HU02 - restrict delete option for user

Hello
Does anyone know, from an authorization perspective, if I can restrict a user who has HU02 tcode, and btw only HU02 tcode exists in the role, from deleting a handling unit.
I've unchecked both the options Create & Delete in the role yet the user is able to delete units.
I ran a trace to see if there are any objects but all I saw in the trace was bunch of other tcodes that were run in the back ground.
thanks
Raj

In some cases, where it is considered not critical I guess, the application will not make all the checks you want. It might assume that the user has already passed other checks, which will then determine what can be sent to HU02.
In these cases, I think it is fair to assume that another transaction calling this one should take care of more granular authority - even if not perfect. But that activity checks are missing, seems a bit extreme.
Ideally, it is always better and easier to implement authorization security if the user has the same experience, regardless of how they get there (whether the tcode is present or not makes little difference in these cases - it is just an upfront check).
Either reconsider your choice of transaction (look for a different one) or open a message with SAP to tighten the checks in the core transaction.
If the user can start reports directly, they will anyway hose your tcode security (due to the above assumptions of authority checks being located in the correct places).
Cheers,
Julius
Edited by: Julius Bussche on Nov 17, 2008 11:18 PM

Similar Messages

  • Restrict the User name / Password Auto complete option for users accessing

    Hi All,
    Can any one know the Restrict the User name / Password Auto complete option for users accessing Portal from within and outside of Portal.
    Regard's
    Rama

    Are your referring to the browser functionality of remembering the usernames and passwords?
    Thanks,
    GLM

  • Restrict Select-Options for Logical Database field

    The way we restrict select options for custom defined select option fields on selection screen.. can we restrict select options for standard Logical Database fields?
    i.e. report uses PNPCE logical database and has field called PERNR. I want to restrict select options for this PERNR field so that it has options for 'Select single values' only.
    Thanks,
    Falguni
    Edited by: Falguni V on Nov 13, 2010 6:42 AM

    You can user AT SELECTION-SCREEN event, and check whether any record is having high value for PNPPERNR.

  • MCKH - Disable delete option for particular version

    Dear SD Gurus,
    Our client uses MCKH to view sales information.
    In this, SD user has created a version F601V under the standard version S601, to view "Part Sales" information.
    Now he wants to disable the delete option for this particular version F601V.
    The idea is that any other user should not delete this version by mistake.
    There is a particular variant attached to this version & we tried to achieve this by checking the protect variant option.
    However, system still allows deletion.
    How this can be achieved?
    Regards
    Prabhu

    thanks for your answer Mr. Atkinson, that was excatly what I need. This is my code inside the event receiver:
    public override void ListAdded(SPListEventProperties properties)
    SPList list = properties.List;
    list.AllowDeletion = false;
    list.Update();
    but the above code dont have any effect on the list, I have still the Item with DELETE THIS LIST in the listsettings.
    do you know maybe why? or can I also debugg it?
    thanks in advance
    BR
    Ahmad
    SP 2013 & SPD 2013 & VS 2013 & MSSQL 2012

  • I do not have a delete option for files or folders in Adobe Creative Cloud

    I do not have a delete option for files or folders in Adobe Creative Cloud
    im looking and looking....
    im stumped.....
    4 weeks now....
    kai

    HOW TO DELETE FILES or FOLDERS or Assets from Adobe Creative Cloud Brouser/Web Portal By: Kai Buskirk rev:130626
    Adobe now burried deleting or trashing unwanted iteams files or folders in the Archive section of your creative cloud brouser/web portal.
    Note!! - No longeer is there a standard TrashCan icon or simple Delete button... its burried in the archive sector: but why i ask?
    An archive is an accumulation of historical records, or the physical place they are located.[1] Archives contain primary source documents that have accumulated over the course of an individual or organization's lifetime, and are kept to show the function of that person or organization. Professional archivists and historians generally understand archives to be records that have been naturally and necessarily generated as a product of regular legal, commercial, administrative or social activities.
    In general, archives consist of records that have been selected for permanent or long-term preservation on grounds of their enduring cultural, historical, or evidentiary value. Archival records are normally unpublished and almost always unique, unlike books or magazines for which many identical copies exist. This means that archives (the places) are quite distinct from libraries with regard to their functions and organization, although archival collections can often be found within library buildings
    A person who works in archives is called an archivist. The study and practice of organizing, preserving, and providing access to information and materials in archives is called archival science. The physical place of storage is sometimes referred to as an archive repository.
    To delete files folders or individual assests in the current incarnation of adobe creative cloud brouser/web portal rev:130626
    1 - Check mark the box on left and select files or folders you would like Deleted/Trashed and move them to the ARCHIVE folder location inside your adobe creative cloud brouser/web portal....Then navigate to the ARCHIVE SECTION
    2 - Once the files or folders you have check marked are moved to the ARCHIVE folder location you can select them for Permanant Deletion (Trash)
    ps: you can also restore them......if you so choose....
    3 - in case you missed this step after selecting/checking the files or folders in the ARCHIVE folder there is a small Triangle Selector drop down that will reviel the Permanently Delete option.... clicking that is the point of no return i think..... so do not be misled my the use of the term ARCHIVE.... DELETING PERMANANTLY IS DELETING YO!
    4 - OK DONE NOW YOU GOT IT .....
    Good Luck Happy House Cleaning.....
    Wamest Blessings,
    Kai Buskirk
    Message was edited by: [email protected] rev: 130626

  • How to make default personalization options for users

    Hi all,
    How can I make default personalization options for users, so that those will the default options when the user opens the portal BSP applications. Those will be the standard, at later point of time if they want they can personlalize some other fields, but earlier fields will be the default fields and user cant be able to change them.
    Thanks
    Murthy

    Hi Murthy,
    If you use IMG (crmc_blueprint_c) to customize PCUI appl than you can use the personalization feature. If you select 'Not in List' in the IMG for the field in the fieldgroup structure, than this field by default will not be viewable in the List View and will not be checked as 'Visible' in the Personilzation link. So by not selecting 'Not in List' you are giving that field to be viewable and all other fields are available for users to personalize by default.
    If you have maintained the 'List View' using the CRM Designer, than most likely you would lose the above feature, as SAP Standard code considers the CRM Designer as high level of customization.
    Thanks
    Harsh

  • How to set auto delete option for old messages

    Hi All,
    Can any one help me on how to set auto delete option for mails older than 15 days from my Z10.
    James Kurian

    There is no such option in BB 10.
    However, you can achieve a similar result by setting your email sync timeframe to 14 days (the closest option).
    If you are using an ActiveSync account (such as Hotmail, Outlook.com), go to Settings > Accounts > select the account. Tap advanced at the bottom of the screen. Scroll to the very bottom, tap Sync Timeframe and set to 14 days.
    If you are using an IMAP account (such as Gmail or GMX), you will have to delete, then re-add your account.  The Sync Time frame is only avaialble during setup for these accounts.  When adding, tap advanced at the bottom of the screen and set the Sync Timeframe.
    Hope this helps.

  • When i connect i5 to itunes .. i dont get "delete" option for songs upon right click .. can anyone help me with this plz?

    when i connect i5 to itunes .. i dont get "delete" option for songs upon right click .. can anyone help me with this plz?

    Yes, annoying. A couple of options:
    While it's playing the current A song, click on the H song to select it (but not double click to play it), when iTunes jumps to the second A song, press the down key and iTunes will remember that you had that H song selected and will move the selection to the second H song while the second A song is still playing. So, still jumps around, but easy to get back to where you were.
    Create a new playlist for your music, right click on it, select "New Window" and you can browse your music in a second list while the first window continues to play music. But if you then start playing music in that second window, you have to go back to the first window if you want to start browsing again. Not great if you're navigating around to play the next song.
    Play music from iTunes DJ, then as you're browsing around your library, you can add things to play next in DJ, and go back. You can combine this with previous suggestion, to keep DJ open in one window while you browser in the other window.
    None of these are great, but maybe one of these works better than your current workflow.

  • The new itunes version won't give me a delete option for podcasts, AND it added back in podcasts from months ago.  Help!!

    The new version of itunes doesn't give me a "delete" option for my podcasts and it redownloaded previously deleted podcasts. Help!!

    I have the same issue.  Need Help, too!

  • Disabling "AddFilter" option for users

    Hi All,
    I need to disable the "AddFilter" option , which is under the coloumn name in 'Answers' for user login.
    Could any one please provide the solution for the above requirement?
    Thanks,
    Suresh.

    Suresh
    Settings-->Administrator-->mange Priviliges-->View Filters ---> Add/Edit Filters View ---?add/restrict the groups to
    You should close your 13 threads by doing this http://forums.oracle.com/forums/ann.jspa?annID=939
    thanks,
    SAichand.v

  • PO inquiry option for users (without edit option)

    Hi,
    I have the requirement to facilitate PO inquiry option to users but without any edit/create options.
    This is for information analysis purpose only. therefore edit option is not required.
    Please help me find a solution.
    Thanks,
    JB

    You can create your own responsibility with required menu/functions to expose to users, they will have only PO inquiry menu.
    refer following links:
    Setting Up Oracle Applications System Administrator (User, System Administrator, and Flexfields Help)
    How to Set Up a Custom Responsibility in Oracle Applications (Doc ID 249987.1)
    thanks

  • Lost "Delete" option for emails - says "Archive Mesage" instead

    After I upgraded to latest iPhone download, I lost the ability to delete my email messages and can only archive the message.
    I have the 3G model.
    Any suggestions?

    Go to Settings
    Mail, Contacts, Calendars
    Turn off "Archive Messages"
    You'll get the delete option back.
    null

  • How to restrict changing password for user ?

    Hi All experts ,
    We have created users . Users should not change their password without permission of Administrator . How to restrict them by setting Permissions / Authorizations ? 
    Thanks.
    KISHORE SATPUTE

    Hi,
    In "USER MAINTENANCE- SU01" --> in the "logon tab" there are 5 different "user type"
    1. dialog
    2. system
    3. communication
    4. service
    5. reference
    Kindly mention the function and role of all the above mentioned user types specifically and hows is one user type different from another.
    These are as follows:-
    1. Dialogue:-
    For this kind of users:-
    GUI login is possible.
    Initial password and expiration of passowrd are checked.
    Multi GUI logins are checked.
    Usage:- These are used for GUI logins.
    2. System
    For this kind of users:-
    GUI login is not possible.
    Initial password and expiration of passowrd are not checked.
    Usage:- These are used for internal use in system like background jobs.
    3. Communication
    For this kind of users:-
    GUI login is not possible.
    Users are allowed to change password through some software in middle tier.
    Usage:- These are used for login to system through external systems like web application
    4. Service
    For this kind of users:-
    GUI login is possible.
    Initial password and expiration of passowrd are not checked.
    Multiple logins are allowed.
    Users are not allowed to change the password. Only admin can change the password
    Usage:- These are used for anonymous users. This type of users should be given minimum authorization.
    5. Reference
    For this kind of users:-
    GUI login is not ible.
    Initial password and expiration of passowrd are not checked.
    Usage:- These are special kind of users which are used to give authorization to other users.
    Rewads point if helpful
    Thanks
    Pankaj Kumar

  • Disable delete option for a list? But where ?

    hi all,
    via Console Application I can hide/disbale the Delete This List option:
    static void Main(string[] args)
    SPSite site = new SPSite("http://localhost");
    SPWeb web = site.OpenWeb();
    SPList list = web.Lists["DemoList"];
    list.AllowDeletion = false;
    list.Update();
    My question is, if I want do this in Empty SharePoint Project what I must to do ?
    if any one has a suggestion or ides please tell me.
    thanks in advance
    Ahmad
    SP 2013 & SPD 2013 & VS 2013 & MSSQL 2012

    thanks for your answer Mr. Atkinson, that was excatly what I need. This is my code inside the event receiver:
    public override void ListAdded(SPListEventProperties properties)
    SPList list = properties.List;
    list.AllowDeletion = false;
    list.Update();
    but the above code dont have any effect on the list, I have still the Item with DELETE THIS LIST in the listsettings.
    do you know maybe why? or can I also debugg it?
    thanks in advance
    BR
    Ahmad
    SP 2013 & SPD 2013 & VS 2013 & MSSQL 2012

  • SAPGUI - Auto password reset option for users

    Hi
    We currently have R3 ECC 5.0 implemented across our locations. We have very high calls registered to our support team for password reset.
    we want to know whether there is a option available wherein users can select a option "Forgot password / Reset password" based on which system should auto generate the password and send the same through e-mail to the user. This will be a kind of self service for the users.
    Regards
    Sanjay
    Hindustan Unilever Limited
    Bangalore, India
    Mobile: 9341968501

    Hi Sanjay,
    As far as i know that kind of option doesnt exist as an SAP standard, Maybe theres a 3rd party software around....
    Regards
    Juan

Maybe you are looking for

  • Midlet working in wireless tool kit but not in real mobile

    I have created a midlet having a login form which will ask for username and password. once enter the details and click on submit button it will invoke servlet in our server. servlet connects to ms-access database and checks for autthentication and se

  • Stuck in region 1

    I am stuck in rgion 1 with my DVD and would like to know if I can get back to region 2?

  • G505s: Adobe Flash Games Running Laggy & How to Enable Dual Mode?

    I keep hearing about how the G505s has a dual graphics mode. What confuses me is that when I am playing some adobe flash games online, I am noticing considerable lag, while some Win8 App games and MMOs run perfectly fine along with having quality gra

  • J1I5 (excise RG1 update)

    Hi experts, I am trying to update RG1 (J1I5) with the following selections: Company, Plant, Excise Group Posting date Material, Batch Classification as RMA Document posting date RG1 (registers) After execute, message appears " List contains no data"

  • Resource manger

    Hi All, I want to use resource manger in my database. The requirement is as below: Database version : 10.2.0.4 No. of CPU's : 30 The batch user runs the batch during the daytime window, and we want to restrict only the batch user to user say 30% CPU