Enhancement CNEX0002 - EXIT_SAPLCNAU_002  PS Authorisation check for WBS

I would like to use the enhancement to allow only certain users access to change certain fields in CJ02 / CJ20N.  Other users must still be able to change other data on a WBS element.
We created our own authorisation object which is checked in the exit.  When we activate the customer enhancement project, the WBS are greyed out and nothing can be changed (even if you have the authorisation).
Does anyone have any knowledge of whether this function module can be used to limit authorisation to change certain fields only?
Thanks in advance
Silke

Thanks Gupta,
I managed to get it working for project definitions and wbs elements - for the whole transaction and for certain fields only as well - the only field we still battle with is the 'short description' of the wbs where we want to avoid unauthorised changes by just any user. SAP is also battling with this one and thus far we had no correct answer from them.

Similar Messages

  • Authorisation check for Object F_BL_BANK using transaction F110

    Hi
    Can you help me with transaction F110. The object F_BL_BANK has been linked on SU24 to transaction F110.  It has also been set for Check/maintain.
    There is no authorisation check for this object using F110.
    How can we resolve the issue.

    Hi
    We are on 4.6
    I linked the object but the program is not doing an authority check The F_BL_BANK object has the following linked to it
    .  .     .  Check          F_BKPF_BUP Accounting Document: Authorization for Posting Periods   
    .  .  .     Check/maintain F_BL_BANK  Authorization for House Banks and Payment Methods        
    .  .     .  Check          F_KNA1_APP Customer: Application Authorization                      
    .  .     .  Check          F_KNA1_BED Customer: Account Authorization                          
    .  .     .  Check          F_KNA1_BUK Customer: Authorization for Company Codes                
    .  .     .  Check          F_KNA1_GEN Customer: Central Data                                   
    .  .     .  Check          F_KNA1_GRP Customer: Account Group Authorization                    
    .  .     .  Check          F_LFA1_APP Vendor: Application Authorization                        
    .  .     .  Check          F_LFA1_BEK Vendor: Account Authorization                            
    .  .     .  Check          F_LFA1_BUK Vendor: Authorization for Company Codes                  
    .  .     .  Check          F_LFA1_GEN Vendor: Central Data                                     
    .  .     .  Check          F_LFA1_GRP Vendor: Account Group Authorization                      
    .  .     .  Check          F_PAYR_BUK Check Management: Action Authorization for Company Codes 
    .  .  .     Check/maintain F_REGU_BUK Automatic Payment: Activity Authorization for Company Code
    .  .  .     Check/maintain F_REGU_KOA Automatic Payment: Activity Authorization for Account Type
    .  .     .  Check          PLOG       Personnel Planning                                       
    .  .     .  Check          P_ABAP     HR: Reporting                                            
    Ther are more objects but these are the key ones The object also has a custom object in that was build by SAP called ZLSCH      Payment method  We want the system to do a check on the payment method

  • Authorisation check for single status

    hi all
    i have a requirement which is like i have to maintain authorisation for single user status.right now we are able to do that for multiple statuses only,
    if i say i want to aply check for a single status like open only,how can i achieve that if possible.
    help will be appreciated
    best regards
    ashish

    Ashish,
    How are u doing that check for multiple status?
    where ru doing it?
    can u give some more details?
    Robin

  • Authorisation check for Functional Location Category

    Hi All,
    Does anyone know of an authorisation object which can be checked to restrict which Functional Location Categories a user can create/change (IL01, IL02)?
    Thanks,
    Richard

    hi
    i think it will serve the pupose while changing the object ,if you want to prevent for creating you can simply delete IL01 t code to the user using I_TCODE object .
    regards
    thyagarajan
    you can also check INST_AUTHORITY_CHECK PM/CS Enhanced Authorization Checks this badi for your need
    Edited by: thyagarajan krishnamurthy on May 14, 2009 7:01 PM

  • WBS release authorisation check

    Hi All
    My requirement is that for all users , having authorisation for cj20 transcation, should not have authorisation for wbs release expect for few.
    Please suggest.
    Regards,
    Vishal

    Dear Sir,
    Thanks for the reply.
    I agree with your answer.
    I have just one doubt
    How to provide user specific authorisation check at  "X" user status level.
    As per your earlier explation for this, User status profile has to be maintained.
    That is fine.
    What do we maintain in authorisation key.
    How is this authorision key linked to user status "X".
    Further how is  authorisation key maintained in authorization object B_USERSTAT .
    Please expalin this in detail for my convenience as I have never done user specific authorisation check at wbs user status level.
    Thanks in advance .
    Regards,
    Vishal

  • Authorisation check in report

    Hi ,
    we have developed a z report which is fetching grade from infotype 8 .All the users here dont have authorisation for infotype 8.Is it possible somehow that the users who don have authorisation for infotype 8 can rum that report.Right now when they are trying to run the report its showing 'No Authorisation for infotype 8'.Or is there some other place from which grade can be retrieved .
    Regards
    Saurabh

    Create an authorisation object (SU21)
    Put an authorisation check for this object in your report (AUTHORITY-CHECK)
    Create a role that contains this object (PFCG)
    Assign this role to all the users who require access to the report (SU01).
    <REMOVED BY MODERATOR>
    Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

  • User authorisation check in ABAP-HR program

    Hi,
    Can anyone please help me on the following query ?
    I need to check user authorisation in an ABAP report at Object level, filter only relevant records based on the user's authorisation and display appropriate messages.
    The above mentioned report is purely developed by us and is not a copy of any standard report. Hence, kindly help me with your suggestions and opinions.
    Thanks and Regards,
    Manas Menon

    Create an authorisation object (SU21)
    Put an authorisation check for this object in your report (AUTHORITY-CHECK)
    Create a role that contains this object (PFCG)
    Assign this role to all the users who require access to the report (SU01).
    <REMOVED BY MODERATOR>
    Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

  • OSA - Authorisation Checks

    Hi all:
    In my client's appraisal form, only the employee can fill in the form. They will also have to specify their manager's name as the appraiser.
    I tried to use "Default Manager" BADI for my appraisal form. However, this is not a complete functionality because the appraisee can simply change the appraiser's name, after system defaults. There is no control on the appraiser chosen. I can even choose my subordinate as my appraiser, which is not correct.
    I know that in "Processing" tab, we can de-select "No Authorisation Check for Appraiser". This feature will check if the user (in my case, the appraisee) has authorisation for the appraiser etc. A few questions I would like to find out:
    1) Will this functionality meet my requirement?
    2) To use this functionality, do I need structural authorisation or just non-structural authorisation?
    3) Should i use BADI "Authority Check" instead, to cater to my requirement?
    Many thanks for your advice in advance.
    Thank you,
    Ash

    What is an authorisation checks?
    To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
    The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
    ·        Starting SAP transactions (authorization object S_TCODE)
    ·        Starting reports (authorization object S_PROGRAM)
    ·        Calling RFC function modules (authorization object S_RFC)
    ·        Table maintenance with generic tools (S_TABU_DIS)
    How do we provide a basic authorisation check read for a employee? Could anyone help me with the path?
    Go to transaction PFCG and provide the role based authorization.

  • Need to Create a Check for Plant in WBS & Plant in Network

    Dear Guru's,
    While creating Project (CJ01) my users are creating in a Plant, and while creating network for the same project/WBS, they are using different Plant Code.
    Since my Profit center is related to the plant in CJ01,
    and because of wrong Plant in network, all my PR/ PO is going in a different Profit center, which is creating a huge problem while auditing.
    I need to Create a Check for Plant in WBS & Plant in Network...!!
    Kindly suggest me the ways to do it and how to do it...

    Hi Deepa,
    The Check you are trying to create between Plant defined at Project def and network level that should be same can be achieved through validation at the network level by using a user exit at network level.
                    While creating the network you can change the plant value not equal to the value at proj def/network profile may be one of the reason is since the network type is defined for more than one plant (OPUV).
                    While creating validations at network level we do not have the option of setting the prerequisite/check  using WBS or Proj def fields (i.e. PROJ-, PRPS- fields)    so we need to create a user exit at the network level.
    I am not sure but logically u can have a user exit for both prerequisite and check steps of the validation.
    You need to create the user exit in program ZGGBR000.
    Please take help from your Abaper for the same.
    OPSI-Network header-Validation- Step - Prerequisite u2013 Check u2013 Message.
    Prerequisite
    If Proj Profile = u2018XXXu2019 and Network Profile = u2018XXu2019 (or as per your logic if need be use a exit)
    CHECK.
    PROJ-WERKS = CAUFVD-WERKS   (This logic needs to be defined in user exit and set the same user exit at the check.)
    Once you define the user exit in ZGGBR000, it will be available in the tab u2018exitsu2019 at the Prerequisite and Check levels.
    The name of the form pool (e.g., ZGGBR000) that contains your user exit must be stored in table T80D.
    It is important that you make declare the code generation program for your user exit; how many and what type of parameters you are using for the user exit. You do this by entering your newly defined user exits in the form routine GET_EXIT_TITLES. Found in program ZGGBR000.
    Check with your Abaper to check on all the aboveu2026
    Message:
    Plant at Network level should be same as at Project def level.
    Hope it helps you,All the best..
    Regards
    Vinayak.

  • Error Individual check for creating the object WBS Element required

    Hi Expert,
    I've a requirement to create WBS elements using BAPI. And I am using BAPIs in the following manner.
    CALL FUNCTION 'BAPI_PS_INITIALIZATION'
    CALL FUNCTION 'BAPI_BUS2054_CREATE_MULTI'
    EXPORTING
    i_project_definition = g_pdwbs
    TABLES
    it_wbs_element = it_wbs_element
    et_return = it_return
    EXTENSIONIN =
    EXTENSIONOUT =
    CALL FUNCTION 'BAPI_PS_PRECOMMIT'
    CALL FUNCTION 'BAPI_TRANSACTION_COMMIT'.
    When I do so I am getting the below errors. Please suggest.
    "Individual check for creating the object WBS Element C-497082 required ".
    "Individual check for creating the object WBS Element C-497082-0001 required".
    Please suggest how to correct this error.

    Hi Karthikeya,
    I think the project profile which you are using has a different mask and the WBS element you are passing is different to the BAPI.
    Are you able to create manually from CJ01 using the same WBS element?
    Create a project manually and it will give the list of the mandatory fields set in the config. Using that list populate the BAPI struture accordingly.
    Hope this helps.
    Thanks
    Lakshman.

  • I need the BADI or the way for WBS budget check at SC line item

    Hi SRM folks,
    Do you have any BADI or the good way to do the WBS budget check at SC line item level.
    Donot suggest me the BBP_BUDGET_CHECK.ie for SC level only.
    Is there any way to do at line item level.
    Thanks in advance.
    srini.

    Hi
    Either use BBP_ITEM_CHECK_BADI or BBP_DOC_CHECK_BADI.
    Note -> Please read the relevant standard SAP documentation provided in this case for using SE18 Transaction.
    <b>Please go through the following pointers, which will definitely help -></b>
    Re: Reg the budget check in Shopping cart
    Re: Budget analysis
    How to implement the badi BBP_DOC_CHECK_BADI??
    Budget check for service PO
    Budget Check error for Fixed Assets ? :-(
    <u>Other related links -></u>
    Budget Check
    http://help.sap.com/saphelp_srm50/helpdata/en/4f/b3e739e62b714be10000000a114084/frameset.htm
    http://help.sap.com/saphelp_srm50/helpdata/en/de/237440116fd279e10000000a114b1d/frameset.htm
    http://help.sap.com/saphelp_srm50/helpdata/en/4e/1d74eff196d64e880fd28d41d4502b/frameset.htm
    http://help.sap.com/saphelp_srm50/helpdata/en/5a/af5eff85d011d2b42d006094b92d37/frameset.htm
    Do let me know as well.
    Regards
    - Atul

  • How to Check for budget in WBS Element ?

    Is there any mechanism to check if budget has been exceeded, in the respective WBS Element, while at or before approval of manhours in CAPP. It so happens manya  time that, times are getting approved, and CAT5 Errors are taking place due to shortage of budget. How can we pro-actively check for budget being exceeded, and then avoid budget errors during CAT5 runs? Any suggestions?

    Hi
    You need to activate budegt availability control
    Budget Control at WBS level
    Budget Control at WBS level
    Control Budget Across Projects
    Control Budget Across Projects
    Thanks
    S.Murali
    Edited by: S. Murali on Jul 15, 2009 6:54 PM

  • ITunes does not allow me to download at Store "You do not have authority to write in iTunes Media files. Adapt your authorisation in explorer and check for available downloads in Store

    As administrator of my pc icannot download musc/video from Store: the message (translated from Dutch) "You do not have authority to write in iTunes Media files. Adjust your authorisation in explorer and check for available downloads in Store

    Hey! I had the same problem you did just today when I was trying to get my second iPhone to sync. What you need to do with music or anything extra that you doing you have to creat a second playlist or picture or anything that you would like to use, so that you can add to the second device that you are going to be using. I am not sure if that will help but it helped me out a lot!! Good luck!

  • User-defined fields for WBS

    Hi,
    Std SAP provides the following user-defined fields for WBS.
    4 numeric fields
    4 general fields
    2 date fields
    2 check boxes
    We would like to use as many as 20 numeric user-defined fields for wbs.
    Is there a way to do this?
    Thanks in advance.
    Manohar

    hi,
    It is not possible with user defined fields. You can achieve this using SPRO menu path Project System ->Structures->Work Breakdown Structure->Enhancement for Project Definition WBS lements -> Create customer specific fields in WBS.
    You have to use enhancement CNEX0007 to create the required fields.
    You will, ofcourse, need the help of an ABAPer to do this.
    Muraleedharan.R

  • Segment for WBS element in Inbound Sales Order Idoc

    Hi gurus,
    I am trying to create an inbound idoc for sales order ' VA01'. I need to populate WBS element in the item level under Account Assignment Tab. I am using ORDERS05 basic type. Please help to find which segment to use for WBS element. Waiting for your reply. Please help.
    Regards,
    Satyajit

    Hello,
            As far as I know, there is no Segment / Field definition in ORDERS05 for WBS Element as it is not mandatory information to be filled in order for the Sales Order to be Complete. So, you need to create an Extension of the IDoc Type ORDERS05. For your requirement, here is the Approach I have.
    1. Create an extension for IDoc Type ORDERS05 to ZORDER05 with a Custom Segment Z1EDP01 in which you'll have the Custom Field Name VBAP-PS_PSP_PNR which is the WBS Element field in VBAP Table.
    2. Now, use the Customer Exit EXIT_SAPLVEDA_001 in the Enhancement VEDA0001 in which you can actually populate the Field WBS Element that would be already available in the Inbound IDoc to store it in a Work Area. As you are aware, you'll need to create a Project in CMOD for the same.
    3. Export the same to some MEMORY ID 'XXX'.
    4. Come back to the Selection Program for ORDER05 which is IDOC_INPUT_ORDERS in which you'll find the below CASE Statement.
        CASE xaprau.
              WHEN ' '.
                PERFORM call_va01_new_orders USING ok.
              WHEN 'Q'.
    Aufruf Transaktion Auftragerfassung VA01 mit Bezug auf Angebot
    call transaction Order Entry VA01 with refer to quote number.
                PERFORM call_va01_new_orders_angbt USING ok.
              WHEN 'C'.
    Aufruf Transaktion Auftragerfassung VA01 mit Bezug auf Kontrakt
    call transaction Order Entry VA01 with refer to contract number
                PERFORM call_va01_new_orders_contk USING ok.
              WHEN 'L'.
    5. Now, since our Standard Order Type (VBAK-VBTYP) is 'C',
        we'll have to choose the Subroutine for the 'C' Option.
    6. In this Subroutine, there is another Subroutine va01_dynpro_kopf_kaufmann_kde2 which is for populating Custom Dynpro Fields for the Sales Order. So, we need to choose the same Subroutine inside which we have to Create an Enhancement Implementation.
    7. In this Enhancement Implementation (Implicit), we have to IMPORT the value of the WBS Element which was exported in the Customer Exit.
    8. Check if it is initial. If it is not, then Call the Perform as below.
         IF NOT WA_Z1EDP01 IS INITIAL. "Checking if the Segment
                                                           " is Empty
       PERFORM DYNPRO_SETZEN USING 'COBL-PS_POSID' WA_Z1EDP01-ZZWBSELEMENT.
    ENDIF.
    9. Since the Sales Orders are posting using BDC here, by calling the above Subroutine DYNPRO_xxx, we are appending our Custom Segment / Field value to the BDC_DATA table.
    10. In Step 8, I've given the Notation for Work Area. It will also be applicable when there are multiple Line Items. All you have to do is to EXPORT an Internal Table instead of Work Area and use the same here for each Line Item.
    11. I've given you above procedure because I've worked on similar requirement in which I had to populate the Special Processing Indicator instead of WBS Element.
    Hope it would be helpful for you.
    Thanks and Regards,
    Venkat Phani Prasad Konduri

Maybe you are looking for