How to secure the users from deleting the work items

Hi all,
I have a question like this.........whether we could secure the users from deleting the work items by someone in the Project and also assigning a specific user to allow them to delete the idoc.
Please help me on this as this is critical.........
Thanks in advance
Chakri

One of t he possible way is, ask the basis team to create users as Service Users and you can determine whether the login user is whether a service or dialog user by using the a bapi BAPI_USER_GET_DETAIL under the exporting parameter logondata with field USRTYP where if the logged in user is Service user then this field will be populated as S if the user is a dialog user then it will be populated as A.
Now in more efficient way of fixing this is get the list of users for whom you donot want to give the authorization of deleting workitems and assign the appropriate role for all the listed users...
for roles and authorizations i hope the basis team is the right team to consult....

Similar Messages

How to track the user who deleted the info object.

Dear Gurus,
In our BI system one info object has got deleted. If I need to track the user who has deleted that how can I track it(in which DBtable). And the complication is one user ID is being used by many people, in this case how can I track that from which machine the Info Object has been deleted(if there is any possibility to track the machines by IP address).
Kindly let me know if there is any procedure to find it out. Your help will be rewarded with a great honour.
Regards
Mohan Kumar

Hi dear,
you have to go in SLG1 transaction, and then select
Object: RSD
Subobject: IOBJ_DEL
External ID: (put here the name of your deleted IO)
Then choose a time range...and voilà, you can find the user who deleted the IO...
Hope it helps!
Bye,
Roberto
About the IP...look at USR41 table, but I think it's a bit difficult fo find data referred to the past...
If you haven't activated logon auditing in SM19...

How to find the user who deleted the contents of DSO.

Dear friends,
Can u please tell me ,how to find the user who deleted the contents of the DSO.
The user has deleted the complete contents of the DSO. We need to find the user ,date and time.
regards,
Vijai

Hi,
If the user has used the manage option to delete the contents of the DSO then the changed by field will be updated by the users name. In case a program is used for the deletion then it wont be the case.
Regards
Govind.

Restricting the user from deleting a personel number

Hi All,
Can anyone help me in restricting the user from deleting a personel number.
Thanks & regards,
Venkat

Hi Venkat,
The utility menu will ultimately calls to PU00 so it doesnt matter , system wont allow him to delet.
You can try it out in quality if you want.
Award points if useful
Regards,
Bhupesh Wankar

How to disable other users from changing the status

Hi,
The status entry field can be changed irrespective of ownership in Documents.
I was able to change the status on the document created by other user.
Example: The status of document was In-Work. The document owner was X. But I was able to change it to Inspection Check.
How to disable other users from changing the status?
Regards,
Shashi

This is a frequently discussed topic.Please use the search feature.It has been discussed in [previous posts|CV01N: Filter documents by role; in various contexts.
Regards,
Pradeepkumar Haragoldavar

How to restrict a user from deleting a PO

Dear All,
I have to restrict some users from deleting a line item in PO. They will be authorised to create & change the PO but they must not be able to delete the line item.
Further it would be more helpful if it is possible to restrict them from deleting one perticular type of PO(ex-Capex PO). They can change a capex PO but can not delete it.
Any of the answars will be highly appreaciated.
Regards
Rutabhadra Panda

Hello,
Speak to your basis guy, put if you have created Capex PO as a particular document type, then maintain authorisation object M_BEST_BSA (Document Type in Purchase Order) and activity 06 delete.
You may find that delete is still possible through activity 02 change, so you might need to maintain different roles depending on what you need.
Thanks.

How to prevent certain Users from deleting a resource while in the project?

We are currently using P6.2 client; We are setting up a new resource dictionary and have been searching to find a way to prevent certain users from deleting resources while in the project. Is there a way to do that? I have created Global profiles and Project profiles under the Admin security profile and have tried clicking off of rights to delete a resource but when I log into as that user I can still delete the resource. Please Help!

Are you talking about preventing users from deleting resource assignments within a project? Or preventing them from deleting resources from the global resource dictionary?
For global resource dictionary in Global Profile you would turn off:
-Delete Resources
And likely:
-Add resources
-Edit Resources
-Edit Roles
-Edit Resource Calendars
For resource assignments on activities in Project Profiles you would turn off:
-Add/Edit Project Activities Except Relationship
Note: this will disable more then just the ability to alter resource assignments.

How to prevent multiple users from updating the same data in coherence

Hi,
I have a Java Web Application and for data cache am using coherence 3.5. The same data maybe shared by multiple users which maybe in hundreds. Now how do I prevent multiple users from updating the same data in coherence i.e. is there something in coherence that will only allow one user a time to update. If one user is in a process of updating a data in coherence and some other user also tries to update then the second user should get an error.
Thanks

I have a question on the same line. How can I restrict someone from updating a cache value when I a process is already working on it. I tried locking the cache key but it does not stop other process to update it , it only does not allow other process to get lock on it.

How to stop the users from changing the Decimal in SAP

How to stop the users from changing User Profile

Hai,
It is not possible to restrict SU3 to display, because it has only S_TCODE has the authorization object.
If you really want to restrict users from changing their profile you have to remove the SU3 access and give SU1 or SU2 which gives access only to Personnel details and Parameters.
Hope this helps.
Regards,
Yoganand.V

How to Restrict the users from changing the Default variant of report.

Hello everybody,
The requirement is to restrict the users to save and overwrite the default layout variant (Layout for higher managenet)set for the report, but at the same time they should be able to change and save the other layouts for which they are having access.
I have written the logic in the program which is working fine for all the scenario when we execute the report. But the logic doesnt work if the user is selecting the layout on the output screen of the report.
for e.g if the user runs the report using the layout varaint for which he is having the authorization then he gets the all 4 options so he then he can select the layout for which he is not authorized and he can overwrite.
i have debugged and check as i have found that after the report output is shown all the layout paramater is controllled by the statndard SAP objects.
Can anyone help me out in this issue.
Thankyou in advance.
*to get the default layout variant.
w_save = 'A'.
if p_vari is initial.
    clear disvariant.
    disvariant-report = sy-repid.
    w_variant = disvariant.
    call function 'REUSE_ALV_VARIANT_DEFAULT_GET'
      exporting
        i_save     = w_save
      changing
        cs_variant = w_variant
      exceptions
        not_found = 2.
    if sy-subrc = 0.
      p_vari = w_variant-variant.
    endif.
endif.
*logic to check user authorization to change the layout setting.
if p_vari = c_layout.
    if not sy-uname is initial.
      select single * from agr_users
              where agr_name = c_role
              and   uname    = sy-uname.
      if sy-subrc = 0.
        w_save = 'A'.
      else.
        w_save = ' '.
      endif.
    endif.
endif.
Regards,
Satish.

Hi Maine,
Thanks for your reply.
As you mentioned for your own program, you can control the parameter "I_SAVE", when calling "REUSE_ALV_GRID_DISPLAY".
so already i have use the same logic and control the parameter through I_SAVE and here i am calling method ALV_GRID->SET_TABLE_FOR_FIRST_DISPLAY instead of "REUSE_ALV_GRID_DISPLAY".
and it works fine when we execute the report but the logic doesnt work when the user tries to change and save the layout variant on the output screen of the report.
Regards,
Satish

Can we prevent the user from saving the document?

Hi All,
I want to know that can we prevent the user from saving an illustrator doc till a condition match.
if we can, then how?
Please comment.
Thanks

You can't prevent it, no. You could continually set the document modified flag to false, which would prevent regular 'Save', but they could always do 'Save As' -- nothing can stop that.

Stopping the assembler from deleting the war file

Is there any way to stop the Web Services assembler from deleting the build directory (or the war file) after it is done packaging the ear file? I want to take the war file and package it into my own ear file.

Using wsa from 10.1.3, you have the -war option wich can be used to provide the location where to put the file that will be otherwise packaged in the war file.
For more details check the documentation page 172 at http://download-west.oracle.com/otn/java/oc4j/1013/doc/web.1013/b14434.pdf
Hope this helps,
Eric

How can we restrict users from changing the data in HFM.

Hi All,
We have requirement from users where, They don't want the base data being loaded from SAP to HFM via FDM through ERPi to get changed in HFM at <Entity Currency>. They want data to be read only and no body should be able to change neither Grid nor Forms and neither Smart View. If we restrict by Shared services access then again they can't change ownership management value.
Regards,
Sushil

Hi Thanos, Thanks for your reply.
Yes i am aware of the security class, so your suggestion is to use security classes to restrict users? And how can i use the phased submission for the same? I am new to HFM so please bear with me.
I have one more question that my Application is HFM EPMA application. So is it necessary to have Application Administrator to change hierarchy and Deploy the Application from EPMA?
Thanks,
Sushil

How do I disallow users from saving the data they enter into an Editable form?

Hi all,
I am working with a client who does NOT want their users to be able to save their data. In other words, when the user opens the PDF file, they can enter data into the editable fields, but they should NOT be able to save that data as part of the PDF.
Does that make sense?
My client doesn't want the user to be able to save a local copy of the PDF with any of the data entered onto the form.
Based on what I've found in my research, as of Version 11, Adobe Reader now allows users to save their data. Unfortunately, my client doesn't want that.
Any help?
Thanks,
Steve

About the best you can do is include a JavaScript that resets the form when it is saved, so no entered data remains in the fields. The problem with this approach is JavaScript can be disabled, resulting in the form not being cleared and allowing the filled-in form to be saved.
You can address this with an additional JavaScript that runs when the form is opened that sets all of the fields from read-only to not read-only, allowing the fields to be filled-in. If JavaScript is disabled, the script won't run when the document is opened and the fields will remain read-only and therefore not fillable.
The user would be able to work around this by having JavaScript enabled when the document is opened and disabling it after filling-in the form but before saving it. Most users would not be aware of how to do this though.
If there are rules/regulations/laws in place that require something more certain, you'll have to take a different approach.

Can I prevent a user from Deleting the Group Policy deployed power plan?

I have Power Manager version 3.20 installed and am using the Group Policy template to deploy a customized power plan. I do not want my users to have the ability to delete this custom plan, but I cannot find the option in the Group Policy to change the setting that would grey-out the Delete button in Power Manager.
I have located the registry value that changes the function of Power Manager, it is: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\PWRMGRV\PowerSchemes\42617646-BC99-48E2-B3AF-C562C25F4098\ProhibitModification. If the value is 0, then the delete button is available. If the value is 5, then the delete button is greyed-out.
The problems is that the Power Plan ID number (the 42617646-BC99... part in the reg key above) changes from computer to computer. That ID string seems to be tied somehow to the specific computer. So, I cannot just create a Group Policy Preference to change that value in the registry, because that value is always going to have a different name.
The computers are all ThinkPad T400 model and are running Windows 7 Enterprise 64-bit.
Can anyone suggest a different method to change this setting? If not, is there any chance that the Power Manager application can be upgraded to include this control?
Thank you!

welcome to the forum!
to add to what gan said, page 6 of the power manager deployment guide covers this policy over active directory.
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=TVAN-ADMIN#pmat
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70419
ThinkStation C20
ThinkPad X1C · X220 · X60T · s30 · 600

How to secure the users from deleting the work items

Similar Messages

Maybe you are looking for