How to restrict to find object in authorization object c_klah_bse

Dear Experts,
I would like to restrict my user to find object/class in CL30Nn authorization object c_klah_bse, I did not find choice/object list to be restricted.
Kindly advice.
Thank you.

> where can i find possible values of Authorization hierarchy, Cost centers , cost center groups in
Well, not in an internet forum. I think you should speak to the financial consultants who customized your system. These values will differ from company to company.
Maybe someone can give you a list of source tables for these values but that would be just it, a list of values without an idea of their relevance and validity......

Similar Messages

How to convert from Finder Object reference to POSIX path

I'm new to AppleScript. I'm super close to getting what I need done, but I've ran across a snag in the middle.
The error I'm getting is Can’t make quoted form of POSIX path of item 1 of {«class docf» \"filename\" of «class cfol» \"foldername\" of «class cfol» \"Desktop\" of «class cfol» \"Username\" of «class cfol» \"Users\" of «class sdsk» of application \"Finder\"} into type Unicode text. the problem area is highlighted and notated below. I've looked all around online but can't find what I need.
Thanks in advance for any and all help!
set text item delimiters to "."
tell application "Finder"
set theFilestoChoose to every item of (choose file with prompt "Please select the file(s) you would like to move and rename" with multiple selections allowed) as list
display dialog "Would you like to move these files to an existing folder and then rename them, or create a new folder and then rename them?" buttons {"Move to an existing folder and rename", "Create a new folder and rename"}
if result = {button returned:"Move to an existing folder and rename"} then
set firstnewname to "Aauuttoommaattoorr"
repeat with index from 1 to the count of theFilestoChoose
set theFilesChosenbeingrenamedfirsttime to item index of theFilestoChoose
set filenamecount to text items of (get name of theFilesChosenbeingrenamedfirsttime)
if number of filenamecount is 1 then
set fileextension to ""
else
set fileextension to "." & item -1 of filenamecount
end if
set the name of theFilesChosenbeingrenamedfirsttime to firstnewname & index & fileextension as string
end repeat
log theFilesChosenbeingrenamedfirsttime
set choosingtheplacetomove to choose folder with prompt "Select the folder to move to"
set thechosenfoldersname to name of folder choosingtheplacetomove -- sets the folder name as text
set AppleScript's text item delimiters to {"-"}
set Numberofthemonthatthebeginningofthefoldername to text item 1 of thechosenfoldersname as string -- for later to append the number back on without having to ask again!
set shortenedname to text item 2 of thechosenfoldersname as string
set the name of choosingtheplacetomove to shortenedname as string
set thefolderstemporarynameaslocation to choosingtheplacetomove as string
move theFilestoChoose to folder thefolderstemporarynameaslocation
log theFilestoChoose
set allfilesindestinationfolder to every file in choosingtheplacetomove as alias list --
set aInitials to the text returned of (display dialog "Whose camera were this/these pictures taken on?" default answer "")
set filteredList to my filterList(allfilesindestinationfolder, aInitials) as list
log filteredList
-- everything above this is correct so far and works perfect
--TROUBLE SECTION BELOW
set theSortedfilterList to (sort filteredList by creation date) -- something happens here with the theSortedfilterList that makes it unintelligible to convert to POSIX later. but I need the files in the order that this line puts them.
log theSortedfilterList
set timetorenamelasttime to theSortedfilterList
set newbasename to shortenedname
repeat with index from 1 to the count of timetorenamelasttime
set theonefile to item index of timetorenamelasttime
set theonefilenamecount to text items of (get name of theonetwothreefile)
if number of theonefilenamecount is 1 then
set fileextensionone to ""
else
set fileextensionone to "." & item -1 of theonefilenamecount
end if
tell application "System Events" to set CreaDate to creation date of file theonefile
set CreaDate2 to CreaDate as text -- need to trim down to the first 10 characters and eliminate the "-"
set AppleScript's text item delimiters to {""}
set shorteneddatename to text items 1 thru 10 of CreaDate2 as string
set the name of theonefile to shorteneddatename & {"-"} & newbasename & {"-"} & aInitials & {"-"} & index & fileextensionone as string
end repeat
--Trouble section above
set the name of choosingtheplacetomove to Numberofthemonthatthebeginningofthefoldername & "-" & shortenedname as string -- returns the month prefix to the foldername
else if result = {button returned:"Create a new folder and rename"} then
set repeatConfirmation to true --Boolean to decided if script should be repeated; default is to repeat
repeat while (repeatConfirmation = true) --Repeat if Any Tests Are Failed
set thefirstquestion to choose from list {"January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December"} with title "Event Month Selection" with prompt "Select the month in which the event started. Select only one month:"
set theMonthAnswer to result
if theMonthAnswer = false then --"For historical reasons, choose from list is the only dialog command that returns a result (false) instead of signaling an error when the user presses the “Cancel” button."
set repeatConfirmation to false
set exitingeventmonth to display dialog ("You are exiting selecting the event month phase of the program. You will need to manually fix this decision") buttons {"OK"} with title "Exiting Event Month Selection"
if button returned of exitingeventmonth = "OK" then
set theMonthAnswer to ""
end if
else
set confirmationanswer to display dialog "You selected " & theMonthAnswer & ", is this correct? " buttons {"Yes, that's correct.", "No, the picture(s) are from a different month."} with title "Confirm Event Month Selection"
if button returned of confirmationanswer = "Yes, that's correct." then
set repeatConfirmation to false
else
display dialog ("That's okay, you can select another again!") buttons {"OK"} with title "Return to Event Month Selection"
end if
end if
end repeat
log theMonthAnswer
if theMonthAnswer = "" then
set monthtonumber to "You have cancelled this action."
log monthtonumber
else if theMonthAnswer = {"January"} then
set monthtonumber to "01"
log monthtonumber
else if theMonthAnswer = {"February"} then
set monthtonumber to "02"
log monthtonumber
else if theMonthAnswer = {"March"} then
set monthtonumber to "03"
log monthtonumber
else if theMonthAnswer = {"April"} then
set monthtonumber to "04"
log monthtonumber
else if theMonthAnswer = {"May"} then
set monthtonumber to "05"
log monthtonumber
else if theMonthAnswer = {"June"} then
set monthtonumber to "06"
log monthtonumber
else if theMonthAnswer = {"July"} then
set monthtonumber to "07"
log monthtonumber
else if theMonthAnswer = {"August"} then
set monthtonumber to "08"
log monthtonumber
else if theMonthAnswer = {"September"} then
set monthtonumber to "09"
log monthtonumber
else if theMonthAnswer = {"October"} then
set monthtonumber to "10"
log monthtonumber
else if theMonthAnswer = {"November"} then
set monthtonumber to "11"
log monthtonumber
else if theMonthAnswer = {"December"} then
set monthtonumber to "12"
log monthtonumber
end if
set theNameofFoldertoMake to text returned of (display dialog "Please enter the name of the new folder you are creating:" default answer "" with title "New Folder Name")
set LocationOfNewFolder to choose folder with prompt "Choose the location of the new folder you are creating:"
set theNewNameofFoldertoMake to monthtonumber & "-" & theNameofFoldertoMake
set newfolderaction to make new folder at LocationOfNewFolder with properties {name:theNewNameofFoldertoMake}
move theFilestoChoose to newfolderaction
end if
end tell
--function
on filterList(allfilesindestinationfolder, aInitials)
set patterns to {aInitials as string, "Aauuttoommaattoorr"}
set output to {}
repeat with aFile in the allfilesindestinationfolder
repeat with aPattern in patterns
set filepath to aFile as string
if filepath contains aPattern then
set end of the output to aFile
exit repeat
end if
end repeat
end repeat
return output
end filterList

Okay, so you wanted the debugging and error messages. Thank you for the coaching. Here is what I get from the following line:
set theSortedfilterList to (sort filteredList by creation date)
log theSortedfilterList
Log returns:
(*document file Aauuttoommaattoorr3.AVI of folder SnowDay of folder Desktop of folder Username of folder Users of startup disk, document file Aauuttoommaattoorr2.MOV of folder SnowDay of folder Desktop of folder Username of folder Users of startup disk, document file Aauuttoommaattoorr1.mov of folder SnowDay of folder Desktop of folder Username of folder Users of startup disk*)
set pxFile to POSIX path of ((theSortedfilterList) as alias)
Error: "Can’t make {«class docf» \"Aauuttoommaattoorr3.AVI\" of «class cfol» \"SnowDay\" of «class cfol» \"Desktop\" of «class cfol» \"Username\" of «class cfol» \"Users\" of «class sdsk» of application \"Finder\", «class docf» \"Aauuttoommaattoorr2.MOV\" of «class cfol» \"SnowDay\" of «class cfol» \"Desktop\" of «class cfol» \" Username \" of «class cfol» \"Users\" of «class sdsk» of application \"Finder\", «class docf» \"Aauuttoommaattoorr1.mov\" of «class cfol» \"SnowDay\" of «class cfol» \"Desktop\" of «class cfol» \" Username \" of «class cfol» \"Users\" of «class sdsk» of application \"Finder\"} into type alias." number -1700 from {«class docf» "Aauuttoommaattoorr3.AVI" of «class cfol» "SnowDay" of «class cfol» "Desktop" of «class cfol» "Username" of «class cfol» "Users" of «class sdsk», «class docf» "Aauuttoommaattoorr2.MOV" of «class cfol» "SnowDay" of «class cfol» "Desktop" of «class cfol» "Username" of «class cfol» "Users" of «class sdsk», «class docf» "Aauuttoommaattoorr1.mov" of «class cfol» "SnowDay" of «class cfol» "Desktop" of «class cfol» "Username" of «class cfol» "Users" of «class sdsk»} to alias
That is why I labeled it with Finder Object reference won’t return POSIX path, because I tried what was suggested about using the POSIX path of line. I thought seeing the lines above and around it would help set the context.
So I need those files, but I need them sorted by creation date so that they’re in that order for the next renaming step.

How do you dynamically find objects

I'm creating sprites dynamically on a button event. So for example there is a sprite with a name of "parent_X" where X is a sequential number starting at 1... So in theory I may have parent_1, parent_2, parent_3, and so on depending on how many times you press this button.
Each sprite has a textField child also with a dynamic name, like textChild_1, textChild_2, textChild_3 and so on.
User can remove a parent and child from the stage... what I do is remove the sprite and then delete it ... so if the parent name is loaded into a string called "textParent" I do:
var target:DisplayObject = getChildByName(textParent);
removeChild(target);
delete getChildByName(textParent);
This seems to work. Question 1: by deleting the parent are both objects destroyed? What I mean is that if you simple removeChild(myChild) and later do addChild(myChild) the child is returned to the stage... so if delete the parent and later, I'm assuming the child and parent are gone for good unless they are re-established? Is this correct thinking?
Moving on, what I need to do is determine what parent(s) and child(s) are still accessible in code after some have been removed / deleted.
Not sure if you understand what I mean, but at some point I need to know what "parent_X" and "child_X" items (objects?) exist?
I'm trying something like this:
x = 1;
var target:DisplayObject = new DisplayObject();
while(x <= textAreas) { // textAreas is the counter to assign next parent_X number it is an int
var target:DisplayObject = getChildByName("parent_" + String(x));
removeChild(target);
x++;
This fails, I think if a parent_X was removed (deleted) .. it seems to only remove the first target if more than one were previousy created and then destroyed.
Am I going about this correctly?
Thanks for any help.

1. target isn't destroyed with that code. it still exists and can be re-added to the display list at any time. you should assign target to null when you want to ready target for gc. when target is gc'd the child may or may not be gc'd depending on how it's created. my guess is the child will not be gc'd.
2. use an array to store and track your existing parent objects.

How to use method find(Object pk) in java EE 5

I've just started programming in java ee and netbeans and I do have some startup problems. I'm going to access a database using persistence entity classes. My task is to fetch the lastname of a user in a table called User and present it in the webbrowser.
Can anyone see any errors? It always presents Fetch from database: John
Seems like it won't get anything from the UserTestFacade find method. Is this the right way to use it?
Here is the code for the servlet that is going to present the info:
public class RegisterServlet extends HttpServlet {
protected void processRequest(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();
String str = initDB();
String title = "Fetch from database: ";
out.println("<BODY BGCOLOR=\"#FDF5E6\">\n" +
"<H1>" + title + str + "</H1>\n" +
"</BODY></HTML>");
out.close();
public String initDB()
     String str = "John";
     try {
UserTestFacade u = new UserTestFacade();
UserTest us = u.find(new String("Tom"));
str = us.getLastname();
} // end try
catch ( Exception e ) {
     e.printStackTrace();
finally {
     return str;
Here is some of the code for the sessionbean UserTestFacade:
@Stateless
public class UserTestFacade implements UserTestFacadeLocal, UserTestFacadeRemote {
@PersistenceContext
private EntityManager em;
/** Creates a new instance of UserTestFacade */
public UserTestFacade() {
public void create(UserTest userTest) {
em.persist(userTest);
public UserTest find(String username) {
return (UserTest) em.find(UserTest.class, username);
Here is the code for the entityclass UserTest
public class UserTest implements Serializable {
@Id
@Column(name = "Username", nullable = false)
private String username;
@Column(name = "Firstname", nullable = false)
private String firstname;
@Column(name = "Lastname", nullable = false)
private String lastname;
public UserTest(String username) {
this.username = username;
public UserTest(String username, String firstname, String lastname) {
this.username = username;
this.firstname = firstname;
this.lastname = lastname;
public String getUsername() {
return this.username;
}

Hi,
Till now this question is not answered.........
Any Answer around this deeply apprciated.
Edited by: DoraiRaj on Sep 29, 2009 3:55 AM

How to restrict changing password for user ?

Hi All experts ,
We have created users . Users should not change their password without permission of Administrator . How to restrict them by setting Permissions / Authorizations ?
Thanks.
KISHORE SATPUTE

Hi,
In "USER MAINTENANCE- SU01" --> in the "logon tab" there are 5 different "user type"
1. dialog
2. system
3. communication
4. service
5. reference
Kindly mention the function and role of all the above mentioned user types specifically and hows is one user type different from another.
These are as follows:-
1. Dialogue:-
For this kind of users:-
GUI login is possible.
Initial password and expiration of passowrd are checked.
Multi GUI logins are checked.
Usage:- These are used for GUI logins.
2. System
For this kind of users:-
GUI login is not possible.
Initial password and expiration of passowrd are not checked.
Usage:- These are used for internal use in system like background jobs.
3. Communication
For this kind of users:-
GUI login is not possible.
Users are allowed to change password through some software in middle tier.
Usage:- These are used for login to system through external systems like web application
4. Service
For this kind of users:-
GUI login is possible.
Initial password and expiration of passowrd are not checked.
Multiple logins are allowed.
Users are not allowed to change the password. Only admin can change the password
Usage:- These are used for anonymous users. This type of users should be given minimum authorization.
5. Reference
For this kind of users:-
GUI login is not ible.
Initial password and expiration of passowrd are not checked.
Usage:- These are special kind of users which are used to give authorization to other users.
Rewads point if helpful
Thanks
Pankaj Kumar

How to restrict authorization for OBC4

Dear all
How to restrict authorization for obc4( field status) for user id wise
Regards
nasa

Hi Nasa
You try to use the S_TABU_LIN object. With this object you can control access to tables (called from maintenance views, SM30 etc) based on the database key for the table.
And as far as I cant see, the OBC4 transaction is just a couple of maintenance views for V_T004V andf V_T004F.
You can find a small how-to [here|http://www.mhn-consulting.com/s_tabu_lin.html]
Regards
Morten Nielsen

How we find object list for SAP MM T codes.

Dear Experts,
How can i find object list for SAP MM T codes.
Actualy that is required for SAP User autorization review.
Regards
Kumar

Get t.codes list from table TSTCT using SE16,Enter t.code as MM* or M*. Execute it.
You will get a list of MM t.codes.
Also you can refer SU22 for authorization objects from above t.codes list.

How to find Object name for a object?

Hi Experts,
How to find Object name for a particular Object? Is there a Tcode for it?
__Like Object name for__
Material number - materialnr
Goods receipts / return - matbeleg
Accounting documents - rf_beleg
How to find Object name for other Objects? Is there a particular way?
Thanks & Regards
Chandan

Hi,
You can find objects in SNRO transaction.
In SNRO search by giving long text...
for eg., Service .. for service entry sheet. keep the first letter in capital letter only.
Thanks & Regards,
Anand.

How to find Object Styles

Hello,
Adobes Scripting Guide: JavaScript explains well(more or less) how to find text, greps and glyph. But lacking is how to find Object Styles. The Find/Change Dialog box in ID does have this option.
What I would like is a script that will find a style, then fill in the color of that style so that one can clearly see in a long document where the style was used. When there are only subtle differences between styles, this is helpful.
The first thing to do is to clear all the options and that is my first stumbling block. In the following code the first line works, clearing the find of any parameters. The second line does not work.
app.findObjectPreferences = NothingEnum.nothing;
app.findChangeObjectOptions = NothingEnum.nothing;
I also need to set the Search for Documents (not All Documents nor Selection) and to set the Type for All Frames.
The second obstacle is setting the Find so that it will find the object I am looking for. The code below does not work but I do not know why.
app.findObjectPreferences.getElements("Object Style 1");
Any help is appreciated.
Tom

You need this:
app.findObjectPreferences = null;
app.findObjectPreferences.appliedObjectStyles = "Object Style 1";
found_objects = app.activeDocument.findObject();
Some things are different in scripting compared to the interface. For instance, the scope of the search in the interface is just "document" or "all documents", but in a script you can search a page, a spread, almost anything (I have to say that this is true for text and grep searches, I never tried it for objects). Finding frame types is different as well: there's no parameter for that I don't think. Instead, you have to find all frames that have a particular object style applied to them, then cycle through them checking their frame type; if the type matches your criteria, do what you want with it.
Peter

How to restrict changes in Tabs: Defaults and Parameters in tcode: SU3

Good Morning Everybody.
Do you know how to restrict End Users can change data stored in Tabs Defaults and Parameters of tcode: SU3.
I was checking Authorization Objects related this transaction but I did not find a way to fix this issue.
Thanks for your comments.
Mauricio Cardozo.
BASIS Consultant.

I've been looking into this same question. I don't think there's any way to protect individual user parameters, which is what we really wanted to do, but it is possible to protect the Parameters tab as a whole while still granting access to the Address and Defaults tabs (if desired). SU3, which is usually given to all users, gives change access to all three tabs in the User Data, but to make it more fine-grained, as the last person said, take away SU3 and instead grant whatever combination of SU0, SU1, or SU2 makes sense for your organization. SU0 gives access to the Defaults tab, SU1 to the Address tab, and SU2 to the Parameters tab.
So, in your case, you would grant SU1 only, so users can change their name or phone number, etc, but not Defaults or Parameters. They won't even be able to see defaults or parameters if you do this, though.
I hope this helps.
--Matt

Find object name of particular tcode

hi, i am new in sap security so i am very confused with object relation with tcodes. like when we give su01 tcode in pfcg then in profile generator we hav to give activities for that role like for su01 in which object we will hav to give activities like create,change, delete, display for that role only? how can we find out which object reflects that particular tcode?
like another example in se38 if i want to restrict a user for change option and allow only display option then in profile generator how can i find out under which object activity does it works?
like i tell earlier im new in this field so please help me out from this confusion.
Thanks
Jimmy Batra

Sorry I misunderstood your question.
But there is no easy way to find the authorization object used for particular transaction unless you debug the program.
Generally it is mention in the documentation of that particular functionality.
For example if you want to find out the authorization objects checked in pfcg then you need to go through the following document http://help.sap.com/saphelp_nw70/helpdata/en/ce/17533e5ff4d064e10000000a114084/frameset.htm and set the activity based on your requirement.
Same for function transactions, either you need to find the related document or need to consult the functional consultant to get the required value for that particular object.
Hope this will help.
-Pinkle

How to Restrict a user to a access a particular table

HI ,
how to restrict an user to a one particular table and he should have only dispaly authorization for that , can anyone suggest me how to do this.

Hi,
Is it a standard table ? S_TABU_DIS (Client Dependant) and S_TABU_CLI (Cross client) are the the authorization objects that controls table maintenance. With Authorization group and activity 03, you can give user access only to Display.
You can look at table TDDAT to find the authorization group of the table. If it is a custom table for which original t-code is SM30 ( You can look at SU24 to verify that) and it does not have authorization group assigned to it, then you can ask your developer to assign authorization group to the table using t-code SE54. then again make use of S_tabu_dis with activity 03 and Auth group as designed to restrict access.
Also something to look for is Note 1481950 - New authorization check for generic table access using new auth object S_TABU_NAM. Remember Bernhard talking about it.
Edited by: Nishant Sourabh on Oct 1, 2010 8:13 PM

How to restrict the job start conditions (only "Immediate" type) ?

Hi,
We allow our users to schedule and execute in background mode transactions (example IP19, IW38). We gave them for that authorizations (object S_BTCH_JOB with LIST, PROT, RELE and SHOW - objetct S_PROGRAM with BTCSUBMIT).
We would like that users can schedule and execute their jobs only with the u201CImmediateu201D job start condition (in the Start Time screen for the type of start condition : Immediate, Date/Time, After job, After event, or At operation mode).
Another solution: prohibit the scheduling and the execution background job in a certain time interval ...
How can restrict the job start conditions ?
Thank you.
Patrice.

Hi Jan,
Yes, sa38 makes it possible indeed to execute in background into immediate mode a job but
the user have to know the name of the program to be carried out ...
The user knows only the name of these transactions trade. For example, IW38.
In the menu of this transaction, SAP gives the possibility to execute in background :
Program --> Execute in Background --> display of Start Time screen for the type of start condition :
Immediate, Date/Time, After job, After event, or At operation mode).
It is at this time there that we want that the user can only choose the "immediate" mode.
We must thus prohibit the other choices (Date/Time, After job, After event, or At operation mode) ... and
and we don't know how to restrict these other options in this screen "Start Time screen for the type of start condition".
Thank you.
By.

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to restrict the department to not user other departments' equipment?

Dear SAPIENTS,
How to restrict the department to not user other departments' equipment? If suppose any one creating order for equipment having different authorization group then system should not allow me to do this.
Regards,
Kaushal Rai

Kaushal Rai,
Use Authorization group for technical objects, create authorization gruops in IMG and assign the same to the Equipment master and block the other department with the same authorization group. For ristricting the authorization group to other departments after creating and assigning it to the equipment seek help from your BASIS team.
goto the below path for cerating the Authorization group:
IMG - PMCS - Master data in PMCS - Technical Objects - Define Authorization groups:
Here you define the authorization groups, after completion of this step go to the Equipment master in General Data tab page there is a feild Authourization Group, mention the respective authorization group and provide this Authorization gruop value to the respective user in the user role with the help of BASIS Team.
Regards,
Praveen.

How to restrict to find object in authorization object c_klah_bse

Similar Messages

Maybe you are looking for