Finding Objects for Authorizations

Dear PM Experts,
When we request the basis guy to restrict Authorizations for users we need to provide the objects for each transaction code with the restricted values. (ex-if I'm allowing only order type PM05 in IW31 T-Code for a particular role I need to specify the particular object from the T-Code IW31 and request to allow only PM05 for the particular role).
But the problem is I'm doing it for the first time and I'm not in a position to identity/find the objects of each T-Code. Can anyone help me out by providing a guidance? is there a particular T-Code to get the object of T-Codes?
Cheers
Deepal

hi
for PM here are the authorization objects
/MRSS/PB1           Multiresource Planning: Organizational Units
/MRSS/PB2           Multiresource Planning: Orders
I_AER                    Follow-Up Order Creation
I_ALM_ME              Mobile Asset Management
I_AUART                 PM: Order Type
I_BEGRP                PM: Authorization Group
I_BETRVORG          PM: Business Operation
I_CCM_ACT            Configuration Control authorization object
I_CCM_STRC          Structure gap maintenance authority
I_CONFLICT            WCM: Checks for Lockout/Tagout
I_FCODE                WCM: Function Codes (e.g. Operational Cycle)
I_ILOA                   Change location- and accounting data in the order
I_INGRP                PM: Maintenance Planner Group
I_IWERK                PM: Maintenance Planning Plant
I_KOSTL                PM: Cost Centers
I_MASS                 PM: Mass Data Change
I_QMEL                 PM/QM: Notification Types
I_ROUT                 PM: Task List
I_ROUT1                PM: Task Lists by PM Planning Plant, Work Scheduler, Status
I_SOGEN              PM: Permit
I_SWERK             PM: Maintenance Plant
I_TCODE              PM: Transaction Code
I_VAL                  WCM: Valuation of Applications
I_VORG_MEL        PM/QM: Business Operation for Notifications
I_VORG_MP          PM: Business Operation for Maintenance Planning
I_VORG_ORD       PM: Business Operation for Orders
I_WCUSE            WCM: Use of WCM Object
regards
thyagarajan

Similar Messages

Find object for roles & authorization.

Hi Gurus,
How can i find the perticular object in SU24?
I need object for "RELEASE FLAG ICON" in IW31,IW32 T.code.
Till the time I have co relate following 2 objects.
I_BETRVORG & I_VORG_ORD and I have maintained both object value as a blank in role.
Still I am not able to control release activity thru that role.
Please guide any thing wrong or missing.

Hi Upesh,
Start the transaction that you like. Just before pressing the key "Release", type "/h" in the transaction code field and press Enter. This will activate the debugger.
Now press the "Release key" - the system will enter the debugger. Once there use the menu "Breakpoints -> Breakpoint at -> Breakpoint as statement" and enter the ABAP command "authority-check". Then browse through the execution of the program using the pushbutton F8 ("Continue"). The debugger will stop at all the objects being checked.
If you don't have a literal (enclosed in apostrophes ') after the keyword OBJECT but a variable, double-click on this variable to see its value.
Good luck!
Raf

How to restrict to find object in authorization object c_klah_bse

Dear Experts,
I would like to restrict my user to find object/class in CL30Nn authorization object c_klah_bse, I did not find choice/object list to be restricted.
Kindly advice.
Thank you.

> where can i find possible values of Authorization hierarchy, Cost centers , cost center groups in
Well, not in an internet forum. I think you should speak to the financial consultants who customized your system. These values will differ from company to company.
Maybe someone can give you a list of source tables for these values but that would be just it, a list of values without an idea of their relevance and validity......

PD - Find objects for qualifications

Dear ALL,
I am new in PD. In t-code PPPE_SEARCH_FOR_Q I want find qualifications for my position. I have a position with qualifications. And I have a person who has profile suitably to my position.
Qualifications tab page I have entered my position and restricted objects (selected only persons). In "restrict further" tab page have selected all persons for my business area. On executing there is blank. I dont know why? Have any idea?
regards
Samir

Hi Samir,
I didn't go into program details, so not very sure about the cause.
You made my day with your kind gesture, thank you very very much
All the best,
Dilek

Implementing Boolean operators during find object for qualification

Hi Team
We would like to maintain requirements profiles for PD object (position,job etc.) in terms of qualifications (Q) using complicated boolean operators , for example :
((Q=English>4 OR (Q=French=5 and Q=Spanish>2)) OR (Q=German=6 and english<3) and Q=education # 2
The complicated boolean operators could be also : range,excluded from the range,equal,not equal,not exits.
We would like to execute the search for qualification ,profile matchup based on this complicated boolean requirments profile.
Is there any custom development or configuration to make this happen ?
Best Regards
Dror

Is this still true if the Collection generics elements are an interface type? For example, in the
code I sent earlier, I have:
/** The authorities granted to this account. */
private Set<Authority> authorities;
But Authority is an interface that is implemented by the DefaultAuthority class (maybe others
eventually). I was under the impression that in this situation, the metadata does have to provide
the actual type that will be in the collection.
But even if it works in Kodo, one of the requirements of my project is that the JDO implementation
be swapable with JPOX. When I started working on it, both Kodo and JPOX were at a much earlier stage
of implementing JDO 2, and if I recall correctly, JPOX required the implementation class (though I
don't know if it had to be fully qualified). I'm not sure that requirement has been removed from
JPOX yet, though I haven't checked in a while.
Thanks for your help with the default value settings though. Is there any place where I could have
found that behavior documented (Kodo docs, JDO2 spec, etc.)?
Mark
Abe White wrote:
p.s. You don't need to set the element-type in metadata if you're using
Java 5 generics; we can get the element type from the field declaration.
Also, when you do have to declare an element-type in metadata, you
don't need to fully qualify the class name if the element class is in
the same package as the field's owner (the current <package>), or in
java.util, java.math, java.lang.

Problem finding object for Custom Object Test

I need to create a custom object test that tests whether a an element is present after a record gets inserted into the database. The script is databanked and each iteration needs to insert a databanked record, then evaluate my custom object test to make sure the record was inserted. The trick is in writing the expression that finds the correct custom object. After one iteration, this is the code that finds the custom object;
RSWApp.om.GetElementByPath "window(index=0).link(text=""Category D"" | href=""javascript:OpenModal('DocumentCategoryAddEdit.aspx?documentCategoryId=377','400');"" | index=19)", element
Instead of always grabbing the object whose text is "Category D", I want to grab the object whose text is <<category>> (ie retrieved from a databank file). Search in the href or index isn't helpful because these will change with each iteration through my script.
I tried to modify the GetElementByPath to this:
RSWApp.om.GetElementByPath "window(index=0).link(text=dbValue|)", element
where dbValue is a local parameter that I set earlier on. When I run this, I get an object not found error.
Any ideas?

I much prefer to use RSWAPP.om.findElement. It is much more robust than FindElements. 
RSWApp.GetDatabankValue Is what is needed anytime you want to return Databank values to the VBA environment 
 
Your code should look something like the following: 
 
Dim dbVal as string
 
RSWApp.GetDataBankValue "MyDbVariable", dbVal 
 
This will return the contents of "MyDbVariable" which is defined and bound in the databank wizard to VBA variable dbVal. 
 
You can then use DBVal in your path:
 
RSWApp.om.GetElementByPath "window(index=0).link(text="" & dbVal & "" | href=""javascript:OpenModal('DocumentCategoryAddEdit.aspx?documentCategoryId=377','400');"" | index=19)", element 
 
If you decide to use Find elements instead of GetElementByPath, the syntax would like the following: 
 
Set element = RSWApp.om.FindElement(dbVal, "A", "InnerText") 
As you can see it is much simpler. 
 
Hope this helps!

How to find out Authorization Object for Plant

Hi,
I have to implement an Authorization check for Plant in My Report Program.
Is there any transaction which can help me to find out Authorization Object for any field like Material and plant?
Thanks,
Mamta

Using SU21 u can create Authorisation Object.
The ABAP command AUTHORITY-CHECK is used for performing authorizaton checks in programs.
check f1 help on AUTHORITY-CHECK for the syntax.
check these links
link:[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c;jsessionid=(J2EE3417500)ID1605942050DB11298929682009193279End]

How do i find authorization object for a transaction code?

Hi SD Guru's
I need to find the authorization object for both standard & Z transactions.
How can i find this?
Regards
Ravi

Hi,
check the coding with SE38 for "authority-check" and you will get the objects or set a breakpoint on statement "authority-check" while you execute the transaction.
Regards,
Andreas

Authorization object for PLANNING PLANT

Hi all,
My client has different Planning plant & Production plant.
If I need to give access to GR for order (MB31), how do I know the authorization object for the Planning plant.
User should be given access to MB31 to the Planning plant & NOT to the Production plannt.
Any idea where we could find the authoriz. objects for a particular field?
Pls advise.

Goods Receipt for Production Order: Movement Type            M_MSEG_BWF
Goods Receipt for Production Order: Plant                    M_MSEG_WWF
these are the authorisation objects with activities as ACTVT and WERKS
Maintaine the values for ACTVT as
01 Create or generate,
02 Change
03 Display
04 Print, edit messages
and maintaine the values WERKS   (ur plants 4 which u want to give authorisations)
and BWAR ( movement types 4 which u want to give authorisations)

Authorization Object for Clear G/L account (trx F-03)

Hi,
my client wants need to restrict some G/L accounts for certain company codes when clearing G/L accounts. In other words, I need to check that some users are cannot clear (trx F-03) some G/L accounts for some company codes.
I have reviewed the authorization objects (FI & FI_T) and I could not find one for that purpose. It seems that 'clearing' is not an activity for authorizations as create, display, delete, post... are.
Do you know if an authorization object (or activity) for clearing G/L account exists?
Thanks you in advance
Rafa

ST01 shows all the objects checked in F-03 from calling the transaction, through simulation, till clearing:
S_TCODE    RC=0 TCD=F-03;
F_BKPF_BUK RC=0 ACTVT=01;BUKRS= ;
F_BKPF_BUK RC=0 ACTVT=01;BUKRS=1000;
F_BKPF_BUK RC=0 ACTVT=01;BUKRS=2000;
F_BKPF_BUK RC=0 ACTVT=01;BUKRS=2000;
F_BKPF_BUP RC=0 BRGRU=0001;
S_TCODE    RC=0 TCD=F-03;
F_BKPF_BUK RC=0 ACTVT=01;BUKRS= ;
(I have cleard an account between company code 1000 and 2000.)
Activity "post" means in this case "clear". There is no different activity for clearing.

Authorization object for purchasing

Hi Sap gurus,
Can someone tell me please how I can find suitable authority check object for purchasing? I created report for purchase orders history and now i would like to implement also authority check. I would like to check authorizations for purchasing groups, cost centers, orders types...
Do you have any example? Where to put this authority check into the program?
Thanks in advance, points granted,
BR
Saso

hi,
for purchasing grp object is: M_BEST_EKG
put authority check after selection screen
write
at selection-screen.
perform authority_check.
form authority_check
AUTHORITY-CHECK OBJECT 'M_BEST_EKG'
ID 'ACTVT' FIELD '03'
ID 'EKGRP' FIELD pr_ekgrp.
if sy-subrc <> 0.
error msg.
endif.
endform.

What is standard authorization object for Personal development P_PLOG

Hi,
Recently i got a object in HR and i dont have any experince in HR.Could you guide me how to asssign standard authorisation object for the personal development p_plog? how to see the infotypes and what is the header field in innfotypes?

1-First of all the object is "PLOG" for personal planning. Theres no object with p_plog , most of time to maintain HR master we use object P_ORGIN.
2- You want to assign authorization for certain infotypes?
if yes, you have to go TR.PFCG and assign the authorization to that specific role.
Now you might have question , how youll will track down the roles against the authorization object .
Therere several ways , you can go to Tr.SUIM and find reports by user , roles etc.
You can also go SE16-> give table AGR_1251, give object and you can see the values in table.
After finding the suitable roles you can go to PFCG and assign the values to the roles.
As a good practice its better to create your OWN role Z:hrXXXX and assign it to users.
Hope thisll give you idea!!
P.S award the points.
Good luck
Thanks
Saquib Khan
"Knowledge comes but wisdom lingers!!"

Authorization object for "set TECO" and "undo TECO"

We want to control the authorization for "set TECO" and "undo TECO",but we can't find relevant Authorization object. Is there any Authorization object for these two functions? If there's no Authorization object for them ,then how can we achieve the same result? Thank you very much!

Hi,
Under one user ID the auth object B_USERSTAT will have the authorization key in which user will be responsible to change the TECO user status.
One user will not have any authorization key under B_USERSTAT Auth_Object.
Hope it's will give you help.
Regards,
Vishal Kr. Sharma

Authorization Object For Activate Reservation/Purchase Req - IW31

Hi,
I want to authorize only certain users to use button "Activate Reservation/Purchase Req" IW31 transaction. What is the Authorization Object for the above mentioned button, if any. Is there any other way that i can do this activity in customizing? I am using ECC 6.0
We find that activating the objects below (suggests- SU24)
M_BANF_BSA
M_BANF_EKG
M_BANF_EKO
M_BANF_WRK
allowed in IW31, that 'not-authorized-users' would not be able to create purchase requistions. therefore: no material procurement.
But for reservations, we didn´t find the object in IW31.
Thanks and regards
Gabriel.
Edited by: Gabriel_Fornazier on Dec 31, 2010 12:16 PM

Olá Michely
Segundo a SAP não existe objeto de autorização em BASIS para restringir por usuário o botão da transação IW31 que eu precisava(Ativar Reserv./Req. de Compra). Portanto segundo a SAP, poderia usar a ampliação IWO10006 para resolver isso.
E foi o que fiz. Primeiramente criei manualmente um objeto de autorização 'Z' dummy, para atribuir a um usuário que não quero que enxergue o botão. 'DISP' o nome do botão(dar F1 no mesmo) que desejo esconder.
Posteriormete na EXIT desenvolvi o seguinte código para esconder o botão:
AUTHORITY-CHECK OBJECT 'Z_VORG_ORD'
ID 'ZBETRVORG' DUMMY.
IF SY-SUBRC EQ 0.
FCODE_EXC_CUST-FCODE = 'DISP'.
APPEND FCODE_EXC_CUST.
ENDIF.
Portanto, todo usuario que tiver aquele objeto de autorização ''Z'' no seu perfil não vai exergar o botão Reserv./Req. de Compra.
Essa é a melhor solução do que usar objetos de autorização de outras transações.
Espero ter ajudado
abraços,
Gabriel M. Fornazier
SAP FI Certified Professional
Minas Gerais - Brasil

Authorization object for field, EBAN-ESTKZ (creation indicator)

Dear All,
Does anyone know if there is an authorization object for field, EBAN-ESTKZ?
I need to control the PR's authorization at creation indicator level. i.e. we need to remove the ability for all users to change Purchase Requisitions created by MRP.
Thanks,
Arun.

Hi Jay,
Thanks for your response.
I didnt find it there. You have any Z options?
Thanks,
Arun.

Finding Objects for Authorizations

Similar Messages

Maybe you are looking for