Infoobject Authorisation in a Report

Hi all,
I have an issue where in I need to restrict the amount of data being pulled by a BW report. The restriction should be on 0Calday (Range variable) , except a few users all others should not be able to run the report with the Day range more than 1 month.
Pls suggest a good way to approach this. Will an authorization object achive this, i know it does for Fixed values, but here the difference betweeen the dates entered by the user should not exceed 1 month.
I am a little sceptic to mess with 0Calday infooject.
thanks
Raj

Hello Raj,
Please go to BW system and get to Transaction Code CMOD. Check if the Component RSR00001 BW: Enhancements for global variables in reporting is already assigned to a project if not create a project and assign component RSR00001.
Maintain a table with the users who can view data beyond 30 days.
Create a new Variable of processing type Customer exit in Bex. Then the following code should be written in the below given include..
Include ZXRSRU01
    DATA: L_S_RANGE TYPE RSR_S_RANGESID,
          T_VAR_RANGE TYPE RRRANGEEXIT.
    CASE I_VNAM. " Variable name
      WHEN 'ZCALDAY'.   " New Variable
Populate the date Range, that the users are allowed to view. This date Range * will appear as default.
        IF I_STEP = 1.
          CLEAR L_S_RANGE.
          L_S_RANGE-LOW = sy-datum.
          L_S_RANGE-High = sy-datum + 30.
          L_S_RANGE-SIGN = 'I'.
          L_S_RANGE-OPT = 'EQ'.
          APPEND L_S_RANGE TO E_T_RANGE.
        ENDIF.
    ENDCASE.
Once the user enters the values you again validate the date range the user has entered. At this point check the user who is running the Query. If the user is part of the table entry he is exempted, if not read the user entries using the code READ TABLE I_T_VAR_RANGE INTO T_VAR_RANGE WITH KEY VNAM = ' ZCALDAY'. Check the date range and if it does not fall the criteria either you can pop up error message or change the values to default values and display a message that values are modified to default.
CASE I_VNAM. " Variable name
      WHEN OTHERS.
Here you can validate the user entries
        IF I_STEP = 3.
          L_S_RANGE-LOW = sy-datum.
          L_S_RANGE-High = sy-datum + 30.
          L_S_RANGE-SIGN = 'I'.
          L_S_RANGE-OPT = 'EQ'.
          APPEND L_S_RANGE TO E_T_RANGE.
        ENDIF.
    ENDCASE.
Hope this helps..
Sridhar.

Similar Messages

Different authorisations in different reports?

Hello,
I'd like to ask: how can I assign different authorisations for the same user for different reports?
Example:
I have a report of sales by customer, additionally groupped by Key Account Manager (KAM)
KAM
....\_____ Customer
and another one, where data is presented for Customers, groupped by Consultants (CON):
CON
....\_____ Customer
Both reports are based on the same multiprovider.
Moreover, both KAM and CON are IObjects which have Customer as a reference char. I'd like to present reports to Key Account Managers and Consultants, showing their sales to respective Customers. But only theirs, not other KAMs' or CONs' sales.
The point is - one person can be a KAM for one sale, and a CON for another one (although, those are two separate IObjects, they share master data with Customer).
I have therefore made an authorisation for one user, giving him rights to view 'his' KAM, and ":" CON. After that, I have used this authorisation in a role, and assigned it to the user. This way, the report No. 1 provides correct data - only sales where KAM is the chosen user, regardless of values of CON (the IObject itself is not even present in the query, therefore the ":" has been used).
How can I arrange the authorisations, so that this user can open the second report, presenting him sales to customers for which he was assigned as a CON?
To put it shortly:
How can I give user 001 rights to view all objects AA and only one value of object BB in report ABC1
but give him rights to view only one value of object AA and all values of object BB in report ABC2?

Hi,
OK! try this following work around:
Make it language dependent again . and unmap in transfer rules ( cross symbol ).
remove the info object in right panel too. and write the routine as follows.
IF TRAN_STRUCTURE-sprache = ' '. ( write code of japanese langauge )
And tran_structure-sprache = ' ' ( write code for chinese langauge )
RESULT = 'e'.
else.
RESULT = TRAN_STRUCTURE-sprache.
endif.
activate the transfer rules and try uploading data again!
Thanks,
Ravi

Infoobject length problem in report

I have an infoobject sales area which has length 40 in my report.
When i execute the report in BEx Analyzer i am able to view sales area's values having 40 chars.
But when i execute the same query in Web Analyzer i am only getting first 20 chars values of sales area, rest are not visible.
Please suggest me how to proceed further.

Hi,
go through the link provided by Eugene Khusainov it will surely help you
/people/sap.user72/blog/2006/05/27/long-texts-in-sap-bw-modeling
Regards,
Marasa.

Authorisation check in report

Hi ,
we have developed a z report which is fetching grade from infotype 8 .All the users here dont have authorisation for infotype 8.Is it possible somehow that the users who don have authorisation for infotype 8 can rum that report.Right now when they are trying to run the report its showing 'No Authorisation for infotype 8'.Or is there some other place from which grade can be retrieved .
Regards
Saurabh

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

Preventing display of currency unit infoobject values in a report

Hi,
For a currency type key figure, there is a currency unit infoobject specified. This has INR (Indian Rupees) as its value in the infocube for all the records. When I display the KF in a report, the value of the associated currency unit also gets displayed with it. Is there any way to not get this display of the associated currency unit other than not having any currency unit values in the infocube?

Hi Jr,
Thanks, that works.

Authorisation in Z-report

Hi All
I have created Z-report, i want to restrict Access in Z-report using authosrisation object on field plant.
I want to use standard authorisation object only. This report must be used by specific business unit plants users.
I dont want to hardcode users plant in program.
How to achieve it?

Hi,
Can you let us know what information is being displayed in this Z report ?
You will have to use the abap syntax
AUTHORITY-CHECK OBJECT <authorization object>
ID <werks> FIELD <value>.
There are quite many standard objects, so depending on which data you're reading / displaying we need to pick the object accordingly.
Hope it clarifies.
Regards,
Vivek

Authorisation Group and Reports

Hi experts,
I need to maintain a new authorisation group for a new report that I am creating. I know authorisation group can be maintained in the table TPGP and can be assigned from there. But I wanted to know if there is any other way of linking a report to a particular Authorisation group.
Thanks,
Kumar

Hi Max,
Thanks for the reply. An already created Authorisation group can be assigned in the attributes. But what I wanted to know was to create that authorisation group, Is the only way possible is maintain it in table TPGP or is there any other way?
Thanks,
Kumar

AUTHORISATION REQUIRED FOR REPORT LEVEL POP UP WINDOW

RESPECTED ALL
I HAVE CREATED ONE REPORT AND CREATED ONE CHARACTERISTIC AND DUE TO WHICH WHEN I AM EXECUTING, IT FIRST ASK THE SELECTION CRITERIA WINDOW LIKE POSTING DATE AND MATERIAL SELECTION. BUT WHEN I AM DOING THE SAME THING THROUGH THE DIFFERENT USER, THE SYSTEM IS NOT ASKING ME THE SELECTION WINDOW.
I THINK THERE MUST BE SOME AUTHORISATION RELEVENT ISSUE. PLS GUIDE ME.
THANKS ALL
REGARDS
ABHAY

Hi
I think the user has made the selection as personalized . Remove the same. this will work fine.
Cheers
Chanda

InfoObject is missing in report after upgrade

Hi,
My InfoObject Statistical ID is missing in Report after Upgrading from 3.5 to 7.0.
I did comparison of report before and after upgrade and found this issue.
the data content is the same but only this infoObject cannot be seen in the report
how do I correct this issue.
thanks
Edited by: Bhat Vaidya on Aug 6, 2008 12:24 PM

This not fixed. SAP couldn't explain why

Authorisation Object for reporting

I created a Authorisation Object on an Infoobject .The list that comes up for selecting the Infocubes which should be effected by this doesnot show the Cube in which the Infoobject is used.
The list shows various ODS and Cubes and I dont know how they r related to this Authorisation Object.

hi,
check if relevant oss note 641614-InfoProvider in RSSM not displayed for authorization object.
the solution support package may out of date, you may try this ?
... You can avoid this problem by using the 1KYFNM field in the authorization object. In this case, all InfoProviders will be always displayed.
Symptom
An InfoProvider is not displayed in transaction RSSM for checking authorization objects. Consequently, the setting that indicates whether this InfoProvider should be checked for the authorization object cannot be changed.
Other terms
Authorization object, InfoProvider, InfoCube, RSSM, check
Reason and Prerequisites
The InfoProvider contains a referencing characteristic, which is authorization-relevant, as a navigation attribute. As a result, the usage is not found as the navigation attribute in the where-used list for the InfoObject in the authorization object and consequently, the InfoProvider is not found either.
You can avoid this problem by using the 1KYFNM field in the authorization object. In this case, all InfoProviders will be always displayed.
In addition, it will also be easier to implement a check on key figures at a later stage because once authorizations exist for an authorization object, no more fields can be added.
Solution
BW3.0B
Import Support Package 15
BW3.1C
Import Support Package 09 for 3.1C

Authorisation issue - the report is running and

Hello friends,
Need some help .
There is one salary report , which user is not able to see the data . It is running and running for 1/2 hours
and finally the message coming that action is cancelled.
I have checked the data flow and everything seems correct .
It seems the problem with user authorisation .
How could i check the User id authorisation for this specific salary report. ?
I am not aware about the more thing in authorisation.
Thanks in advance.
Regards

I feel this is not authorisation issue. But i am not sure.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PM

Authorisation issue . - Report is running and running

Hello , By mistanly i resolved the last thread .
Yes , i have excuted the report by using RSSMQ and with the user id . I found the below messge .
Full Authorisation is requiered for this selection option .
A displayed hierachy requires option .
Could you please let me know , how i can solve this issue now .?
Thanks in advance.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PM

I feel this is not authorisation issue. But i am not sure.
Any way.
Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
RSSMQ - Runs report with other user ids
SU53 - gives information on authorisation problems if any (It is authorisation Trance)
Thanks.
Edited by: BI Dev on Jan 3, 2008 5:29 PM

Data in infoobject not showing in report

Hi,
I have this situation. I can see cost center number in variable screen but the number is not showing when I run the report.
thanks

Hi,
I would suggest you try to see if the data is being populated in the cube for the particualr infoobject.If it is not populated in the cube itself,then check the filters inthe start routine,transfer & Update Routines. If its populating the data then,try to run the query on the same selection criteria and verfiy.This way you can confirm if its the loading into the dataprovider or on the front end that needs to be fixed.
hope it helps

How to create authorisation object for report

hi
experts..
hw can u create authorisation object for the custom report.
Thanks& Regards
Spandana

Hi,
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Sy-SUBRC values
4              User has no authorization in the SAP System for
               such an action. If necessary, change the user
               master record.
8              Too many parameters (fields, values). Maximum
               allowed is 10.
12             Specified object not maintained in the user
               master record.
16             No profile entered in the user master record.
24             The field names of the check call do not match
               those of an authorization. Either the
               authorization or the call is incorrect.
28             Incorrect structure for user master record.
32             Incorrect structure for user master record.
36             Incorrect structure for user master record.
http://www.sap.ittoolbox.com/groups/technical-functional/sap-basis/please-how-to-create-an-authorization-object-386391 - 78k -
http://www.sap-abaprogram.blogspot.com/2007/11/what-is-use-of-
authorization-checks-to.html - 75k -
www.sapworld.hpg.ig.com.br/download/ab4query.pdf
with thanks,
Abaper.

Debug Authorisation for z report

hi all
i have requirment like this. one of the user wants to debug the report. i do not want to give debug authorisation for all z reports. i want user to debug only perticulatar program.
please tell me how to do programatically.
regards.
ulhas

Dear
contact for this to BASIS people they will give the authorisation .

Infoobject Authorisation in a Report

Similar Messages

Maybe you are looking for