Error in Deleting Authorization Object

Hi,
I am trying to delete the authorization object in tcode RSSM, and I am getting following error:
Could not delete profile RSR_00006165 from the DUMMY user master
Message no. RSSBR063
Your input will be appreciated and points will be awarded for helpful answers to resolve this.
Thanks in advance,
Steve

Hi Steve,
All your roles which are depending on the specified authorization object should be free with AUTh.OBJ and then try to reomve the master data from the auth.obj and then delete the auth.obj, now it will allow you to delete the auth.obj
Regards
Sarath

Similar Messages

Error in ME21N : Authorization Object does not match EFB PID

Hello All
In one of our client we are getting the error as "Authorization Object does not match EFB PID" while executing Tcode ME21N. I have checked in User parameters EFB is not maintained but i am not sure if this is the reason for this error. if this is the case then can somebody tell me what value should i enter against EFB in user parameter. i have tried entering X but in Vain.
Also would like to know where one can see EFB parameter value in SPRO.
It is urgent.
regards
Yogesh

Hello Yogesh,
Here is the path:
SPRO --> Material Management > Purchasing > Authorisation Management > Define function authorisations for buyers > function authorisations for buyers
Regards
Arif Mansuri

Error while deleting loc - Object variable or With block variable not set

I could not delete some of the existing locations in the HyperionFDM and it results in the error Object variable or With block variable not set.
I verified that the Server has the apps and subfolder which is needed for this application \\servername\data\app1\Inbox etc.
Any pointers will be really useful. Thanks !
- Ap

Hi,
There can be several reasons for it, for now I would suggest you:
This error generally comes because:
Cause
The user that logs on workbench does not have write access to the Financial Data Quality Management application shared folder.
Solution
Log onto the machine where the Financial Data Quality Management application files are located. You can locate this path by performing the following:
a) At the FDM Login page choose <Add Application> and login
b) Highlight the FDM Application in question and click the "Modify" button
c) The application path field displays the location of the application folder
2. Go the shared folder, right click and go to Properties -> Sharing -> Permissions and add the user to the Share Permissions and grant "Change" at a minimum.
Please check and let me know
I would suggest you to post FDM related posts in Financial Data Management
J

ORA-22813 error when deleting spatial objects in LIVE

Hi,
We are getting an ORA-22813 error when attempting to delete a spatial object from a version-enabled table in workspace LIVE. The spatial object to be removed has a SDO type of multipolygon. The geometry information consists of 4 rings with a combined ordinate count of 4120. The statement used to delete the row is:
delete from tableA where tableA.id in (select tableA.id from tableA where tableA.id = 3);
The error occurs only on a 10g R1 Oracle instance (10.1.0.5.0) with Workspace Manager version 10.1.0.7.1. The delete operation succeeds without problems on a 10g R2 (10.2.0.2.0) instance with Workspace Manager version 10.2.0.3.1. The statement is also executed successfully on the 10g R1 instance if the table is not version-enabled.
Any help on this would be appreciated.
Thanks

Hi,
I would recommend filing a TAR in this one. The only ora-22813 error involving workspace manager and geometry columns that I know about involves queries that need to sort data for which the size of the geometry column was >30k. Does the execution plan for the delete statement involve any kind of sort? However, this is an old 9.2 bug, that I believe was fixed for all 10.1 and newer releases.
Does the same error happen if you do not use the subquery?
Regards,
Ben

Error when deleting EncryptionKey objects from /idm/debug

I have multiple EncryptionKey objects sitting in a dev environment of IDM 7.0. Is there a reason why I can't delete any of these unused/unneeded EncryptionKey XML objects manually via the /idm/debug page?
When I do, I get the following error:
ERROR: com.waveset.util.WSAuthorizationException: Delete access denied to Subject Configurator on EncryptionKey: 2F2C30920F6F7DE9:-3D5367A0:113073CC878:-7F1D.
If you're asking why -- it's because I think some of these keys are causing other issues in my environment and am trying to rule out all possible causes.

Hi,
I would recommend filing a TAR in this one. The only ora-22813 error involving workspace manager and geometry columns that I know about involves queries that need to sort data for which the size of the geometry column was >30k. Does the execution plan for the delete statement involve any kind of sort? However, this is an old 9.2 bug, that I believe was fixed for all 10.1 and newer releases.
Does the same error happen if you do not use the subquery?
Regards,
Ben

Error in FM DDIF_NAMETAB_GET when deleting BI objects via transport request

Dear all,
when importing a transport request in which several types of BI objects are deleted (Infocubes, DSO's, transformations, routines, DTP's, query elements, infosets, process chains). The import terminates only when transporting from acceptance to production with return code 12 due to an uncaught exception:
Transporting from development to acceptance did not raise this exception.
The ST22 dump (see below) refers in the "contents of system fields" section to a DSO, and to post-import activities. The DSO and the associated tables could not be found (rsa1 & se16), since they are deleted as desired.
Some of the relevant notes that I have found do refer to DSO related problems, but they all indicate to install SP19 which we already have installed (BW 7.0 Patch Level 23)
Could you please assist in pointing out potential solutions based on the information from the ST22 Runtime Error below?
Kind regards,
PJ
Runtime Errors UNCAUGHT_EXCEPTION
Except. CX_RS_PROGRAM_ERROR
Date and Time 08.02.2011 10:48:14
Short text
 An exception occurred that was not caught.
What happened?
 The exception 'CX_RS_PROGRAM_ERROR' was raised, but it was not caught anywhere
 along the call hierarchy.
 Since exceptions represent error situations and this error was not
 adequately responded to, the running ABAP program
 'CL_RSDD_DS====================CP' has to be
 terminated.
Error analysis
 An exception occurred which is explained in detail below.
 The exception, which is assigned to class 'CX_RS_PROGRAM_ERROR', was not caught
 and therefore caused a runtime error.
 The reason for the exception is:
 Error in BW: Error in DDIF_NAMETAB_GET
How to correct the error
 If the error occurs in a non-modified SAP program, you may be able to
 find an interim solution in an SAP Note.
 If you have access to SAP Notes, carry out a search with the following
 keywords:
 "UNCAUGHT_EXCEPTION" "CX_RS_PROGRAM_ERROR"
 "CL_RSDD_DS====================CP" or "CL_RSDD_DS====================CM001"
 "APPEND_DS_TEC_FIELDS"
System environment
 SAP-Release 700
 Application server... "dp1ci"
 Network address...... "<removed>"
 Operating system..... "HP-UX"
 Release.............. "B.11.23";
 Hardware type........ "ia64"
 Character length.... 16 Bits
 Pointer length....... 64 Bits
 Work process number.. 45
 Shortdump setting.... "full"
 Database server... "spisap02"
 Database type..... "ORACLE"
 Database name..... "DP1"
 Database user ID.. "SAPBIW"
 Terminal................. " "
 Char.set.... "C"
 SAP kernel....... 700
 created (date)... "Dec 14 2009 20:47:35"
 create on........ "HP-UX B.11.23 U ia64"
 Database version. "OCI_102 (10.2.0.1.0) "
 Patch level. 236
 Patch text.. " "
 Database............. "ORACLE 10.1.0.*.*, ORACLE 10.2.0.*.*, ORACLE 11.2.*.*.*"
 SAP database version. 700
 Operating system..... "HP-UX B.11";
 Memory consumption
 Roll.... 5979936
 EM...... 0
 Heap.... 1459888
 Page.... 40960
 MM Used. 6988880
 MM Free. 415648
User and Transaction
 Client.............. 000
 User................ "DDIC"
 Language key........ "E"
 Transaction......... " "
 Transactions ID..... "4D5111661004210BE10000000AFA2502"
 Program............. "CL_RSDD_DS====================CP"
 Screen.............. "SAPMSSY0 1000"
 Screen line......... 6
Information on where terminated
 Termination occurred in the ABAP program "CL_RSDD_DS====================CP" -
 in "APPEND_DS_TEC_FIELDS".
 The main program was "RDDEXECU ".
 In the source code you have the termination point in line 61
 of the (Include) program "CL_RSDD_DS====================CM001".
 The program "CL_RSDD_DS====================CP" was started as a background job.
 Job Name....... "RDDEXECL"
 Job Initiator.. "DDIC"
 Job Number..... 10475900
Source Code Extract
Line SourceCde
 31 RAISE EXCEPTION TYPE cx_rs_program_error
 32 EXPORTING
 33 text = 'Invalid DSO subtype'. "#EC NOTEXT
 34 ENDCASE.
 35
 36 * get table name from DDIC
 37 CALL METHOD cl_rsd_odso=>get_tablnm
 38 EXPORTING
 39 i_odsobject = n_infoprov
 40 i_tabt = l_tab
 41 IMPORTING
 42 e_tablnm = l_tablnm
 43 EXCEPTIONS
 44 OTHERS = 1.
 45
 46 IF sy-subrc <> 0.
 47 RAISE EXCEPTION TYPE cx_rs_program_error
 48 EXPORTING
 49 text = 'Error in CL_RSD_ODSO=>get_Tablnm'. "#EC NOTEXT
 50 ENDIF.
 51
 52 CALL FUNCTION 'DDIF_NAMETAB_GET'
 53 EXPORTING
 54 tabname = l_tablnm
 55 TABLES
 56 dfies_tab = l_t_comp
 57 EXCEPTIONS
 58 not_found = 1
 59 OTHERS = 2.
 60 IF sy-subrc <> 0.
>>>>> RAISE EXCEPTION TYPE cx_rs_program_error
 62 EXPORTING
 63 text = 'Error in DDIF_NAMETAB_GET'. "#EC NOTEXT
 64 ENDIF.
 65
 66
 67 ELSE.
 68 * model table only needed for standard datastore objects, for
 69 * write optimized DSOs target table is a changelog that is fully described by
 70 * dta_pro (infoobjects)
 71 CHECK n_s_dta-odsotype = rsdod_c_type-standard.
 72
 73 * get model table fields to add
 74 CALL METHOD cl_rsd_odso=>get_mod_tab
 75 IMPORTING
 76 e_mod_fld_ur = l_t_comp.
 77 ENDIF.
 78
 79 * according to T.B. ( 13.04.2007) the correct position is
 80 * not needed in the D version
Contents of system fields
Name Val.
SY-SUBRC 0
SY-INDEX 0
SY-TABIX 1
SY-DBCNT 1
SY-FDPOS 0
SY-LSIND 0
SY-PAGNO 0
SY-LINNO 1
SY-COLNO 1
SY-PFKEY
SY-UCOMM
SY-TITLE Execute Post-Import Methods and XPRAs for Transport Request
SY-MSGTY E
SY-MSGID DA
SY-MSGNO 300
SY-MSGV1 /BIC/AV_AMOFCB40
SY-MSGV2
SY-MSGV3
SY-MSGV4
SY-MODNO 0
SY-DATUM 20110208
SY-UZEIT 104759
SY-XPROG SAPLSYST
SY-XFORM SYSTEM_HOOK_OPEN_DATASET

Hi All
We are also experiencing this same error when transporting deletions of multiple objects.
Although the transport was cancelled in the destination system (production) it appears to have largely deleted all objects successfully except for DSOs.
The DSOs still appear in the table RSDODSO (via SE11) but are not visible anywhere else. When you try to view the DSO via RSDODS a warning appears saying "DataStore object to be deleted by transport -> delete only allowed". If you try to delete them in this transaction the same ABAP runtime error as the transport appears.
Any assistance would be greatly appreciated!
Regards
David

BI authorization objects not appearing in RAR, error while generating role

Hi
I am facing certain problems relating to integration of BI module version 7 with GRC Access Controls version 5.3 and support package 06. I am describing the problems in details below:
(a) In Risk Analysis and Remediation (RAR) component, I am creating Functions and
      Risks for Business Intelligence (BI) module. For that I have downloaded the
      descriptive text and authorization object data from BI development system and
      uploaded the same in RAR. Then I have created 2 Function Ids DBI1 (having action
      RSA1) and DBI2 (having actions RSA11, RSA12, RSA13, RSA14, RSA15) and 1
      Risk Id for BI (having Function Ids DBI1 and DBI2) in RAR. But when I checked
      the permission tabs of the Function Ids DBI1 and DBI2, I could not find any
      authorization objects for the actions in them.
(b) In Enterprise Role Management (ERM), when I am trying to create a Role TEST-BI
       in DBI 100 and I put the BI transaction codes in authorization data , I get the
       authorization objects . Risk analysis is also being done successfully. But at the time
       of Role generation in background mode , it is giving an error message :
       Error generating role TEST-BI for system DBI 100: Unable to interpret * as a number.
       I am thus unable to generate any role in DBI 100.
(c) In Compliance User Provisioning (CUP), I have imported a standard role from DBI
      100. Then I have added Functional Area, Business Process, Subprocess and
      Criticality Level to this role in CUP. But when I try to assign this Role to an user, it
       gives an error Error creating request. But requests are getting created and roles are
       being assigned to users in ECC development systems using the same Initiator, CAD, stage
       and path.
Can anyone please help me ?

-

Error while generation of the Authorization object (

Hi Gurus,
I have created a Authorization object Z_CCTR3 for 0costcenter authorization.
but getting following error while generation of the Authorization object (type is Flat authorization)
"Error occurred when reading the data from DataStore object Z_CCTR3"
Any inputs will helpful...
Sonal.....

Hello everybody,
my problem is solved.For the UDConnect, whatever DATA SOURCES you create gets registered in a FUNCTION MODULE which has a capacity of only 99 enties, so to increase it implement the SAP NOTE 876340 - UDC Error available on SERVICE MARKET PLACE.
This problem occurs with BW version 3.5 level 17 or below.
Regards,
Priyanka
Edited by: Priyanka Joshi on Jun 10, 2008 11:03 AM

0Orgunit(hierarchy) and authorization object display getcell error in Webi

Hello,
         We are facing with GetCellData error in WebI to SAP BEx Query.
         This works perfectly fine in Bex for a particular test user who has access to particular org unit value.
         But in Webi we are getting this Getcelldata error.
        Tried all the options and message as recommended in sdn group.
        mdxtest returns no value.
        looked at all below messages but no luck.
GetCellData error in WebI to SAP BEx Query
Re: SAP BO WebI Report on top of BI Bex Query with Authorization Variable
in the rsecadmin, we get the same error like mentioned in below message
Hierarchy Authorization doesn't work for MDX but works for BEx Query.
Is any authorization required for this user to execute and view the authorized values in Webi?
or we have to assign any authorization ?(0BI_ALL is not assigned).
Please find below screenshots of BEx query auth log or Webi auth log (differences)
Bex auth log:
The Following Attributes Are Authorized and Thus Are Visible
0BBPPURGRPX
0BBPPURORGX
0BBP_BUYID
0BBP_ISCOMP
0BUS_AREA
0COMP_CODE
0CO_MST_AR
0CRMSALGRPX
0CRMSALOFFX
0CRMSALORGX
0CRMSRVTGRP
0CRM_SALGRP
0CRM_SALOFF
0CRM_SALORG
0CRM_SRVORG
0LEAVERS
0LOGSYS
0MAST_CCTR
0PERS_AREA
0PERS_SAREA
0PLANT
0PURCH_ORG
0PUR_GROUP
0SALESORG
0SALES_GRP
0SALES_OFF
This above log is missing for mdxtest auth log.
Is this the issue?
Any quick reponse or help really appreciated.
Regards,
Ravi
Edited by: Ravi Gadicherla on Feb 28, 2010 5:36 PM

Hi,
    Here is the log of MDXtest:
Buffering the Authorization Data
Buffering for InfoProvider 0PA_C01 and Users HRTEST93
InfoObject Properties Defined
Reading of Directly Assigned Authorizations
Direct Assignment Does Not Include Universal Authorization 0BI_ALL
Reading the Indirect Assignments with Authorization Object S_RS_AUTH
Does user have OBI_ALL?
No, the User Does Not Have Universal Authorizion 0BI_ALL
Negative Entry in SU53 Result of Failed Check for 0BI_ALL
Indirect assignments found; no universal authorization
Regards,
Ravikanth

Authorization objects problem , unable to delete

hi all,
i hv created authorization object via SU21. ZZ_program, I am trying to modify but it prompts warning:
Field assignment for object ZZ_PROGRAM cannot be changed as auth. for it exist
Message no. 01221
Diagnosis
You attempted to change an object for which authorizations exist. Authorization fields for the object cannot be changed here.
Procedure
If you want to change the object anyway, you must first delete all authorization belonging to this object. Consider that other systems may also be affected.
after i enter the message, it prompts the whereuse list
Where-Used List
Authorization Object
ZZ_PROGRAM
Berechtigungen
AA________00
Rollen
ZZPROGRAM 
after that, the fields are all greyed off, i am unable to change the authorizatiion fields and i do not understand the where use list result, can anybody pls help ?
i am working on sap 4.7

There is one particular check with Table USR12 (User Master Authorization Values) and also with table AGR_1251 (Authorization data for the activity group).
SELECT distinct AUTH FROM USR12
 appending table list
 WHERE OBJCT = OBJECT
 and AUTH ne '&_SAP_ALL'
 and AUTH ne '&_SAP_APP'
 order by auth.
if sy-subrc = 0.
 insert 'Berechtigungen' into list index 1.
 RC = 1.
endif.
append 'Rollen' to list.
index = sy-tabix.
 SELECT distinct agr_name FROM AGR_1251
 appending table list
 WHERE OBJECT = OBJECT
 order by agr_name.
If that is sucessful , you cannot change the authorization object.
See the content of AGR_1251 table using your authorization object name. Then you will Role name from field AGR_1251-AGR_NAME
with this role name, go to Tcode: PFCG
and give the Role name and click on change button
In authorization tab.Chick on Change Authorization Data.
And find and remove this authorization object from there.
And then proceed with changing the Authorization object.
Hope this will solve ur issue.

Authorization OBject for Delete and Lock indicator in PO function.

Hiii
I'm using sap 5.0. I'm notice that we can set the authorization object to control the user from make a action for delete/Lock indicator in purchase order so that we can prevent the 'unpredictable user' from do the deletion on item PO item.
it also help me to authorize the selected user to perform delete or lock action.

Hi,
To prevent deletion or locking in specifically may not be controlled thro authorisation but changing the PO can be controlled.For this the authorisation objects M_BEST_BSA, M_BEST_EKG,M_BEST_EKO,M_BEST_WRK may be looked into .Here against Activity there is option like create,change ,delete,print etc which if suitably assigned can restrict the users for certain activity.Try with your basis team in this objects.
Dhruba

Authorization object related to PRT Delete

Hi PM guru,
Some user is not able to delete PRT assigned to the operation.
Whether any authorization object related to PRT is there so that i can check roles for user .
Regards
Anil Kumar

Anil,
Get the user to try to delete the PRT.
Then the user should type /nSU53 in the command field.
This will produce a report with the missing authorization object(s)

Authorization Object parameters error

In my program, I used Authorization object M_MATE_VKO
My program checked using
VKORG , ACTVT = "03" , VTWEG = '*'
My User had been assigned with M1 - M7 (M1 to M7) for VTWEG.
User not authorized, SU53 shows it required "*" for VTWEG
Now, I modified the checks to
VKORG , ACTVT = "03" , VTWEG = " "
VTWEG is now a BLANK.
User still not authorized, SU53 shows it required "-" for VTWEG (hyphen is this case)
What should I do to allow "No checks" on VTWEG?
Should I just used only VKORG and ACTVT with the objects which state 3 parameters?
How do I code in order to allow User with the appropriate authorization to pass thru?
Thanks
bye

Hi,
If you don't want to check a value against VTWEG either take it out of the statement or use VTWEG = DUMMY.
Regards,
Nick

Error in Transport of Authorization Object

Hi,
I have created a authorization object in my development and transported it to testing. In the transport log I can see that it was succesfully imported but I am not able to see the Authorization object in SU21 of testing system but I tried to see that Authorization object through SUIM and able to see that object.
I tried to create a sample role and assign this authorization object manually to that role but not able to do that.
Can any one help me in this issue.

Hi Martin,
Thanks for the reply
Yes I forgot to transport Authorization class. I have done that now and able to access the Authorization object.
Can you please let me know the complete process whether we have to transport only Authorization class...
Then the Authorization object will be transported on its own..
Thanks in advance

How i know Authorization object in system?

Hi all,
i create new BAdi with Enhancement Spot: ZWORKORDER_GOODSMVT (copy WORKORDER_GOODSMVT in standard SAP)
now i have Badi definition: ZWORKORDER_GOODSMVT
with Interface: ZIF_EX_WORKORDER_GOODSMVT
all ok.
now how i can see authorization object in Badi definition: WORKORDER_GOODSMVT (standard)? i already creat Authorization object but now i don't know what field and choose in maintain the authorization (from Badi definition: WORKORDER_GOODSMVT )
ex: 1. in package BSFC have interface IF_EX_BSFC_POLICY and method GET_POLICY
 2. Authorzation object: B_BSFC (have field name: BSFC_APPL and ACTVT in maintain the authorzation)
because i get this and solve in my job.
when i activate the BAdI function called WORKORDER_GOODSMVT and assign to the a.m. authorization object???
Processing Logic:
 The backflush errors are created after the execution of backflushing transaction in Repetitive Manufacturing (REM) t-code MF42N or MFBF
 If during the backflush execution the components are not available in the respective production storage location then system by default will create backflush errors
 Backflush errors will need to be cleared everyday and must be cleared before end month stock take
 Backflush errors can be processed using the following t-code:
o MF45 Individual
o MF46 Collective
o MF47 Post processing List
o COGI Post processing Individual Components
Authorization will be applied only for COGI, while others will not be used in PSECI
 Create new authorization object called Z_PP_COGI to be assigned later to the user id
 Activate the BAdI function called WORKORDER_GOODSMVT and assign to the a.m. authorization object
 For unauthorized users, an errors message will appear if they try to delete the backflush errors in COGI transaction as follows:
o You are not authorized to change/ delete the backflush errors! Please contact your superior!
Thanks so much all, ......

Hi Nguyen,
Check the following links:
http://help.sap.com/saphelp_erp2004/helpdata/en/b8/bdb83b5b831f3be10000000a114084/content.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/52/6714a9439b11d1896f0000e8322d00/content.htm
Regards,
Rajesh K Soman
Please reward points if found helpful.

Error in Deleting Authorization Object

Similar Messages

Maybe you are looking for