New Authorizations as a logical combination of other Authorizations

Wondering if anybody else has encountered the need to create Authorization schemes as a logical combination of other Authorization scheme.
For example, if I had the following authorization schemes
Manager
Supervisor
User
I should be able to create something like
ManagerOrSupervisor
whose definiton is a logical OR of the Manager and Supervisor Authorization schemes.
There should be no need to repeat the code/conditions for the new scheme !

Hi,
you can use
WWV_Flow.public_security_checkto check defined authorization schemes. That way you don't have to duplicate your code.
Patrick
My APEX Blog: http://www.inside-oracle-apex.com
The ApexLib Framework: http://apexlib.sourceforge.net
The APEX Builder Plugin: http://apexplugin.sourceforge.net/ New!

Similar Messages

Creation of a new Authorization object

Hi ,
I need to create a new Authorization group and add three existing tables to it.
Kindly suggest a way.
Regards.

Authorization Field
Smallest unit in an authorization object. An authorization field either represents data, such as a key field in a database table, or activities, such as Read or Create. Activities are specified as identifiers, which are stored in the database table TACT and the customer-specific table TACTZ.
Maintenance using transaction SU20.
Authorization Object
Repository object that forms the basis for authorizations. An authorization object comprises up to 10 authorization fields. The combination of authorization fields, which represent data and activities, is used for authorization assignment and to check authorizations. Authorization objects are grouped together in authorization classes.
Maintenance using transaction SU21.
Authorization
Enter in the user master record or part of an authorization profile. An authorization comprises complete or generic values for the authorization fields in an authorization object. The combination determines the activities with which a user can access certain data.
Maintenance in transaction SU03 or generation from transaction PFCG (profile generator for role maintenance).
Authorization Profile
Grouping of several individual authorizations or further authorization profiles. Can be entered in the user master record instead of individual authorizations. An authorization can be assigned to authorization profiles as often as you wish.
Maintenance in transaction SU02 or generation from transaction PFCG (profile generator for role maintenance).

Creating a new schema in a Logical Standby Database

Hi All,
I am experimenting with logical standby databases for the purpose of reporting, and have not been able to create a new schema in the logical standby database - one of the key features of logical standbys.
I have setup primary and logical standby databases, and they seem to be running just fine - changes are moved from the primary to the standby and queries on the standby seem to run ok.
However, If I try to create a new schema on the logical standby, that does not exist on the primary, I get "ORA-01031: insufficient privileges" errors when I try to create new objects.
Show below are the steps I have taken to create the new schema on the logical standby. Any help would be greatly appreciated.
SYS@UATDR> connect / as sysdba
Connected.
SYS@UATDR>
SYS@UATDR> select name, log_mode, database_role, guard_status, force_logging, flashback_on, db_unique_name
2 from v$database
3 /
NAME LOG_MODE DATABASE_ROLE GUARD_S FOR FLASHBACK_ON DB_UNIQUE_NAME
UATDR ARCHIVELOG LOGICAL STANDBY ALL YES YES UATDR
SYS@UATDR>
SYS@UATDR> create tablespace ts_new
2 /
Tablespace created.
SYS@UATDR>
SYS@UATDR> create user new
2 identified by new
3 default tablespace ts_new
4 temporary tablespace temp
5 quota unlimited on ts_new
6 /
User created.
SYS@UATDR>
SYS@UATDR> grant connect, resource to new
2 /
Grant succeeded.
SYS@UATDR> grant unlimited tablespace, create table, create any table to new
2 /
Grant succeeded.
SYS@UATDR>
SYS@UATDR> -- show privs given to new
SYS@UATDR> select * from dba_sys_privs where grantee='NEW'
2 /
GRANTEE PRIVILEGE ADM
NEW CREATE ANY TABLE NO
NEW CREATE TABLE NO
NEW UNLIMITED TABLESPACE NO
SYS@UATDR>
SYS@UATDR> -- create objects in schema
SYS@UATDR> connect new/new
Connected.
NEW@UATDR>
NEW@UATDR> -- prove ability to create tables
NEW@UATDR> create table new
2 (col1 number not null)
3 tablespace ts_new
4 /
create table new
ERROR at line 1:
ORA-01031: insufficient privileges
NEW@UATDR>
NEW@UATDR>

HI Daniel,
I appreciate your quick response.
My choice of name may not have been ideal, however changing new to another name - like gav - does not solve the problem.
SYS@UATDR> connect / as sysdba
Connected.
SYS@UATDR>
SYS@UATDR> select name, log_mode, database_role, guard_status, force_logging, flashback_on, db_unique_name
2 from v$database
3 /
NAME LOG_MODE DATABASE_ROLE GUARD_S FOR FLASHBACK_ON DB_UNIQUE_NAME
UATDR ARCHIVELOG LOGICAL STANDBY ALL YES YES UATDR
SYS@UATDR>
SYS@UATDR> create tablespace ts_gav
2 /
Tablespace created.
SYS@UATDR>
SYS@UATDR> create user gav
2 identified by gav
3 default tablespace ts_gav
4 temporary tablespace temp
5 quota unlimited on ts_gav
6 /
User created.
SYS@UATDR>
SYS@UATDR> grant connect, resource to gav
2 /
Grant succeeded.
SYS@UATDR> grant unlimited tablespace, create table, create any table to gav
2 /
Grant succeeded.
SYS@UATDR>
SYS@UATDR> -- show privs given to gav
SYS@UATDR> select * from dba_sys_privs where grantee='GAV'
2 /
GRANTEE PRIVILEGE ADM
GAV CREATE TABLE NO
GAV CREATE ANY TABLE NO
GAV UNLIMITED TABLESPACE NO
SYS@UATDR>
SYS@UATDR> -- create objects in schema
SYS@UATDR> connect gav/gav
Connected.
GAV@UATDR>
GAV@UATDR> -- prove ability to create tables
GAV@UATDR> create table gav
2 (col1 number not null)
3 tablespace ts_gav
4 /
create table gav
ERROR at line 1:
ORA-01031: insufficient privileges
GAV@UATDR>

Adding new authorization objects to transactions

Hi experts,
i would like to add new authorization objects to specific transactions, for example the object K_CCA for checking the cost element in the transaction KB15N.
What do we have to maintain, except the transaction code with (SU22). What do we have to do with the program behind the transaction?
Is it "just" adding two line of code into the auth object check in the program, similar or like described for client specific ABAP-programs???
Any experiences on that?
Regards
Florian

Hi,
First add the objects in DSO then in Info Cube.
Map the same with transformation.
Move the objects to production then DSO.
Load the DSO first. then delete the data from cube in production.
Now move the modified cube and transformation to production.
Now load the Cube from DSO.
No need to change any thing in existing query.
I hope this will help.
Thanks,
S

I need help getting new authorization codes for digital copies

I need help getting new authorization codes for digital copies of movies. Can someone help me out?

There's a lot of results in Google when you search for this but unfortunately refreshing the page doesn't seem to generate a different code anymore. Mine also says already redeemed

I have a problem with my motherboard and my battery of my 2010 macbook pro 13". It was just serviced with a new screen, keyboard, and logic board.

I have a problem with my motherboard and my battery of my 2010 macbook pro 13". It was just serviced with a new screen, keyboard, and logic board. How much will a new battery and motherboard cost and would it be worth it or should I just get a new computer. It was about 300 dollars to get it serviced last week. if it adds up to much past 600 dollars I will just get a new one. THANKS FOR ANY HELP!
P.S During classes today it began beeping in my bag. Like three kind of long steady beeps then a short pause, and when I opened it I couldn't see anything but it was on so I turned it off and back on.

Depends on what options your Apple store offers - if they can do a depot repair (where they send it out), that's around $300 for all parts & labor.
If the store doesn't have that option, a logicboard is around $600, battery $80-$100, from what I've seen.
If they JUST replaced the logicboard, you absolutely should NOT have to pay for another replacement - the replacement is covered by a warranty. If they want you to pay for it, make sure you have a copy of the receipt for the work that was recently completed so you can show it to them. They have no reason to charge you for another logicboard.
~Lyssa

Query on new Authorization Objects after Upgrade&SAP_NEW profile

Dear Experts,
We have upgraded our system from 4.5 to 7.0 version, i was checking what are the new authorization Objects introduced after upgrade comparing older system ojects. I got few objects which are new in upgraded system,
But when i check SAP_NEW profile, and in the latest profile SAP_NEW_7000 profile i can not see all those new Ojects which are new.
generally SAP_NEW should contain all new objects which come after upgrade? i can see those in SAP_ALL but not in SAP_NEW
is there any issue in system? how should I know and where should i check what are the new Objects come in upgrade,
Please advise.
Thanks#Regards,
Vijay

Hi Jurjen Heeck ,
see my previous post
I did 'nt get this.
SAP_NEW is your friend here
does the SAP_NEW profile contains all the new authorization Objects.
Regards,
Anthony

Document upload with new authorization type

Dear All,
A document "x" has been loaded in the system with the authorization group "MEIN" . Now the same document is to be loaded in the system with another new authorization type "SWE".While doing so, the version is being taken as "Version 2" .Wheareas there is no revision in the document, and the document is the same as the initial one "x".
Can anyone guide me as to how to have the same description of the same document and yet, upload it with a new authorization group without the version climbing +1?
Regards,
Aditya

Ok,
problem solved...
Thanks anyway!!!

Addition of New Authorization Objects in DMS

Dear All,
How to add new authorization objects in DMS?
For ex: I have defined Projects in additional data through class/characterstics, now i want to bring that field in to authorization control and want control document creation with respect to characterstics values(Projects).
Looking for documents or step by step procedures
Kindly help me.
Thanks in advance
[email protected]

Hi
Im not so sure but you can create an Auth Key using BS52
You can add it to Auth obj of Class/ characteristic
You can get a list of auth obj in SUIM
Niranjan
Let me know if it helps...!!!

When to create new authorization objects

Hi Experts,
I am learning SAP Security.
I have one question , what is the necessity of creating new authroization field and object , when SAP gives a huge list of objects /fields.
Is there any reason behind like, whenever a customised transaction is created, a new authorization object or filed has to be created?
Regards,
Rekharaj

Trick is to find not only a standard authorization object with the same field you are looking for, but an object already assigned to the users with those roles with the same semantic for all it's fields - so that you can simply reuse the existing concept which is also assigned to the sets of users.
Often you will find "base" function modules and classes you can use to do all that work for you. Just call them at the correct location in the code and dont forget to check the return code and react to it.
If you use BAPI APIs to access or process data, then many of them make these same semantically correct checks "out of the box".
Cheers,
Julius

New Authorization Objects for latest releases

Dear Colleagues,
Do you happen to know how to find out the objects that should be added when using a role from a previous SAP version in a new one. That is, we have imported a role from a previous SAP version into our system and would like to update it with the latest objects. How should I find out which are the new objects?.
Thanks in advance for your help.
Best regards,
CMPT

Charles,
If you role has transactions in the menu the new authorization objects will be pulled in when you go to change the authorizations (select read old and merge with new under expert mode).
If the transactions are not in the menu you will need to do a compare of the usobt_c and usobx_c between the old and the new system.
During new auth objects analysis is performed via transaction SU25.
Cheers,
Ben

New Authorization Objects after system upgrade

Hi All ,
I require the list of all new Authorization Objects that have been added to the system after System Update.
Regards
Anthony D'souza

Hi Jurjen Heeck ,
see my previous post
I did 'nt get this.
SAP_NEW is your friend here
does the SAP_NEW profile contains all the new authorization Objects.
Regards,
Anthony

New Authorization objects When Adding New tcodes

Hi Guys
I have two Identical R3 Productiosn Systems One is Called Prd and the Othe RPP.
When Going into Pfcg on PRD and adding A tocde I.e Mi02. It already has mi01 and mi03.the authorization tab chnages from green to Yellow,.When Going into The Authorization Tab,( option change authoirazation tab), there aer new authoiration object that has a yellwo status and needs to be filled in.
When doing the same i.e go into Pfcg on RPP and adding A tocde I.e Mi02. It already has mi01 and mi03.the authorization tab chnages from green to Yellow,.But when Going into The Authorization Tab,( option change authoirazation tab), there are no new authorization object that has a yellwo status They are all greeen, but there are some with status updated.This looks right.
Am I doing anything wrong,.I have not tried to go into the authorizatin tab with the expert option.
Pls advise

Hi Moods,
Did you check the objects before adding MI02?
Check with SU24 for objects in PRD and RPP if you have same objects then check as below.
Check what new objects are comming up in PRD.
Check for the Additional T-codes which are having the new objects which are populating in PRD. if you have additional T-codes in PRD, then their may be chances of new objects populating
If you check in authorization tab options with expert mode and choose merge with new data this might reslove the issue.
Cheers
Soma

Some chart types cannot be combined with other chart types

Good morning,
I am working on a MacBook Air (purchased Oct 2009) running Lion. While working in Excel 2011, I encounter the error "Some chart types cannot be combined with other chart types. Please select a different chart type." I am highlighting 46 cells to create a marked line graph. There are no other charts in the file. I called Microsoft support who told me they had not heard of this problem in Excel (only in PowerPoint). I also took it to an Apple Store Genius, who was unable to solve the problem, which is understandable, given that he does not work for Microsoft.
To try to resolve this issue, I have recopied the data to a new spreadsheet, re-typed all the data to a new spreadsheet, and deleted plist files. When I sent it to a different computer (which was running Excel 2011 and Snow Leopard), I could make the figure but I cannot edit the figure or add data on my laptop.
Any suggestions that you have would be much appreciated,
Signed,
One stressed out PhD student who desperately needs Excel to work

Hi, folks.
Apparently, when using Excel 2011 and running Lion, if the tab names in excel contain a period (.), this error occurs. I removed the periods and now I can graph again. I hope this helps anyone else who may experience this problem.

Implement new authorization object in MRBR (SU24)

Hi,
I'd like to add a new authorization check in transaction MRBR.
I tried with SU24 -> MRBR -> adding object M_RECH_BUK with "CM" check ID.
When testing : nothing appened (no check made).
After reading all SDN posts about SU24, i think i'd to implement an "authority-check" on M_RECH_BUK in MRBR coding. And i don't like this....
Do you think i can do this check in MRBR using user-exit ?
Thanks a lot for your response.
Etienne

Hi,
Below are the User-Exits for the T.CODE MRBR
Exit Name Description
LMR1M001 User exits in Logistics Invoice Verification
LMR1M002 Account grouping for GR/IR account maintenance
LMR1M003 Number assignment in Logistics Invoice Verification
LMR1M004 Logistics Invoice Verification: item text for follow-on docs
LMR1M005 Logistics Inv. Verification: Release Parked Doc. for Posting
LMR1M006 Logistics Invoice Verification: Process XML Invoice
MRMH0001 Logistics Invoice Verification: ERS procedure
MRMH0002 Logistics Invoice Verification: EDI inbound
MRMH0003 Logistics Invoice Verification: Revaluation/RAP
MRMN0001 Message output and creation: Logistics Invoice Verification
it is better if you write a Field exit on the Field M_RECH_BUK
For the Field exits,
http://www.sapgenie.com/abap/fieldexits.htm
http://www.sap-img.com/abap/field-exits-smod-cmod-questions-and-answers.htm
Thanks
Sudheer

New Authorizations as a logical combination of other Authorizations

Similar Messages

Maybe you are looking for