Is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?
Hi,
is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?
Thanks,
Digesh
Hi Digesh,
If your requirement is to restrict the excess to specific rows it is possible to use S_TABU_LIN, but it works only for table which contains org units, like plant, company code, etc.
Please search for S_TABU_LIN if this is your requirement.
Otherwise please follow Alex's suggestion.
BR,
Mangesh
Similar Messages
-
Hi,
Is there a way to give a user read permissions to a folder but deny him/her copy permissions? I have been searching for way to do this in windows server 2012 R2 without any luck. I have a folder that i would like a user to see the contents but not change
or copy it. Any one who know the tricks?
Thanks,
Jama.Yes,
Give the user read permissions to a folder, then he only read, but not write. Additionally, you can set Deny Write, to overwrite any inherited permissions.
Best Regards,
Jesper Vindum, Denmark
Systems Administrator
Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem. -
Possible Sequential Read Access for a Sorted Table
Hi All,
I have the following warnings in Code inspector check.
'Possible Sequential Read Access for a Sorted Table'
Kindly provide me the solution to overcome this warning message.
This is my code in BAdi : CRM_ORDER_FIELDCHECK , Method : FIELDCHECK
I am getting the above warning at
READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
user_stat_proc = 'ZITRHDQT'
object_type = 'BUS2000114'.
and at
MODIFY ct_input_field_names FROM ls_input_field_names
TRANSPORTING changeable
WHERE fieldname NE lv_field.
Please see the below code .
DATA : lt_header_guid TYPE crmt_object_guid_tab,
lt_item_guid TYPE crmt_object_guid_tab,
lt_order_i TYPE crmt_orderadm_i_wrkt,
ls_order_i LIKE LINE OF lt_order_i,
lt_status TYPE crmt_status_wrkt,
ls_status LIKE LINE OF lt_status,
ls_input_field_names TYPE crmt_input_field_names.
DATA : lv_header_guid TYPE crmt_fieldcheck_com-guid,
lv_chng_no TYPE c VALUE 'A',
lv_field(10) TYPE c VALUE 'ACT_STATUS'.
DATA: lv_status_completed TYPE crmt_boolean.
To Get GUID
IF is_fieldcheck_com-guid IS NOT INITIAL.
lv_header_guid = is_fieldcheck_com-guid.
ELSE.
lv_header_guid = is_fieldcheck_com-ref_guid.
ENDIF.
IF is_fieldcheck_com-ref_kind EQ 'A'.
INSERT lv_header_guid INTO TABLE lt_header_guid.
ELSE.
SELECT SINGLE header FROM crmd_orderadm_i INTO lv_header_guid
WHERE guid = is_fieldcheck_com-ref_guid.
INSERT lv_header_guid INTO TABLE lt_header_guid.
ENDIF.
*To Get the required details
CALL FUNCTION 'CRM_ORDER_READ'
EXPORTING
it_header_guid = lt_header_guid
IMPORTING
et_status = lt_status
EXCEPTIONS
document_not_found = 1
error_occurred = 2
document_locked = 3
no_change_authority = 4
no_display_authority = 5
no_change_allowed = 6
OTHERS = 7.
IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
user_stat_proc = 'ZITRHDQT'
object_type = 'BUS2000114'.
IF sy-subrc = 0.
ls_input_field_names-changeable = lv_chng_no.
MODIFY ct_input_field_names FROM ls_input_field_names
TRANSPORTING changeable
WHERE fieldname NE lv_field.
ENDIF.
ENDMETHOD.
Regards
VenkatHello Blake,
Try this:
READ TABLE lt_action_fld WITH KEY STATUS = '0' BINARY SEARCH.
wf_index = sy-tabix.
loop at lt_action_fld from wf_index.
if lt_action_fld-status ne '0'.
exit.
endif.
delete lt_action_fld index wf_index.
endloop.
Let us know, if this helps.
Rgds,
Raghu. -
Read-Only Access to Specific SAP tables
Is it possible to grant a user read-only access to a specific table or tables?
For example, say I wanted to give someone SE16N capability for just EKKO/EKPO/EKBE and NO OTHER tables. Is this possible? How?
Thanks.Hi,
as it was mentioned the transaction SE16N checks for authorization object S_TABU_DIS. The problem in your case is that the tables EKKO, EKPO and EKBE are already assigned to the authorization group MA - MM Appl. table. But there are many more tables assigned to this group. Changing assignment of standard tables is not a good idea.
Cheers -
Giving a user read access to an account for all entities
Dear All,
We have a series of R&D accounts that a user with limited entity security needs to review for all entities.
We have security switched on for Accounts and Entities only.
All entites have security classes defined, only the R&D accounts have a security cless defined (all other accounts ahve a balnk security class).
The user is not allowed to see any other accounts for the entities which they have no access to.
is it possible in HSS to create an access path which allows a single user to view/read an account for entities which they have no other access rights to?
Thanks.Hi and thanks for the response.
The user has 2 security groups.
The first allows them "All" access to their entity, default and the RD security class for R&D accounts.
This group means they have read/write access to all accounts, which for their own entity is acceptable.
If in the second group I give them read access to all entities then they can read all accounts for all entities.
I need to stop them from seeing all accounts except the RD accounts for the other entities.
Is this possible? -
How can i give multiple users admin access?
I would like to give another user on my macbook pro admin access, so that they can install programs without having to ask me for the password each time. I do not want the password to be the same for my profile, because I don't want them getting into my account. So is it possible to have a separate password for admin use only? This might be a dumb question and I know their is probably a simple way to do this, but I'm new to macs so any help would be greatly appreciated. Thank you.
Convert a standard user to an administrator
Choose Apple menu > System Preferences, then click Users & Groups.
Click the lock icon to unlock it, then enter an administrator name and password.
Select a standard user or managed user in the list of users, then select “Allow user to administer this computer.”
http://support.apple.com/kb/PH18891 -
Trying to give remote user FTP access to external HDD connected to my iMac
This gets a little complicated, so bear with me.
I have an external hard drive connected via FireWire to my iMac. I have a remote user that I want to be able to access this hard drive via FTP.
Here's what I've done so far:
1) I've given the iMac a static IP on the local network.
2) I've forwarded port 21 to said IP address via my Airport Extreme.
3) I've given the user her own account on my iMac.
4) I've turned on file sharing in System Preferences, and the user has read & write permissions. I've also enabled FTP access to the iMac.
5) I've added the external drive to the Shared Folders list, and given the user read & write permissions.
When the user attempts to FTP into my iMac, she is prompted for a user name and password. She authenticates and is redirected to her home folder on my iMac. She can read and write to this folder, but the external drive is nowhere to be found.
I'm sure I've just missed a small detail. Does anyone have any ideas?I came up with a work around, if anyone is interested.
In user accounts system preferences, I edited advanced options for the user I want to give access to. I changed the location of her home directory to the external hard drive. Now every time she logs in, she's directed straight to the external. -
Reading TXT file to SAP table.
Hi everyone,
my task is to read data from chosen text file into table I created.
Text file look like this:
ID_ASK|DATA_OD|DATA_DO|
1234|20140517|20140824|
ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|
12|23|34|600156|TEST NAME1|
ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|
23|24|54|600156|TEST_NUMR2|
Header "ID_ASK|DATA_OD|DATA_DO|" occurs only once, while header "ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|" can occur many times.
I want to insert those values (except of headers, of course) into my SAP table:
Table Fields
Fields from file
ZIDASK
ID_ASK
ZIDMAG
ID_MAG
ZIDASO
ID_ASO
ZIDKAT
ID_KAT_ASO
ZZRCEL
SOURCE
ZDAOD
DATA_OD
ZDADO
DATA_DO
ZKATNAM
NAME
I want user to choose file from browser and I am using F4_FILENAME function.
1. To avoid reading header into table I think I'll use something like this (in loop, of course):
IF (lv_linecounter MOD 2) = 1.
CONTINUE.
ELSE.
SPLIT something AT '|' INTO those_fields.
2. What should be next function to call?
3. Is declaring separate types for those two headers a good idea?
TYPES: BEGIN OF ty_output_hdr,
id_ask type zask-zidask,
data_od TYPE zask-zdaod,
data_do TYPE zask-zdado,
END OF ty_output_hdr.
TYPES: BEGIN OF ty_output_pos,
id_mag TYPE zask-zidmag,
id_aso TYPE zask-zidaso,
id_kat_aso TYPE zask-zidkat,
source TYPE zask-zzrcel,
name TYPE zask-zkatnam,
END OF ty_output_pos.
With kind regards,
BartlomiejHello Bartlomiej,
His logic for processing (item 1) is correct and you can do the processing in this way without any problems.
Regarding item 2, after the process of SPLIT, you can assign information to a structure and then insert the contents in the table individually.
SPLIT gs_line
AT '|'
INTO gv_fieldA
gv_fieldB
gv_fieldC.
gs_data-fieldA = gv_fieldA.
gs_data-fieldB = gv_fieldB.
gs_data-FieldC = gv_fieldC.
INSERT FROM ZTABLE gs_data.
Regarding item 3, a separate statement, however it manages more lines, is the best method that can be applied, allowing a subsequent maintenance will not affect other component.
Regarding F4_FILENAME object, you can use it on AT SELECTION-SCREEN event of report:
AT SELECTION-SCREEN ON VALUE-REQUEST FOR p_file.
CALL FUNCTION 'F4_FILENAME'
EXPORTING
program_name = syst-cprog
dynpro_number = syst-dynnr
field_name = '
IMPORTING
file_name = p_file.
Tks
Renato Bertizini -
How to read XLS file to sap table in backgroung
hii
i want to read file (XLS) type to sap table in background
can u help me to do that ??
thanks
Owesat EhsanHi,
Use FN Module TEXT_CONVERT_XLS_TO_SAP'
Declare Type pools: TYPE-POOLS: truxs.
Declare Data: Data i_raw TYPE truxs_t_text_data.
Declare Parameter : p_fname TYPE rlgrap-filename.
Better to Have a it_excel all fields in Char or string type. in order to avoid type mismatches.
Call FN Module and pass variables
FORM file_upload_fname USING p_fname TYPE rlgrap-filename.
CALL FUNCTION 'TEXT_CONVERT_XLS_TO_SAP'
EXPORTING
i_field_seperator = 'X'
i_tab_raw_data = i_raw
i_filename = p_fname
TABLES
i_tab_converted_data = it_excel.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
To delete header line
IF it_excel IS NOT INITIAL.
DELETE it_excel INDEX 1.
ELSE.
MESSAGE i000(0k) WITH 'No Data in Excel File'.
ENDIF.
ENDFORM. " FILE_UPLOAD_FNAME
Regards,
shiva -
Hence, a manager could let one or more assistants access the manager's email. Also one could set up a group email account and multiple users with different id/passwords could process/manage the account.
Yes, look in the admin guide for the shared folders section. This in essence allows you to delegate permissions of individual mail folders to other users.
The functionality is being enhanced for iMS 5.2 due out shortly according to iPlanet. -
We are putting a sample chapter of our book as a PDF on our webpage... the book is a workbook with exercises, so there are places for people to fill in a circle, write things, etc. (Which cannot be done the same way using the form feature and that is not my intent; the full workbook will be print-only.) I can imagine someone might want to print out the sample chapter to complete it... and then eventually buy our printed book. Ideally I would like to enable printing but DISABLE any editing of the PDF, just to protect our material. This PDF would be only for potential customers; I would make any changes to the original document in InDesign. The only options I see in Acrobat are to restrict printing AND editing with a password... you can't separate the two. Is there a way around this? (I have the latest Acrobat with Creative Cloud.) Thank you!
In the security permissions there are 2 different entries for "Printing Allowd" and "Changes Allowed".
-
Hi all,
I have an issue that I'm not sure how to script in to resolve.
I have a script that runs, binds them to AD, sets an AD group as admins to the machine, which the user is part of. That works, but when they shut down and go offline, they can login with their cached credentials, but they are no longer admins to their own machines. I have to login as local admin and set the user as admin. How do I add this to the script so that the user is always admin regardless if they are off or online and I don't have to touch every machine after they have logged in to add them as admins.
Thank you in advanced!Jeremy Mlazovsky <[email protected]> wrote in
news:zJI6h.4247$[email protected]:
I guess I over simplified my example too much. In reality, I have
several users who need admin access to one or two workstations each, but
are essentially regular users elsewhere.
> Why use DLU?
>
> Just make a local account for him on that one computer and add him to
> the Administrators group.
>
> Brian Mantler wrote:
>> I would like to give a user admin access to one specific workstation,
>> but regular access to all other workstations.
>>
>> For example I want user John to have admin access to CPU1, but
>> regular access to all other CPU's.
>>
>>
>> I have a user policy package that has the appropriate group policy
>> and DLU policy associated to John. The DLU has Enable Login
>> Restrictions and inlcludes just CPU1.
>>
>>
>> When John logs in to CPU1 he becomes a member of the local
>> administrators and the appropriate group policy is placed in effect.
>>
>> If a regular user logs into CPU1 they receive our standard group
>> policy and become members of the local users group.
>>
>> However, if John logs into a different computer, say CPU2 he does not
>> get any DLU created. In this situation, I would like John treated
>> like our regular uses and a local user created that has only regular
>> user rights
>>
>> Any ideas?
>>
>> Thanks
>
> -
It must be possible to retrieve the actual pixel pitch of the physical display, but how?
This seems to be a reoccurring question on these forums, but I have yet to find an answer. Here's my problem:
I'm working on an assignment at work for a graphical simulator project in which it is necessary to match the dimensions of a physical display device. Some of the people who review our code are rather picky about this, so we don't have the choice of
fudging it. We must create a viewport for rendering with (ideally) the same physical dimensions.
I've tried a couple approaches, and I figured out pretty quickly that the Windows device context stuff doesn't work with actual device pixel patch, but rather logical pixel pitch. I have been expecting though that Windows calculates the logical pixel
pitch from the actual. How else could varying resolutions still work on the same display? It must know the physical dimensions somehow in order to calculate it, right?
The closest that I got was this approach, which digs into the registry: http://ofekshilon.com/2011/11/13/reading-monitor-physical-dimensions-or-getting-the-edid-the-right-way/ . Unfortunately, the resulting "dimensions" for my 24"
1920x1200 (16:10) monitor were 512mm x 256mm, which you don't need to convert to inches before you realize that the aspect ratio is 2:1, not 16:10.
Any other ideas? Does Windows even store physical display information? I was pretty confident that it must store it somehow, but now I'm thinking that maybe Windows makes some assumptions about pixel pitch and manufacturers have just adapted
to it.
We would prefer to solve this problem with a system call (or series of system calls), but if this approach is not reliable or simply not available, then we will have to settle this the old fashioned way and have the user input the monitor dimensions.Short version: There is no general solution. You'll have to allow the user to specify it. You can make some guesses based on EDID information - monitor names, etc.
There are certainly scenarios for which there is no acceptable solution at all. For example: if the so-called "physical display" is a projector, or if the device receiving the video connection is capture device.
EDID's can be faked/spoofed, as is the case with something like a KVM, splitter, or extender. They can also be replaced -- the nvidia NVAPI allows for replacing an EDID for example.
Also, if the idea is to provide a "viewport" with the same dimensions as the display, you should be aware that the system can be placed into a "clone" mode where the same video frame buffer is used to generate video for two different
video output jacks and therefore potentially two (or more) physically different displays simultaneously, again leaving us with no single answer.
So now that you know that your program has no general solution, you can decide which specific cases you'd like to try to handle. The first, and most applicable solution, is to allow the user to provide the physical metadata. This makes anything
possible and gives the user control over what is going on. You MUST provide this as an option -- anything you do beyond this is "icing on the cake", so to speak.
The second step is now to make aspects of this easier. You can detect, infer, or deduce some topology by reading EDIDs, or otherwise being clever, but you should still allow the user to be able to override what this guess in case it is wrong. You
can infer, based on a model number, for example, what the physical dimensions are. Perhaps it's easier to define it once for each physical device the user will be using, and then as the software runs it can detect topological changes (system sees a device
that it has seen before has moved to a different part of the desktop or a different jack.) The EDIDS will give you the bulk of the information you should be using for such guessing.
As for fonts, Windows uses 96 pixels per inch (ppi) as the baseline for converting pixels to points, and rendering fonts at a size appropriate for the desktop. This is the setting unless the system is determined to be using a high resolution display
at OS install time (judged solely by the resolution of the display in pixels) in which case it uses a higher desktop resolution setting. This setting can be adjusted after OS install time too, but basically the net effect is the conversion between points
and pixels uses a different constant. So content for most displays is effectively rendered at 96 ppi or 120 ppi -- and this setting applies uniformly across the entire desktop, not just one display.
[Printers are a little different than displays and know the physical size of the paper.]
Good luck! -
hi i created a new user
CREATE USER "sue" PROFILE "DEFAULT" IDENTIFIED BY "dbsuepwd" DEFAULT TABLESPACE "ERDBPERM"
TEMPORARY TABLESPACE "ERDBTEMP" ACCOUNT UNLOCK;
and granted limited access privalges so the users can insert row on one table but not delete any data.
GRANT CREATE SESSION TO sue;
GRANT INSERT ON EXPENSEREPORT TO "sue";
but now when i connect to database using sql developer usind sue account iam not able to insert data in expensereport table
Error report:
SQL Error: ORA-00942: table or view does not exist
00942. 00000 - "table or view does not exist"
*Cause:
*Action:
help me both user and table exists on same tablespace.
plz tell which privilages i used give to the user.not working
tablespace - ERDBPERM
schema - ERDB
table created by ERDB user
tried
INSERT INTO ERDB.EXPENSEREPORT (erno, erdesc, ersubmitdate, erstatusdate, erstatus, submituserno,
appruserno) VALUES (EXPENSEREPORT_SEQ.NEXTVAL, 'Sales Presentation', TO_DATE('2007-08-10',
'yyyy-mm-dd'), TO_DATE('2007-08-26', 'yyyy-mm-dd'), 'APPROVED', 2003, 2004);
error
Error starting at line 1 in command:
INSERT INTO ERDB.EXPENSEREPORT (erno, erdesc, ersubmitdate, erstatusdate, erstatus, submituserno, appruserno)
VALUES (EXPENSEREPORT_SEQ.NEXTVAL, 'Sales Presentation', TO_DATE('2007-08-10', 'yyyy-mm-dd'), TO_DATE('2007-08-26', 'yyyy-mm-dd'), 'APPROVED', 2003, 2004)
Error at Command Line:2 Column:8
Error report:
SQL Error: ORA-02289: sequence does not exist
02289. 00000 - "sequence does not exist"
*Cause: The specified sequence does not exist, or the user does
not have the required privilege to perform this operation.
*Action: Make sure the sequence name is correct, and that you have
the right to perform the desired operation on this sequence. -
Prevent a user from accessing Cube Navigator
Is it possible to prevent a user from accessing the cube navigator in Analyzer so the user can only view reports that are setup? thanks
In Analyzer 6.2, there are some 'behind the scenes' parameters that can be added to suppress menu items. If you are currently using Analyzer 6.2, try adding the following parameter to your applet tag:<PARAM NAME = HideNav VALUE ="True">Note: this will hide the Navigate button for all users accessing the page.
Maybe you are looking for
-
Can't back up files because of one video, no DVD recorder
How do I back up my music and not include the one long video that I have? It's a 900 mb file. My laptop does not include a DVD burner so I can't use DVD R discs. I unchecked the video, but iTunes still wants to back it up and insists on a blank DVD.
-
I have started to use firefox as my browser after a lapse of several months. This version is now old it seems and i have been asked by Firefox to update it.However evrery time i try it fails to register or it fails to be accepted by my computer, and
-
I've been using the latest version of FireFox since it was last updated. The captcha/image verification thing that I have been unable to view is one located on FanFiction.Net's login page under the query 'Are you human?'. Its become quite a bother an
-
Streaming video through Windows Media Player using USRP
Is there any document / guide or any example explaining how to do streaming through Windows Media Player using USRP. Thanks JK
-
Macbook not re-booting after installing the upgrades
hi, Yesterday i did the latest upgrade on my macbook. i was then prompted to re-boot which i did. but now after the reboot all it does is that shows me my background screen for a second and fades back to the blue screen non-stop. i counted 10 repeats