How to restrict user to post document segment wise/Profit center wise

My client wants to restrict users segment wise to post account document.
we use documnet splitting segment wise.
Thanks
Chinmaya.

Hi
Check with your BASIS guy if authorization object is available for the field SEGMENT... There are some issues yet with this because it is not available in some T codes
If the same is not available, you can ask your ABAPer to create a Z authorization object for this field and write a small ABAP code in the exit RGGBR000 (FI validation)
Sample code is attached below to check auth for Plant in Internal order...ZCO_INTPORD was the Z auth object created...
CHECK i_aufk-bukrs  IS NOT INITIAL.
CHECK i_aufk-werks  IS NOT INITIAL.
AUTHORITY-CHECK OBJECT 'ZCO_INTORD'
         ID 'BUKRS' FIELD i_aufk-bukrs
         ID 'WERKS' FIELD i_aufk-werks
         ID 'ACTVT' DUMMY.
IF sy-subrc = 4.
  MESSAGE e398(00) WITH 'You do not have sufficent Authorization'.
ENDIF.
Regards
Ajay M

Similar Messages

  • How to restrict users from printing documents and exporting to local file

    Hi SAP gurus,
    I have two questions.
    1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
    2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
    Thank you in advance.

    Hi,
    Check this:
    Create your own gui status and attach it to the list in the event START-OF-SELECTION.
    In the menu painter extra -> adjust template.
    Make it a list status and you will see all the standard list options appear including list->download
    Deactivate the ones you don't want. 
    If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
    Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible. 
    If you just want to disable downloads only for a particular report, you can try this test program:
    Code:
    REPORT ztest. 
      DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH', 
            FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
    START-OF-SELECTION. 
        CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY' 
             EXPORTING 
                  FORM    = FORMNAME 
                  PROG    = PROGNAME 
             EXCEPTIONS 
                  OTHERS  = 1.
      WRITE: / 'TEST'.
    You also need this:
    Code:
    PROGRAM z_check_auth.
    FORM f_check_auth USING pe_result TYPE i. 
      pe_result = 5. 
    ENDFORM.
    Also have a look at the exit SGRPDL00.
    Hope this helps you.
    Rgds,
    Raghu

  • How to restrict user to post in GL a/cs thru validation rule ?

    Hi Experts,
    I want to restrict an user to post transactions for tds related gl accounts.is that possible through Validation rules.
    Actually i created a step and under that i configured prequisite,check and message.
    In "prerequisite" Company code = xxxx and user name = fffffff
    in "check i configured, all restricted GL accounts
    In "message" -
    GL account restricted to post by user fffffff
    But still the problem is not yet solved as the user is able to post transaction in that GL accounts.
    Plz guide.
    Sumeya offrin

    Hi Neeraj,
    Thank you for the response.
    Xtely.i have done the same.created an authorization groupp and assigned the group in GL account master data(control data tab) and even the group contains the users who are authorized to post into these GL accounts.
    But sorry,the problem not yet solved.
    Anyother solution?
    waiting for the another response.
    With Regards,
    Sumeya offrin
    Edited by: sumeya offrin on Nov 26, 2008 1:47 PM

  • Is it possible to post docs to Dummy profit center

    Hi friends,
    Is it possible to post FI docs to dummy profit center.
    Posting for customer document.
    Customer Dr
    Bank Account Cr.
    system is not allowing to post document with dummy profit center.
    If I post document without any proft center, It is giving Balancing field error, no profit center could be determined.
    Regards,
    Suresh

    Hi
    In your posting, there are no profit centre assignment to both accounts.  For customer, you cannot assign a profit centre.  But for Bank account, you can assign a default profit centre.  In new GL, you can assign a profit centre to your GL account per company code:
    F.A new ->GL a/c new -> Master data -> Profit centre -> Assign default profit centre to accounts

  • How to restrict user to change original file in word document.

    Hi experts,
    I am begineer in DMS. I am not able to understand how to restrict user to make any changes to a word document attached any DIR or any object link.
    Ex: I have a created a DIR attaching a word doc to equipment master.
    However, the user is still able to make changes to that word document usign CV03 tcode. I am sure most of you might have faced this problem. Please respond.
    We are using SAP 3.1i version. It is very old version.
    Thanks in advance,
    Kiran

    Kiran,
           The task that you have mentioned could be accomplished by setting up a status network for your document type. While setting up the status network, SAP has defined statuses which could potentially lock objects and fields corresponding to that status type.
    More information could be found at
    http://help.sap.com/erp2005_ehp_03/helpdata/EN/9f/857f3a1c7b11d294d200a0c92f024a/frameset.htm
    I am not aware of 3.0i but you can navigate to customisation --> Cross Application Components --> Document Management --> Control Data --> Define Document Types --> Click on a doc type and go to
    define doc status.
    Here if you define a document with status type S the object is essentially locked for editing.
    Sojan

  • How to restrict update to a document in state release to the contribution g

    How to restrict update to a document in state release to the contribution group.
    Hi I’m working with UCM 10g and I want to know if it is possible to restrict the update over a document that is on state release for the group of users that made the check in of the document ?
    thanks

    Yes, it is, but IMHO in a rather complicated way:
    - you could change the security settings (security group, or more likely, accounts) during the life cycle, or
    - you could implement collaboration management, and change security settings via ACLs
    Alternatively, depending on what you mean by "updating" documents you could also:
    - check-out the document by a system account (if you want to prevent your users to check-in a new version)
    - modify the GUI so that Update (metadata) action is not available to users (in theory, they could still access it via a direct service call) by a custom component
    - introduce a Java event filter (enhancing the UPDATE service) where you will implement whatever logic you want
    I would probably opt for the last options as it seems to me to be the cleanest solution (but yes, it requires some coding).

  • How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

    Dear All,
    We are having an infrastructure setup of around 500 client computers managed through group policy.
    Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
    Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
    It would be great if you can assist me with the following query.
    How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
    Can we disable Network Tab on the left hand pane ?
    explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

    >   * explorer.exe is blocked already, but users are able to enter the
    >     Windows Explorer by clicking on the name which is visible on the
    >     Start Menu.
    You cannot block explorer.exe when you do not replace the shell - the
    desktop you see effectively IS explorer.exe...
    Your requirement sounds like you need a custom shell:
    http://gpsearch.azurewebsites.net/#2812
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • !!!How to restrict user for making  changes in Sales order , partner level

    Hi all,
    Can anybody tell me how to restrict user for making  changes in Sales order  at partner level, is it through user exit?

    Hi Ruchi
    I hope u had gone to the screen fields which u want them not to be editable. So there u select all the fields contents which u do not want to to be changed and check the boxes with W.content and Display and save it. Once evrything is done u have to activate the particular transcation going in to the standard variants and put the name and click the activate button.
    Hope its clear
    Reward if help ful
    Sri

  • How To Restrict Users To Only Create Purchase Requisitions with Item Catalog?

    Hi, everyone 
    Please help me, 
    How To Restrict Users To Only Create Purchase Requisitions with Item Catalog? is it possible? 
    Regards,   Manuel

    Hi Steenie Norman
    First click on the text item ---> Tools ---> Property Pallete ---->
    and change the Keyboard State to Local Only also this Depend in your OS
    hope this useful ....
    Regards
    Mohammed

  • How to restrict user access in Oracle Application Server 10g (9.0.4)?

    Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

    Hi,
    You have to edit httpd.conf and modify acces rights for each protected directory
    e.g.
    <Directory /var/www/sub/payroll/>
    Order allow,deny
    Allow from 192.168.1.0/24
    </Directory>
    then you have to restart Oracle HTTP Server
    jm--

  • How to restrict user at selection screen while executing in background mode

    hi all,
    how to restrict user at selection screen while executing in background mode
    Regards
    Deepak

    Hi,
    We can get the Program whether this is running in background or not then we need to use SY-BATCH, if the SY-BATCH is set to X then the program is running in Background,
    so in the INITIALIZATION event, you can use this SY-BATCH and check the User names, and give the error messsage which you want to restrict
    Regards
    Sudheer

  • How to restrict user to must enter value in compulsory fields

    Greetings !
    I had a personal information form. I want to restrict user to enter values in all fields e.g Compulsory fields (Username, D.O.B etc)
    how i restrict user to must enter value in Compulsory fields

    I created an example on apex.oracle.com
    http://apex.oracle.com/pls/apex/f?p=18686:1:0:::::
    like you see a red staric placed on ID it means it is complusory to enter because it is a primary key, i want this on every field or to restrict user to enter all data , if any field left blank it will give error "to Fill respective field ", but not on creation but on left blank (if user type ID e.g 12 and skip ename field and go on Job field it gives error to fill Ename first)

  • Reporting - restricted for profit center-wise

    Hi
    My client has two profit centers (1000 and 2000) in one company code. Both profit centers are totally independent. Now my client requirement is that when user of profit center 1000 runs AR01 (i.e. asset balances), he should be able to see assets only for his profit centers i.e. 1000. Asset of profit center 2000 should not appear in that report.
    In EHP 4, there is provision for Profit Center-wise document posting, change and display functionality. But i want to know if this profit center-wise authorization will work for asset balances report (AR01) and other assets reports also.
    Please help.
    Edited by: Deepak Agrawal on Jan 1, 2012 5:43 PM

    K_PCA or authorization object for profit center is not check in assets report.
    In AR01 you cannot restrict the results to profit center as it is not checked in authorization . The fields which are checked are company code , Asset class and asset views.
    Hence you will have to lookup for alternatives like selection based on plant or cost center or responsible cost center etc.
    In case if the requirement is a show stopper then you will have to code the things in Enhancement points as there are no BADI or Exits available for the same .
    Cheers,
    Dewang

  • Document split by profit center

    Hi,
    We are in a re-implementation scenario.Client is using the older version of SAP and the new version is ECC 6.0.The requirement is to activate the document splitting with profit center and segment as scenarios.(Charecteristics for splitting).As on the cutoff date we take the balances and upload the same in the ECC 6.0 system.The question is how these balances will split.How the customer and vendor line items will split.
    Please clarify...let me know if you need further info.
    Thanks

    Hello Aravind
    Pls check this link
    http://help.sap.com/saphelp_erp2004/helpdata/EN/87/3da04028f40160e10000000a1550b0/content.htm
    Maybe of some help.
    Reg
    suresh

  • Document split profit center wise

    Hi All,
    I have a senario.
    I want to post a document were it automatically splits and post it to respect profit centers.
    Ex: Canteen expenses for Rs 1000/- my profit centers are PR01 and PR02. My cost center is CCC1.
    Entry should be:
    Dr. Canteen Exp        1000        CCC1    
    Cr. Bank                   1000
    entry should split
    Dr. canteen CCC1    PR01     600
    Dr. Canteen CCC1   PR02      400
    Cr. Bank                               1000
    this i need for two purposes,
    1) Two get the Profit center wise balance sheet
    2) two reduce the client work.
    What are the things i need to take care to get this. how can i get this
    Thanks
    murali

    Hello,
    I am not sure if you can achieve this splitting,because if you want to use document splitting functionality and the split will happen on the line items where there is no profit center  i.e in your case the cr bank will be splitted in to two if you have two debit entries on expense side.
    See for the following scenario u mentioned ;
    Entry should be:
    Dr. Canteen Exp 1000 CCC1
    Cr. Bank 1000
    entry should split
    Dr. canteen CCC1 PR01 600
    Dr. Canteen CCC1 PR02 400
    Cr. Bank 1000
    its not balanced by profit center as you said/stated.
    If you have any entry like ;
    Dr. canteen CCC1 PR01 600
    Dr. Canteen CCC1 PR02 400
    Cr. Bank 1000
    Document splitting can split in to following:
    Dr. canteen CCC1 PR01 600
    Dr. Canteen CCC1 PR02 400
    Cr. Bank  pro1 600
    cr bank pro2 400
    where you have profit center wise  balance sheet.
    And you have to config as stated in the above post.
    Thanks,
    Sai.

Maybe you are looking for