Menu Role Security

I have a menu with role security enabled. If I grant one of
these roles to a pre-existing user, everything works fine.
However, if I grant it to a brand new user I get "FRM-10256 User
is not authorized to Run Form Builder Menu". (Note that all of
the forms, menus etc are held in the file system).
I have definitely granted the right role. What is going on
here?
Thanks
Chris
null

Thanks.
Chris Rimmer (guest) wrote:
: John,
: Don't worry, I already answered my own question! To use menu
: role security:
: 1) Ensure that the view SYSTEM.FRM50_ENABLED_ROLES exists. If
: not, you will need to run a script (FRM50SEC.SQL I think) to
: create it. I also advise that you grant SELECT on this view
to
: PUBLIC, to avoid the problem that I encountered.
: 2) Create the roles to be used, if they don't yet exist.
: 3) In the menu module, set the "Use Security" property to TRUE
: and add the roles to the "Module Roles" list.
: 4) For every item in the menu, you must now make a selection
in
: the "Item Roles" property to decide which roles can access the
: item.
: 5) Make sure you compile the Menu Module. Done.
: Chris
: john (guest) wrote:
: : Hello Chris,
: : I don't have the answer, sorry. I would like to ask you for
: : your help on creating menu role. How can I create a menu
role
: : then grant it to users specificly? Thanks for you time.
: : john
null

Similar Messages

Menu Role and Security

How do you enable menu roles and enforce security in forms?
For example in an complex application if we want to have a control of access of menus based on user login
I know it can be done thru the front-end itself by using an if then condition.
but can it be integrated with the database user logins itself
kindly reply
Thanx in advance

Hi,
first RUN frm60sec.sql under system/manager
create different roles
GRANT roles to users
Grant select access to the view created by frm60sec as follows:
SQL > Grant select on frm50_enabled_roles to public;
Note it is NOT frm60_enabled_roles.
To verify that your roles and grants are correct, log on as a user and run the following:
SQL>Select * from frm50_enabled_roles;
You should be able to see the users roles.
then come to MMB file contibue assiging the roles in each menu Item. U ll see get the result.
regards

Workbooks and Menu Roles

Hi ,
There is some transaction or SAP table where I can check all workbooks with its assigned menu roles?
I mean the whole list of Workbooks - MenuRoles relationship.
Any idea , suggestion will be appreciated.
Regards
FedeX

Hi,
Check the tables starting with RSRWB* in BI system.
For your information, below are the tables:
Queries
RSZELTDIR Directory of the reporting component elements
RSZELTTXT Texts of reporting component elements
RSZELTXREF Directory of query element references
RSRREPDIR Directory of all reports (Query GENUNIID)
RSZCOMPDIR Directory of reporting components
Workbooks
RSRWBINDEX List of binary large objects (Excel workbooks)
RSRWBINDEXT Titles of binary objects (Excel workbooks)
RSRWBSTORE Storage for binary large objects (Excel workbooks)
RSRWBTEMPLATE Assignment of Excel workbooks as personal templates
RSRWORKBOOK 'Where-used list' for reports in workbooks
Web templates
RSZWOBJ Storage of the Web Objects
RSZWOBJTXT Texts for Templates/Items/Views
RSZWOBJXREF Structure of the BW Objects in a Template
RSZWTEMPLATE Header Table for BW HTML Templates
Rgds,
Raghu Boddu
SAP Certified Security Professional

Menu Role Privelages

How to use the Menu Role Privelages in the Menu using the script found in the \TOOLS\DBTAB60\FORMS60\FRM50_BLD.SQL?
So far I've created a required Roles and Im not able to assign them to the Menus.

Menu Security only controls the menus that are shown it has no effect on what data is shown, that needs database label security or your own views to achieve

Enabling Menu Roles in Developer 2000( Very Urgent)

When I run the forms menu with the security option it shows the errors message cannot open the root window ? But when i run the menu without the security option the menu runs fine
Also I am not able to delete a menu role once assigned from the property list. Please help me ...
null

Sheeba,
it would help us answer your question if you were able to supply the full error message (and number) you are seeing).
I would guess that you have no active menu items (because of the security level)
Regards
Grant Ronald
Forms Product Management

How to remove Queries in menu roles?

Hi,
I am removing unneccessary quries added in menu roles!
How to remove those queries from the roles?
Raj

Hi,
Open your role in PFCG with edit mode -> you can see list of reports assigned here, right click on delete which is not required.

Save new workbook in menue role with VBA / ABAP

Hello,
does anybody know of a way to save a workbook which is not stored in SAP BW by then in a menue role folder through VBA or ABAP automatically?
I know that there is the SAPBEXsaveWorkbook function in VBA but that only works if the workbook already has an ID in BW. Maybe there is some workaround to assign name and ID beforehand? Where does the BEx get the ID if the workbook already has one? Is it stored in a temporary mapping table or something? I found that there are NO very hidden sheets as long as there are no queries embedded in the workbook, and I want to save a workbook WITHOUT queries.
Also, I know that there is the saveDialogWorkbook function, but as stated above the saving process should be automatically, i.e. a function like SAPBEXsaveWorkbook(name As String, role As String, node-id As String). By the way, where would I get the node-id for the nodes in the menue role?
Thank you for ANY hints!

Hi Peter,
thanks for your update! Saving in the "root folder" of a role might already be sufficient if we don't figure out how to save in folders.
I've done some research, too, and the strange thing is that the number at the end is obviously not the folder ID. When you choose "Open -> Workbooks", then copy a workbook entry using Ctrl+C and paste it in an editor, you get more information than what is displayed in the dialog even with technical names turned on. The pasted entry includes the role name and the number you referred to. And the thing is that even two workbooks in the same folder have different numbers! When you save a workbook using 0000000000 and then look at the number assigned in the way described above, it also has an ID different from 0000000000. It seems that every workbook has its own number. So to me it's still a mistery where the folder is specified.
Regards,
Jörg

BI upgrade: abap menu role, url format conversion ?

hi all,
I'm upgrading from BW3.5 to BI7.0.
In BW3.5 abap role I am using menus wich include BW3.5 queries. URL format for query is like <bsp_protcl>://<bsp_server>/sap/bw/BEx?...
The system gets upgraded in BI 7.0. Abap menu role still have the URL format for the query (like above). I would like to have the new BI format wich is like <prt_protcl>://<prt_server>/<bi_launcher>?...
Is there a way to make URL format mass conversion ?
There are thousand of queries in abap menu roles, I do not imagine this has to be changed manually ...?????
Thanks in advance for your reply.
Jean

You could write a short SE38 program against the AGR_BUFFI table on the URL field:
Replace <bsp_protcl> with <prt_protcl>
Replace <bsp_server> with <prt_server>
Replace sap/bw/BEx with <bi_launcher>
Replace VARIABLES_CLEAR with CLEAR_VARIABLES
Replace DATA_PROVIDER_ID with initial_state=VIEW&initial_state-view
Keep in mind that you would not want to automatically convert entries that reference a 3.5 Web Template, or a table API.

Portfolio menu role issue.

Dear Gurus,
I am new to this FPN area.
We are working on a Federated Portal Network(FPN). We are having an SAP Enterprise Portal(company wide) and SAP BI Portal(content). The issue is that when ever we are trying to run the report under the Portfolio Menu role in BI Portal it is running without any error. When we are running the same report under the Portfolio Menu role under SAP EP we are getting the error saying the requested page not found. Please suggest a solution to this.

BI portal and SAP EP both are different is it?
Have you published the report in SAP EP properly and added to the role which is present in the SAP EP.
When publishing report, you have make as template=<report technical name> at last.
if any mistakes in the steps when you publish the report. it would give the error when you try to execute the report.
Please check with your EP administrator.
Hope this would help you.

How to remove transaction that was added under Menu - Role Menu

We have roles that we need to remove some transactions.
These transactions were added under Menu - Role Menu and expanded for ex: Logistics and Picked Miro transaction.
When I go to PFCD and check under s_tcode I cannot remove Miro transactions since it's grayed out.
The only way to remove this is to go back to the Menu and do a find on miro and work through the menu until I get to Miro transaction and then delete it.
Is there another way to accomplish this.
Thanks
Joe

This is the intended way a role built from a menu works. What might be the use of an authorization without any corresponding transaction to start it? It is only a risk...
Unless of course you know better or design differently and don't make the effort to adjust SU24, then you can insert manually or cause "changed" authorizations, but PFCG will not look at it from a "your own fault" view and not adjust it or protect it against illogical changes.
To use the discipline of the one approach but keep the flexibility of manual authorizations is not possible for S_TCODE, S_RFC and S_SERVICE objects (the entry points).
Cheers,
Julius
PS:
> Total Questions: 42 (36 unresolved)
Please follow-up on your unresolved questions. There is a limit now of 10 open questions asked since July 2008.

Menu roles details

Dear All, could you please let me know the procedure to get all the menu roles information presented in SAP BI system. Thanks. Regards, Prasad.

You can use RSA1 and business content available roles.

BW Queries menu roles

Hi All,
How to identify the menu roles been awarded for the BW queries.
Is there any transactions to find out.
Thanks with reggards,
Vinay H.S

you can check in the meta data repository.
Here you can get the roles to which the particular query is assigned to.

How to generic menu roles functionality dynamically

right now i am using oracle built in menu roles, as we are not systematic the roles, every day we are adding - removing different screens form the diff users etc, it became difficult with menu roles. and Programmer presence is needed to change Menu roles very oftenly. already im having 50+ menu roles in my application, as i read in tech docs it is not advisable to increase menu roles toomany.
But i would like to wants that things as programatically.. by keeping all the menu names,usernames in tables and assign to users when ever we need manually, as it is replicating Oracle Menu roles default functionality.
is there any body can help/ advise on this issue. any work around please...
thx regads subbarao..

right now i am using oracle built in menu roles, as we are not systematic the roles, every day we are adding - removing different screens form the diff users etc, it became difficult with menu roles. and Programmer presence is needed to change Menu roles very oftenly. already im having 50+ menu roles in my application, as i read in tech docs it is not advisable to increase menu roles toomany.
But i would like to wants that things as programatically.. by keeping all the menu names,usernames in tables and assign to users when ever we need manually, as it is replicating Oracle Menu roles default functionality.
is there any body can help/ advise on this issue. any work around please...
thx regads subbarao..

How to implement Oracle user/role security with Access front end?

Hi,
We have successfully migrated our Access database tables to Oracle 10g using SQL developer. We've recreated all the users and roles(i.e., access groups) in Oracle and granted rights to tables.
In the Access front end database, in the Database window we have saved linked Oracle tables which replaced the Access tables. The forms, reports, queries run fine with the linked Oracle tables. All the linked table use one ODBC DSN to the Oracle database with the same Oracle user id.
We need to be able to authenticate users into the Oracle database and RE-link the tables based on their own unique user id. By during so we can allow users to use the Oracle standard user id/role and system privileges to control select, update, ect. rights to the database.
I've been able to use the VB code within Access to logon into the database with a unique id, but I have not been able to find out how to RE-link the tables to the unique user id using VB. There should be some way to relink tables dynamically, based on users login into the Access front end.
I don't know a great deal about Access projects, but I do know with SQL server allows login into your Access project and link tables dynamically.
Can someone give me some assistance or point me in the right direction?
Thanks in advance,
Larry

We had one of our programmers here come up with a VB code solution for re-linking table within Access. However the relinking takes 3-4 minutes for 100+ tables.
In an effort to help you understand the situation better, I will attempt to elaborate on the problem:
We have an Access 2003 application which currently has a front end using Access(forms, reports, queries, & VB code) and a MS Access 2003 backend.
We have migrated the backend tables to Oracle. However, we still have a need to maintain the front end in Access, since we have over 60 forms, 40 reports, 200+ queries in Access. Its easy to understand, we have a significant investment in the front end(Obviously, the plan is to migrate the front end also at some future date).
In order to utilized the existing front end, we have to validate and modify the current front end connections to the new Oracle backend. One of the features of Access is that you can "link" tables and save the link for runtime. Each Access table can have its own link which is a separate ODBC/JET connection. As such, each separate link has its own userid/database information.
The other issue with using the Access front-end is that Access utilizes a workgroup file to implement user and group security. The workgroup file contains all the users and which groups the users belong to in Access. Then within Access, you allow users access to object(tables, queries, ect) by their userid and or group. When users open an Access database with Access security enabled, they are required to log into Access. The login is authenticated by the workgroup file. Once, logged into Access, users have rights to Access objects based on their rights granted to their userid and groups they belong. The problem here is that when you remove the linked Access tables and replace them with linked Oracle tables, Access has knowledge about Oracle table rights granted to users; nor would you expect it to.
The dilema is the disconnect between Access and the fact Oracle utilizes a similar but much more sophisticated security model. It creates users and roles(which are similar to Access groups), and again this is independent of Access security.
Our solution was to still use the Access workgroup file security along with the Oracle security model. By using the Access userid and then creating a similar Oracle userid with similar table rights granted in Access, you could apply security within Access and also with the Oracle database.
For example, a user BOB logs into Access via the workgroup file, using VB code, Access then establishes a Oracle connection logining into Oracle using the same unique userid BOB into Oracle.
After connecting and validating user BOB into Oracle, then the Access tables are relinked to Oracle using the user BOB userid and table rights.
This Oracle userid has been granted table rights specific for this userid.This allows the user BOB to use the Access application and still be authenticated into the Oracle database.
The problem with this solution is that the relinking of the saved Access tables takes 3-7 minutes for about 100+ tables. This is not acceptable for users each time they log into the application.
Our current alternative is to use one Oracle userid to login each user, and use Access form restrictions/security to allow/prevent users from updating/viewing data. Obviously, this is not the optimal solution in respect to security, but it at least allows us to control access to the data(via the forms) by using one logon required for each user, and quick startup time for the application.
I understand SQL server does a better job in integration, but we use Oracle which is what I am trying to work with.
Larry

: Role Security within Company Code at Profit Center Level

Can someone explain how to restrict GL transaction processing within a company code, below the company code level, at a Divsion / Branch level at the profit center level for ECC6 via user authorizations in FI GL roel security?

Hi,
Create Authorization Objects for the branch/ division containing the User ids and mention in the role.
Thanks
VK

Menu Role Security

Similar Messages

Maybe you are looking for