Grant transaction to a user

Hi,
I am new to SAP
I have to grant SM37 to a user
How can I do that ?
Sorry if if it is a basic question
Thanks in advance

Hi,
you have to add SM37 in a role which will be assigned to the user. you have to use transaction codes PFCG, SU01.
This is a basic question. you can go through AS ABAP Authorization topic in
http://help.sap.com/saphelp_nw70/helpdata/en/52/6714a9439b11d1896f0000e8322d00/frameset.htm
Lastly, the question related to SAP Security should be posted in the correct forum.
Regards,
Debasis.

Similar Messages

Transaction code for user menu, sap easy access

Hi system experts!
Does anybody know which transaction causes the user-specific menu within "SAP easy access" (the welcome screen after login, like /n does) ?
I need it to be called from a portal iView, so that the usual sapgui-like screen with the user's menu appears in a portal screen, both for SAPGUI for windows and http.
Trx. S000 or SESSION_MANAGER does not cause the user-specific menu when called from the portal. These work least of all for call via ITS.
thanks
Andreas

hi ,
The transaction code is SE41.. This is for creating Menus and tool bars.
you can also try SMEN it will call the user menu as you described in your post.
Regards,
Krishna
Message was edited by: Krishnakumar

Coming back to the Transaction from a User Exit

Hi,
I perform some checks in a User-Exit before saving a transaction & throw an error message if something is not proper. But, the transaction terminates after that. I need to give the user an option to make changes in the transaction. eg, if user exit checks if a certain field should not be empty, the user should have an option to enter the field after the user exit throws the message. How can i go back to the same screen from the exit to achieve the same.
Thanks in advance.
Bikash
This was for a general scenario wherein after an error message triggered by an Exit is displayed, the transaction just terminates.
Message was edited by: Bikash Agarwal

Hi,
If you give error message, it will leave the current transaction.
Instead try using some POPUP function module, which will have options 'OK' and 'CANCEL'.
If user presses 'OK', then allow user to do modifications and if he presses 'CANCEL', then write LEAVE PROGRAM to come out of transaction.
Hope it helps.
Regards,
Shashank

Where do I get all SAP WM transaction codes for user acceptance test ?

Hello experts,
Where do I get all SAP WM transaction codes for user acceptance test during cutover activities?
I need the list of transactions.
Thanks in advance

Hi,
You can download through Solution Manager also. If ASAP is installed in your computer, you can download all the standard transactions, otherwise let me know your id, i will send it to you.
Aktar

Need to add Standard transaction code to User Menu.

Hi All,
I need to add Standard transaction code to User Menu. How this can be accomplished?
Thanks

Your Security and/or Basis team probably have control of the user menu settings. On the other hand, if this is for YOUR user menu, you could choose to simply adjust your favorites.

Grant Privileges to another user

Hi,
I am new to plsql. In course of my learning. I created two tables BOOKS and AUTHORS in orcl database(10g) through SYSDBA.
Again i logged in to SCOTT user account and am unable to see the BOOKS and AUTHORS tables.
Please let me know how do i grant administrative privileges(to edit,delete,insert,update) to SCOTT user for these tables.
Thanks & Regards,
Amrutha.

808099 wrote:
1. Got now that SYSDBA is a role and SYS is user.
2. I was able to login to sqlplus through giving "/ as SYSDBA" as the username. Hence i thought it as user."/ as sysdba" connects to the database as the SYS user using operating system authentication with the SYSDBA role enabled.
3. Secondly, I dont know which schema does my BOOKS table belong to. Because i just ran a create table script in scott/tiger@orcl. PLease suggest how i can know which schema it belongs to.If you connected to the database as the SCOTT user and ran the script to create the table, the table would almost certainly be owned by SCOTT. If you connected to the database as the SYS user and ran the script to create the table, the table would most likely be owned by SYS. If the script specified the schema owner, i.e.
CREATE TABLE library.book ...the table would be created in the specified schema. But you need to have very powerful privileges in order to create objects in other user's schemas and SCOTT does not have those privileges unless you've specifically granted them.
4. Thirdly, I will delete the BOOKS and AUTHORS from SYS and create them in SCOTT user. But thought if GRANT privileges can be an alternative.Not really. It's much better to have the tables owned by the correct schema in the first place. You use grants to allow other users to access (or modify) tables but other users are not going to have the same level of privileges (for example, they're not going to be able to run DDL against the table).
Justin

How to restrict a schema owner from granting privileges to other users.

How can we restrict a schema owner from granting privileges to other users on his objects (e.g. tables). Lets say we have user called XYZ and he has tables in his schema TAB1, TAB2 an TAB3. How can we restrict user XYZ from granting privileges on TAB1, TAB2 and TAB3 to other users in the database. Is it possible in Oracle 10g R2? Any indirect or direct way to achieve this? Please help on this.
Thanks,
Manohar

Whenever someone is trying to prevent an object owner from doing something, that's generally a sign of a deeper problem. In a production database, the object owner shouldn't generally have CREATE SESSION privileges, so the user shouldn't be able to log in, which would prevent the user from issuing any grants.
As a general rule, you cannot stop an object owner from granting privileges on the objects it owns. You can work around this by creating a database-level DDL trigger that throws an exception if the user issuing the statement is XYZ and the DDL is a GRANT. But long term, you probably want to get to the root of the problem.
Justin
Edited by: Justin Cave on Nov 6, 2008 9:52 PM
Enrique beat me to it.

Assigning transactions to a user

Hi All,
I want to assign 5 transactions to a user where, for 2 transactions the user should have a display option only and for the rest of the transaction he should have the full authorization.
I know the basics of creating user (su01) and roles (pfcg ), which contain auth. objects followed by profile generation. But in this scenario how can I proceed. Need your help.
Regards
Rajesh

Of course it does depend on which transactions these 5 transactions are.
Some tcodes are display only regardless of the access for a specific object checked by the 5 transactions.
However I agree with the others: the transaction code is not that important (other than it's context for pulling in the authorizations required to actually use the 1 of 5 transactions into the role via SU24 or "case sensitive" for a program based on the transaction context (system field sy-tcode)). Many usefull transactions in SAP care about the authorization object' activity type field values and other application object fields, and most will let you switch to change mode from the display transaction if you have change access - regardless of the transaction (S_TCODE) but sometimes checking other TCD related field ID's.
Reporting tcodes are often different though: these have the same core checks but other options and objects.
Both transaction and reporting tcodes often have customizing dependencies as well, so you do not gave to use authorization objects always.
Rather complicated actually... as are the menus of the transactions from a security perspective....
Which 5 transaction codes were you specifically asking about?
Cheers,
Julius

Grant privileges to a user for user_lock

user_lock.sleep (3000);
i am using it in my procedure.
is it require to grant privileges to a user for user_lock.

There is no built-in package namely user_lock. Actually it is dbms_lock.
http://download-east.oracle.com/docs/cd/B19306_01/appdev.102/b14258/d_lock.htm#sthref3898
I was using dbms_lock few days ago. Yes dba has to give the privilege to use this package.
SQL> grant execute on dbms_lock to scott;
Grant succeeded.
[My experiment]
http://mamohiuddin.blogspot.com/2007/02/plsql-block-abnormal-termination-ed.html

Grants given to a user give to another as well...

How is it possible the grants given to a user , given also to another....
For example :
connect scott/tiger;
grant select on dept to x;
grant insert on dept to x;
Many thanks,
Simon

As yingkuan points out, the table you're looking for is, presumably DBA_TAB_PRIVS.
I would point out, though, that 9 times out of 10, writing a script to duplicate the grants for a user from DBA_TAB_PRIVS is a bad idea. The proper approach is almost always to create a role, have the table owner (SCOTT in your last post, USER_A in the original post) grant privileges on the tables to the role, and grant the role to the end users. That is far, far easier than trying to keep grants in sync among multiple users.
Also, be aware that DBA_TAB_PRIVS only accounts for object-level privileges, not system-level privileges and that it only accounts for privileges granted directly to a user, not those granted to a role (DBA_SYS_PRIVS, ROLE_SYS_PRIVS, ROLE_TAB_PRIVS, ROLE_ROLE_PRIVS, and DBA_ROLE_PRIVS would all come into play for those).
Justin
Justin

Want Transaction History for Particular Transaction for Particular User. .

Hello Friends,
I have one query.
I want to get detailed Transaction History for Particular Transaction for Particular User_Id for particular Time/Date period, with his/her Terminal ID info ,also.
One USER_ID in SAP Server is shared among 6-7 people to do their work.
So, I want to know that from which terminal that user has run that transaction to do its work on particular Date/time.
I tried STAT, STAD, ST03N, but did not help me very much to get deep level information.
May be, i am missing something to get the solution for this kind of situation.
Any Solution for this kind of Situation ?
I am waiting for your valuable Response.
Regards,
Bhavik Shroff

I want to get detailed Transaction History for Particular Transaction for Particular User_Id for particular Time/Date period, with his/her Terminal ID info ,also.
ST01 will give you the Result after switching on the TRACE. I want to get Transaction History for a particular DAY/Weeks/Month .
e.g.
One User Id is shared among 6-7 people. One of the person did something using FB08 transaction on last 08/07/2008. But, as the User ID is shared among several User, How can i know the person who did that change and from which place/Terminal.
See,
I have the following information to fire the search.
-> User Id information
-> which transaction he/she used to do that work
-> When he did the change for something (means i know the exact date)
But , I want to know ,from which Terminal he/she executed that transaction, as the User ID is shared among several people.
You tell me the way ,so that i can have total required information for this kind of situation.
If i am wrong at any step , then let me know.
Regards,
Bhavik Shroff.

Authorisation roles and transaction codes for users(MTO--PPmodule)

Hi !!!
GURUS !!!!!!!!
I am working here on live project for make to order scenario.
We are using only batch management.
Could you give me transaction codes for users for authorisation roles.
All codes from start to end scenario.
Regards,
Nitin

Dear,
You have to do the JRM - Job role mapping. The list of transactions cannot be decided commonly across all implementations, as per your Business process definition you have to list the transactions invovlved and which business roles are required for that.
One example: PP_Planner is a Role, this is applicable for the planning person, he will be given transactions related to SOP, DM and MRP, he will not be given transactions related to SFC. Its vice versa for a operations person.
Thanks & Regards,
Vijaya Bhaskar A

Lock Transaction for Specifi Users

Dear All,
Good Day,
We are planning to lock the transaction for specific user who doesnot use the transaction more than 3 months.
Please suggest me what will be the procedure.
Thanks in advance,.
Best Regards,
Suresh Kumar K

Hi Suresh,
Your idea of restricting users in using t-code is good practice. But as of now there is nothing like you can restrict user by locking t-code only for tht user/users alone.
1. You can lock the T-code but this will affect entire system.
2, You can remove t-code from the role, but this affect other user and if you wanted to make another role for only this user it will start getting to be tedious job, since you have to delete some roles create some other and alos user may use some t-code once every quarter for some of quarter end results and you have to seperate these t-code from others which was not possible, this will not workout so easily.
The only option could be probably if user doesnot login for more than 3months just lock him.
Regards...

Oracle Unix 9 - slow granting Schema object to User

I have a problem. I can't figure out why granting schema object to users take longer time. here is my codes:
DECLARE
alert_button     NUMBER;
CURSOR Teller_Cur IS SELECT * FROM TELLER_M;
BEGIN
     alert_button := Show_Alert('AlertOK');
     IF alert_button = ALERT_BUTTON1 THEN
          FOR Teller_Rec IN Teller_Cur LOOP
     Message('Setting table access for ' || Teller_Rec.Teller_ID || ' in progress, please wait....', No_acknowledge);
          IF :DTABLE IS NOT NULL THEN
          -- Granting Schema object to new User
          IF SUBSTR(:DTABLE, 1, 4) = 'TEMP' THEN
          Forms_DDL('GRANT SELECT, INSERT, UPDATE, DELETE ON ' || :DTABLE || ' TO ' || Teller_Rec.Teller_Id || '');
          ELSE
     IF Teller_Rec.SELECT_ACCESS = 'Y' THEN
     Forms_DDL('GRANT SELECT ON ' || :DTABLE || ' TO ' || Teller_Rec.Teller_Id || '');
     END IF;
IF Teller_Rec.INSERT_ACCESS = 'Y' THEN
Forms_DDL('GRANT INSERT ON ' || :DTABLE || ' TO ' || Teller_Rec.Teller_Id || '');
END IF;
          IF Teller_Rec.UPDATE_ACCESS = 'Y' THEN
Forms_DDL('GRANT UPDATE ON ' || :DTABLE || ' TO ' || Teller_Rec.Teller_Id || '');
          END IF;
          IF Teller_Rec.DELETE_ACCESS = 'Y' THEN
Forms_DDL('GRANT DELETE ON ' || :DTABLE || ' TO ' || Teller_Rec.Teller_Id || '');
END IF;
          END IF;
     -- Creating Synonyms in new User schema
          Forms_DDL('CREATE SYNONYM ' || Teller_Rec.Teller_Id||'.'|| :DTABLE || ' FOR ' || :DTABLE ||'');
ELSE
                         -- for stored procedure:
          Forms_DDL('CREATE SYNONYM ' || Teller_Rec.Teller_Id||'.'|| :DSTOREDP || ' FOR ' || :DSTOREDP ||'');
     Forms_DDL('GRANT EXECUTE ON ' || :DSTOREDP || ' TO ' || Teller_Rec.Teller_Id || '');
END IF;
     END LOOP;
     Message('Setting table access completed!!!', No_acknowledge);
     END IF;
END;
If i use oracle 8.1.7 locally, it doesn't take than 5 minutes to grant access. But whereas to Oracle 9.0.1 (through network) is taking more than 20 minutes.
If anyone knows, do help me.
Thank you.

The problem is not the difference between the database versions I think; it's the location of the Server.
Take a look what one call of forms_ddl causes network traffic. you have this traffic for each call of forms_ddl. On the Local Server this might not be so much of a problem but with the network between it I this is much slower...
Try to bundle up your statements or even better put the whole stuff in a database procedure to do it via one call. I speeded up creating grants and synonyms from 10 minutes via forms_ddl to 3 minutes using database procedure.
The only limitation is that your messages won't display for each user.
regards

SEE TRANSACTION 2KES LOG - USER WHO HAS DONE POSTINGS ON PERIOD 0

HI,
how can i see the user who launched the 2kes on a specific company? Unfortunaltely the transaction has no log at all .
Furthermore , I've tried to see the line items in GLPCA but for postings on period 0 no line items are displayed . I've found something on GLPCT , but no user is displayed there . I want to get the user who executed it last time . Is it possible to retrieve one way or another?
Thanks and Regards

HI,
try T-code ST03N. Mark the ABAP instance you are using, go to "detailed analysis/business transaction analysis" and enter the selection parameters according to your requirement.
Best regards, Christian

Grant transaction to a user

Similar Messages

Maybe you are looking for