How to restrict user to post in GL a/cs thru validation rule ?

Hi Experts,
I want to restrict an user to post transactions for tds related gl accounts.is that possible through Validation rules.
Actually i created a step and under that i configured prequisite,check and message.
In "prerequisite" Company code = xxxx and user name = fffffff
in "check i configured, all restricted GL accounts
In "message" -
GL account restricted to post by user fffffff
But still the problem is not yet solved as the user is able to post transaction in that GL accounts.
Plz guide.
Sumeya offrin

Hi Neeraj,
Thank you for the response.
Xtely.i have done the same.created an authorization groupp and assigned the group in GL account master data(control data tab) and even the group contains the users who are authorized to post into these GL accounts.
But sorry,the problem not yet solved.
Anyother solution?
waiting for the another response.
With Regards,
Sumeya offrin
Edited by: sumeya offrin on Nov 26, 2008 1:47 PM

Similar Messages

How to restrict user to post document segment wise/Profit center wise

My client wants to restrict users segment wise to post account document.
we use documnet splitting segment wise.
Thanks
Chinmaya.

Hi
Check with your BASIS guy if authorization object is available for the field SEGMENT... There are some issues yet with this because it is not available in some T codes
If the same is not available, you can ask your ABAPer to create a Z authorization object for this field and write a small ABAP code in the exit RGGBR000 (FI validation)
Sample code is attached below to check auth for Plant in Internal order...ZCO_INTPORD was the Z auth object created...
CHECK i_aufk-bukrs IS NOT INITIAL.
CHECK i_aufk-werks IS NOT INITIAL.
AUTHORITY-CHECK OBJECT 'ZCO_INTORD'
         ID 'BUKRS' FIELD i_aufk-bukrs
         ID 'WERKS' FIELD i_aufk-werks
         ID 'ACTVT' DUMMY.
IF sy-subrc = 4.
MESSAGE e398(00) WITH 'You do not have sufficent Authorization'.
ENDIF.
Regards
Ajay M

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

How to restrict user to change original file in word document.

Hi experts,
I am begineer in DMS. I am not able to understand how to restrict user to make any changes to a word document attached any DIR or any object link.
Ex: I have a created a DIR attaching a word doc to equipment master.
However, the user is still able to make changes to that word document usign CV03 tcode. I am sure most of you might have faced this problem. Please respond.
We are using SAP 3.1i version. It is very old version.
Thanks in advance,
Kiran

Kiran,
The task that you have mentioned could be accomplished by setting up a status network for your document type. While setting up the status network, SAP has defined statuses which could potentially lock objects and fields corresponding to that status type.
More information could be found at
http://help.sap.com/erp2005_ehp_03/helpdata/EN/9f/857f3a1c7b11d294d200a0c92f024a/frameset.htm
I am not aware of 3.0i but you can navigate to customisation --> Cross Application Components --> Document Management --> Control Data --> Define Document Types --> Click on a doc type and go to
define doc status.
Here if you define a document with status type S the object is essentially locked for editing.
Sojan

!!!How to restrict user for making changes in Sales order , partner level

Hi all,
Can anybody tell me how to restrict user for making changes in Sales order at partner level, is it through user exit?

Hi Ruchi
I hope u had gone to the screen fields which u want them not to be editable. So there u select all the fields contents which u do not want to to be changed and check the boxes with W.content and Display and save it. Once evrything is done u have to activate the particular transcation going in to the standard variants and put the name and click the activate button.
Hope its clear
Reward if help ful
Sri

How To Restrict Users To Only Create Purchase Requisitions with Item Catalog?

Hi, everyone
Please help me,
How To Restrict Users To Only Create Purchase Requisitions with Item Catalog? is it possible?
Regards, Manuel

Hi Steenie Norman
First click on the text item ---> Tools ---> Property Pallete ---->
and change the Keyboard State to Local Only also this Depend in your OS
hope this useful ....
Regards
Mohammed

How to restrict user access in Oracle Application Server 10g (9.0.4)?

Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

Hi,
You have to edit httpd.conf and modify acces rights for each protected directory
e.g.
<Directory /var/www/sub/payroll/>
Order allow,deny
Allow from 192.168.1.0/24
</Directory>
then you have to restart Oracle HTTP Server
jm--

How to restrict user at selection screen while executing in background mode

hi all,
how to restrict user at selection screen while executing in background mode
Regards
Deepak

Hi,
We can get the Program whether this is running in background or not then we need to use SY-BATCH, if the SY-BATCH is set to X then the program is running in Background,
so in the INITIALIZATION event, you can use this SY-BATCH and check the User names, and give the error messsage which you want to restrict
Regards
Sudheer

How to restrict user to must enter value in compulsory fields

Greetings !
I had a personal information form. I want to restrict user to enter values in all fields e.g Compulsory fields (Username, D.O.B etc)
how i restrict user to must enter value in Compulsory fields

I created an example on apex.oracle.com
http://apex.oracle.com/pls/apex/f?p=18686:1:0:::::
like you see a red staric placed on ID it means it is complusory to enter because it is a primary key, i want this on every field or to restrict user to enter all data , if any field left blank it will give error "to Fill respective field ", but not on creation but on left blank (if user type ID e.g 12 and skip ename field and go on Job field it gives error to fill Ename first)

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to restrict users to not default layout while creating a user specific?

Hi all,
I have a problem with frequent changes in report layout setting. When users trying to create a user specific layout in the window "Default" is set, out of "User specific" & "default" checkbox defaultly, so users saving the layouts. so it's overwritting on existing layout. we are ossing the old data. how to restrict end users to create new one with out changing the existing one.How to change that default check in "Default" check box to user specific defaultly. where i have to do settings for this. Thanks in advance.
Pradeesh

Hi ,
My problem is still not resolved. I tried applying the people picker property and set a specific field(an email id field) to be available to only admins. Now the field is not visible to the normal users but only admins which is good but that email field
should be able to take normal users as wel as admin's email ID. currently due to the people picker property it only takes admin's ID and not normal user's ID - which is not as per expectation.
What this email ID field does is - when a normal user is logged in he/she wont see this field in that view. But when an admin logs in he/she can switch to admin view and see this field . The admin can put any user's ID in this field and pull out the required
resource's Time Report for modification.
Please let me know how do i overcome my problem. Detailed step description will be very helpfull .
As per Cameron's suggestion (add a rule on the "additional admin section") , i am not sure how exactly that is done. Would help a lot if i got to know how this works.
Regards,
Guru

How to Restrict users to change password

Hi All,
I would like to restrict user to change password only defined number of times in a day, Is it possible to do it through group policies.
Please note i am already aware of "Minimum Password age" feature, however i do not want to use it as the minimum value that i can set here is 1 day. I would like to restrict users based on password reset threshold e.g. User can reset his password
in a day only twice or thrice.
Thanx & Regards,
Wasim Parkar

If you want to limit the user to have his/her password changed for a specific number of time every day, I have to say
NO thats not possible. PSO's as other mentioned,can be used to have different password policies. Maybe you can set the msDS-MinimumPasswordAge
to 00:04:00:00 which is equal to 4 hours. It means every 4 hours a user will be able to change his/her password. So in each day a user can change the password 6 times, since a day is 24 hours.
Do not forget a day start from 00:00 AM up to 11:59 PM. So in a 9 to 5 job, a user may change the password 2-3 times.
Hope it helps.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer or to mark this post as
and helpfull to other poeple.

How to restrict user marking same events in multiple times.

Hi,
In my online exam system, I am displaying the questions and related answer in jsp page. Once user fill all this questions, the result of these stored in final table containing column questonNo, userid, answer, testname.
Now in my application if any user goes back to the question displaying page after submitting same questions, he can change the answer selected in first attempt and submitting again the test, the result are stored in final table. I.e. for same question no. user is now able to answer in two times. I want to restrict user for answering test in second times.
How can I achieve this?
Any suggestion is highly appreciated?
Thanks and Regards
Harshal

Hi Hari,
with you suggested logic can i restrict user marking one question in multiple times,
My target is once user submit any questions teh control will be transferred to the next page.Now he/she could not able to submit the same questions with another answer or the same answer also which is possible in my application by going back to these page using back button .so that i can get only one record for particular questions in table final.
Thanks and Regards
Harshal
Edited by: HARSHAL_GURAV on Aug 20, 2008 12:15 AM

How to restrict users in separate OU's from seeing each others presence

We have an Enterprise Lync 2010 server environment in place, and are using msRTCSIP-GroupingID to restrict address book lookups. We are now looking to restrict presence viewing to only user within the same OU. In other words it should not be possible
to see the presence of a user outside of your own OU, unless that user allows it explicitly.
It seems that the Multitenant pack for Lync can arrange that, but it's just not feasible to install that when you already have an active Lync environment in production. Is it possible to achieve this separation another way? Maybe with msRTCSIP-TenantId?
(which is already available in our current schema)

Hi,
Using the GroupingID will completely separate the users into unique address books. But searching by SIP URI will always work and you cannot prevent the users from communicating with other Lync users in the same organization. If you want
to restrict presence viewing to specific users, you can try ABS Configuration Tool.
http://www.justin-morris.net/how-to-hide-users-from-the-lync-address-book/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found
there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Kent Huang
TechNet Community Support

How to restrict user to process own company code data in z program

Hi All,
I have this issue. in asset management I would like to restrict user to process its own company data.
for example A who works in company 0123 only can process comp code 0123 data whereas X who is manager can process all company code data.
In the abap program, how can i achive this? by authority object? if yes what asset management authority object to use?
i have company code in selection screen. so may i know what method i can achive so that A can only execute co 0123 whereas X can do for all company code.
thanks

Hi,
One way would be:
For all persons for whom you would like to 'control' the access to a specific company, SU01-->Parameters--->Give some parameter ID say XXX, & in PArameter Value key in the compnay code whose data it can process.
Please note that this is only one time process which has to be carried out for all the users. Then in your z-program in SELECTIO-SCREEN OUTPUT use GET PARAMETER ID 'XXX" Field w_value. If GET PARAMETER ID returns su-subrc = 0 then move w_value to your company code on the selection screen. Then Use LOOP AT SCREEN & make SCREEN-INPUT = '0' for company code so that company code will be displayed but protected thus not allowing the user to change the company code.
I hope this helps,
Regards
Raju Chitale

How to restrict user to post in GL a/cs thru validation rule ?

Similar Messages

Maybe you are looking for