How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want. 
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible. 
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest. 
  DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH', 
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION. 
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY' 
         EXPORTING 
              FORM    = FORMNAME 
              PROG    = PROGNAME 
         EXCEPTIONS 
              OTHERS  = 1.
  WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i. 
  pe_result = 5. 
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

Similar Messages

  • How can I extract certain pages from my document and save as another file?

    How can I extract certain pages from my document and save as another file?

    You would need Adobe Acrobat to do that, not Adobe Reader.

  • Restrict User to Print Document in Archive Link

    Dear Friends,
    I have uploaded and linked a scanned document to SAP FI Document by transaction code OAWD.
    Say 1700000145,
    Co.Co. BP01
    Fis Yr.  2011.
    Object BKPF
    User is able to see the linked document in FB03 from Services for Object>Attachment List.
    I want to restrict the user from printing the document.
    I checked with Authorization Object "S_WFAR_KPR" & "S_WFAR_OBJ". But this did not help.
    Can you please guide me how to handle this scenario.
    With Warm Regards
    Mangesh Pande

    PLEASE ANYONE REPLY ON MY QUESTION

  • How to restrict users from saving a transaction in PCUI

    Hi Experts,
    I am working on a requirement where in I have to restrict the user from saving a followup up transaction if an order already exists for the same,in PCUI.I am able to display the error message in the PCUI screen but unable to restrict the user from saving the transaction.
    I have implemented the CRM_COPY_BADI ,copy method to check the item copy and populating the message from there...The requirement is fulfilled in GUI by giving a abandon message which restricts the user from saving the transaction.but in PCUI the abandon message is not working..So is there any way to deactivate the save button for a particular transaction in PCUI and this is to be done from within the CRM_COPY_BADI..
    I would sincerely appreciate any help provided on the issue..

    We can do this by populating an error message in the Application log

  • How to get users from Organizational Unit and with worker's subgroup

    Hi
    I am looking for a f. module to get the list of users from specific Organizational Unit and with specific worker's subgroup.
    I found f. module SWI_GET_USERS_OF_ORG_UNIT but it seems not working and only returns the users, how can I narrow the selection to get only from specific worker's subgroup?
    Thank you

    Hi,
    Try with FM RH_STRUC_GET with following parameters:
    ACT_OTYPE = O
    ACT_OBJID = worker's subgroup
    ACT_WEGID = SBESX
    Most important is to specify OBJID as the workers's subgroup, values for the others parameters may vary.
    Cheers.

  • How to restrict user to post document segment wise/Profit center wise

    My client wants to restrict users segment wise to post account document.
    we use documnet splitting segment wise.
    Thanks
    Chinmaya.

    Hi
    Check with your BASIS guy if authorization object is available for the field SEGMENT... There are some issues yet with this because it is not available in some T codes
    If the same is not available, you can ask your ABAPer to create a Z authorization object for this field and write a small ABAP code in the exit RGGBR000 (FI validation)
    Sample code is attached below to check auth for Plant in Internal order...ZCO_INTPORD was the Z auth object created...
    CHECK i_aufk-bukrs  IS NOT INITIAL.
    CHECK i_aufk-werks  IS NOT INITIAL.
    AUTHORITY-CHECK OBJECT 'ZCO_INTORD'
             ID 'BUKRS' FIELD i_aufk-bukrs
             ID 'WERKS' FIELD i_aufk-werks
             ID 'ACTVT' DUMMY.
    IF sy-subrc = 4.
      MESSAGE e398(00) WITH 'You do not have sufficent Authorization'.
    ENDIF.
    Regards
    Ajay M

  • How to restrict users from creation of varients in report transaction

    Hi All,
    I have a requirement where buisness wants to restrict users in creating varients in report transactions.because of create options users will be creating more screen varients which will be disturbing for the other users to select a particular standard varient.Kindly give ur input regarding this
    With regards
    Girish A

    Hi,
    First edit the role assigned to users using PFCG.
    Then go to Authorization tab and click on "Change Authorization Data".
    It will opened up the profile of the role. now find the authorization object "S_PROGRAM".
    In that edit "User action ABAP/4 program" object.
    Remove "VARIANT" check box if it was checked and save. Now press
    Generate button or "Shift+F5".
    That's it.
    You can ask for this to your basis team. They can perform this task  easily.

  • How to restrict user from deleting record

    Dear All,
    Kindly share your experience...
    Situation: My client have one SOB, used by several branches. Each branch has its own branch code in Chart of Account (accounting flexfield). Currently, to prevent branch accessing other branch's journal in General Ledger Module, we set account security (segment Branch) for each responsibility. In this way, batch header and journal header are still shared. Branch A still can see branch B's batch header and journal header, and even can delete the journals. This is very risky. Client urges to hide 'delete' icon from the toolbars and menu or disable 'delete' journal function for certain responsibility.
    Questions: how to solve that problem without modifying the form?
    Thanks,
    KC

    You may want to consider using the CUSTOM.pll. Basically its an "approved" way to do Form customization. You will need to understand basic Forms programming.
    Metalink Note 73505.1 is fairly good.
    There's also an OAUG white paper (2000) by Brad Goodwin
    Ken

  • How to restrict users to download, copy and print the documents from document library

    I want in SharePoint documents which I uploaded in documents library. no user will be able to download, copy and print.
    How it can be possible these types of restrictions apply?

    You can't achieve this goal by just setting appropriate access rights on SharePoint. You need to setup and configure Information Rights Management: https://support.office.com/en-in/article/Apply-Information-Rights-Management-to-a-list-or-library-6714cfe3-ef39-43b0-bb65-a887726bb63c

  • How to restrict users from uploading malicious files(exe, dll,etc) & limit file size in a webform

    Hello, please i have a file atachment field in a form on my site. I want to restrict the size of the file that can be uploaded and the type. It's a vacancy page and I want candidates to only upload doc and pdf files. I want to also limit the file size to 50mb only. How can this be done within the BC system.
    Thanks.

    The file extension can't be trusted, like the mime-type it can be faked by a malicious user. Also this method can just be avoided altogether by anyone who has javacript turned off. Using javascript for this is not even remotely secure.
    Isn't there a way to allow file uploading but specify a whitelist of filetypes (preferably checked using byte headers or some effective method) somewhere in admin?
    Liam Dilley wrote:
    Hey there,
    You can do the file extension with jquery for example. The basic aspect of that is:
    var ext = $('#my_file_field').val().split('.').pop().toLowerCase();
    if($.inArray(ext, ['exe','dll','jpg','jpeg']) == -1) {
        alert('invalid extension!');
    So what is hapepning there is that it checks the value of the field when someone has added the file and checks the file extensiona and produces an alert but you can do as you need.
    You could run this on hover of the submit button, on change of the actual file attachement field or on click of the submit button in the checks before it submits.
    BC limits files to 100mb anyway so you should be ok on that front, they wont be able to be crazy uploading.

  • SM58 - How to restrict users from viewing all the idocs?

    Howdy,
    The users want to be able to use SM58 to view any idocs that have failed. Unfortunately they currently can access the IDOCS of all countries, in addition to their own country. Does anyone know how we could restrict them?
    Or if there another transaction that we could ask them to use?
    Many Thanks!

    Hi,
      You can restrict by the Transactional RFC Destination which should be different.
    regards
    Aveek

  • How to Recover database from old backup and full archive log file

    Hi Oracle expert!
    I met problem when restore my oracle database.
    In my case:
    - My database version: 10.2.0.2
    - I have a database full backup (01-Nov)
    - I have all Archived log file from (01-Nov -> 05-Nov)
    - My database drop in 05-Nov with disk error (no datafile, no redo..).
    - I have no any RMAN backup from (01-Nov -> 05-Nov)
    How can i restore my database to 05-Nov?
    Thanks

    user10280724 wrote:
    Hi Chinar.
    When i used RMAN flow as your step, but i met the problem!
    - After recover database i select sequence#, applied from v$archived_log;
    --> it apply newest archived log that i had.
    - but when I select Data from table created between 01-Nov to 05-Nov, it not found!
    Not the same way the step:
    SQL> RECOVER DATABASE USING BACKUP CONTROLFILE UNTIL CANCEL?
    It apply newest the same archived log i had table created between 01-Nov to 05-Nov.
    How can i do with RMAN to recover my table?That is not possible,if your all available archive logs applied using rman or through sqlplus(recover database using backup controlfile until cancel) and one of these logs contain your table then there are not any problems.So there are not any difference between recovery using rman and user managed(using sqlplus),but there main matter is applying all archive logs.So first check through rman list copy of archivelog all or list backup of archivelog all and identify there in rman repository is any information or not about these logs.

  • How can multiple users from different locations access my Muse website files to update them?

    We're a team, and we need to be able to work together remotely.
    How can I let another user (on the East Coast - I'm on the West coast) have access to my Muse website files so that they can work on them and make changes - but I can also work on them here?
    I've already made them an Admin in the Manage section of the live Muse website that is hosted on Business Catalyst.
    BTW, they also belong to Creative Cloud.
    Thanks!

    You need to share your .muse file with this other person.
    Muse does not currently support multiple users opening the same .muse file at the same time.
    There's lots of options for sharing a file - you could copy it up to a company network server, or email the file back and forth, or use a filesharing service like Dropbox, SendThisFile, Adobe SendNow, or Creative cloud sync, among others.
    Which one is right for you depends on the size of your file, how often you're sending the file back and forth, and personal preferences
    Whatever you choose, it's important that you DO NOT have 2 users working on the same .muse file at the same time. This can cause corruption of your .muse file. I'd also recommend frequent backups of your .muse file, as you might find that one of you clobbers a change made by the other and you want to be able to go back to your old copy of your .muse file to copy/paste some content to your latest copy of your .muse file.

  • How to read data from analog input and export it to a file using Components Works

    I've made a simple application (Delphi 5 using the activeX) that read data from analog input channel 0. After I read the data, I want to export it to a file using the Components Works on a 6035E NIDAQ. (I'm not using labview and don't want to use it)
    How can I do that???
    Regards,
    Francis

    Here's a sample code to do this...
    P.S.: If you read only one channel this code won't work.
    function MyFunction: Integer;
    var
    Low, High, i, j, ChannelCount, RowCount: Integer;
    Po: P;
    begin
    //you are reading multiple channel
    ChannelCount := VarArrayHighBound(Buffer, 1);
    RowCount := VarArrayHighBound(Buffer, 2);
    for i := 0 to ChannelCount do begin
    for j := 0 to RowCount do begin
    WriteToDisk(Buffer[i, j]));
    end;
    end;
    end;

  • How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

    Dear All,
    We are having an infrastructure setup of around 500 client computers managed through group policy.
    Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
    Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
    It would be great if you can assist me with the following query.
    How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
    Can we disable Network Tab on the left hand pane ?
    explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

    >   * explorer.exe is blocked already, but users are able to enter the
    >     Windows Explorer by clicking on the name which is visible on the
    >     Start Menu.
    You cannot block explorer.exe when you do not replace the shell - the
    desktop you see effectively IS explorer.exe...
    Your requirement sounds like you need a custom shell:
    http://gpsearch.azurewebsites.net/#2812
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

Maybe you are looking for

  • Creating a WCF MTOM application with Java Client

    Well I am treading into new ground here.  I need to create a WCF that will pull files from a database in an image column and either send them to a Java service that will accept binary data.  We send an XML file to the Server which is running Java.  D

  • Can you connect 2 raids to 1 Xserve

    I have intel Xserve , with a raid connected, can I connect a second raid. All I want to do is store image files. So if I need a second Xserve would a g5 Xserve work fine for this. I have a small studio but looking to store personnal images and projec

  • Finding "not supported" files after import.

    I just imported my iPhoto library (via reference). I received the following message "344 images either not suported or movies". Is there a log file or some other means of finding which images weren't imported? Also, I was really suprised at how long

  • How to separate JAVA from ABAP in BI 7.0

    Hello Experts, we think about a separated BI (ABAP and BI-JAVA) on two servers during a migration to a new Hardware! The existing system is a double-stack (BI 7.0). So we should find out how to do this, how to separate the Java instanz from the ABAP

  • Bridge CD5 will not start

    I am unable to start Bridge CS5. After some weeks of using Photoshop CS5(but not Bridge) with no problems until I tried to open Bridge on my Windows 7computer. A bessage asked if I wanted to link HDR Efex 2 to Bridge which I accepted. Sine then Bridg