Is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?

Hi,
is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?
Thanks,
Digesh

Hi Digesh,
If your requirement is to restrict the excess to specific rows it is possible to use S_TABU_LIN, but it works only for table which contains org units, like plant, company code, etc.
Please search for S_TABU_LIN if this is your requirement.
Otherwise please follow Alex's suggestion.
BR,
Mangesh

Similar Messages

  • Give a user read permissions to folder but deny him/her copying contents? Is it possible?

    Hi,
    Is there a way to give a user read permissions to a folder but deny him/her copy permissions? I have been searching for way to do this in windows server 2012 R2 without any luck. I have a folder that i would like a user to see the contents but not change
    or copy it. Any one who know the tricks?
    Thanks,
    Jama.

    Yes,
    Give the user read permissions to a folder, then he only read, but not write. Additionally, you can set Deny Write, to overwrite any inherited permissions.
    Best Regards,
    Jesper Vindum, Denmark
    Systems Administrator
    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

  • Possible Sequential Read Access for a Sorted Table

    Hi All,
    I have the following warnings in Code inspector check.
    'Possible Sequential Read Access for a Sorted Table'
    Kindly provide me the solution to overcome this warning message.
    This is my code in BAdi : CRM_ORDER_FIELDCHECK , Method : FIELDCHECK
    I am getting the above warning at
      READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
                                                   user_stat_proc = 'ZITRHDQT'
                                                   object_type = 'BUS2000114'.
    and at
        MODIFY ct_input_field_names FROM ls_input_field_names
                                    TRANSPORTING changeable
                                    WHERE fieldname NE lv_field.
    Please see the below code .
      DATA : lt_header_guid TYPE crmt_object_guid_tab,
             lt_item_guid TYPE crmt_object_guid_tab,
             lt_order_i     TYPE crmt_orderadm_i_wrkt,
             ls_order_i     LIKE LINE OF lt_order_i,
             lt_status      TYPE crmt_status_wrkt,
             ls_status      LIKE LINE OF lt_status,
             ls_input_field_names  TYPE crmt_input_field_names.
      DATA : lv_header_guid TYPE crmt_fieldcheck_com-guid,
             lv_chng_no   TYPE c VALUE 'A',
             lv_field(10)  TYPE c VALUE 'ACT_STATUS'.
      DATA: lv_status_completed     TYPE crmt_boolean.
    To Get GUID
      IF is_fieldcheck_com-guid IS NOT INITIAL.
        lv_header_guid = is_fieldcheck_com-guid.
      ELSE.
        lv_header_guid = is_fieldcheck_com-ref_guid.
      ENDIF.
      IF is_fieldcheck_com-ref_kind EQ 'A'.
        INSERT lv_header_guid INTO TABLE lt_header_guid.
        ELSE.
          SELECT SINGLE header FROM crmd_orderadm_i INTO lv_header_guid
                                WHERE guid = is_fieldcheck_com-ref_guid.
          INSERT lv_header_guid INTO TABLE lt_header_guid.
      ENDIF.
    *To Get the required details
      CALL FUNCTION 'CRM_ORDER_READ'
        EXPORTING
          it_header_guid       = lt_header_guid
        IMPORTING
          et_status            = lt_status
        EXCEPTIONS
          document_not_found   = 1
          error_occurred       = 2
          document_locked      = 3
          no_change_authority  = 4
          no_display_authority = 5
          no_change_allowed    = 6
          OTHERS               = 7.
      IF sy-subrc <> 0.
    MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
            WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
      ENDIF.
      READ TABLE lt_status INTO ls_status WITH KEY status = 'E0001'
                                                   user_stat_proc = 'ZITRHDQT'
                                                   object_type = 'BUS2000114'.
      IF sy-subrc = 0.
        ls_input_field_names-changeable = lv_chng_no.
        MODIFY ct_input_field_names FROM ls_input_field_names
                                    TRANSPORTING changeable
                                    WHERE fieldname NE lv_field.
      ENDIF.
    ENDMETHOD.
    Regards
    Venkat

    Hello Blake,
    Try this:
    READ TABLE lt_action_fld WITH KEY STATUS = '0' BINARY SEARCH.
    wf_index = sy-tabix.
    loop at lt_action_fld from wf_index.
    if lt_action_fld-status ne '0'.
    exit.
    endif.
    delete lt_action_fld index wf_index.
    endloop.
    Let us know, if this helps.
    Rgds,
    Raghu.

  • Read-Only Access to Specific SAP tables

    Is it possible to grant a user read-only access to a specific table or tables?
    For example, say I wanted to give someone SE16N capability for just EKKO/EKPO/EKBE and NO OTHER tables.  Is this possible?  How?
    Thanks.

    Hi,
    as it was mentioned the transaction SE16N checks for authorization object S_TABU_DIS. The problem in your case is that the tables EKKO, EKPO and EKBE are already assigned to the authorization group MA - MM Appl. table. But there are many more tables assigned to this group. Changing assignment of standard tables is not a good idea.
    Cheers

  • Giving a user read access to an account for all entities

    Dear All,
    We have a series of R&D accounts that a user with limited entity security needs to review for all entities.
    We have security switched on for Accounts and Entities only.
    All entites have security classes defined, only the R&D accounts have a security cless defined (all other accounts ahve a balnk security class).
    The user is not allowed to see any other accounts for the entities which they have no access to.
    is it possible in HSS to create an access path which allows a single user to view/read an account for entities which they have no other access rights to?
    Thanks.

    Hi and thanks for the response.
    The user has 2 security groups.
    The first allows them "All" access to their entity, default and the RD security class for R&D accounts.
    This group means they have read/write access to all accounts, which for their own entity is acceptable.
    If in the second group I give them read access to all entities then they can read all accounts for all entities.
    I need to stop them from seeing all accounts except the RD accounts for the other entities.
    Is this possible?

  • How can i give multiple users admin access?

    I would like to give another user on my macbook pro admin access, so that they can install programs without having to ask me for the password each time. I do not want the password to be the same for my profile, because I don't want them getting into my account. So is it possible to have a separate password for admin use only? This might be a dumb question and I know their is probably a simple way to do this, but I'm new to macs so any help would be greatly appreciated. Thank you.

    Convert a standard user to an administrator
    Choose Apple menu > System Preferences, then click Users & Groups.
    Click the lock icon  to unlock it, then enter an administrator name and password.
    Select a standard user or managed user in the list of users, then select “Allow user to administer this computer.”
    http://support.apple.com/kb/PH18891

  • Trying to give remote user FTP access to external HDD connected to my iMac

    This gets a little complicated, so bear with me.
    I have an external hard drive connected via FireWire to my iMac. I have a remote user that I want to be able to access this hard drive via FTP.
    Here's what I've done so far:
    1) I've given the iMac a static IP on the local network.
    2) I've forwarded port 21 to said IP address via my Airport Extreme.
    3) I've given the user her own account on my iMac.
    4) I've turned on file sharing in System Preferences, and the user has read & write permissions. I've also enabled FTP access to the iMac.
    5) I've added the external drive to the Shared Folders list, and given the user read & write permissions.
    When the user attempts to FTP into my iMac, she is prompted for a user name and password. She authenticates and is redirected to her home folder on my iMac. She can read and write to this folder, but the external drive is nowhere to be found.
    I'm sure I've just missed a small detail. Does anyone have any ideas?

    I came up with a work around, if anyone is interested.
    In user accounts system preferences, I edited advanced options for the user I want to give access to. I changed the location of her home directory to the external hard drive. Now every time she logs in, she's directed straight to the external.

  • Reading TXT file to SAP table.

    Hi everyone,
    my task is to read data from chosen text file into table I created.
    Text file look like this:
    ID_ASK|DATA_OD|DATA_DO|
    1234|20140517|20140824|
    ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|
    12|23|34|600156|TEST NAME1|
    ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|
    23|24|54|600156|TEST_NUMR2|
    Header "ID_ASK|DATA_OD|DATA_DO|" occurs only once, while header "ID_MAG|ID_ASO|ID_KAT_ASO|SOURCE|NAME|" can occur many times.
    I want to insert those values (except of headers, of course) into my SAP table:
    Table Fields
    Fields from file
    ZIDASK
    ID_ASK
    ZIDMAG
    ID_MAG
    ZIDASO
    ID_ASO
    ZIDKAT
    ID_KAT_ASO
    ZZRCEL
    SOURCE
    ZDAOD
    DATA_OD
    ZDADO
    DATA_DO
    ZKATNAM
    NAME
    I want user to choose file from browser and I am using F4_FILENAME function.
    1. To avoid reading header into table I think I'll use something like this (in loop, of course):
        IF (lv_linecounter MOD 2) = 1.
              CONTINUE.
        ELSE.
              SPLIT something AT '|' INTO those_fields.
    2. What should be next function to call?
    3. Is declaring separate types for those two headers a good idea?
    TYPES: BEGIN OF ty_output_hdr,
       id_ask type zask-zidask,
       data_od TYPE zask-zdaod,
       data_do TYPE zask-zdado,
    END OF ty_output_hdr.
    TYPES: BEGIN OF ty_output_pos,
       id_mag TYPE zask-zidmag,
       id_aso TYPE zask-zidaso,
       id_kat_aso TYPE zask-zidkat,
       source TYPE zask-zzrcel,
       name TYPE zask-zkatnam,
    END OF ty_output_pos.
    With kind regards,
    Bartlomiej

    Hello Bartlomiej,
    His logic for processing (item 1) is correct and you can do the processing in this way without any problems.
    Regarding item 2, after the process of SPLIT, you can assign information to a structure and then insert the contents in the table individually.
    SPLIT gs_line
        AT '|'
      INTO gv_fieldA
          gv_fieldB
          gv_fieldC.
    gs_data-fieldA = gv_fieldA.
    gs_data-fieldB = gv_fieldB.
    gs_data-FieldC = gv_fieldC.
    INSERT FROM ZTABLE gs_data.
    Regarding item 3, a separate statement, however it manages more lines, is the best method that can be applied, allowing a subsequent maintenance will not affect other component.
    Regarding F4_FILENAME object, you can use it on AT SELECTION-SCREEN event of report:
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR p_file.
      CALL FUNCTION 'F4_FILENAME'
        EXPORTING
          program_name = syst-cprog
          dynpro_number = syst-dynnr
          field_name = '
        IMPORTING
          file_name = p_file.
    Tks
    Renato Bertizini

  • How to read XLS file to sap table in backgroung

    hii
    i want to read file (XLS) type to sap table in background
    can u help me to do that ??
    thanks
    Owesat Ehsan

    Hi,
    Use FN Module TEXT_CONVERT_XLS_TO_SAP'
    Declare Type pools: TYPE-POOLS: truxs.
    Declare Data: Data i_raw    TYPE truxs_t_text_data.
    Declare Parameter : p_fname TYPE rlgrap-filename.
    Better to Have a it_excel all fields in Char or string type. in order to avoid type mismatches.
    Call FN Module and pass variables
    FORM file_upload_fname  USING    p_fname TYPE rlgrap-filename.
      CALL FUNCTION 'TEXT_CONVERT_XLS_TO_SAP'
        EXPORTING
          i_field_seperator    = 'X'
          i_tab_raw_data       = i_raw
          i_filename           = p_fname
        TABLES
          i_tab_converted_data = it_excel.
      IF sy-subrc <> 0.
        MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
                WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
      ENDIF.
    To delete header line
      IF it_excel IS NOT INITIAL.
        DELETE it_excel INDEX 1.
      ELSE.
        MESSAGE i000(0k) WITH 'No Data in Excel File'.
      ENDIF.
    ENDFORM.                    " FILE_UPLOAD_FNAME
    Regards,
    shiva

  • Is it possible to give multiple users the same email account using different individual user ids/passwords (iMS 5.1)?

    Hence, a manager could let one or more assistants access the manager's email. Also one could set up a group email account and multiple users with different id/passwords could process/manage the account.

    Yes, look in the admin guide for the shared folders section. This in essence allows you to delegate permissions of individual mail folders to other users.
    The functionality is being enhanced for iMS 5.2 due out shortly according to iPlanet.

  • Is it possible to allow printing of a PDF document without a password but still restrict editing?

    We are putting a sample chapter of our book as a PDF on our webpage... the book is a workbook with exercises, so there are places for people to fill in a circle, write things, etc. (Which cannot be done the same way using the form feature and that is not my intent; the full workbook will be print-only.) I can imagine someone might want to print out the sample chapter to complete it... and then eventually buy our printed book. Ideally I would like to enable printing but DISABLE any editing of the PDF, just to protect our material. This PDF would be only for potential customers; I would make any changes to the original document in InDesign. The only options I see in Acrobat are to restrict printing AND editing with a password... you can't separate the two. Is there a way around this? (I have the latest Acrobat with Creative Cloud.) Thank you!

    In the security permissions there are 2 different entries for "Printing Allowd" and "Changes Allowed".

  • User admin access

    Hi all,
    I have an issue that I'm not sure how to script in to resolve.
    I have a script that runs, binds them to AD, sets an AD group as admins to the machine, which the user is part of. That works, but when they shut down and go offline, they can login with their cached credentials, but they are no longer admins to their own machines. I have to login as local admin and set the user as admin. How do I add this to the script so that the user is always admin regardless if they are off or online and I don't have to touch every machine after they have logged in to add them as admins.
    Thank you in advanced!

    Jeremy Mlazovsky <[email protected]> wrote in
    news:zJI6h.4247$[email protected]:
    I guess I over simplified my example too much. In reality, I have
    several users who need admin access to one or two workstations each, but
    are essentially regular users elsewhere.
    > Why use DLU?
    >
    > Just make a local account for him on that one computer and add him to
    > the Administrators group.
    >
    > Brian Mantler wrote:
    >> I would like to give a user admin access to one specific workstation,
    >> but regular access to all other workstations.
    >>
    >> For example I want user John to have admin access to CPU1, but
    >> regular access to all other CPU's.
    >>
    >>
    >> I have a user policy package that has the appropriate group policy
    >> and DLU policy associated to John. The DLU has Enable Login
    >> Restrictions and inlcludes just CPU1.
    >>
    >>
    >> When John logs in to CPU1 he becomes a member of the local
    >> administrators and the appropriate group policy is placed in effect.
    >>
    >> If a regular user logs into CPU1 they receive our standard group
    >> policy and become members of the local users group.
    >>
    >> However, if John logs into a different computer, say CPU2 he does not
    >> get any DLU created. In this situation, I would like John treated
    >> like our regular uses and a local user created that has only regular
    >> user rights
    >>
    >> Any ideas?
    >>
    >> Thanks
    >
    >

  • It must be possible to retrieve the actual pixel pitch of the physical display, but how?

    This seems to be a reoccurring question on these forums, but I have yet to find an answer.  Here's my problem:
    I'm working on an assignment at work for a graphical simulator project in which it is necessary to match the dimensions of a physical display device.  Some of the people who review our code are rather picky about this, so we don't have the choice of
    fudging it.  We must create a viewport for rendering with (ideally) the same physical dimensions.
    I've tried a couple approaches, and I figured out pretty quickly that the Windows device context stuff doesn't work with actual device pixel patch, but rather logical pixel pitch.  I have been expecting though that Windows calculates the logical pixel
    pitch from the actual.  How else could varying resolutions still work on the same display?  It must know the physical dimensions somehow in order to calculate it, right?
    The closest that I got was this approach, which digs into the registry: http://ofekshilon.com/2011/11/13/reading-monitor-physical-dimensions-or-getting-the-edid-the-right-way/ .  Unfortunately, the resulting "dimensions" for my 24"
    1920x1200 (16:10) monitor were 512mm x 256mm, which you don't need to convert to inches before you realize that the aspect ratio is 2:1, not 16:10.
    Any other ideas?  Does Windows even store physical display information?  I was pretty confident that it must store it somehow, but now I'm thinking that maybe Windows makes some assumptions about pixel pitch and manufacturers have just adapted
    to it.
    We would prefer to solve this problem with a system call (or series of system calls), but if this approach is not reliable or simply not available, then we will have to settle this the old fashioned way and have the user input the monitor dimensions.

    Short version:  There is no general solution.  You'll have to allow the user to specify it.  You can make some guesses based on EDID information - monitor names, etc.
    There are certainly scenarios for which there is no acceptable solution at all.  For example: if the so-called "physical display" is a projector, or if the device receiving the video connection is capture device.
    EDID's can be faked/spoofed, as is the case with something like a KVM, splitter, or extender.  They can also be replaced -- the nvidia NVAPI allows for replacing an EDID for example.
    Also, if the idea is to provide a "viewport" with the same dimensions as the display, you should be aware that the system can be placed into a "clone" mode where the same video frame buffer is used to generate video for two different
    video output jacks and therefore potentially two (or more) physically different displays simultaneously, again leaving us with no single answer.
    So now that you know that your program has no general solution, you can decide which specific cases you'd like to try to handle.  The first, and most applicable solution, is to allow the user to provide the physical metadata.  This makes anything
    possible and gives the user control over what is going on.  You MUST provide this as an option -- anything you do beyond this is "icing on the cake", so to speak.
    The second step is now to make aspects of this easier.  You can detect, infer, or deduce some topology by reading EDIDs, or otherwise being clever, but you should still allow the user to be able to override what this guess in case it is wrong.  You
    can infer, based on a model number, for example, what the physical dimensions are.  Perhaps it's easier to define it once for each physical device the user will be using, and then as the software runs it can detect topological changes (system sees a device
    that it has seen before has moved to a different part of the desktop or a different jack.)  The EDIDS will give you the bulk of the information you should be using for such guessing.
    As for fonts, Windows uses 96 pixels per inch (ppi) as the baseline for converting pixels to points, and rendering fonts at a size appropriate for the desktop.  This is the setting unless the system is determined to be using a high resolution display
    at OS install time (judged solely by the resolution of the display in pixels) in which case it uses a higher desktop resolution setting.  This setting can be adjusted after OS install time too, but basically the net effect is the conversion between points
    and pixels uses a different constant.  So content for most displays is effectively rendered at 96 ppi or 120 ppi -- and this setting applies uniformly across the entire desktop, not just one display.
    [Printers are a little different than displays and know the physical size of the paper.]
    Good luck!

  • User cannot access table

    hi i created a new user
    CREATE USER "sue" PROFILE "DEFAULT" IDENTIFIED BY "dbsuepwd" DEFAULT TABLESPACE "ERDBPERM"
    TEMPORARY TABLESPACE "ERDBTEMP" ACCOUNT UNLOCK;
    and granted limited access privalges so the users can insert row on one table but not delete any data.
    GRANT CREATE SESSION TO sue;
    GRANT INSERT ON EXPENSEREPORT TO "sue";
    but now when i connect to database using sql developer usind sue account iam not able to insert data in expensereport table
    Error report:
    SQL Error: ORA-00942: table or view does not exist
    00942. 00000 - "table or view does not exist"
    *Cause:
    *Action:
    help me both user and table exists on same tablespace.
    plz tell which privilages i used give to the user.

    not working
    tablespace - ERDBPERM
    schema - ERDB
    table created by ERDB user
    tried
    INSERT INTO ERDB.EXPENSEREPORT (erno, erdesc, ersubmitdate, erstatusdate, erstatus, submituserno,
    appruserno) VALUES (EXPENSEREPORT_SEQ.NEXTVAL, 'Sales Presentation', TO_DATE('2007-08-10',
    'yyyy-mm-dd'), TO_DATE('2007-08-26', 'yyyy-mm-dd'), 'APPROVED', 2003, 2004);
    error
    Error starting at line 1 in command:
    INSERT INTO ERDB.EXPENSEREPORT (erno, erdesc, ersubmitdate, erstatusdate, erstatus, submituserno, appruserno)
    VALUES (EXPENSEREPORT_SEQ.NEXTVAL, 'Sales Presentation', TO_DATE('2007-08-10', 'yyyy-mm-dd'), TO_DATE('2007-08-26', 'yyyy-mm-dd'), 'APPROVED', 2003, 2004)
    Error at Command Line:2 Column:8
    Error report:
    SQL Error: ORA-02289: sequence does not exist
    02289. 00000 - "sequence does not exist"
    *Cause:    The specified sequence does not exist, or the user does
    not have the required privilege to perform this operation.
    *Action:   Make sure the sequence name is correct, and that you have
    the right to perform the desired operation on this sequence.

  • Prevent a user from accessing Cube Navigator

    Is it possible to prevent a user from accessing the cube navigator in Analyzer so the user can only view reports that are setup? thanks

    In Analyzer 6.2, there are some 'behind the scenes' parameters that can be added to suppress menu items. If you are currently using Analyzer 6.2, try adding the following parameter to your applet tag:<PARAM NAME = HideNav VALUE ="True">Note: this will hide the Navigate button for all users accessing the page.

Maybe you are looking for