ML81N Authorisation control

Hi All
My reuirement is that I want to authorise a user for transaction ML81N for viewing service entry sheets but he/she should not be able to create a service entry sheet.Is there any way around by which we can have authorisation control in transaction ML81N.
Regards
Satish Kumar

Hi Satish,
When a user tries to perform a service entry the following
authorization objects are checked:
M_BEST_EKO  (purchasing organisation)
M_BEST_EKG  (purchasing group)
M_BEST_BSA  (document type)
M_BEST_WRK  (plant).
The authorization check includes a check of the purchase org/group etc
and a check on the activity performed. More technically this means that
the authorization object contains two fields: one field containing the
purchasing org/group etc and another field containing the activity type
For maintaining and accepting entrysheets we have the activity types
'75' and '76'. The activity types for creating and changing purchase
orders are '01' and '02'.
Thus it is possible to assign a user the authorization for service
entry without having the authorization to maintain purchase orders by
specifying the activity types accordingly.
This is the description of the two activities.
76 - maintain service entry sheets
75 - accept service entry sheets.
You need this authorizations if you are using service POs and want to
create, change or accept the corresponding service entry sheets.
I hope this helps!
Best Regards,
Arminda Jack

Similar Messages

  • Field Level Authorisation Control

    Hi Expert,
                i want field level authorisation control for Usage Probablity in Bill of Material. In CS02- Change Material BOM for some user i want to restrict to change the usage probablity of particular component.
    how to do this. i already tried through creating & adding authorisation object in Role but it's not working.
    Pls suggest solution with detailed steps.
    Regards,
    Dev

    Dev,
    You can better try using, transaction variants using transaction SHD0 and assign them to the respective users.
    You can do a search in this forum to find topics on how to create transaction variants.
    Regards,
    Prasobh

  • Authorisation controle on variabel in Bex query

    Hi,.
    One variable is defined with Custemer exit on Profit center Hierarchy.
    Authorisation controle is defined on this to see his own profit center values for each user.
    Now we have created new report and the same variable is being used in this report.
    Now want to take out the existing Authorisation controle and give  access to see all  profit center values on this report for the users who are executing this report.
    Hoe can i achieve this in the new report.
    Pllease provide your inputs.
    Re4gards,
    Siva.

    Hi Jacob,
    Actually i am not aware of  these authorisation concept.
    I was told by by business that there is an authorisation contrloe is being used on the variable such that one use executes the report then he can see only his profit cenmter values.
    Now in the new report there shouldnt be any authorisation controle and all profit center values could be visible for the users.
    Where can i see the authorisations which are  defined for the variable and what type.
    And how can i take out the existing authorisation?
    Please let me know any impacts if take out the same..
    Edited by: Siv Kishore on May 28, 2010 1:44 PM

  • SPAD - Reset Cache, Reactivate, Check Connection - Authorisation Control

    Dear Experts,
    I have been trying to implement authorisation control to grant only the following functions in SPAD,
    - Reset cache
    - Reactivate
    - Check Connection
    no luck for a long time now.
    End users are supposed to be able to perform the above functions without the other admin functions.
    Any advice anyone ? Is this even possible ?
    Many thanks.
    noia

    >
    noia** wrote:
    > Dear Experts,
    > I have been trying to implement authorisation control to grant only the following functions in SPAD,
    > - Reset cache
    > - Reactivate
    > - Check Connection
    > no luck for a long time now.
    >
    > End users are supposed to be able to perform the above functions without the other admin functions.
    > Any advice anyone ? Is this even possible ?
    >
    >
    > Many thanks.
    > noia
    why would you grant 'reset cache' and 'reactivate' to an end-user? what's wrong with your printer-spool-setup (host-spool-setup) that end-users have to reactivate printers?
    SPAD belongs in the hand of Basis-people, IMHO. when end-users are forced to care for technical settings in spooling, there is something dreadfully wrong ...

  • Authorisation control for master data creation on the basis of eq. category

    Hi Experts,
    In one of my business scenerio , I want to control the authorisation of a particular person on the basis of equipment category. I want to create a role for that particular ID and assign that equipment category sothat he can not create the equipments other than that category.
    How can I control this authorisation on object level basis? If any other way , please let me know sothat i can try out for the same.
    With Regards
    VT

    Hi
    You can use SPRO>PM and CS>Tech objects>equipment>Defien field selection for eqmt master record. Chose 2nd activity in list and click 'influencing' and select Equipment catiegory. Through this for a equipment category, you can control fields as input, required, display, hide.  Maintain the field auth group as required for a equipment category you want to control.
    You can create auth group in SPRO same path as above under techincal objects, general data. Check with GRC/basis team to limit auth to Equipment category for this group. If not, you can do this through ABAP for validating the auth group for equipment category. Assign this Auth group to a role
    Regards
    Hemanth

  • Authorisation: controlling access to objects/data

    Hi all,
    I am looking for some pointers to design patterns that deal with authorisation.
    The issue at hand is the following: for an enterprise application we need to implement a mechanism that manages user-access to certain data. Example: if a user asks for sales-figures, only the data that he/she is allowed to see (e.g. based on office) should be included in the result.
    The question that we asks ourselves is: do we set up a separate authorisation manager (sessionbean) that includes all the business logic to restrict user-access, or do we make the specific objects (entity beans) responsible for this.
    The latter solution would take the form of: entitybean Office, getSalesFigures(Year, User) method; based on the User object access is granted or not. The method will return 0 if the user has no access.
    Feedback is appreciated.
    Regards,
    Jaap

    Hi,
    The Composite View pattern http://java.sun.com/blueprints/corej2eepatterns/Patterns/CompositeView.html
    has some discussion about applying security based on user roles.
    Also the Intercepting Filter pattern
    http://java.sun.com/blueprints/corej2eepatterns/Patterns/InterceptingFilter.html
    can be used to apply security checks. The Java petstore applies this pattern for self-registration of users, and this is explained in more detail at
    http://java.sun.com/blueprints/patterns/InterceptingFilter.html which includes an explantion of the pattern being applied, and also a link the details of its implementation at
    http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/sample-app/sample-app1.3.1a3.html#wp1065478
    These should give you a good starting point for designing role based security. The petstore used a seperate module for security because it was allowing self-registration of users. If your application does not allow users to create and manage their own user accounts(like yahoo mail etc) and instead all accounts are set up administratively(someone in the company sets up each user account), then the J2EE platform may provide the capabilities you require and you may not need to write a separate module.
    The J2EE programming model also has a lot of support for role based security. So you may be able to leverage the J2EE environment to do much of the work for you. The J2EE security model is described in the security chapter of the BluePrints book at
    http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html
    hope that helps,
    Sean

  • How to implement authorisation on table columns

    Can anyone suggest a smart way to use Weblogic platform capabilities to implement
    a table column security/authorisation "control". ie. control on a column by column
    basis who can view or update a column? Scenario - a primary data owner "owns"
    a set of records in a database, but would like to give (or delegate) selected
    access to groups of users to view and/or update the content of certain fields
    in the recordset.
    Seems like this is probably not that uncommon a requirement but can't seem to
    find any design patterns for this.

    Dean Tine wrote:
    Can anyone suggest a smart way to use Weblogic platform capabilities to implement
    a table column security/authorisation "control". ie. control on a column by column
    basis who can view or update a column? Scenario - a primary data owner "owns"
    a set of records in a database, but would like to give (or delegate) selected
    access to groups of users to view and/or update the content of certain fields
    in the recordset.
    Seems like this is probably not that uncommon a requirement but can't seem to
    find any design patterns for this.The first question is, if you are going through an application server
    why do you need to do anything clever at all? You can check the role of
    authenticated users and grant or deny access based on that (i.e. some
    dynamically generated SQL dependent on role)?
    If you really need support at the DBMS level, you can use SQL VIEWs.
    Create a view containing the appropriate columns and grant permissions
    to that view to the appropriate users. With an app server you will need
    multiple connection pools though and it quickly gets messy.
    Alternatively use stored procedures. Depending on your DBMS this might
    be required (if views aren't updatable) or could give better
    performance. Or worse performance.
    Robert

  • HT1420 I can't find the link to authorise my computer

    I can't find the link to authorise my computer, please help.

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • Trying to authorise new laptop

    I am trying to authorise my new laptop so i can transfer books to my nook the message say I can only authorise once which is my old one help

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • Shall v maintain price control  for material type with plant specific ?

    Hai Guru,
                       In OMS2, we change HALB price control [valuation] as V or S.  whether shall v maintain this for plant specific.?
    Kindly guide
    With Regards
    Swetha

    Hi
    if you do not make the indicator Price control manadatory active then you can have different price indicator for each plant. However thsi indicator is never done plant specific. If you wish to have plant specific then you may have to have a new material type and again you need to control the MM01 creation for that particular plant by means of Authorisation control which is littel involved also but can be done.
    Regards

  • HT1420 How do i authorise a computer which is new?

    I cannot work out how to authorise another computer to the same iphone

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • HT1727 how do i authorise a new computer

    How do i authorise a new computer. i am trying to transfer songs for my kids

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • HT1420 I have successfully deauthorised my old computer but am unable to authorise my new machine.  I have followed the instructions but there is no option on the store menu to 'Authorise this computer'. Please help!

    I have successfully deauthorised my old computer but a unable to authorise my new machine.  I have followed the instructions but there is no option on the store menu to 'Authorise this computer'.  Please help!

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • TS3354 i purchased a film on my iphone and am trying to watch it on my laptop, i keep getting a message that says "you must authorise this computer before you can watch this film", what do i need to do

    I purchased a film on my Iphone and I am wanting to watch it on my laptop, but i keep getting a message saying "before you can watch previously purchased items you need to authorise your computer"  how do I do this

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • \Hi, \I am trying to dowload some films from itunes to a new laptop but I am getting a message telling me I need to authorise this computer.....how do I do this?

    \I am trying to download some films and TV programmes from Itunes to a new laptop but I am being told that I need to authorise this computer. How can I do this?
    Thanks/

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

Maybe you are looking for