Limit infoset access in SQ01
Hi experts,
We created an infoset and assigned it to a user group. Then we assigned one user to this user group and yet other users can create queries using the user group and infoset.
How can we limit the access of other users not assigned on the user group?
Thank you.
Don't really understand your problem.
Do you mean that the infoset is assigned, say, to User group 1.
User A is asigned to User group1. User B is not.
User B can also make use of the infoset
Is that your problem?
Similar Messages
-
Interactive report using Infoset quiereis with SQ01,SQ02,SQ03.
Hi,
I have to create a report by using the infoset query with SQ01,SQ02 and SQ03 Tcodes. But problem my requerment is that I have to create one interactive report with these quereis.
Can any body tell me how to create this interactive report using infoset quereis OR are there any standard quereis which are having interactive nature.
Pleas send me the solution and thanks in advance.
regards,
J.Yes, but I am not able to figure exactly how to implement it? I mean I can do this same code in SE38 where I know names of the internal tables. But when in SQ02 we can't modify/read system tables (I found name of the system tables using report generated by SQ01). So how you will access them, then how you will reflect our changes in output ALV grid?
Example:
Data:
Rate Cat. Installation Date
71 60000984 20/10/2009
71 60000984 20/12/2009
71 60001101 10/09/2009
78 60000310 10/09/2009
78 60000315 10/09/2009
83 60000297 10/09/2009
so in this case I want output:
Rate Cat. Installation Date
71 60000984 20/12/2009
71 60001101 10/09/2009
78 60000310 10/09/2009
78 60000315 10/09/2009
83 60000297 10/09/2009
You will see 71 60000984 20/10/2009 is not the latest one, therefore I don't want that row. I can do the ABAP logic for this, but exactly what and how to implement in SQ02? -
Hello Gurus ,
I would like some help with restraining access to users that have Tx SQ01.
I know there are two ways to do this :
1. With authorization objects
2. With user groups in SQ03.
Allthough i created user groups , in SQ01 i have still the option to go over
SQ01> Edit>Other user groups and choose a different user group. This is probably because i have more rights . How can i be sure , or better deactivate this option to a user that is using SQ01 so he can execute, create Queries only within a limited SAP area with the infosets that are assigned to his user group ?
Regards,
David (SAP Basis)Like Jurjen said, Securtiy SAP is not about denying but granting access carefully.
Many user perform daily reporting combining different criteria and queries are to ease their their life
You can give access only to SQ01 and deactivate S_QUERY.
Then assign the users to to particular query user groups using SQ03 so that they may have access to execute queries which they actually need.
When the users execute SQ01, they can see the queries for which they are authorized.
This is a two forked advantage.You prohibit change access in SQ01 at the same granting access to queries which the user needs for reporting on display.
And if you are speaking of production environments, then there is no danger of user creating a query via SQ01 as the prd client is normally closed for changes!
Regards
Deepa -
How to limit the access of a transaction
please provide hw to create an authorization object... like hw to limit the access of a particular userdefined trasaction to a particular user
hi
good
Element of the authorization concept.
Authorization objects allow you to define complex authorizations.
An authorization object groups together up to 10 authorization fields in an AND relationship in order to check whether a user is allowed to perform a certain action.
To pass an authorization test for an object, the user must satisfy the authorization check for each field in the object.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Basic form->
AUTHORITY-CHECK OBJECT object
ID name1 FIELD f1
ID name2 FIELD f2
ID name10 FIELD f10.
Example
Check whether the user is authorized for a particular plant. In this case, the following authorization object applies:
Table OBJ : Definition of authorization object
M_EINF_WRK
ACTVT
WERKS
Here, M_EINF_WRK is the object name, whilst ACTVT and WERKS are authorization fields. For example, a user with the authorizations
M_EINF_WRK_BERECH1
ACTVT 01-03
WERKS 0001-0003 .
can display and change plants within the Purchasing and Materials Management areas.
Such a user would thus pass the checks
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
ID 'WERKS' FIELD '0002'
ID 'ACTVT' FIELD '02'.
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
ID 'WERKS' DUMMY
ID 'ACTVT' FIELD '01':
but would fail the check
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
ID 'WERKS' FIELD '0005'
ID 'ACTVT' FIELD '04'.
To suppress unnecessary authorization checks or to carry out checks before the user has entered all the values, use DUMMY - as in this example. You can confirm the authorization later with another AUTHORITY-CHECK .
thanks
mrutyun -
I would like to limit the access to my Macbook Pro to 15 minutes a day for my kids.
Hello
I would like to limit the access to my computer for my daughter to 15 minutes a day. It seems that parental control cannot have anything lower than 30 minutes.
Any idea how we can bring that down to 15 min?
ThanksOh, and get out the whip while you're at it!
Just kidding - I've no children so I don't use parental controls - but 15 minutes? That's just cruel!
Clinton -
How can I do to limit the access to modify the materials texts?
Hello,
I need to limit the access to modify the texts of the materials from the transaction MM02. How can I do?
These texts (Basic Data Text) are on "Basic Data 1" view.
Thanks a lot, and best regards.
CarmenHello Carmen,
This can be achieved with limted authorization. Work with basis team.
Regards,
Arif Mansuri -
My high school aged child is spending too much time on Facebook and Tumblr is there any way I can limit the access time on these sites to from 8pm to 10pm?
System Preferences>Parental Controls has time limits - check out this intro to Parental Controls from Cult of Mac on YouTube.
Clinton -
I am curious if I can use our 10.5 Server (currently serving afp and ftp) to also control the users web surfing. Ideally down to 1 hour a day minus the approved websites we maintain.
You can't limit web browsing to a time limit using 10.5 server, but you can limit the websites that users can visit. There is the capability to create white-lists and black-lists. I'm currently in the process of working with Apple in order to import our current 'hosts' file into workgroup manager's black-list preferences. Apparently the preferences are accessed using dscl from terminal...which really is not fun to tinker with. If I find a way to import sites into the black-list and/or white-list, I will post it. If anyone needs a really good hosts file that goes in the /etc/ folder to block most **** sites/proxies/crap, let me know and I can e-mail it to them.
-
How to limit file access for different users in 10.7.4 Server
We had everything working perfectly with an earlier version of Lion Server. The update to 10.7.3, or 4, seems to have opened access to all files for all users. Much to our surprise, this wide-open access started without warning.
- We have an external drive that contains all of the company's archives
- We had set access for one employee to get to the files he needs, and different access for another employee. Neither saw sharepoints outside of their access settings.
After an update, each employee can see and log in to all sharepoints. There doesn't seem to be a way to limit access for each employee now. I can set 'read' access for one employee, but it doesn't stop the other employee from accessing that sharepoint/folder.
Is there some new way to go about this? Or is something simply broken with the current release?That is good to know. If the file share is seeing the drive and ignoring its permissions, that is why everyone can see everything. I have found, in Lion Server, that it is best to get the permissions set before turning on File Sharing. I don't know if you have the luxury of turning the file share off for a little while, but I would unshare the drive and see if the issue persists if you plug the external drive into another machine. The settings for permissions are set on the file or folder itself, so the issue should follow you to the other machine.
Again, if you can, I would unshare the drive and reshare it with the permissions that you want and turn file sharing back on. However, if you can get the drive to respect permissions rather than ignoring them, I think it will save you a lot of work. -
MRP Area tables for MD06 information access like SQ01, DBM logical database
We currently use SQ01 DBM logical database to access MD06 information (tables MDKP and MDTB). The MRP results from the MRP Area are not showing in this query. This implies that the MRP area, MRP results are stored in other tables.
I have reviewed tables (MDLV, MDMA, MDLG, DVER, MDIP) from a similiar thread. However, they do not contain the MRP data (planned orders, stock, production orders ect) like in the DBM logical database. This data access is very powerfull for exporting planning data for more robust analysis.
Any help is much appreciated.
Thank youHi,
Please try FM: 'AUFBAUEN_MDPSX_ANZEIGEN'.
MD06 dame come many table.
Example:
(Plant level)
icm61w-fabkl = wk_fabkl. :Factory calender
imt61d-matnr = p_matnr. : Materials
imt61d-werks = it_tbl-werks. : Plant
AUFBAUEN_MDPSX_ANZEIGEN 呼出
CALL FUNCTION 'AUFBAUEN_MDPSX_ANZEIGEN'
EXPORTING
ecm61w = icm61w
ecm61x = icm61x
emt61d = imt61d
et399d = it399d
ECM61B =
ESFILT =
IMPORTING
icm61m = wa_e_cm61m
imdkp = wa_e_mdkp
imdsta = wa_e_mdsta
TABLES
mdpsx = it_mdps
regards,
Gaito -
Size limit of access database with image files stored outside database
I have read 2GB limit on size of Access database. We are using Access 2013 database with fields that are data type attachment and storing attached images outside the database. Does the size of the folder that is holding these images count
in any way toward 2GB size limit?Hi,
As far as I know, Access database limit size 2GB based on itself, not related to the folder size. Attachment data
type is similar to attaching files to e-mail messages. We need to control the Access database size is smaller then 2GB.
When a field is defined with the attachment data type, you can store one or more files for each record in it.
Attachments can dramatically increase the size of the database, but since the attached file is stored as a part of the dabatbase, you are not dependent on network drives being available as you would be if you inculded a hyperlink to the file. As a matter of
fact, feel free to backup the origainal file to other disk after you attach it to the database.
Regards,
George Zhao
TechNet Community Support -
Using Profile to limit resource access
Hello,
I'm trying to use the profile feature to limit access for specific users the featue I want to limit is:
CPU_PER_CALL defined as follow: Limits the amount of CPU time that can be consumed by any single database call in any session established by a user with this profile. The specified value is in hundredths of a second and applies to a parse, an execute, or a fetch call. These calls are implicitly performed by the database for any SQL statement executed in SQL*Plus and can be explicitly called from OCI, Java, or PL/SQL programs. When this limit is breached, the statement fails and is automatically rolled back, and an exception is raised.
My question is:
How can I from a SQL stmt, measure the number of cpu per call ? I cannot guess this value otherwise if wrong the SQL stmt will fail evry time!
I'm on 10g, windows server 2003
Thank for your helpYou can see that information at sql_trace files.
Turn on traces in session using
SQL> alter session set sql_trace=true; --to current session
SQL> exec dbms_system.set_sql_trace_in_session(SID, SERIAL#, TRUE) -- to another session
After stmt executes make a plain text by tkprof tool
# tkprof xxx.trc xxx.txt explain=user/pass aggregate=no
The file xxx.txt mensures the CPU per call for stmts ... the option aggregate=no it's mandatory if you execute more than 1 binded sql statement
Regargs.
Marcio Paiva -
FMS Limit Domain Access??
How do you limit access to FMS app instances from a certain
domain? For example, if I only want example.com/file.swf to create
an app instance and run - but if I try localhost/file.swf or
otherdomain.com/file.swf it will not? Thank you.Check out this file here:
http://www.adobe.com/products/flashmediaserver/pdfs/FlashMediaServer3_WhitePaper_ue_v1.pdf.
I don't know if you can limit on an application instance level, but
you can set on the server level.
Here's the relevant block from the PDF, on page 50:
quote:
Restrict access from domains By default, a client can connect
to Flash Media Server from any domain or IP address, which can be a
security risk. You can create a whitelist of allowed domains (or a
blacklist of banned domains) to ensure that only authorized clients
can connect to your applications or services. You can add a
comma-delimited list of domains and/or IP-address blocks in the
Adaptor.xml or vHost.xml configuration files to add this level of
security. This is usually the first step in locking down your
server; it prevents malicious or unauthorized domains from freely
accessing your applications and streams. -
Limit change access to all useres exept the one that created the document
Hi,
I wonder if it's possible to limit the change access only to the user that has created the document when it's in a specific status.
This is what the customer wants:
When a document is set to status K the document should be locked and no other users should be able to create a new version.
There should be a admin group that can create new versions and change the document. - This is solved
Best regards KristofferHi Krip,
generally I would recommend you to maintain one status of type 'O' for a document type in your system. This kind of status will allow a second user to display an already checked out original. If user A checks out the original and there is such a status maintained for this document type the system will change the status automatically to this status of type 'O'. Then a second user is able to display the last checked in version of this original in CV03N too. Without such status type the second user is not able to display the checked out file. This was implemented to avoid that two users may be able to change the same original at the same time. I hope this information could be useful for you.
Best regards,
Christoph -
Oracle App Server limit user access
Hi guys!
Is there such function in OAS where I can limit a users access to a certain page?
I have registered my users in OID and I want to set limits to specific pages (limiting which user can access which page or not)...
Appreciate any help..They are different. Oracle Application Server is Oracle's application server prior to the BEA acquisition. WebLogic Server is a completely separate product and will be the strategic application server going forward at Oracle, although Oracle Application Server will still be maintained and supported.
Maybe you are looking for
-
Generate report of IO/datafile performance?
Hello, I am working on some performance issues that we believe could be related to the IO subsystem. I am trying to find a way to get a baseline of the true IO performance of the database, looking only at datafile IO. In AWR reports, you can see vari
-
Hello I have recently been made responsible for a PI 7.1 system, and am new to SAP and PI. I have some general questions about message archiving and would be grateful for some advice. I understand that message details are saved to SXMSPMAST and assoc
-
My sound is working but i can't control it with buttons.
Hi, my sound is working but i can't control it with the sound buttons on my keyboard. Whenever i try, it doesn't change and there's a little sign like ( / ) underneath it. Can anybody help me?
-
PROMPT Command equivalent in Oracle 7
Hi All, I am working on a database Health check script . I Have to implement this on a Oracle7 server running on OS HP-unix. I have done with this health check script on all the 9i servers. The same script i have to modify and implement in Oracle7 da
-
I have a new laptop acer aspire e17, running windows 8.1. I have downloaded flash, shockwave and java. Everytime i try to run an interactive cd i use for study, the error message in the title comes up. 'director player error: internal error: unexpect