How to restrict a user group of SQ01 for only execution for some users

Hi,
   I would like to know if it is possible to restrict the access to SQ01 transaction for some users. I would like that these users have only execution access to some queries associated with an user group.
   Do I have to associate the user group to the users I want to have access to it? How can I do it=
   Do I have to associate the queries created on SQ01 to the users? or it is enough to assign the users to the user group where the queries are defined?
   Do I have to associate the infosets created on SQ02 to the users? or it is enough to assign the users to the user group to which the infosets are associated?
   Thank you,
   Luz D.

I suggest you do a web search on SQ01 and SQ02. That'll bring along SQ03 as well.
There's so much information available on the web that there's no reason to repeat it here.
[try google|http://www.google.com/search?hl=en&safe=off&q=SAPsq01sq02&meta=]
Jurjen

Similar Messages

How to Restrict a user to a access a particular table

HI ,
how to restrict an user to a one particular table and he should have only dispaly authorization for that , can anyone suggest me how to do this.

Hi,
Is it a standard table ? S_TABU_DIS (Client Dependant) and S_TABU_CLI (Cross client) are the the authorization objects that controls table maintenance. With Authorization group and activity 03, you can give user access only to Display.
You can look at table TDDAT to find the authorization group of the table. If it is a custom table for which original t-code is SM30 ( You can look at SU24 to verify that) and it does not have authorization group assigned to it, then you can ask your developer to assign authorization group to the table using t-code SE54. then again make use of S_tabu_dis with activity 03 and Auth group as designed to restrict access.
Also something to look for is Note 1481950 - New authorization check for generic table access using new auth object S_TABU_NAM. Remember Bernhard talking about it.
Edited by: Nishant Sourabh on Oct 1, 2010 8:13 PM

How to restrict the user(Schema) from deleting the data from a table

Hi All,
I have scenario here.
I want to know how to restrict a user(Schema) from deleting the values from a table created in the same schema.
Below is the example.
I have created a table employee in abc schema which has two values.
EMPLOYEE
ABC
XYZ
In the above scenario the abc user can only fire select query on the EMPLOYEE table.
SELECT * FROM EMPLOYEE;
He should not be able to use any other DML commands on that table.
If he uses then Insufficient privileges error should be thrown.
Can anyone please help me out on this.

Hi,
kumar0828 wrote:
Hi Frank,
Thanks for the reply.
Can you please elaborate on how to add policies for a table for just firing a select DML statement on table.See the SQL Packages and Types manual first. It has examples. You can also search the web for examples. This is sometimes called "Virtual Private Database" or VPD.
If you have problems, post a specific question here. Include CREATE TABLE and INSERT statements to create a table as it exists before the policies go into effect, the PL/SQL code to create the policies, and additonal DML statements that will be affected by the policies. Show what the table should contain after each of those DML statements.
Always say which version of Oracle you're using. Confirm that you have Enterprise Edition.
See the forum FAQ {message:id=9360002}
The basic idea behind row-level security is that it generates a string that is automatically added to SELECT and/or DML statement WHERE clauses. For example, if user ABC is only allowed to query a table on Sunday, then you might write a function that returns the string
USER != 'ABC'
OR      TO_CHAR (SYSDATE, 'DY', 'NLS_DATE_LANGUAGE=ENGLISH') = 'SUN'So whenever any user says
SELECT *
FROM    table_x
;what actually runs is:
SELECT *
FROM    table_x
WHERE   USER != 'ABC'
OR      TO_CHAR (SYSDATE, 'DY', 'NLS_DATE_LANGUAGE=ENGLISH') = 'SUN'
;If you want to prevent any user from deleting rows, then the policy function can return just this string
0 = 1Then, if somone says
DELETE employee
;what actually gets run is
DELETE employee
WHERE   0 = 1
;No error will be raised, but no rows will be deleted.
Once again, it would be simpler, more efficient, more robust and easier to maintain if you just created the table in a different schema, and not give DELETE privileges.
Edited by: Frank Kulash on Nov 2, 2012 10:26 AM
I just saw the previous response, which makes some additional good points (e.g., a user can always TRUNCATE his own tables). ALso, if user ABC applies a security policy to the table, then user ABC can also remove the policy, so if you really want to prevent user ABC from deleting rows, no matter how hard the user tries, then you need to create the policies in a different schema. If you're creating things in a different schema, then you might as well create the table in a different schema.

How to restrict the user in MIRO for not modifying price

Hi All
My requirement is How to restrict the users in MIRO screen for not modifying Material Prices of only the for specific ROH types .
For example :
Valuation class             RM description
3021                             RM - A
3022                             RM - B
3024                             RM - C
when ever we procure the above Raw materials A,B and C and
the Quantity of each Raw material @ 10 units and value @ 1 INR for each unit
RM - A procured qty 10 @1 total price is INR 10
RM - B procured qty 10 @1 total price is INR 10
RM - C procured qty 10 @1 total price is INR 10
total price of PO is INR 30
when we received invoice material prices are assume it INR 1 is excess for each material.Now the invoice price for each RM has become INR 11.
in MIRO we want restrict the user to change the price from INR 10 to 11.
suggest the best possible ways to restrict in MIRO screen
Thanks & Regards
Mala

Dear:
                  Take help of ABABPER fo implement exit using INVOICE_UPDATE or MRMH0003 Logistics Invoice Verification: Revaluation/RAP exit. If this does not help then seek help of MM functional who will help you to find exit for the required task.
rEGARDS

How to restrict the user from making any changes in Sales order- item level

Hi to all
How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
Regards
Anish Parikh
Edited by: anish parikh on Jan 24, 2008 5:16 AM

Hi Anish,
This can be achieved through the roles and authorization.
This can be done through the basis team. they can create user profiles and roles.
For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
Like that ur requirement can be done.
Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
Hope i answers.
Reward points if useful.
Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

How to restrict the user to enter only numeric values in a input field

How to restrict the user to enter only numeric values in a input field.
For example,
i have an input field in that i would like to enter
only numeric values. no special characters,alphabets .
reply ASAP

Hi Venuthurupalli,
As valery has said once you select the value to be of type integer,once you perform an action it will be validated and error message that non numeric characters are there will be shown. If you want to set additional constraints like max value, min value etc you can use simple types for it.
On the project structure on left hand side under local dictionary ->datatypes->simple types create a simple type of type integer
The attribute which you are binding to value property ;make its type as simple type which you made
Hope this helps you
Regards
Rohit

How to restrict the user for re-submitting the same form

Hi All,
I would like to know, How to restrict a user for re-submitting the same page.
I have a jsp page with submit button... and should not allow the user to save the same data again ..
Anil

Try the followings. If user disable cookies, this will not work. You need to modify to detect such situation!
String processed = "mycooke";
Cookie[] cookies = request.getCookies();
Cookie c = null;
if (cookies!=null) {
for (int i=0; i < cookies.length; i++) {
if (cookies.getName.equals(processed)) {
c = cookies[i];
break;
if (c!=null) {
// already processed.
// send error message and exit.
// set cookie;
c = new Cookie(processed , "yourdata");
c.setMaxAge(-1);
response.addCookie(c);
// process as it is the first;

How to restrict the change access in CRM for OLTP orders

Hi Guru's,
Please let me know how to restrict the change access in CRM for the orders that are created in ECC. The ECC orders will only for display in CRM but not for change,
We have the orders that are created in ECC, it will flows to CRM and should restrict the access to get in to the change mode in CRM but as of now CRM system is allowing change mode for ECC orders and ending up with errors.
Is there any additional middleware parameter that needs to be added to SMOFPARSFA table to get this functionality! Please advice! Thank your for your help.
Regards
Suneel

Hi.
You can use the PFCG role to control if the user is able to create, change, delete or only display a business transaction type.
Regards.

How do I create a group in contacts for texting?

How do I create a group in contacts for texting to several people?

Create your group on your computer, and sync it on your iPhone. But you cannot use this group for texting. You need an application for this. Easy Group is a free one I have developped.
http://itunes.apple.com/fr/app/easy-group/id461469079?mt=8
Remi
Note: I may receive some form of compensation, financial or otherwise,from my recommendation or link.

How do I create a group of channels for input to a AI multi point

Hi,
How do I create a group of channels for input to a AI multi point, so that I can output it to 3 different graphs.I figured out the graphs but I am not able to figure out how to create the group of channels for the input.I saw many examples where a group of channels is given as an input.

hello
You have to put Daq Mx Create virtual channel.vi in a For loop. out side that u should give an array of virtual channel which ever you need to acquire. i am sending the vi in 7.0 too.
Attachments:
read_channel.vi ‏40 KB

AR I Need To Make Group or batch for some of transactions that imported ??

Hi,
In Receivables i need make a group or batch for some of invoices that imported from another system (Point of sales)
what functionality or responsibility make this function like batch but i need to import some invoice fo batch not create batch and create invoices
Thanks,
Mohamed Gamal

I think it's better to start with Ubuntu or another user-friendly distro than try your hand at Arch. A lot of the things you talk about reveal a lack of knowledge about the inner workings of Linux (no offense; that's just how it is). Linux distros are extremely modular, and GUIs are interchangeable. Aesthetics, therefor, are as well. You can install Ubuntu, OpenSuSE, Fedora and Arch and get them to look identical.
As for creating your custom distro, I am not sure distros would like you to strip logos and stuff (which, for consistency, at some point, might also involve copyrights - you do not want your boot logo to say 'Customix - (c) Ubuntu Canonical' or something).
If there are projects around that allow you to change the aesthetics (which seems to be mostly what you're after), then by all means use those . Hacking scripts etc. for consistency can be a tedious job, if you are not comfortable with command line tools. It will only be harder to (re)brand Arch since it comes with the minimal amount of branding required upstream.
The DE menus are ordered by XDG standards. It's fully automatic. If you want to change that, you need to hack the .desktop files.
Last edited by .:B:. (2012-01-16 19:51:01)

How to restrict a User to access only 2-3 views in MM01/MM02 ???

Hi,
Can anyone tell me how can I restrict a User to access only 2-3 views in MM01/MM02 and also the User should not be allowed to change the View selection by clicking on the Select Views button ?.
Regards,
Lucky

Hi Prashant,
Can this only be done through changes in Authorization Objects ? Is not there any setting which can be done in SPRO for this ?
Hi Sheshagiri,
I could not exactly understand how the access to MM Views can be restricted to User through TCode OMT3B i.e. in SSeq. 01 and Screen 07 ? Subscreen 2154 is for Mat. Groups ? Please explain your answer in detail.
Regards,
Lucky

How to restrict a user typing a custom value in the dDocAccount field.

I have dDocAccount field drop down pre-populated with 2 values - Dept1, Dept2. However, user can able to type any other values (say Dept3) in the account text box and checkin a doc from WCC UI. How to restrict user from entering custom values?
As an alternate solution - for time being i have the above account field is set as hidden using rule. I am trying to derive the account value from another one field's value (say Departments field with values Dept1, Dept2). I tried below code and found working:
Department is a custom field created as option list with values Dept1, Dept2
Under the Rules, for the field dDocAccount, is derived field checked and added below code
<$dprDerivedValue=#active.xDepartment, getValue("#local","dOption")$>

Hi,
If Department is a custom metadata then you should access it like xDepartment(as any other custom metadata), not dDepartment.
I know it is also possible to change the HTML that is generated for the dDocAccount field, to add javascript validation and so on, maybe this approach plus some additional JS and HTML twists and you should get it working(via component development).
Hope it helps,
Vlad

How to Restrict the users in oracle applications

Hi,
I want to Restrict the users in oracle applications without using database
can any one please expalin me how to resttrict the users using middletier
Thanks
Gita

HI srini ,
my application version 12.0.4 and database is 10.2.0.4
and i want to restrict the No of users
exp i have have 500 users and i want restrict to 100 only
how can i do that please explain
Thanks,
Sudheer

How to restrict a user to login twice

hei evryone!
Here's my prob... I need to restrict a user to login more than once meaning, if a certain user account is currently login , that account cannot be used concurrently using another window or machine... If another user attempts to login, using that same account an error message will be displayed saying "this user account is already logged in".. i tried to do this in javascript but the code that i've got only works for IE and its kinda hard to capture the event for closing window.. plus using onunload is not advisable with my situation since my webpage can be redirected to other codes meaning the cause of unloading the page could either be closing the browser or redirecting the window to another page such as window.location="anothercode.jsp";... I was wondering if there's a way to do this in jsp...
Any suggestions, ideas, or sample codes would be deeply appreciated. Thanks in advance!
btw, i need to generate a code that is cross browser.. What i really need to accomplish is to be able to determine when the browser is closed either by clicking the X button on the window, alt f4 or my own close button and not when the page is unloaded.
Here's a sample code : This only works in IE =(
---------- default.jsp-------------------------
<html>
<head>
<script language="Javascript">
     onunload=function(e) {
     winX = navigator.appName=="Microsoft Internet Explorer" ? window.event.clientX : e.screenX;
     winY =navigator.appName=="Microsoft Internet Explorer" ? window.event.clientY :e.screenY;
if (winX<0 && winY<0)
          // redirect to logout.jsp n do some stuff
</script>
</head>
<body>
Logout
List
View Schedules
</body>
</html>
the default screen would be the code above: "default.jsp" wherein there are many ways that the page
can be unloaded such as :
- clicking the logout link
- click the View Schedules
- click the x button the left side of the window
- alt f4
- if the window is minimized , right click then select close option
Now, what i needed to do is to determined when the browser is closed so i reset the login flag of the account and can be used later on.

hei everyone!
im tryin to resolve this prob by adding a session id field on the users table. Everytime a user logs in i will update the session id field so that if anyone attempts to use the same account i will redirect the later into the login page with a warning msg. I'll do this by comparing the session id that u got from the dbase and the session id from request.getSessionId() of the browser. However, my prolem now is how to cleanup my database.. i need the cleanup coz i have a user tracking screen wherein i cud show who's account are login n who's not. I have created an applet and embed it in all of jsp files so that i cud catch the event for closing window whether by using the x button of the window or a power intrerruption. However, i need to find a way where i cud determine whether the event was really a close window or just a redirection from another page. I mean , you could leave the page either by viewing another screen or by actually closing the window.. For instance, my main page has main menu which are (1) View Users and (2) View Schedule .By default, im in the "View Users" screen . These two menus have their corresponding jsp n both jsp files have an embeded applet. So if the user click the "View Schedules " screen or if the user chooses to click the logout button or window's x button to exit the browser, then the applet will call the stop method. This what i meant by how will i determine if the user really exits on my application or not.. Coz if the user clicks from one screen to another then, user actually does not leave my application the user only exit on my application if the user logs out or close the window..
Please help me out on this matter... Thanks in advance!

How to restrict a user group of SQ01 for only execution for some users

Similar Messages

Maybe you are looking for