PFCG - Flexibility for entering Values

In the PFCG screen where we input the organization values for role restriction, I suppose the options available are not very flexible. Is there a reason for this? Is there a way in which we could change the layout? Could you suggest an Exit / Enhancement option for the need?
SAP currently provides the option of inserting new rows, which i feel is not very handy. It could be better and more flexible if we had the option to include/exclude single values and range like the laout we have for SE16 (the tabs Selcet Single Values; Select Ranges; Exclude Single values and Exclude ranges)
Any opinions / advice is welcome
regards,
Shekar

Scuppered by the post max length, here are answers, please hook up to the relevant points
We form opinions though experience and trying out stuff for ourselves.  We evaluate new concepts against our experiences, if relevant. 
The principle of least privilege is a common theory, typically represented in the implementation of an authorisation/permissions concept which is based on the premise that access is granted, not removed.  Ignoring any technical limitations we then see 2 concepts being used and abused.
SAP_ALL analogy highlights the principle perfectly well.  When you create an exclusion you are saying you can have everything except xxxxx.
This principle applies from the high level like SAP_ALL to the low level like excluding a field value.
Why do we not recommend removing a transaction from SAP_ALL? Generally because we know that there is likely to be a lot of stuff left in there which is not required.  The same principle applies to excluding a field value.  Anyone who works in SAP knows that there are always lots of superfluous field values.
As an example, someone asks for all plants except NNNN.   Security admin builds a role containing * in Plant with en exclusion of NNNN.  In 99% of cases that access would be granted for plant 0001, dummy plants, retired plants etc.  Security is often an inherent control over data completeness & accuracy, in this case that control would be broken.  The same applies for document types, some auth groups etc.
If we are to use the car analogy, deaths in cars have decreased massively.  Why? because cars are far easier to drive and safeguards have been implemented (seat belts, crumple zones, air bags etc).
Flexibility is great but it comes at a price.  A concept needs to be able to align with design principles & remain usable.  There are lots of additional things I would like to see which you have also raised an interest in.  Just not exclusions in my opinion
Edited by: Alex Ayers on Sep 29, 2009 1:33 PM

Similar Messages

  • Select-options in Selection Screen to show more rows for entering values

    Hi all,
    In my webdynpro abap  I have added the SELECT-OPTIONS componenet and working fine.
    User need  in the Selection Screen for select options  more rows to show entering values in single time.
    THe Default Rows show only 5 .
    user need to change to 10 or 15 Rows to show.
    Pl help .
    THanks in advance.
    Dev

    Hi,
    Here is the way which I just tested and found working.
    This is the main code which needs to be written.
    TYPES:
        ty_r_vbeln TYPE RANGE OF vbeln,
        ty_s_vbeln TYPE LINE OF ty_r_vbeln.
    data ls_vbeln type ty_s_vbeln.
    field-symbols <fs_range> TYPE INDEX TABLE.
    ASSIGN lt_range->* TO <fs_range>.
    do 10 times.
    APPEND ls_vbeln TO <fs_range>.
    enddo.
    For further refinement, you can create a input field in view for number of lines to be shown as enabled.
    The complete code is as below.
    DATA lo_cmp_usage TYPE REF TO if_wd_component_usage.
    lo_cmp_usage =   wd_this->wd_cpuse_select_options( ).
    IF lo_cmp_usage->has_active_component( ) IS INITIAL.
      lo_cmp_usage->create_component( ).
    ENDIF.
    DATA lo_interfacecontroller TYPE REF TO iwci_wdr_select_options .
    lo_interfacecontroller =   wd_this->wd_cpifc_select_options( ).
    DATA lo_r_helper_class TYPE REF TO if_wd_select_options.
    lo_r_helper_class = lo_interfacecontroller->init_selection_screen(  ).
    Creating range table
    DATA lt_range TYPE REF TO data.
    CALL METHOD lo_r_helper_class->create_range_table
        EXPORTING
          i_typename     = 'VBELN'
        RECEIVING
          rt_range_table = lt_range.
    Disabling the global options
    CALL METHOD lo_r_helper_class->set_global_options
      EXPORTING
          i_display_btn_cancel  = abap_false
          i_display_btn_check   = abap_false
          i_display_btn_reset   = abap_false
          i_display_btn_execute = abap_true.
           TYPES:
        ty_r_vbeln TYPE RANGE OF vbeln,
        ty_s_vbeln TYPE LINE OF ty_r_vbeln.
    data ls_vbeln type ty_s_vbeln.
    field-symbols <fs_range> TYPE INDEX TABLE.
    ASSIGN lt_range->* TO <fs_range>.
    do 10 times.
    APPEND ls_vbeln TO <fs_range>.
    enddo.
    Adding the selection field
    CALL METHOD lo_r_helper_class->add_selection_field
        EXPORTING
          i_id                         = 'VBELN'
          I_OBLIGATORY                 = ABAP_TRUE
          I_NO_EXTENSION               = abap_false
          i_value_help_type = if_wd_value_help_handler=>CO_PREFIX_SEARCHHELP
          it_result                    = lt_range.
    Edited by: Jayanthi Jayaraman on Dec 2, 2010 8:29 AM

  • How can I switch to Longtext in a variable selection box for entered value

    I execute a Web Template and enter a value for example a company variable. After this I press the "Check"-Button and get the short text of the company but I want to see the long text.
    The InfoObject settings under Business Explorer is:
    Display:                                          Text
    Text Type:                                       Default
    BEx Description:                              Long description
    Selection:                                        No Selection Restriction
    Query Def. Filter Value Selection:      Values in Master Data Table
    Query Execution Filter Val. Selectn:  Values in Master Data Table
    Filter Value Rep. At Query Exec.:      Selector Box Without Values
    The InfoObject is a reference characteristic and the query was created on BEx 3.5.

    I changed the text type to long text, but the result is the same.
    The only way to get the desired result is to delete the short text and the middle text in the InfoObjects Text Table Properties. But this is not right way.

  • Sy-ucomm value for enter

    Hi,
    Can anyone plz help me with the sy-ucomm value for enter key.
    Thanks..

    Hi Renu,
    The OKCODE  or SY_UCOMM value is not same for 'ENTER' in all the cases. So its better to go for debugging .
    Whenever you want to know the ok code or sy-ucomm value  of a key , type '/h' in the command box and press enter. It shows a message on the status bar 'Debugging Switched On'. Now if you press any key , it switches to debugging mode  and type sy-ucomm in the fields list then you will get the SY-UCOMM or OK CODE.
    Incase of ALVs also you can get the SY-UCOMM. But in some cases the SY-UCOMM value may be NULL.
    <REMOVED BY MODERATOR>
    Edited by: Alvaro Tejada Galindo on Mar 25, 2008 4:50 PM

  • Getting an error while activating a planning area "Enter values for planning horizon From and planning horizon To for the storage time profile level"

    Dear S&OP community,
    I am getting following error while creating a planning ares in a newly installed sandbox. "Enter values for planning horizon From and planning horizon To for the storage time profile level".
    This what I did...
    1) Created new attributes and master data objects and activated them successfully.
    2) Time profile created and activated successfully
    3) Trying to create planing area by assigning  time profile in step 2 and assigned master data from step1..Unable to save the data and system returns 
    this error - "Enter values for planning horizon From and planning horizon To for the storage time profile level"
    My understanding is time profile needs to be active  but doesn't have to have values...
    Any help is appreciated.
    Thanks,
    Krishna

    YS,
    Here are my time profile settings
    Level       Name          Display Horizon - Past  Display Horizon - Future
    1             Monthly     -6                                       11         
    2             Quarterly     -2                                       3
    3             Yearly        -1                                       2
    Time profile is active and but time profile data is not loaded
    Thanks,
    Krishna

  • How to get the User entered value in the Submit request form for a parameter of a concurrent program in Oracle applications.

    Hi All,
    I have a requirement where i need to get the user entered value in the Parameter of a concurrent program while submitting it. i tried to query the FND_CONCURRENT_REQUESTS table but in that it stores the ID values from the value set of the Parameter.
    After submitting the Concurrent request when we click on the view Details button it opens a form where it displays the arguments in the parameter field .  i want to get that string.
    Thanks a lot in advance for your time and help.
    - Vijay

    Hi All,
    I have a requirement where i need to get the user entered value in the Parameter of a concurrent program while submitting it. i tried to query the FND_CONCURRENT_REQUESTS table but in that it stores the ID values from the value set of the Parameter.
    After submitting the Concurrent request when we click on the view Details button it opens a form where it displays the arguments in the parameter field .  i want to get that string.
    Thanks a lot in advance for your time and help.
    - Vijay

  • How to display texts automatic. besides entered value for a field in Trans.

    How to display texts automatically besides the entered value for a field in a standard transaction screen. For example you have a value table and a text table associated to it. Then on entering the value field and pressing enter the text associated should get displayed immediately besides the value. Like if you have 'LOC' as the value and 'Location' as the text associated to it, on entering this value 'LOC', you automatically get the text 'Location' printed besides it automatically in a transaction screen ?
    Message was edited by: Sarika Kedia

    Hi sarika,
    Welcome to SDN.
    1. first of all, such display of text,
       is not automatic.
       (it appears to be automatic)
    2. At design time,
       a) take one extra field for text
         and mark it as OUTPUT ONLY
    3. Then in PBO coding,
        call some module, and in that module
        write code
    4. The code should be to
       select from TEXT Table
       into the work area.
    EG. THE SCREEN TEXT FIELD NAME IS
    T510A-FIELDNAME.
    CLEAR t510a.
      SELECT SINGLE * FROM t510a INTO t510a
      WHERE trfar = FIELVALUE.
    5. This will take care of
       displaying the text value of that field.
    regards,
    amit m.

  • How to stop user from entering value for already existing data

    Hi ,
    We have a situation , where we need to give user a template for entering the data and then send it to the database. But we want that if user has already entered the value for a combination, then he should not be allowed to select the same combination again in that template.
    In other words , there should be write access but not update access.
    So I have two questions related to it:
    1. How to build report with giving user , the drop-down list of available members under each dimensions. (I know that we can provide list by writing all of them in excel and then using those values in drop-down)
    2. How to restrict the user for selecting the combination which has already been selected.
    Need your suggestion
    Thanks
    Sanjay

    Hi Sanjay,
    for your first question...
    you can build an EVDRE in a hidden area/sheet to display all values of a desired dimension in rows. Set Option SuppressDataCol to 'Y'. Also maintain MemberSet options to display only the values you need.
    Now you can reference your DD-box to the key- or description range.
    With some VBA-code you can refresh this EVDRE on Workbook_Open and also set the range (attribute ListFillRange?) of you DD-box dynamically to the RowKeyRange.
    Hope, it helps.
    Regards
    Steve

  • How to enter values for newly inserted field for maintenace view table

    Hi ,
    I have inserted new field for custom table which consits of maintance view..
    I want to put some values in to this newly inserted field..
    When i try to insert values bu useing se16,iam unable to view this newely inserted field..
    Can you please let me know how can i insert values to this newely created field
    Thanx,
    Parnith

    Hi Parnith,
    It is easy to use a table maintainance to enter values to a database table....
    if you have a table maintainace generator and you are not able to see the newly added field here is the reason
    Everytime you add a new field , the table maintainance needs to be regenerated..The reason is that the screen you are using in the table maintainance is created within a program with respect to the fucntion group and not directly linked to the table..whenever you change the table,the function group is not affected and changes are not reflected in the table maintainance , so you have to regenerate by utilities-> table maintainance generator in sell for that table..once you do it , the function group assigned to the table automatically creates a new one with the latest fields added
    Reward if helpful
    Regards
    Byju

  • Entering value for parent dimension

    Hello
    Once the dimension are loaded from OGL into Hyperion along with hierarchy (parent with child relation) is there a way to enter values (financial figures) for parent dimension ONLY into the dataform manually?
    If yes, can you please suggest a way how to go about entering values....

    You would probably need to use a target type version to enter at upper levels
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How to get pop-up for entering some value on it by user on Adobe INTERACTIV

    Hello
    We are developing a interactive adobe form,
    1) User would like get some popups for entering the values in the popup and clicking either OK or CONTINUE, pls. let me know how to handle this?
    2) can i get CALENDER, when user tries to input DATE entry? how its?

    Hi,
    You can create a subform overlapping you main body page and you can use this subform as pop-up.
    You just need to do following things:
    1. Create a subform over you main body page in the area where you want to show the pop-up, say SF_POPUP is the name of this subform.
    2. Give it a background colour(So that it looks different from the main page).
    3. On this subform SF_POPUP, create the fields you want the user to enter. along with these fields create a button 'OK' or 'Continue' as per your requirement.
    4. Write the below code on click event of this button:
        SF_POPUP.presence = "Hidden".
    5. On you main body area create a button to show this popup and write the below code on it:
       SF_POPUP.presence = "Visible".
    6. By default set this popup SF_POPUP as hidden from subform properties.
    Hope this will help for your first requirement, for your second requirement Arvind has already given a solution.
    Regards,
    Vaibhav

  • How does APEX check for null values in Text Fields on the forms?

    Hello all,
    How does APEX check for null values in Text Fields on the forms? This might sound trivial but I have a problem with a PL/SQL Validation that I have written.
    I have one select list (P108_CLUSTER_ID) and one Text field (P108_PRIVATE_IP). I made P108_CLUSTER_ID to return null value when nothing is selected and assumed P108_PRIVATE_IP to return null value too when nothign is entered in the text field.
    All that I need is to validate if P108_PRIVATE_IP is entered when a P108_CLUSTER_ID is selected. i.e it is mandatory to enter Private IP when a cluster is seelcted and following is my Pl/SQL code
    Declare
    v_valid boolean;
    Begin
    IF :P108_CLUSTER_ID is NULL and :P108_PRIVATE_IP is NULL THEN
    v_valid := TRUE;
    ELSIF :P108_CLUSTER_ID is NOT NULL and :P108_PRIVATE_IP is NOT NULL THEN
    v_valid := TRUE;
    ELSIF :P108_CLUSTER_ID is NOT NULL and :P108_PRIVATE_IP is NULL THEN
    v_valid := FALSE;
    ELSIF :P108_CLUSTER_ID is NULL and :P108_PRIVATE_IP is NOT NULL THEN
    v_valid := FALSE;
    END IF;
    return v_valid;
    END;
    My problem is it is returning FALSE for all the cases.It works fine in SQL Command though..When I tried to Debug and use Firebug, I found that Text fields are not stored a null by default but as empty strings "" . Now I tried modifying my PL/SQL to check Private_IP against an empty string. But doesn't help. Can someone please tell me how I need to proceed.
    Thanks

    See SQL report for LIKE SEARCH I have just explained how Select list return value works..
    Cheers,
    Hari

  • Date format is not working properly for Calender value help

    Hi Experts,
    We have two problems.
    1. We want to change the format of date displayed. We want format of dd-MMM-yy. For that we have created one Simple
    Type Dictionary Object with Displaying format dd-MMM-yy. It is working
    fine for the non editable UI. But once I apply the dictionary type
    object as data type for an input field, probem happens. Once the user
    choose a date from calender value help the value in the input field is
    coming like 01-011-12 not like 01-Jan-12.
    The date format is not changing from the calender. But if we set the
    display format of the dictionary object to MM-dd-yy or MM/dd/yy or
    dd/MM/yy or dd-MM-yy the format conversion from calender to input field
    is happening properly.
    The only problem once we put MMM in place of MM for the input field
    where user is selecting from a calender value help.
    2. We want to restrict users from entering the value manually for date input field. The user
    should be able only to enter value by selecting from calender value
    help.
    Please give suitable solution for these problems
    Thanks
    Shankha

    Hi Sankha,
    Please refer the links below:
    http://scn.sap.com/thread/1659463
    http://scn.sap.com/thread/1533443
    Regards,
    Manoj

  • Need to run the report for All Values when Null is passed in parameter

    Hi All,
    In my BIP report, I am using a parameter :asset with Type as Text, which means user will type the values for the parameter in the text box.
    Now, this parameter can take multiple comma separated values. I have a requirement to run the report for All Values when user doesn't enter any value in the parameter text box and if user enters any value(s) then the report will run for those values . The way, I tried to handle that in the query using couple of ways was :
    IMP : My Database is SQL Server
    where
    (table.asset = isnull((:asset), table.asset) or table.asset in (:asset))
    Now this works fine when I give a single asset number but when I give multiple values separated by comma like 123, 345 in the text box, then the statement fails saying 'encountered ,'
    I also tried simply
    table.asset in isnull((:asset),table.asset) -- but this doesn't work as it doesn't allow me to use in operater while using isnull and if i will use = operater then it won't work in case of multiple values
    Any suggestions on how can I handle this? Any help would be highly appreciated.
    Thanks,
    Ronny

    thanks for replying, but i tried this option too, it did not work for me, neither isnull nor coalesce. I mean, the solution work for single value but when i pass multiple values then separated by a comma then it doesn't work and shows me an error like "Incorrect Syntax ','". I am using SQL server as DB and bip is 10.1.3.4.1
    also please share the SR number, so i can also check the same.
    can there be any other work around to this?
    thanks,
    ronny

  • How to draw custom line in crystal report without manually entering value?

    Hi,
    I have a bubble chart and want to represent custom lines one in x-axis and one in y-axis at the value arrived based upon an internal calculation.There is an option to manually enter value for custom line.
    But i want to generate custom line at runtime without manually entering it.
    Can somebody help out?
    Regards,
    Felix

    Not sure what this has to do with Database Connectivity?
    Moved it to the Report Designer forum. If you are using code then specify what Report engine and version you are using and we can move it again.

Maybe you are looking for

  • Rg: down payments made

    Hi, User posted a down payment using transaction f-48 for an amount of 500000 to a vendor AAAA. and received an invoice of 400000 for that vendor AAAA. 400000 is nullified using f-44 for the existing amount of down payment 500000. now the user says t

  • Custom mailbox columns in Mail?

    I'm using Mail 3.5 on 10.5.6. I've been trying set up Mail to display different columns in different mailboxes in ON MY MAC section in the left hand nav panel. Example: I'd like to show Received date in one mailbox without showing Sent date, and vice

  • Corrupted TypeDef

    I somehow got a corrupted TypeDef. I made a TypeDef of a system boolean control (although I suspect the control type I made a TypeDef of is irrelevant, but just this one got corrupted). I placed a lot of these TypeDef-Controls on my FP. On the blockd

  • I have  os x 10.6.8 and i need 10.8, can in upgrade?

    I need to upgrade my Operating system but i do not want Yosemite, can I get Mavericks 10.8?

  • How to create match code object?

    Hi To all.. 1.......I created a match code object i.e select-options : s_mara for mara-matnr matchcode object mobj. when i execute the report the lower limit will assign to matchcode object. but when i click on search help it shows that no values fou