Document level Authorization

Hi Gurus
Can user(Owner) define authorization for the roles/user to change / display particular document. As i know we can control the users by status level, but our client doesn't want to check any values. They just want to restrict the users to change/display the particular document.
The requirement is that, If a document is created by a user then he should be able to define the authorization for other users. Suppose is he gives display access to USER1 the USER1 should only be able to view the document. If he gives change access to USER2 then USER2 can be able to change the document.
Regards
Raja

Thanks Iring...
I have already checked ACL , but there are some problems in ACL
Can you please provide your Suggestions/Solutions for the below issues
We have 2 users => USER1, USER2
USER1 is authorized for create, change & display (not for delete)
USER2 is authorized for display (not for create, change & delete)
Issue-1:
Suppose if USER1 provides "NOAUTH" to USER2 in Authorization Tab then the system should restrict USER2 to access that document. But the system allows USER2 to view the document (CV03N ).
There are no entries defined for the authorization object ACO SUPER .
Issue-2
If there is no entry for USER2 in Authorization Tab then he can't be able to view the document even he is authorized to display the document in CV03N.
Issue-3
If USER2 wants to delete all the entries defined in Authorization Tab then he can't be able to delete the entry for USER2 (same user).
Issue-4:
If a document is created by USER3 then the system should not allow USER2 to specify the authorization in Authorization Tab in CV01N.
Regards
Raja

Similar Messages

Organization level authorization restrictions

Hello All,
Please can you let me know
1) f it is possible to org level authorization restrictions for CLM documents and master data without any development?
- E.g. while creating suppliers the user should only be able to create for the Company assigned to the user id?
2) What is the significance of the company and organization unit fields in the user account information page?
Regards,
Subramaniam Iyer

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

Restriction on Discount % at document level

Hi all,
my client doesn't want to allow any discount at row level or document level.
I have restricted row level discount by setting max discount to 0% for all users in authorisation but still user is able to enter discount at document level.
Please suggest me how to restrict this ASAP
Thanks & Regards,
Mukesh Agrawal

For row level, the best is to go to each user and select form settings and make sure the discount% column is not active for any users.
But if you disable the customizing of forms, nobody is able to change other form preferences. If it is not necessary to you, it will be a good solution.
The Max Discount in Authorization is to set the upper limit for discount and not to block discounts. Unfortunately SAP has not provided a good and solid way to block users from posting discounts.
you are right, it is not to block discounts. But it blocks discounts and cause of SAP does not offer a really exact solution, you could use it.
e.g. We could not block the form preferences for each user. So it is possible to display the row discount and we enable max. discount. Do you have a better solution, it would be nice.
regards

Delivery completion flag at delivery document level

Hello Tean
we have developed one inbound interface and Now the interface is working fine.. I am able to do the GR against inbound delivery and the PO status and delivery completion flag is also set at the PO level but now my FO is asking to me to set the delivery completion flag at inbound delivery document level and updation of history also. so i request you to please check and help me to find the solution.
Technical details which i have used for developing the interface
IDOC type: MBGMCR03
Message type: MBGMCR
Post Goods Movements with MB_CREATE_GOODS_MOVEMENT (ie bapi_goods_mvt_create )
Please check and let me know the solution.
Regards
Raj

use T code SQVI. here you can join tables having atleast one key field among.
SQVI> give table name> press create> pop up will come> give the details > select table join from the drop down> click insert table> in pop up give table name > table details will appear> again press insert table> give next table name and so on. this way you can join many tablesd with key field. if key field is not there. it will not allow. after joing all the required tables press back button.
now from left side pane you can select the fields from ech table and decide which should come as input ( for eg company code , date etc) and the outputs from each table. Then save.
now you can execute this in the same screen. or else you can use it later on also. go to SQVI. give the Quickveiw name you have selected. and exceute. it will act a report with the inputs and outputs you have selected.
if you want to restructure the report . it is possible. change the input and output fields. and save

T-code FAGLB03 drilldown to document level cant view the field cleared/open

Hi everyone,
It is my first time to post a thread here.
Currently i using ECC 5.0 GL Balance displayed through FAGLB03:
when i drill down to documet level and i need to create my own layout i cant see
the field "cleared/open items symbol". But if i using t-code FS10N, when i drilldown to document level i can select the field "cleared/open items symbol", or
i can select local currency3.
hope anyone can help on this

Hi Christoph
thank you to reply my message,
Support package is upto 5 in our company. Below is our package information :-
EA-APPL             500   0005     N       SAP R/3 Enterprise PLM, SCM, Financials
EA-DFPS             500   0005     N       SAP R/3 ENTERPRISE DFPS
EA-FINSERV     500     0005     N       SAP R/3 Enterprise Financial Services
EA-GLTRADE    500     0005     N       SAP R/3 Enterprise Global Trade
EA-HR             500     0005     N       SAP R/3 Enterprise HR Extension
EA-IPPE             300     0004     P       EA-IPPE 300: Add-On Installation
EA-PS             500     0005     N       SAP R/3 Enterprise Public Services
EA-RETAIL        500     0005     N       SAP R/3 Enterprise Retail
P          2004_1_500     0014     P       PI 2003_1_470 : Add-On Delta Upgrade
PI_BASIS     2005_1_640 0010     X        Basis Plug-In (PI_BASIS) 2005_1_640
SAP_ABA              640 0009     S        Cross-Application Component
SAP_APPL        500     0005     R        Logistics and Accounting
SAP_BASIS       640     0020     S        SAP Basis Component
SAP_BW              350     0009     W       SAP_BW 350
SAP_HR              500     0005     R        Human Resources
ST-A/PI 01I_ECC500     0000     C        Application Servicetools for ECC 500
ST-PI     2005_1_640     0005     X        SAP Solution Tools Plug-In
VIRSANH     510_640     0000     C        RTA 5.1 Installation package for HR and
If my company using package 5, so can we apply this note 862523 ? when i refer this note in our system didnt exist this 2 report which are FAGL_CORR_0001 and FAGL_CORR_0002 , how can i apply this ?
Hope you can guide me on this . thank you

Total amount of all the items of invoice at document level to present ....

We have two cubes one is sales document count cube (header data) and other one is sales transation cube (item level data) . Invoice net val is there in sales document count cube and profit center, principal and item category is ther in sales transation cube.
our requirement is ,total amount of all the items of invoice at document level to present along with principal, profit center & item category.
This has to be done in the document count cube and not the transaction cube.
note: multi provider is not solution. There any solution at query level?

hi
If your using 2 ODS one for header and one for Item to 2 Cubes.....
Then just create a update rule between Item data ODS to Document CUbe mapping the new keyfigure ( Net value of total of all items in sales order )
If not tel me how the cubes and ODS are fed the data
Assign points if useful
Regards
N Ganesh

How do I validate a certificate (not visible) at the document level?

I am using Acrobat XI Pro running in Windows 8.
I created a PDF document with form fields (type: button) and JavaScript codes (field-level and document-level). Before I certify (not visible) and save the document, I want to add a document-level script that checks if the certificate is valid. If the certificate is valid, I would like to schedule an interval object to update some of the icons in the fields. Is this possible? If so, how do I get the “certificate (not visible) field” and check that it is valid
Thanks. - john

I am using Acrobat XI Pro running in Windows 8.
I created a PDF document with form fields (type: button) and JavaScript codes (field-level and document-level). Before I certify (not visible) and save the document, I want to add a document-level script that checks if the certificate is valid. If the certificate is valid, I would like to schedule an interval object to update some of the icons in the fields. Is this possible? If so, how do I get the “certificate (not visible) field” and check that it is valid
Thanks. - john

Document-level javascript quandry

Ok, completely clueless newbie here whose only coding experience is Access VBA…from a few years ago. Need to write up some Javascript to make this work – that was a month’s worth of a migraine. I ask for your patience, and would like to ask for forgiveness in advance for any headaches I induce while you try to figure out my problem(s). Also, I’m not sure how to copy paste images or code examples, but I will do my best.
So, basic premise: make a drop-down combo box that will populate another combo box based on whatever was selected in the first box – in this case, 31 items in the ‘Inventory Parts Used’ list, and a total of 427 respective sizes in the other list.
YES, I’ve already looked at that http://acrobatusers.com/tutorials/js_list_combo_livecycle1 example, and followed it closely. Took me forever, but I somehow got it to work. Was very happy. Only thing I couldn’t figure out was the export value b/c mine wasn’t a number. But I solved that by putting the CodeID and respective PartSize together (ex: 4-inch Fire Hydrant would show up as "FH-01: 4"). Anyways, I selected that working row and choose the “Place Multiple Fields” option times 15 rows. Still working. I’m dancing a jig. Then I tried to check on the code:
“Text cannot be displayed in full by the Edit Dialog. Please use an External Editor.”
Uh… So I deleted a row at a time until I could see what my limit was. I had to pare down 15 rows to a measly 3 rows. Took me a while but I was able to see where the problem was. Instead of being written into the Document-Level JS, my array was tied to the first combo box’s Keystroke event on the Field Level. So when I multiplied the rows, that humongous list essentially had diarrhea.
I’ve tried to delete that header and keep it to Document Level.   It basically ignored me and keep those lines. When I did manage to make the <Document-Level> on top, it just didn’t work.
(    //<AcroForm>
//<ACRO_source>Row0.InvPart:Keystroke</ACRO_source>
//<ACRO_script>
/*********** belongs to: AcroForm:Row0.InvPart:Keystroke ***********/    )
I’ve searched other forums about the Document-level…. I swear I read a lot of forums that said using Advanced>Document Processing>Set Document Actions>Edit All was ok. Clearly it’s not ok, especially after I found this forum: http://answers.acrobatusers.com/Where-I-enter-document-level-javascript-adding-FormRouter- Calendar-q55527.aspx.
So I guess my question(s) is this: IS that “Edit Document Javascripts” really necessary? B/c I’ve looked and I don’t have it. I’m using Adobe Acrobat 9 Standard, ver 9.5.5 (and I’m using Windows XP Pro ver 2002 , if that matters). Is this JS editor only available to the Pro version? Would it really be a bad thing to just leave it alone as a keystroke event (aside from the unwieldy large, duplicated codes it vomits as a result)? Or maybe, is there a way to code a new row on instead? I remember seeing an example where you can add more lines as needed, but I can’t for the life of me find it again.
Thank you in advance for all your assistance.

* Huh....it just figures... right after I finally give up and post up a question, I would find the answer. =_=;; http://forums.adobe.com/message/4727325#4727325.
So, Standard version apparently doesn't have that exalted “Edit Document Javascripts”. Apparently a way around it is using the Page Open event. Well, it works - the massive array only shows up once in the editor, and the multiple rows each call the function instead. Nice.
Well, I will leave this up in case someone else can use the reference. Thanks to anyone who read this and was going to answer me. =)
Don't suppose anyone knows how to create a code to add new rows instead of having 15 rows straight off the bat? Or should I make a new post for that?

Document-level Javascript as Object

I created a document level script called Utility.
I want to create methods within this script rather than coding each one separately.
function Utility()
this.getFormattedDateOnly=function(pDate) {
if (typeof pDate == "undefined") {
    pDate = new Date();
var retval = util.printd("m/dd/yyyy",pDate);
return retval;
this.getFldsOnPagenum = function(pPageNum, pDoc) {
/* returns an array of the form fields who are on or start on a page */
/* zero based return ; however pPageNum is 1 thru numPages, not 0 -> numPages-1 */
var currPage;
var currFld;
var cnt = -1;
var ARflds = [];
CPR("# flds=" + pDoc.numFields+" Type of pDoc:"+ (typeof pDoc));
for (var i = 0; i < pDoc.numFields; i++) {
    currFld = pDoc.getNthFieldName(i);
    if (typeof currFld.page == "number") {
CPR("page="+(1*currFld.page+1));
      if ((1*currFld.page+1) == pPageNum) {
        cnt++;
        ARflds.length = cnt + 1;
        ARflds[cnt] = currFld;
CPR("\n cnt="+cnt);
    } else if ((1*currFld.page[0]+1) == pPageNum) {
      cnt++;
      ARflds.length = cnt + 1;
      ARflds[cnt] = currFld;
return ARflds;
var MyUtil = new Utility();
This is all working fine with the following exceptions:
1) the methods are not being registered in the Javascript hierarchy listing.
That's annoying.
2) "This" is not recognized at the document level....I must pass it as a parameter (pDoc).
I thought that was strange...I could see it if were at the folder level.
It appears the document object is out-of-scope !!
3) currFld = pDoc.getNthFieldName(i);
The above is failing....sending back a "currFld is undefined" error.
I don't see the problem....very strange IMHO.
When I call the getNthFieldName function from the console....no problem.
What am I doing wrong in the definition here ?
It appears that what I did has Acrobat functions and document properties out-of-scope.

I think this would work if you could make the document object a member of the Object being created.
To do that, a constructor needs to be invoked so that it can instantiate a public property of the Object.
var MyUtil = new Utility(this);
inside of Utility I would have:
this.oPDFdoc = this;
thereby transferring a reference to the entire PDF document to my Object.
Getting this to work would eliminate the need for all of the document-level javascript references.

Document Level JavaScript to turn off caching for a PDF?

I have been trying to find a way to ensure that a fillable PDF leaves no trace of itself on a computer that was used to open it. For example, if a user acceses a fillable PDF via browser or Reader, once they are done and have closed the browser or Reader, I want no trace of the information to remain in any cache on that machine. We don't want to require our users to try to control cache via settings in Reader, so I have been trying to find other ways to do this.
I came across the following comment from GKaiseril in another thread - is this a way for a PDF to control its own caching? Any details or alternative approaches would be welcome!
GKaiseril
Re: Metadata - Can't remove
You can also use document level JavaScirpts to turn off the auto complete and caching for a given PDF.

Version 9 and 10 of Reader do not cache form data in a temporary FDF as previous version may have. The nocache document property it not even documented in the latest Acrobat JavaScript reference. If you're concerned about previous versions, you can use set the nocache document property at run-time, but users can disable JavaScript, so that approach is no guarantee.
For information on controlling autocomplete, see: http://livedocs.adobe.com/acrobat_sdk/9.1/Acrobat9_1_HTMLHelp/JS_API_AcroJS.88.407.html

Delete Document Level Script Using JavaScript?

Hello all.
Is there a way for a document level script to delete itself? I am running Adobe Acrobat Professional 11.
My situation is that I am currently analysing data using a Java application. The Java application taylors a script to suit each specific PDF, and then inserts it into the PDF automatically. When the PDF is opened, the script runs once and then is no longer needed.
As the script is no longer needed it would be preferred if the script could automatically be deleted. Is it possible the script has access to the field in which it is stored (e.g. doc.javascriptField = "";)? Or by some miracle, a delete function already exists?
I think that due to the lack of need for such a function by general and advanced users I won't get the answer I am hoping for. But it is worth a shot. In the mean time, I am inserting a flag into the KeyWord field so that the script does not run twice. It works, but it is not exactly clean.
Any help would be greatly appreciated.
Thanks
Jonny O

My original idea of...
stamper.addJavaScript("this.addScript("oneTimeScript", "app.alert('Annoying Popup')")");
Did not work.
However, while debugging I did come across the name given to a script added via iText (Java library). The default is "000000000000000". With any added scripts being incremented by 1. So the this.removeScript("ScriptName") function works perfectly.
Thanks
Jonny O

When we drilldown at document level it displays one record for each cube

Dear Experts .
The users want to see the report by status for the order detail report at document level it displays one record for each cube .
They want to see the single line for the order quantity , Amount, Billing quantity delivery and amount along with the Sales order number , billing document number billing date , delvert date ..et in signgle line. ( Sale order DeliveryBilling)
When we are doing on Multiprovider recording displaying from each cube.
We have tried with Constant selections and it is not giving the required results m since these want to see by status. Due to huge data performance reasons we re unable to use it .
Please provide your valuable inputs.
Thanks,
Mahesh.

Mahesh,
If you want to get detail data with respect to Sales order - delivery - Billing, on top of Multiprovider you can come up with Constant selection.
But I am not clear that why constant selection is not working properly, can I have some light on that.
Probably, you are struggling with multiple records .
I suggest you to go with end routine and map all fields to one IC and do reporting on that single IC, then your requirement will fulfill.
But here we need to take care of performance issues and process chain scheduling wile loading deltas.
If Multiprovider is not working properly , then try with Infoset(If you have more than 2 ICs it not possible).
Regards,
rvc

Define screen layout at document level

Hi all,
It's possible to define a screen layout at document level for custom fields of PO?
In others word, in customing i can define the status of PO (headers and items) fields, can I do the same for custom fields?
thanks in advantage,
enzo
PS. I'm using ECC 6.0

Hi Dear,
It can be define if you want to work on it so please tell which field you want to customize then i will guide you.
Regards,
Virendra

InfoCube design - high granularity by inclusion of document level detail

When considering the inclusion of sales document level detail in an infocube (0DOC_NUMBER/0S_ORD_ITEM), two possible high-level designs come to mind:
1. Make sales document number/sales order item master data carrying infoobjects and include in infocube as line item dimensions. Activate all necessary characteristic navigational attributes for reporting.
2. Model infocube dimensions to contain all necessary charactistics for reporting with inclusion of characteristics sales document number/sales order item therefore, fact table will have highest level of granularity.
Knowing the 'textbook' does not suggest the above designs, has anyone attempted maximum granularity in infocube design with success or otherwise? If successful, has this design outperformed DSO or InfoSet reporting performance?
Thank you - Brendan.

Hi Brendan,
we have implemented both solutions; it all depends on the number of documents. if it is much more than 1 mio; I recommend storing your data in the target; if it is 1 or 2 mio you can have master data (more flexible).
We have some 4 mio records in 0MAT_PLANT and are starting having performance issues.
by the way; if you are using ORACLE, NEVER mark a dimension with high cardinality; that doesn't work.
hope that helps
Olivier.
Message was edited by:
Olivier Cora

Direct database data access without data level authorization check

Hello,
My customer raised issue about direct database data access. Due to the customeru2019s strong security policy, it shouldnu2019t be allowed.
To prevent this kind of illegal data access, customer ask me to list up all the possibilities to display data without data level authorization check.
The things in my mind are
SQL Command Editor (for Oracle based system) : ORASPACE, DB02, ST04
Query Based : SQVI (Quick Viewer), SQ01/SQ02/SQ03 (SAP Query)
Data Browser : SE11, SE12, SE16, SE16N, SE17
Table Maintenance : SM30
Function Module : RFC_READ_TABLE
Function Module : DB_EXECUTE_SQL (DML)
Anyone knows anything which is not listed above?
Thanks

HI,
Generally in production user's should not be given all these authorizations.
Ram.

Document level Authorization

Similar Messages

Maybe you are looking for