How to restrict permissions of fields in a repository file?

Hi Everybody,
I am trying to restrict permissions to fields in the repository file without affecting existing reports/dashboards.
When I restrict access to a variable (e.g. Job Requisition) it disappears from the available fields in the application, but the following error message appears when opening a analysis that uses that field:
Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P:OI2DL65P
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 27005] Unresolved column: "Requisition Facts"."Job Requisition Open To Offer Extended (Days)". (HY000)
We want to avoid users continue including some fields when creating new reports without affecting existing analysis/report.
Can this be done by changing something else in the repository file? Or is there any other way to do this?
Thanks in advance for any idea/suggestion.

Hi,
You mean you restricted "Requisition Facts"."Job Requisition Open To Offer Extended (Days)" in repository for few users,but they are getting nQSError: 27005 when they are openings reports in which this column is already used? Is this what you mean
If so stop your BI Server and go to NQSConfig.INI and change the parameter PROJECT_INACCESSIBLE_COLUMN_AS_NULL which is under security section. By default it is set to NO. Make it YES and restart BI Server.As you restricted that column its showing that error,if you make it show as NULL it will not show any error.
Refer : http://obieeblog.wordpress.com/2009/01/15/obiee-data-security-column-level-security/
Regards,
Srikanth

Similar Messages

How to restrict permissions for individual business object fields?

I know that ACE can restrict permissions (read/write/delete) for entire business objects (Business Partner, Opportunity, Activity...).
Is it possible to assign security permissions (read/write) to individual attributes of business objects? For example, I want that some users could not view phone number for Business Partner.

We had similar requirement for transaction but that was more to do edit or non-edit authorization at field level, but i feel this will work for your scenario too.
First there is no standard tool available to do this, so, you'll have to create your own authorization objects in transaction SU21 (Basis will be able to do that) lets say ZAUTHOBJ, and then assign permitted activities for this object i.e. create/generate, change, display. Then you this authorization object in UI coding to check the permission level and give access at field level. Don't forget to assign this object to your PFCG role.
I'm not technical so can't tell you where to put the code on UI (may be some prepare output method), your tech team will be able to help you.
Also, its good idea to have seperate auth object for each field you want to restrict because of scalability in future.
Hope this gives you some idea...
Regards,
Vikas

FB02 how to restrict to certain fields only during editing

hi!
Would like to know how to restrict fields e.g. Baseline Date when using FB02.
Thanks

Hello,
Your Base line date is controlled from settings in payments methods. (This payment methods must have been assigned to your vendor or customer)
You have four options:
Posting Date
Document Date
System Date
No default
In first three cases, the system proposes the date, however, the user will have the option to overwrite them.
In the fourth case, the system forces the user to enter a valid base line date.
"Base line date is nothing but a date from which the due date stars get calculating"
If you want to restrict the base line date, write a validation in GGB0 and assign the same in OB28 for your company code.
Regards,
Ravi

How to add digital Signature Field in cfdocument pdf files?

Hi,
We are generating pdf files using cfdocument to populate values and wondering how we can add digital signature field in those pdf files. Any help or comments would be deeply appreciated.
Thanks,
hismail786

Hi,
Yes, we have options to add digital signature to the pdf. We have one attribute called "Permissions" in "cfpdf" tag. If we provide permissions = 'AllowSecure', then system would allow digital signature for that pdf.
Please go though the docs for details info. I will post in details next.
Thanks
Chandrakant

How to restrict the size of a km repository

Hi all,
How can i restrict the size of a KM repository/folder ?
Thanks & Regards
DD

Hi,
Please check these link:-
1.[https://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/3219]
2.https://www.sdn.sap.com/irj/scn/thread?messageID=601915
3.https://www.sdn.sap.com/irj/scn/thread?messageID=135202
Best Regards,
Atul Bhatia

How to restrict the ability to save a PDF file in Acrobat.

Hello ! This is my first topic, evaluating to acquire Acrobat Professional 8, and I am asked if possible to restrict the ability to save a pdf file, when users are reading the file with Acrobat Reader. We are into creating a in-house document accessible to all users internally, using Acrobat Reader. I was able to restrict the printing, but I am unable to restict the saving of the file.
Any one knows if this possible ? or not?
Users are using Windows XP/2k
Thanks

Once they open it on their machine, they have a copy on that machine. They can simply move that copy to where ever they desire, making copies as they go. You can restrict copying content (though not full proof), printing, and changing the document, but not the physical file itself. Be careful with security and the assumption it fixes all your issues. PDF security is not all that secure. If you need higher levels of security, they you have to use the DRM (I think that is it) at a pretty cost.

How to restrict movement type field in MIGO Tcode

Hello there,
I want to restrict the users for 103 movement type through MIGO tcode.
I have searched for the objects and assigned the value 103 in the movement type field, but it is not solving my problem.
Is there any other way?
Thanks in advance.
Regards,
Priya.

If all your users are need to be blocked from using 103 movement type then go to OMJJ@Movement type 103@Allowed transaction@here remove the assignment of 103 with MIGO
If you want to do it through authorization then try out with your BASIS person M_BEFU_ALL for all authorizations in Inventory Management
Regards,
Indranil

How to restrict a text field to accept limited number of digits (only) with leading zeroes

I am trying to restrict a field for accepting only limited number of digits that can have zeroes in the begining - this why I can't use Numeric field. Can anybody help?

Hi Niall,
Thank you very much,
I did something like what you told me - thought I used script in ordetr to prevent entering any chracters except digits.
In Change event I enterd the following script:
// Restrict input to digits only - Number of digits (characters) assigned in Object Palette - Field Tab
if((xfa.event.change != 1) && (xfa.event.change != 2) && (xfa.event.change != "3") && (xfa.event.change != "4") && (xfa.event.change != "5") && (xfa.event.change != "6") && (xfa.event.change != "7") && (xfa.event.change != "8") && (xfa.event.change != "9") && (xfa.event.change != "0"))xfa.event.change
= "";
This does the job.
Thank you,
Peter.

Mounting a shared zfs onto a remote system : how to restrict permissions

I'm trying to setup some basic nfs shares out of a zpool and failing miserably as it is.
Here's what I have; all my machines are in 10.154.22.0/24 .. it's basically a test (pre-prod) network
- oslo, the nfs server, 10.154.22.1, SunOS 5.10-x86
- helsinki, the remote machine, 10.154.22.4, linux 2.6.22
On oslo I've created a zpool named pool2 with a zfs filesytem called tools. pool2/tools is mounted in /tools. I've further restricted access to /tools with : chown 0:nfsusers /tools && chmod 770 /tools . I want to ensure that only users from the group nfsusers will be able to read/write/execute into /tools.
I have a user, dbusr who is part of the nfsusers group. He can access the FS as he wants. All usernames / uids / gids are identical across the whole network .
Ok now, on helsinki, I have a directory /export/helsinki/tools . This directory is also chowned 0:nfsusers and chmoded 770.
Now, on helsinki everytime I try : mount -t nfs oslo:/tools /export/helsinki/tools I get :
mount.nfs: oslo:/tools failed, reason given by server: Permission denied
Server-side I've modified /etc/default/nfs so that both client and server run at NFSv3 (I've read somewhere that NFSv4 is not that well supported on Linux). The zfs share is set up like this:
zfs set sharenfs=rw=10.154.22.0/255.255.255.0 pool2/tools .
I'd like all my users in the group nfsusers to be able to write on the remote nfs FS, and optionally, root to be able, too.
What am I missing, here ?
Regards,
Jeff

It was not a problem. The raw partition with the soft partition or ZFS filesystem works fine in the local zone.
Thank you for your help.
-Yong

How to restrict the screen field TASK in SWI2_FREQ tcode

Hi All,
The user who ever has authorization for this transaction code is able to access all the task types irrespective of SAP modules from back end.
The concern is that the task type of any module should not be visible for un-authorized people.
In the front end only the authorized people can see work flow items (mail's) and it's according to business requirement.
Is there any solution?
If Yes, Pls let me know .
Thanks
Heena.

Hi Heena
I'm afraid that you won't find any standard SAP Authorization object that can help you here,
You might how ever be able to solve it with HR Structural authorization, but be carefull here, if you activate the structural authorization check you migh be looking at a large SAP Security Project.
I would usually not recommend that you give access to this transaction to other than your workflow administrators. But if you need to you might be able to create transaction-variants with fixed tasks, and the assign thoose to a t-codes, to which you grant access
Regards
Morten Nielsen

How to restrict the text field to enter only numbers???

I have used "onkeyup" event to call a function "test", I am getting the alert message for every entry (even for a number), I dont know why I am getting this. Please help me out.....
Number1 : <input type="text" name="myin1" id="a" onkeyup="test(this,event)">
function test(ff,evt)
evt = (evt) ? evt : event;
var charCode = (evt.charCode) ? evt.charCode : ((evt.keyCode) ? evt.keyCode :
((evt.which) ? evt.which : 0));
if (charCode > 31 && (charCode < 48 || charCode > 57)) {
alert("Only numbers are allowed"); }
}

Hi,
However this is java forum and you are asking for a solution of a javascript problem,
I think I got the problem.
This script works fine when I run it on IE and use the numeric keys above the text keys,
but give error when I use the numerical keypad on the right.
I think you should change your if condition like this
if (charCode > 31 && ((charCode < 48 || charCode > 57) || (charCode < 96 || charCode > 105)) {

How can I add form field value to the file name in save as dialog box

I do not want the form to be saved automatically, just want the form to auto populate the "file name" only.
A little background on the forms I want to use: My company has 70 retail outlets, I'll use one of our pdf forms called an "Incident Report" as an example. I would like for a store manager to be able to complete the form, then email the form to the main office (I already have javascript to add field values and form name to the email subject line), once the main office receives it, I want for them to be able to file the pdf electronically on our server. We have mutliple forms that we use so I do not want any of the forms to automatically save anywhere, (at this time anyway) I just want the office personnel to be able to click "save as" (or whatever they will need to click) and the form automatically add certain field values from the pdf they have received, of which will be different each time the form is sent to the office (Date, store #, employee name etc.) in addition to the name of the form in the "File name" of the "Save As" dialog box. The main office employees will decide into which server file the pdf should be saved.
I'm using Acrobat 8 professional, the stores and office personnel use Adobe reader.
One little note: We currently print and file a lot of paper on a daily bases, as soon as I can get this to work, we are going green.
Me and a lot of trees in this will really apprecitate any help you can give with this! :-)

You might want to take a look at the document "Developing Acrobat Applications Using JavaScript" (js_developer_guide.pdf) which is part of the Adobe Acrobat SDK, which can be downloaded here. Read the "Privileged versus non-privileged context" (p. 45ff.). You will find an example for "Executing privileged methods in a non-privileged context". Should be almost exactly what you are looking for.
Small Outline: For security reasons ("the user always has to know what's going on") you are not allowed to use the "Doc.saveAs"-method without the user permission (--> in a non-privileged context). In order to reach the goal of a privileged context you can use a trusted function. You do this by creating a JavaScript file (*.js) in either the Application-JavaScript-Folder (default location on Windows systems: "%ProgramFiles%\Adobe\Acrobat 10.0\Acrobat\Javascripts") or the User-JavaScript-Folder (default location on Windows systems: "%AppData%\Adobe\Acrobat\10.0\JavaScripts"). Add the following content to the new file:
myTrustedBrowseForDoc = app.trustedFunction( function ( oArgs ) {
     app.beginPriv();
          var myTrustedRetn = app.browseForDoc( oArgs );
     app.endPriv();
     return myTrustedRetn;
myTrustedSaveAs = app.trustedFunction( function ( doc, oArgs ) {
     app.beginPriv();
          var myTrustedRetn = doc.saveAs( oArgs );
     app.endPriv();
     return myTrustedRetn;
The developer guide actually wants you to add this content to the existing "config.js" file. I recommend creating a new file, since its easier to deploy in a network. Either way, every client/user who needs to be able to save documents this way, needs this JavaScript Code in his Application/User-JavaScript-Folder.
Within the Acrobat Document, which you want to obtain a certain file name, you can now use the trusted functions "myTrustedBrowseForDoc" and "myTrustedSaveAs" to store the file. To call the trusted functions and deliver the file name you can either you use a form field (button) or you add a new menu item. Add the following JavaScript Action to the button/menu item and change "Roller Coaster" to the name of the field which contains the value which you want to become the new file name:
var fileName = this.getField("Roller Coaster").valueAsString;
try {
     var oRetn = myTrustedBrowseForDoc({bSave: true, cFilenameInit: fileName + ".pdf"});
     try {
          myTrustedSaveAs(this, { cPath: oRetn.cPath, cFS:oRetn.cFS });
     catch(e) {
          console.println("Save not allowed, perhaps readonly.");
catch(e) {
console.println("User cancelled Save As dialog box");
Good Luck!

How can I expand text fields in my PDF file which I built in Forms Central?

I'm working in Windows 7 and just created my first form in Forms Central. I have many text fields that I intended for the end user to be able to type as much information in them as necessary. I selected the "multiple lines of text" setting for each of these fields. I was told by someone at Adobe a while back when I was trying to decide on learning LiveCycle Designer or using the much more user-friendly Forms Central that the form fields would not automatically expand in the PDF form, but that I would be able to click or drag on the fields manually to expand them so that, ultimately, they could be printed with all the comments, for however many pages it would take. I've exported my Forms Central form to a PDF file. However, when I type multiple lines of text in the form fields I set up to be "unlimited," I cannot get the form fields to expand. What have I done wrong? Help, please!

We are dealing with a similar situation. We have downloaded LiveCycle and created the form, but as we knew would happen, the changes that come for the content of the form are causing us to max our trial version, and as soon as the form needs a change outside of the trial time period, we are faced with the next dilemma, as Adobe doesn't offer to purchase a single license at a reasonable rate. The only reason we wanted LiveCycle was for the dynamic field feature. I plead with you to consider offering that feature in Forms Central. The other issue that we are having is that our users sometimes need to paste a table into the expandable text field. Is that even possible in Live Cycle? We don't at this point need the web-based functioning that Live Cycle offers. Thank you.

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to check image GPS data and get image file from image field

Hello,
I have some trouble and want to fix this problem.
1. I want to validate image file before its attached in image field about the image file have a GPS data or not. Have any way that can be check about image has contained a GPS data?
2. After validate image and PDF form is upload to the server. I want to get image file that embed in image field, because I have to extract image from PDF form and store this image in project image folder. If this topic can be fix by code script please give me some example code.
Thakyou for every comment and suggestion
Best Regards,
Mai

Hi Naill,
First I have to say thankyou for your answer.
About my (1) question, My image fields have set to be a embedded data and I try to test many example script of image fields.I can get image content type, image size. But that not work when I used ImageField1.desc.embeddedHref.value. It's response as "Unknown Embedded URI". Therefore, image field is and embedded data. How can I access filename?
(2) In that forum. As I see, his problem is about how to automate change image field with href image file. But I want to extract an exist embedded image in PDF form to normal image file with original metada (such as extract image filed to .JPEG with GPS data. Same as before attached in PDF form.). There has any concept or solution in this problem?
Best Regards,
Mai

How to restrict permissions of fields in a repository file?

Similar Messages

Maybe you are looking for