Need to deactivate structural auth. check for a custom Report

Hi all experts:
I have a report that is based on PNPCE logical database and it displays work hours for a project, all non-sensitive information. We would like a wide range of users to have access to this but since this is based on PNPCE logical database whenever a user runs it, the str. authorization check is performed. I have tried deactivate this check with P_ABAP object and coers 2 but it only ignores infotype auth. check but still checks the structural. We don't want to expand str. profile for users.
Do you know if there is a way to deactive this just for one report?
Your help will be greatly appreciated.
Regards,
Net

Thanks Kiran. I had tried that value but still got the same message. I am having problem understanding exactly when this value 2 ignores structural authorization because it works on some reports and not others. Anyway, we implemented BADI for this report to ignore structural auth. check and it is working fine.
Thanks again,
NT

Similar Messages

Bypass P_orgin auth check for standard MSS reporting

Hi SAPers,
on my HR system, I have 2 types of users : ESS/MSS users (via portal) and backend users (via sapgui).
ESS/MSS role does not contain any P_ORGIN authorization because it should be added to their authorizations if they are also backend users.
The problem is coming from standard MSS reports : the "time statement overview" among other report needs P_ORGIN (IT 0, 1, 2, 7, 8, ...) !
Is there a way to bypass the standard authorization check for MSS reports ?
Thanks in advance,
Olivier.

>
Olivier TACA wrote:
> Example :
>
> Portal Role for ESS user contains P_ORGIN for IT 0006 (Address)
>
> Backend Role for backend user contains P_ORGIN for IT 0002 (Personal data) ... and S_TCODE for PA30 of course.
>
> The backend user, who is also an ESS user, can manage IT 0006, which is not foreseen in the backend role.
>
> I use P_PERNR for the portal role to manage access to infotype.
I see two issues here:
1. ESS is NOT setup correctly.
- You don't need P_ORGIN for ESS. You only need P_PERNR. The trace might even show an error looking for P_ORGIN but you do not need it. This is an example of a role I have using ESS services for addresses. I don't have P_ORGIN, P_ORGINCON or P_ORIGXXCON. Do NOT use PA30, for ESS, that is very dangerous. The ESS services can be added to a role and should be use for ESS.
Here is an example of what I have:
Manually   HR: Master Data - Personnel Number Check                     P_PERNR
Manually   Address Change - Permanent and Emergency
     Authorization level            D, E, M, S, W                                                               AUTHC
     Infotype                       0006                                                                        INFTY
     Interpretation of assigned per I                                                                           PSIGN
     Subtype                        *                                                                           SUBTY
2. MSS - I can't find the service for the report you are looking for. If you provide the MSS service I can run some traces and probably help you isolate your problem. Example of an MSS service (sap.com/mss~pla/PlanningPrimaryCosts).
I hope I didn't sound too harsh; I am just trying to help.
Regards,
-John N.
Edited by: John Navarro on Aug 5, 2008 5:46 PM

Deselect auth. check for infocubes (Checks for infocubes) in RSSM

Hi,
An infocube I installed contains an authorisation relavant object (already exists) in BW3.5 system. By default the infocube is selected for auth. check in RSSM.
After I transported the cube to target system I realised the auth check in RSSM has also been transported with the cube.
Hence, I have deselected the auth. check for the infocube "Checks for infocubes" in RSSM and saved it. Then, I created a second transport and only transported the cube. But the changes I made in RSSM hasn't been transported.
Please can you advise me how to transport the changes I made in "Checks for infocubes" in RSSM?
Thanks a lot
Murali

Hi,
check this threads:
Re: RSSM: Checks Authorization Objects for Infoprovider are not activ
Re: RSSM Transports
Normally system would check all the authorization relevant objects whenever a new Info cube is imported and in case if you want to transport these changes to Production system manually then follow the below listed steps:
1) In Development system, check or un-check the authorization relevancy using the transaction RSSM on a given Info provider
2) These changes are stored in table RSSTOBJDIR
3) Create a manuall transport request and include these entries covering the required Authorization objects manually.
R3TR TABU RSSTOBJDIR
Ex: If Info object 'A' is authorization relevant in Development system but not in Production system and you want to transport this change to Production system then include object 'A' table entries manually.
Regards
Andreas

Do we need to buy Code128 font barcode for BI Publisher reports?

Hi,
Do we need to buy Code128 font barcode for BI Publisher reports?
Also I need java file for the encoding, I am getting several errors..
Please help.
Edited by: 915766 on Jul 6, 2012 12:35 PM

Hi Adnan.
Did you get a definitive answer here?
I also have the same question.
Thanks,
Ian.

Transaction Variant for a Custom Report

Hi Folks...
I am trying to create a transaction variant for a custom report...and i am unable to do it. Have any one tried that before and got it worked..please let me know.
Thanks in advance.
Rajeev

hi,
i also used a different approach based on the requirement. this might be helpful to someone:
requirement: to make one of the parameter fields as display only. other users should not be allowed to edit this field & make it modifiable again.
_solution1:_ in the program, assign the parameter field to a modification id and make it protected (screen-input=0).
limitation: needs program modification incase there is a future requirement to change the parameter field value.
solution2: [1]create & save a variant and protect that parameter field. [2] go to SE93 & create a report transaction, put your saved variant in the 'start with variant'. [3] go to SU21 & create an authorization object for controlling the access to the variant. [4] ask your basis to attach this authorization object to the user id responsible for maintaining the variants for that program. [5] add a logic to check the authorization object in your program whenever the user tries to save or delete variants.
remarks: in production, make sure the authorization object & the update profile are transported. create also the same variant name as what you have defined in your report transaction code.

I need help! "Unable to check for purchases" for over a month!!!

I have been getting the same error message for over a month! Every time I try to check for purchases from the iTunes Store, I get a message saying: "Unable to check for purchases. The network connection timed out." I have 269 items waiting to be downloaded. I am SUPER frustrated, I contacted iTunes customer service twice now, the first time with no response and the second time the response I received didn't help any, I followed up to their answer, again with no response!! I really would like to download these items (most of which I paid for; some were free downloads...). I think this may have happened to me before when my computer crashed and I need to redownload everything from iTunes. I think there is just too many items to download all at once, but they won't even come up in my iTunes, so that I can download them a smaller number at a time! I also had a hard drive failure on my laptop about a week and a half ago (after this problem had already been occuring), and I'm pretty sure any of the items pending downloading that had already begun downloading and was stopped suddenly (a few; maybe a third of what is awaiting downloading...), those items' temporary files were deleted. Could this be causing a problem as well? I've read maybe trying to check for purchases at a less busy time of the day, really early in the morning, or really late at night...Will this work?? I've tried nearly 100 times repeatedly from 8-close to midnight since this has been occuring. I just want the items I paid for. I have been waiting for far too long. I've tried everything suggested and I don't know what else to do!!

First off, make sure Norton isn't blocking iTS access
Here are Norton directions
http://service1.symantec.com/SUPPORT/nip.nsf/0/7fb6e478e2a1abf78825708b00558625? OpenDocument&seg=hm&lg=en&ct=us
Secondly, you're the third or 4th person to post here that having hundreds of downloads cuases problems.
Contact iTS again, using the email they already sent. Don't start a new ticket.
Give them the URL of this topic, and ask them to reduce the number of items in your download queue. The magic number mentioned in the other thread was 69 downloads didn't cause a problem. (Apparently, 70 does)
Message was edited by: Katrina S.

No auth checks for custom transactions

Hi,
In my SAP system there are many custom trasanactions in which there are no auth checks in their respective programs,
Is their any way to restrict these transactions based on the organisational levels without doing any changes to the program.
Can we restrict these transactions by adding a authorization through se93 ?
If any documents are there on the same issue please share.
Thanks,
Sanketh.

I would take a slightly different approach, as a least worste option.
> Assuming that there is reluctance/inability to modify the code
In that case the code is modularized, but the security front-end is lazy.
What you can do is assign an authorization group to the report type program as well which has the org.value in the P_GROUP field of S_PROGRAM in it, and create a variant for it protected by P_ACTION = VARIANT. The users can submit reports if they are authorizated for the variant action as well, but not directly.
Then create an myriad of parameter transactions per org level and submit the report via transaction START_REPORT (so, via the varint!) with the variant set for the org. level in the selection screen.
But this completely defies thze concept of modularizing code and not maintaining redundant code, as well as redundant variants, and redundant menus of roles which could have been modularized as well.
The only potential "up side" of this is maintaining the SU24 data of the parameter transactions, but who does that?
Yes, if you maintained SE93 then the system would do it for you (automatic adjustement) but the scalability and flexibility of org. level maintenance in roles and well as the modularization (and maintainability) of code would be toasted.
Probably developers would not make authority-checks at all anymore, and that would be like going back to the conceptual stone ages.
Even the Commodore 64 was more modularized than that....
Cheers,
Julius

Auth. check for BP is invalid when do account search/activity creation

Hi Experts,
I have done the configuration for BP's anthorization group(B_BUPA_GRP).
But when I do the BP Search, the authorization check for B_BUPA_GRP is invalid and all BPs are shown.
This also happened when create activity.
When choose a Partner, the authorization check is invalid , too.
System is CRM 5.0.
Please help.
Thanks.
Apple
Edited by: mm19841228 on May 27, 2010 4:46 AM

Hi,
Perhaps something else to consider in your function is to include the SOUNDEX (<name>) function on the name being created against those in the table. If your users are typing in the names when creating them, then "typos" will be a problem in your search when using substr() or instr().
Note:
This will only be effective on the "English" language
Regards,
Mike

My computer died and so did my laptop. i need to deactivate my photoshop code by contacting customer support as i can't do it myself but can't find out how.

i can only use my photoshop serial code twice and need to deactivate it first before being able to instal on my new computer. Normally you'd do this yourself but i can't get into my old computers at all.
how on earth do i get to speak to a rep

Here is a direct link to chat or phone support: https://helpx.adobe.com/contact.html?step=CCSN_adobe-id-signing-in_stillNeedHelp
Benjamin

Handling DST in SQL Query for UCCX Custom Report

We wrote all custom reports for one of the call centers using our UCCX deployment. One problem we see we will hit in the future is DST. We suggested they use UTC but they wanted to see the call data based off of EST timezone. Right now we are okay because we use -5 to get the correct data but come March we are wondering how to address the issue. What options do we have? How are other people handling DST with the SQL queries for custom reporting? I see that the HR client will determine this based off of the local computer time then gives you the option to use UTC. We have all of our queries in an Excel document that the customer just needs to open and select Refresh All to update their data.
Thanks

"case-when" statements are evaluated in order.
so you must do something like this:
SELECT
CASE WHEN <is not number>THEN 'N'
CASE WHEN <is greater than 0>THEN 'Y'
Now "<is greater than 0>" will always have number for input, can't get "not number" error there.
See this thread:
Re: regular expression: integer is between N..M
Edited by: CharlesRoos on May 27, 2010 5:03 AM

[Extend DBI] specify the drill-down report for the custom report column

Hi,
I realized two custom reports by using the extend DBI tools:
1st report displays the sum of invoices amounts grouped by Operating Units.
2nd report display the details of invoices for all Operating Units
In the 1st report I specified a link on the column Operating Units to drill-down at 2nd report.
The problem is how specified the drill-down link so that the 2nd report display only the detail of invoices for the selected Operating Unit?
Thanks.

Adding the time dimenstions like Year, Quarter, Period, Week is quite possible.
Steps would be:
1. make sure your data source (Table/View has these columns). If you don't have them you can generate them by joining the date of the data table with FIII_TIME_DAY.
2. Map these new columns to appropriate Dimesnions. (Lile Enterprise Year, Enterprise Quarter etc.)
Once you have done these two your report will work for the Time Dimensions.
I dont think its possible to get the Prior Period functionality unless you use a generated datasource.
Regards,
Sudeep

CIM WIM/EIM sql templates for developing custom reports

Hi there,
We want to create custom reports from eGReport Database, where I can find the SQL queries are used in the reports are available from Report Console and then I'd be able to develop my custom reports?
Thanks for your give a look into this.

In CIM you can find tables including "_SMY" in their name in reportsDB are holding the reports Data.
I would suggest to consult eGain PS or Cisco AS while desiging custom queries to get accurate outputs. As some of column names could be confusing to you without Data model guide.

Structural Autharization check for Nonintegrated persons

Hi,
I came to know that when we turn on AUTSW ORGPD switch Initially, the four switch settings enable you to use the Organizational Unit field of Infotype 0001 for the authorization check. If we want to use the settings, we must enter all authorized organizational units separately into the structural profile in this case if any comany has 800 Orgunits , in this case do we have to create Structural profile with all 800 orunits for this ?
Thanks
Bob

Hi,
In our company for Retirees we maintaining Default position (99999999) , when we enable ORGPD and DFCON swiths we set to '1' which mean system always check Org assigninment filed before give access to this Personal record , we are using PD profile only for Managers and Time admins that to using Function Modules,
My question is if we enable these switched did all org units have to enter in Structral profile sepeartely to system to check Org assignmnet to Retriees for all orgunits in my comapny ?
ex:
Profile    NO P.Version Object Type Object.ID
NONINTE 1          01             O            500010
NONINTE 1          01             O            500011
NONINTE 1          01             O            500012

CRM E-Commerce BOB Web shop - Duplicate check for New Customer Creation

Hi,
In CRM E-Commerce BOB Web shop we have a requirement wherein new customer creation should go through a duplicate check. Only unique customers should be created as BP in backend GUI, in case a customer already exists with the same credentials, BP should not be created and user should get a message that the customer already exist in the system.
Currently the system is not preventing me from creating new customers with same credentials.
In case anybody has worked on the similar requirement or has any idea about the same, Kindly help.
Regards, Vipul
Edited by: vipul_kumar02 on Jun 21, 2011 4:20 PM

Hi,
Any pointers for function module used for creation of a new BP for a new customer request in BOB Web shop?
Is it same as B2C Web shop?

Need to Lock PO in webdynpro for abap custom screen

Hi ,
I have one view containing one input field and one button and one table.when i enter PO number in input filed and click on button then the PO line item details will be displayed in table. i have created tcode for this webdynpro application.
Now
suppose one user by using this transaction code enters PO number and clicks on button then the PO information will be displayed in one table in the same view.
now my requirement is When another user enter the same PO number and click on button on the same time then the PO should be locked and need to raise message that '' PO is edited by another user''.
I have tried with standard lock object ie..ENQUEUE_EMEKKOS and DEQUEUE_EMEKKOS to block ekko when i click on button action code.But i could not make it.Please suggest me how can i handle this.
cheers,
sravan.

Dear Saravanan ,
Thank you for your reply.
Am passing PO Number as Key and launching the application from transaction code . The mode am using for the lock objects is 'E'.
please find below code to lock the PO.
CALL FUNCTION 'ENQUEUE_EMEKKOE'
EXPORTING
   MODE_EKKO            = 'E'
   MODE_EKPO            = 'E'
   MANDT                = SY-MANDT
   EBELN                = ls_atrb_node-po_number
EBELP                =
   X_EBELN              = ' '
X_EBELP              = ' '
   _SCOPE               = '2'
   _WAIT                = 'X'
   _COLLECT             = ' '
EXCEPTIONS
   FOREIGN_LOCK         = 1
   SYSTEM_FAILURE       = 2
   OTHERS               = 3
please correct me ,if i missed anything.
cheers,
sravan.

Need to deactivate structural auth. check for a custom Report

Similar Messages

Maybe you are looking for