back end system connecting to GRC 10.0.
    Now when i am trying to run a risk analysis on user TEST_RISK(TEST_ROLE_RISK role is assigned and pfa the authorizations in the role), i will be shown the Risk R001.
    Now i am trying to run user Level Simulation on the above user TEST_RISK and i am trying to simulate by adding a new role TEST_ROLE_RISK3 as shown in the below screenshot at Action level,Permission Level,Critical Action level ,Critical permission level.
    Even though i select the option, Risk from Simulation only, when i try to execute at action level , it is also showing me the risk which coming from the actual role assigned but not from the simulating one.
    Thanks and Regards,
    Naga.

    Hi Naga,
    there are some notes which might help to fix the problem. Especially the first might fix your problem.
    http://service.sap.com/sap/support/notes/1895502
    http://service.sap.com/sap/support/notes/1953347
    Please let us know if it helped.
    Regards,
    Alessandro

  • Copy of notifications (mails) not received in business workplace

    Hi,
    The users stopped receiving a copy of the notifications in their business workplaces sent via mail step in a workflow.
    The WF is using the SAP username to send the mails in the mail step of the workflow (we are not using the e-mail address, just the user name so the e-mail is obtained from SU01D).
    Do you know if there is any custimization particular of the user or in general where you can set up if a copy of the e-mail can be received in the business workplace as unread document?
    Thanks!

    Sorry, I was a bit confused that you said "The users stopped receiving a copy of the notifications". So did they receive them before? Did they get both 1) email and 2) notification in business workplace?
    At least I don't know a way to get notifications in business workplace if you have the above-mentioned "forwarding" setting on in SO16. I assume that if you turn it on, it simply forward everything to the email address and notifications are not coming to business workplace anymore. But if you said that it was working before, then I don't know how did you manage to get it working .
    I would understand that you have to steps in workflow One sends notfication and one sends email. But if you somehow get this working with only one step and then get a "copy" into business workplace and email both, that is great. I would be interested to know about how to achieve this.
    Regards,
    Karri

  • Can we create wallet at User Level to implement TDE in Oracle 10g

    Hi
    I am going to use a Oracle 10g TDE security feature for data security.I have gone through with lots document.Everywhere there is mention to open or close a Wallet at system level.I mean ALTER SYSTEM..that means except DBA no one can see the encrypted column.
    But my requirement is bit different,I want to encrypt the column based on user.
    lets take example- Suppose we have one table TEST with C1,C2,C3,C4,C5,C6 column and there is U1,U2,U3 user.I want to encrypt C1 and C3 for U1 , C2 and C5 for U2 , C4 and C6 for U3 and U1,U2 and U3 can see only all columns except encrypted column.
    My question is Can we apply TDE at User level rather than system level.
    Any ideas or thought would be appreciable.
    Thanks in advance.
    ANwar

    The idea of TDE is to provide data protection on storage media, so when your backup tapes drop from the truck or the hard disk of a stolen laptop is sold online, encrypted data remains encrypted and can't be read by anyone.
    It seems to me as if you try to achieve access control by encryption, which you don't need: If users have sufficient privileges or the business need to see data, then they should be granted access and see the data de-crypted. Otherwise, access control mechanisms (roles, views, VPD, OLS) should kick in and hide the rows from them.
    So, for day-to-day business of your database, the wallet needs to be open, so that the database can de-crypt data for users who have been granted to see credit card numbers etc., but then limit access to credit card numbers they are not allowed to see with other measures. There is a little hands-on for TDE and VPD here:
    http://www.oracle.com/technology/obe/10gr2_db_vmware/security/tde/tde.htm
    Hope this helps,
    Peter

Maybe you are looking for