MIR4 Invoice - Restrict POST Authorization for Some Users

Hi Experts,
We are doing Invoice Release Workflow (MIR7) With 3 level Approval. When the document goes for approval in EDIT mode (MIR4) to multiple Levels anyone can change the document but the post authorization should be given only to the manager.
We created a Role with authorization object M_RECH_WRK and enabled only (3 Display and 77 Pre-Enter) still post button could not be disabled for some users. Kindly suggest a way to disable POST Option in MIR4 only for certain Users.
Regards,
Dheepak

Hi Dheepak,
Refer to these thread:
[Disable post option in MIR7|Disable post option in MIR7;
[ POSTING ISSUE|MIR7 posting issue;
Hope you find these useful.
Reetesh

Similar Messages

FV50--- How to Deactivate POST button for some users?

Hi Experts,
Pls. clarify me that, How to get it done?
1) my_company_Authorised_Group_Users: T code>FV50>Can see & use the POST MENU button on Standard tool bar
2) my_company_NOT_Authorised_Group_Users: Can NOT see & use the POST MENU button on Standard tool bar
1) How I can put this restriction among the users?
2) Pls. let me clarify step by step!
thanq.

If I understand correct, the documentation says as follows : So you may want to check further with experts, if this can be executed as said. i.e you may be able to use the same transction, but give different users, different variant.
You can assign various transaction variants to individual sales document types.
With the help of transaction variants, you create various variants for the same transaction (for example, create sales order VA01), in order to simplify your transaction flows. You can achieve this by:
Preassigning fields with values
Fading out and changing input availability for fields
Fading out entire screens
In this way, you can provide your users with screens which are defined according to their specific needs per sales document type.
When a transaction variant is created, several screen variants are created for each individual screen for the transaction chosen for the variant. The system accesses this screen variant when a transaction variant is applied.

Restrict the posting period opening and closing for some users

Dear SAP gurus,
I want to restrict some users to open the posting period and for some users close posting periods. I knew that these can be done through authorization group. Pls explain how to create authorization groups and how to use those? Anybody can help me out?
Regards,
Venkata Reddy

Dear Venkatareddy,
There are two sets of period in OB52. The first set of "From" and "To" is for the authorised group and second set is for the non authorised group. In the "Authorisation Group" (last column) give some 4 charecters name. Say "FICO".
Now ask the basis to attach the object "FICO" for the users who are authorised say user1, user 2 and user3.
Now in the first set of period you can maintain say 1 2008 to 16 2008 and in the second set 1 2008 to 1 2008.
So except user1,2 and 3, all the others can post only in 1 2008. Whereas users 1,2 and3 can post in all the periods of 2008.
Assign points if useful
regards
Venkatesh

How to restrict access to views for some users in the app?

Hi SDN!
I have an WD application wich embedded in the portal. Appication has 2 iViews (and 2 pages respectively). These iViews consist several views connected with each other (e.g. one view provide list data, second view is add/edit form for this data). I need to restrict access for some users for view with add/edit form. I can't make separate page for this view.
What I've done:
1) create yet another UIContainer for this view in main window and embed view to this container. It was be done for create separate iView for form.
2) in the portal I create iView for this form but don't embedd in any page.
When I try to call my form from list data (that is one iView from another) I get exception:
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: duplicate usage of view .MyCarRentalAddCity
Is there a way to get needed functional?
Thanks,
Lev

Hi,
do you need to remove the IView from the portal menu or do you just want to make a View container in your WD application invisible if the user doesn't have the rights to see it.
If so, you could create your own roles on the app server:
You need to create a new class that extends NamePermission like:
import com.sap.security.api.permissions.NamePermission;
public class ApplicationAccessPermission extends NamePermission {
 * @param name
 public ApplicationAccessPermission(String name) {
 super(name);
 * @param name
 * @param action
 public ApplicationAccessPermission(String name, String action) {
 super(name, action);
Also, you have to create an Action.XML file that looks like this:
<BUSINESSSERVICE
 NAME="com.vendor.administration">
 <DESCRIPTION
 LOCALE="en"
 VALUE="actions view usage"/>
 <ACTION
 NAME="View Permission">
 <DESCRIPTION
 LOCALE="en"
 VALUE="Show view"
 />
 <PERMISSION
 CLASS="com.vendor.utilities.ApplicationAccessPermission"
 NAME="ShowView"
 />
 </ACTION>
</BUSINESSSERVICE>
If you have created these to files in your packages, you can access this function like:
IUser user ;
try {
 user = WDClientUser.getCurrentUser().getSAPUser();
 if(user.hasPermission(new ApplicationAccessPermission("Show view"))){
 wdContext.currentV_UIElement().setViewVisibility(WDVisibility.VISIBLE);
 }else{
 wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
 }catch (WDUMException e1) {
 wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
 e1.printStacktrace();
You have to bind the ViewVisibility attribute of the context to the View Container you want to hide.
The applicationAccessPermission you defined in the XML File will be visible in the UME Manager of you J2EE engine. With this action you can create a new role and group that you can map to the users that should see you view.
But, the exception you get is because you have embedded one view twice, which is not possible.
Hope this helps.
Regards,
Dennis

How to restrict a user group of SQ01 for only execution for some users

Hi,
   I would like to know if it is possible to restrict the access to SQ01 transaction for some users. I would like that these users have only execution access to some queries associated with an user group.
   Do I have to associate the user group to the users I want to have access to it? How can I do it=
   Do I have to associate the queries created on SQ01 to the users? or it is enough to assign the users to the user group where the queries are defined?
   Do I have to associate the infosets created on SQ02 to the users? or it is enough to assign the users to the user group to which the infosets are associated?
   Thank you,
   Luz D.

I suggest you do a web search on SQ01 and SQ02. That'll bring along SQ03 as well.
There's so much information available on the web that there's no reason to repeat it here.
[try google|http://www.google.com/search?hl=en&safe=off&q=SAPsq01sq02&meta=]
Jurjen

Authentication and authorization for AD users in UCM11g

Hi all
we are using webcenter content server 11g. I read some where that for 11g users authentication is done in weblogic server environment, mean content server for 11g in now managed by weblogic server only, am i right?. we have successfully integrated Active Directory with weblogic sever and user of AD are able to log-in UCM but they don't have any role like contributor or Admin. How to do this role mapping for AD user in UCM i.e. authorization for these users. Please provide any guidence on this issue any doc or blog, we are new to webcenter suite.
Thanks
Somesh

As you already have weblogic integrated with AD, remains only role mapping and Single Sign-On integration. For authorization, AD must contain groups with exact names as roles in the Content Server. Those groups should be where Group Base parameter in the weblogic ActiveDirectoryAuthenticator point (like OU=Roles,OU=Oracle,DC=example,DC=com). Assigning AD user to the AD group named contributor, will add contributor role to logged Content Server user.
As for SSO, refer to the:
http://docs.oracle.com/cd/E23943_01/web.1111/e13707/sso.htm
and
http://docs.oracle.com/cd/E23943_01/doc.1111/e10792/c05_security.htm#autoId21
Procedure steps are:
Create a user account for the hostname of the web server machine in Active Directory
Create krb5.ini file, and locate it in the C:\Windows directory at both machines (Domain Controller and WLS host)
Generate the keytab file
Create a JAAS Login File named krb5Login.conf
Put both keytab and krb5Login.conf files to …/user_domains/domains/my_domain/
Configure the Identity Assertion Provider
Adjust Weblogic Server startup arguments for Kerberos authentication
Redeploy CS (and optionally other servers) server with the documentation given deployment plan
Check web browser configuration (IE and Firefox only)
Take a deep breath and test
If successful have a cake and cup of coffee else goto step one
Regards,
Boris

Mac Multiple Users - How to exclude for some users?

Hi,
I have BBDM installed on a Mac with multiple users. A couple of those are children so I have Parental controls turned on, and BBDM excluded from their available list. However, when they log in BBDM is trying to sync artwork or something and continues to request administrator passwords many many times. When I install the BBDM in the Destination Select segment it asks whether to install for all users, but there is no choice to exclude for some users.
Is there a way to do this?
Thanks
Paul
Torch 9810; PlayBook 64g; iPad1 64g; iPad2 64g; iPhone6 64g Passport
Provider Bell (tablets all WiFi)

Hey luapekralc,
Welcome to the BlackBerry Support Community Forums.
Thanks for the question.
When installing BlackBerry Desktop Software for Mac you only have the option to install for yourself or all users. My apologies, you can not choose selected users to have access to this application.
Let me know if you have any more questions.
Cheers.
-ViciousFerret
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Like! for those who have helped you.
Click Accept as Solution for posts that have solved your issue(s)!

Workitem exists in SAP Inbox But does not appear in UWL for some users

Hi,
We have a peculiar problem with a standard workflow. This workflow is working fine in SAP Inbox and UWL in portal for most of the users. But sometimes, it does not send workitem to UWL for some users.
Any input of as why this happens?

Hi All,
I had experienced this type of problem as well, just to share it could be that the Identity of the Portal user misses a role which can be solved by any user assigning the identity in their identity management or it could also be the connection status of the UWL to the backend, there should be at least two connection statuses for workflow items to get into the UWL I could not recall it but I would post it here once I have the access to our system again.
Cheers,

Print the invoices once a day for specific users

Hi fox
For some user I have created records in the VV31 to enable them to print their
invoices on a specific output device as defult. This solution works properly. However I
have set up the timing on "4" (print immediately). Now the same users would want to
print all their invoices for their once a day at 03:00 in the
morning. The invoices from other users should be printed immediately. Now I don't know what I am suppose to do. Maybe VF31 ? But how can I
set the timing (at 03:00 every morning)
Thanks for your help
Kami

Hi,
If you maintain the value as "2" for the field "Date/time",this will schedule the job as per the maintained time.
By using the option "1" the message is processed periodically similar to once in evrey day/every week through report program RSNAST00.
By using the option"2" the message contains an earliest processing date and a requested processing time as in option "1". The message is ignored by the report program RSNAST00 before the requested date maintained by you.
Regards,
Krishna.

Taking long time on First login for some users

Dears,
We are facing very strange issue in our ECC6 server.
For some users when they login put userid and password it takes 15-20 min to login and sometimes give time out.
but after first login it works fine.
If I remove roles from those user and assign them SAP_ALL or one or two roles,they also work fine.
One more thing some other users having same authorization are working fine.
One solution of this issue I found to delete the user having problem and copy it with user who is working fine.
But not getting root cause of the issue and permanent solution of the issue.
Please suggest.
Shivam

We just experienced the same problem after updating our SP-Stack.
Some users were experiencing a long logon time, and a long time to return to the Session Manager screen. Changing to the SAP Menu instead of the User Menu cleared the problem for those users, but they no longer had quick access to transactions that were in the User Menu, and not in the Favourites.
Note 203617 was not the answer for our problem, but it did point us in the right direction.
After upgrading our SP Stack last Friday, it appeared that some of the roles in the Customer Namespace (ie, zRoleName001) had inherited a copy of the Logistics or Accounting SAP menu trees. This meant that users with those roles ended up with a User Menu which contained the 10 or so transactions that are assigned to their roles, and additionally, the entire Logistics or Accounting Tree which contain 35,000+ items. In transaction SM66, users who are waiting for their logon to complete are shown doing a sequential read of table AGR_HIERT.
To correct this, I removed the Logistics and Accounting menu trees as appropriate from the User menu of those roles in PFCG. Users that use the User Menu can now logon normally.
This is what I did to troubleshoot:
* Pick one user that is experiencing long login times, and have them change to the SAP Menu instead of the User Menu. If their logon time improves, open transaction SE38, and run the program EASY_ACCESS_NUMBER_OF_NODES.
* Specify the user's account and click on Execute.
* If the program times out, chances are that they have an enormous number of items in their User Menu - continue with the next step.
* If the program finishes, look at the number of Menu Nodes for that user - Note 203617 says that a User Menu with 1000 or more items is considered "large" and will degrade logon performace as the User Menu buffer is constantly swapping in and out.
* Note each of their each of the user's roles from SU01, then check the Menu tab for each of those roles in PFCG to see if any roles are adding large sections of the SAP menu.
* If necessary, maintain the Role's Menu items in DEV, and transport to TEST, then Production. BE CAREFUL to ensure that the Users list is not modified when transporting the changes into Production, or the Role will become de-assigned from your Production users, and your users will hate you when they become unauthorised to open transactions.
* Once the User Menu is back to normal, the user can change back to the User Menu and everyone should be able to logon normally.
Hope this helps.
Edited by: Chris Pope on Apr 21, 2010 1:09 PM

Sharepoint Foundation - search working for some users (or computers), but not others

Hi all,
We have doozy of a search problem with SharePoint Foundation 2010 that I'm hoping someone can help with.
We have an application that is listening on port 14197 and search is working just fine, but only for one or two users.
If I do a search while logged in using the account we set the application up with then the search works fine and it returns records as expected.
If I use a different account - one that has full control over the app, then the exact same search fails with the following message:
We did not find any results for 06BSL.
Suggestions:
Ensure words are spelled correctly.
Try using synonyms or related searches.
Try broadening your search by searching from a different site.
Additional resources:
Get additional search tips by visiting Search Help
If you cannot find a page that you know exists, contact your administrator.
We've done everything we can think of, including several procedures to create new search accounts, replace databases, etc.
Nothing has helped and all of the info we can find online is in relation to getting search working when it doesn't work at all. In our case it is working, but only for some users. We thought it might have been a permissions issue, but not matter
what permissions we seem to give to test accounts they still don't work. We've set up a test account, for example, that is a member of the 'application owners' group, but cannot produce any search results with it.
The SharePoint Foundation server is running on Windows 2008 Server Foundation, with a separate SBS 2003 DC.
Any help most appreciated.

Hi Alex, thanks for your response and apologies about the late reply - didn't realise someone had responded until now!
Agreed that this looks like a permissions issue, but we're stumped as to what it could be. The 'test' account displays this problem - if we try and search on 06BSL
we get no results, but it does appear that this account has full control over this document (see below).
Note that the 'Manage Permissions' page presents a comment 'This list item inherits permissions from its parent. (Customer QA & Product Management)' which is what we're
expecting.
The indexing schedule is set to 5 minutes.
Appreciate your help with this, as we've spent a huge amount of time on this problem but don't seem to be any closer to a resolution.
Cheers,
Damian
Check permissions result (this result is the same for the list or for the document itself):
Permission levels given to test (DOMAIN\test)
Full Control
Given through the "QA Application Owners" group.
Design, Contribute, Read
Given through the "QA Application Members" group.

Adobe Premiere Pro CC launches for some users, but crashes for others.

I am troubleshooting an issue in a college computer lab. Adobe Premiere Pro CC launches perfectly for some users, but crashes for others. All computers are joined to a domain. The program launches successfully under faculty and admin accounts. It launches under my student account and will launch for some students in the class. There are, however, some students who cannot get the program to launch. Each time it fails when attempting to load ImporterQuickTime.prm.
For these students, the following error appears:
Adobe Premiere Pro CC has stopped working
Check Online for a solution and close the program (Tried this nothing seems to come of it)
Close the program
I clicked View problem details
Problem Event Name: APPCRASH
Application Name: Adobe Premiere Pro.exe
Application Version: 7.2.2.33
Application Timestamp: 532c3999
Fault Module Name: dvaui.dll
Fault Module Version: 7.2.2.33
Fault Module Timestamp: 532bed86
Exception Code: c0000005
Exception Offset: 00000000002d31c1
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033
Additional Information 1: 3272
Additional Information 2: 32722596c6b4441ac0840ed9743cbfbb
Additional Information 3: 3e22
Additional Information 4: 3e2260f0a53760c20f23c7e2675c1736
I did check Quicktime and it is not updated to the most recent version. However, if it was a result of Quicktime not being up to date, why can some accounts launch the program while others cannot. I have also updated the graphics driver on one computer. No change. I compared my student Active Directory account to that of one student who could not launch the program. They are in exactly the same place in AD and therefore have the same permissions on the domain. This is a puzzling issue and the instructor is getting frustrated. Any help or suggestions with this matter would be greatly appreciated.
-Barb

I have no idea, other than what I said about the program's design requirement for an Admin account and "sometimes" problems on any other account
About the only thing I can suggest is a "remote control" chat session... when a student with a non-working account is having problems
Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

Jabber voice mail for some users.

Dears,
J4W voicemail works perfect with default config.xml file for some of the users and for some of the users it shows the attached when clicked on voicemail tab. I have create 2 no's of sevice profile, the voice mail credential set for both service profile is Unified CM IM and presence.
I can understand the prompt as it is asking for voicemail password for that reason i have to create a custom config.xml file and i have to upload in TFTP server, But my concern is why it is working for some of the users without config.xml file and for some users it is prompting for username and password.
Thanks

Dears,
the profile are different, but if i put the the other users working profile also it is not working.
The voice mail server is showing not connected in jabber,
Any hints.
Thanks

MAM application is not working for some users

Hi All,
Tha MAM application is not working for some users.Different users have different workcenters other than that I dont see any other change. When I run MAM30_090_GETLIST in the backend I can see the no of customized users.But I cant see same no of users in the MEREP_207 table for the Syncbo MAM30_090 and strcture id TOP in the middleware. There is a data when I checked under worklist monitor for that user. But neither the MAM application nor MAM data is downloading to that device.
If I use different user on the same device I can see the MAM application and MAM data.
What could be the wrong in this case. Any help would be highly appreciated.
Mobile Client:MI 70 SP 15 Patch 0 Build 200802280918
Middleware:SAP NetWeaver 2004s with Patch leve 15
Backend:SAP ECC 6.0
Application:MAM 3.0
Thanks and Regards,
Ameer.

Hi,
from your description the source of your issue is quite obvious: some of the MAM users configured in spro are not configured properly.
For T01 SyncBos the number of TOP records in merep_207 MUST be the same as number of headers returned by an appropriate getList FM in the backend.
You need to solve this before you can go any further.
Reason why a record is not recorded in MEREP_207 - getdetail failed for whatever reason. So execute MAM30_ML_getdetail for each of the users that is not replicated in the middleware and check if there are errors in RETURN table. If there is no error - one of the common reason for replication fail is when there are records in item tables that have duplicate primary keys.
Regards,
Larissa Limarova

How to Block Account member in input reporting for some users?

Hi experts, i need to know if is possible to block input of values for some Users in the Account Dimension so that some users can input value in the report but other user cant do it.
I try to do this from "member access profile" but this option only allow you to define access right for one specifict parent o member.
I mean, is posible to asigned to Account Dimension a Propertie type "OWNER" like ENTITY?
For example: one user must to input value for the Account member "CASH", but other user dont, however i have to show the same input reporting for both users.
I hope understand the question, im sorry about my english
thank you in advance
Ignacio Vazquez

I would think you could do one of the following:
Either set account as a secured dimension. You would then define security profiles for all account groups and assign those to your users / teams as appropriate. Would take a while to setup initially, but if your users don't change that much it shouldn't be too difficult to manage once it's done.
Setup different input templates that only showed the accounts you wanted each group of users to see. Put the templates in different site folders and assign access to those sites as required. users would then only have access to open the template applicable to them. Would require that you basically make duplicate copies or your current template, modify and save to different site folders which could become a pain if the template requires changes (since you would now have to make the same change multiple times).
Setup a macro in the current template so that you need to enter a password to unlock the send commands for the respective accounts. I don't know if it can be setup to support multiple passwords - assuming it can, password 1 would unlock all accounts, password 2 would only unlock CASH accounts, password 3 would only unlock LIABILITY accounts, etc. You then distribute the passwords to the users as appropriate.
Hope that helps.

MIR4 Invoice - Restrict POST Authorization for Some Users

Similar Messages

Maybe you are looking for