ML81N Authorisation control
Hi All
My reuirement is that I want to authorise a user for transaction ML81N for viewing service entry sheets but he/she should not be able to create a service entry sheet.Is there any way around by which we can have authorisation control in transaction ML81N.
Regards
Satish Kumar
Hi Satish,
When a user tries to perform a service entry the following
authorization objects are checked:
M_BEST_EKO (purchasing organisation)
M_BEST_EKG (purchasing group)
M_BEST_BSA (document type)
M_BEST_WRK (plant).
The authorization check includes a check of the purchase org/group etc
and a check on the activity performed. More technically this means that
the authorization object contains two fields: one field containing the
purchasing org/group etc and another field containing the activity type
For maintaining and accepting entrysheets we have the activity types
'75' and '76'. The activity types for creating and changing purchase
orders are '01' and '02'.
Thus it is possible to assign a user the authorization for service
entry without having the authorization to maintain purchase orders by
specifying the activity types accordingly.
This is the description of the two activities.
76 - maintain service entry sheets
75 - accept service entry sheets.
You need this authorizations if you are using service POs and want to
create, change or accept the corresponding service entry sheets.
I hope this helps!
Best Regards,
Arminda Jack
Similar Messages
-
Field Level Authorisation Control
Hi Expert,
i want field level authorisation control for Usage Probablity in Bill of Material. In CS02- Change Material BOM for some user i want to restrict to change the usage probablity of particular component.
how to do this. i already tried through creating & adding authorisation object in Role but it's not working.
Pls suggest solution with detailed steps.
Regards,
DevDev,
You can better try using, transaction variants using transaction SHD0 and assign them to the respective users.
You can do a search in this forum to find topics on how to create transaction variants.
Regards,
Prasobh -
Authorisation controle on variabel in Bex query
Hi,.
One variable is defined with Custemer exit on Profit center Hierarchy.
Authorisation controle is defined on this to see his own profit center values for each user.
Now we have created new report and the same variable is being used in this report.
Now want to take out the existing Authorisation controle and give access to see all profit center values on this report for the users who are executing this report.
Hoe can i achieve this in the new report.
Pllease provide your inputs.
Re4gards,
Siva.Hi Jacob,
Actually i am not aware of these authorisation concept.
I was told by by business that there is an authorisation contrloe is being used on the variable such that one use executes the report then he can see only his profit cenmter values.
Now in the new report there shouldnt be any authorisation controle and all profit center values could be visible for the users.
Where can i see the authorisations which are defined for the variable and what type.
And how can i take out the existing authorisation?
Please let me know any impacts if take out the same..
Edited by: Siv Kishore on May 28, 2010 1:44 PM -
SPAD - Reset Cache, Reactivate, Check Connection - Authorisation Control
Dear Experts,
I have been trying to implement authorisation control to grant only the following functions in SPAD,
- Reset cache
- Reactivate
- Check Connection
no luck for a long time now.
End users are supposed to be able to perform the above functions without the other admin functions.
Any advice anyone ? Is this even possible ?
Many thanks.
noia>
noia** wrote:
> Dear Experts,
> I have been trying to implement authorisation control to grant only the following functions in SPAD,
> - Reset cache
> - Reactivate
> - Check Connection
> no luck for a long time now.
>
> End users are supposed to be able to perform the above functions without the other admin functions.
> Any advice anyone ? Is this even possible ?
>
>
> Many thanks.
> noia
why would you grant 'reset cache' and 'reactivate' to an end-user? what's wrong with your printer-spool-setup (host-spool-setup) that end-users have to reactivate printers?
SPAD belongs in the hand of Basis-people, IMHO. when end-users are forced to care for technical settings in spooling, there is something dreadfully wrong ... -
Authorisation control for master data creation on the basis of eq. category
Hi Experts,
In one of my business scenerio , I want to control the authorisation of a particular person on the basis of equipment category. I want to create a role for that particular ID and assign that equipment category sothat he can not create the equipments other than that category.
How can I control this authorisation on object level basis? If any other way , please let me know sothat i can try out for the same.
With Regards
VTHi
You can use SPRO>PM and CS>Tech objects>equipment>Defien field selection for eqmt master record. Chose 2nd activity in list and click 'influencing' and select Equipment catiegory. Through this for a equipment category, you can control fields as input, required, display, hide. Maintain the field auth group as required for a equipment category you want to control.
You can create auth group in SPRO same path as above under techincal objects, general data. Check with GRC/basis team to limit auth to Equipment category for this group. If not, you can do this through ABAP for validating the auth group for equipment category. Assign this Auth group to a role
Regards
Hemanth -
Authorisation: controlling access to objects/data
Hi all,
I am looking for some pointers to design patterns that deal with authorisation.
The issue at hand is the following: for an enterprise application we need to implement a mechanism that manages user-access to certain data. Example: if a user asks for sales-figures, only the data that he/she is allowed to see (e.g. based on office) should be included in the result.
The question that we asks ourselves is: do we set up a separate authorisation manager (sessionbean) that includes all the business logic to restrict user-access, or do we make the specific objects (entity beans) responsible for this.
The latter solution would take the form of: entitybean Office, getSalesFigures(Year, User) method; based on the User object access is granted or not. The method will return 0 if the user has no access.
Feedback is appreciated.
Regards,
JaapHi,
The Composite View pattern http://java.sun.com/blueprints/corej2eepatterns/Patterns/CompositeView.html
has some discussion about applying security based on user roles.
Also the Intercepting Filter pattern
http://java.sun.com/blueprints/corej2eepatterns/Patterns/InterceptingFilter.html
can be used to apply security checks. The Java petstore applies this pattern for self-registration of users, and this is explained in more detail at
http://java.sun.com/blueprints/patterns/InterceptingFilter.html which includes an explantion of the pattern being applied, and also a link the details of its implementation at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/sample-app/sample-app1.3.1a3.html#wp1065478
These should give you a good starting point for designing role based security. The petstore used a seperate module for security because it was allowing self-registration of users. If your application does not allow users to create and manage their own user accounts(like yahoo mail etc) and instead all accounts are set up administratively(someone in the company sets up each user account), then the J2EE platform may provide the capabilities you require and you may not need to write a separate module.
The J2EE programming model also has a lot of support for role based security. So you may be able to leverage the J2EE environment to do much of the work for you. The J2EE security model is described in the security chapter of the BluePrints book at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html
hope that helps,
Sean -
How to implement authorisation on table columns
Can anyone suggest a smart way to use Weblogic platform capabilities to implement
a table column security/authorisation "control". ie. control on a column by column
basis who can view or update a column? Scenario - a primary data owner "owns"
a set of records in a database, but would like to give (or delegate) selected
access to groups of users to view and/or update the content of certain fields
in the recordset.
Seems like this is probably not that uncommon a requirement but can't seem to
find any design patterns for this.Dean Tine wrote:
Can anyone suggest a smart way to use Weblogic platform capabilities to implement
a table column security/authorisation "control". ie. control on a column by column
basis who can view or update a column? Scenario - a primary data owner "owns"
a set of records in a database, but would like to give (or delegate) selected
access to groups of users to view and/or update the content of certain fields
in the recordset.
Seems like this is probably not that uncommon a requirement but can't seem to
find any design patterns for this.The first question is, if you are going through an application server
why do you need to do anything clever at all? You can check the role of
authenticated users and grant or deny access based on that (i.e. some
dynamically generated SQL dependent on role)?
If you really need support at the DBMS level, you can use SQL VIEWs.
Create a view containing the appropriate columns and grant permissions
to that view to the appropriate users. With an app server you will need
multiple connection pools though and it quickly gets messy.
Alternatively use stored procedures. Depending on your DBMS this might
be required (if views aren't updatable) or could give better
performance. Or worse performance.
Robert -
HT1420 I can't find the link to authorise my computer
I can't find the link to authorise my computer, please help.
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
Trying to authorise new laptop
I am trying to authorise my new laptop so i can transfer books to my nook the message say I can only authorise once which is my old one help
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
Shall v maintain price control for material type with plant specific ?
Hai Guru,
In OMS2, we change HALB price control [valuation] as V or S. whether shall v maintain this for plant specific.?
Kindly guide
With Regards
SwethaHi
if you do not make the indicator Price control manadatory active then you can have different price indicator for each plant. However thsi indicator is never done plant specific. If you wish to have plant specific then you may have to have a new material type and again you need to control the MM01 creation for that particular plant by means of Authorisation control which is littel involved also but can be done.
Regards -
HT1420 How do i authorise a computer which is new?
I cannot work out how to authorise another computer to the same iphone
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
HT1727 how do i authorise a new computer
How do i authorise a new computer. i am trying to transfer songs for my kids
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
I have successfully deauthorised my old computer but a unable to authorise my new machine. I have followed the instructions but there is no option on the store menu to 'Authorise this computer'. Please help!
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
I purchased a film on my Iphone and I am wanting to watch it on my laptop, but i keep getting a message saying "before you can watch previously purchased items you need to authorise your computer" how do I do this
There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them: -
\I am trying to download some films and TV programmes from Itunes to a new laptop but I am being told that I need to authorise this computer. How can I do this?
Thanks/There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:
Maybe you are looking for
-
Looking for help on how to start mixing ?
I have a two songs done and Iam starting to get how to record but thats all I know . I need help moving a head on mixing and putting it on CD Thanks
-
Trying to connect my printer and receive the message wireless radio is not functioning but the radio
i have a hp officejet pro 8500 wireless
-
Can you import movie videos from SD camera card
Can you import movie videos (MP4) into an Ipad from an SD camera card on a Lightning cable ... or can you only do this from a laptop via Itunes? In other words, is Itunes the only way to get non-Itune videos to the Ipad? Hope I havent made this sound
-
Automatic creation of project from Sales Order?
hi.. can someone guide me how to automatically generate PS Projects from SO USING TCODE HBS0? i have been able to generate projects automatically when i use tcode VA41 but my need is to do this for RE using sales browser and creation of Sales Order i
-
It is not possible to install LenovoEMC Storage Manager for Linux on Ubuntu 14.10
hi, I have big problem installing LenovoEMC Storage Manager for Linux on Ubuntu 14.10 64bit. I downloaded it from https://lenovo-na-en.custhelp.com/app/answers/detail/a_id/26108 Installed JRE (both 64 and 32 bit) Selection Path Priority Status 0 /usr