PFCG manually created Authorizations synchronized to Menu

Hello Colleagues,
one question please regarding role creations under PFCG.
The normal way is first under "Menu Tab" to create the user menu.
The authorization objects related to your design at Menu Tab will automatic create under Authorization Tab.
But what about if create first your manually authorizations (objects) under Authorizations Tab and afterwards you will have your manually created authorizations und Menu Tap?
Is there a synchronizing passable
After I finalize my manually authorization design at Authorization Tab and I create afterward some objects under Menu Tab this will update (destroy) my manually design under Authorization Tab.
What is the best practice way here please?
Maybe sufficient documentation are available for this point?
Many thanks in advance!
Regards,
Jochen

Hi,
I would suggest to ask this question on security forum. You'll get much better feedback there. The best practice is to not use manually created objects. You should always associate them to transaction or something else. It won't update your manually inserted objects because PFCG does not know their relation to transaction.
Cheers

Similar Messages

PFCG issue - removing transaction codes from menu and not clearing up the authorization tab

I’m using SAP ERP version ECC6 and EHP5 and also we have updated our system with the PSCD FI module.
I’m having the following issue in PFCG transaction code - I have created a new single role by copied other or from scratch and added few transaction codes into the menu. After that, I went in the authorization tab using the "Change Authorization Data" and I felled all the missing information until the role was green out. I generated the role then I totally went out. I come back to the same role that I created earlier and I did removed all the transaction codes from the menu and I did find the following:
- the Authorization tab light didn't change from green to red
- I went into the Authorization tab by "Change Authorization Data" and a part of the objects were still in.
Normally behave should be:
- when we remove one transaction code from the menu the light from Authorization tab should change from green to red. When you empty the menu then the light color should change also, but the authorization tab should be also empty.
Could please give me some idea how to do it next?

Hi Gabriela,
Most of the times standard roles contains manually added authorization objects. When ever you are creating a new role by copying the existing standard role so by default, these objects will come in to new role.
Now, coming to your role. After removing t code from role if nothing has changed in Authorization tab means.
Here are the possible reasons.
1. The t code which you have removed might not have any checked and maintained authorization objects, that's why your Authorization tab still in unchanged.
2. Rememeber, when ever you are adding or removing t code from menu always use expert mode for profile generation option along with "Read old status and merge with new data" Option.
This will bring the all checked and maintained data for each t code.
3. After removing the t codes from menu and if you generate the Authorization tab by using expert mode option still if you find authorization objects means, those are manually added authorization objects that's why those were not removed.
I hope this will give some clue to your issue.
Thanks,
Siva

Create Authorization Profile Manually

Dear Experts,
I want to know the Tcode through which I can create Authorization Profile.
I know that through PFCG we can create a Role and from there we can generate a Profile, But how can i create a profile without creating a Role.
I think this is possible because the Profile : SAP_ALL does not have a role.
Regards

>
Mishra.Manas wrote:
>
Tcode through which I can create Authorization Profile
>
> It's actually the task of a SOX or Security Consultant. If you have rights to acess SU02 you can do it.
> Go to Profiles------>Create.
> Here you can create a profile without a role being generated.
It is nothing to do with a SOX consultant unless that person is also a security administrator.

How to Create authorization WAD template for BW3.5?

Hi All
How To create Authorization for a Web template in Bw 3.5 ?
I have a requirement to restrict a particular Web templated in bw 3.5 So that all the end users should not be able to access that template only a particular user should be allowed to view the template?
I cant find any authorization object for the WAD template in bw 3.5 ?
Can anyone tell me the procedure to include the WAD template authorization?
Should i include the authorization template in the Menu - in pfcg??? . i have added the template in the Menu in the PFCG but still it didnt work.
Thanks

As you said, the authorizations for the WAD templates should be given in PFCG roles.
But you have to include the access/authorization details in the authorization objects. WAD templates have been created with including info/multiprovider, info cubes right.. first you have to include these objects inside the Role in PFCG.
S_RS_COMP,S_RS_COMP1,S_RS_MPRO,S_RS_ICUBE.
just assigning WAD template in the menu of the roles is to display when you login with the userid.
Please request your BASIS folks to do the same.
Hope this would help you.

How to create authorization role for just displaying query prefix Q and X.

Hi Expert,
I hope someone can help me on how to create authorization role for just displaying and executing BEX Queries prefix Q and X. I'm currently using SAP BI 7.1.
Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
-->Manually Business Information Warehouse
--> Manually Business Explorer - Components
Activity : Display, Execute, Enter, Include, Assign
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : *
Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
--> Manually Business Explorer - Components
Activity : Display, Execute
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : Q* , X*
Type of a reporting component : Query
But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
Please assist. Very much appreciate your help. Thanks.
Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

Question close. This issue has been resolved.

How do I create a drop down menu with Code Snippets and Flash CS5?

Hi
I am wondering how to create a drop down menu using the Code Snippets and CS5?
There are some older tutorials out there and it would be nice if someone could create an updated drop down menu tutorial, and it might be me doing this after I have figured out the best and easiest way to create one, but before that I need some pointers.
Thanks!
Have a great day!
Paal Joachim

You can use panel widget to create manual menu where set to show target on rollover.
Something like this :
http://muse.adobe.com/exchange-library/menu-vertical-accordion-widget-1
http://muse.adobe.com/exchange-library/tiptop-navigation-menu
Thanks,
Sanjit

How do I create a drop down menu with multiple items in Adobe Acrobat 9?

I am trying to create a drop down menu with four items within a field box. When I try to do this
the font is too big and it just doesn't fit.

You can use panel widget to create manual menu where set to show target on rollover.
Something like this :
http://muse.adobe.com/exchange-library/menu-vertical-accordion-widget-1
http://muse.adobe.com/exchange-library/tiptop-navigation-menu
Thanks,
Sanjit

How To Use Dynamic Menus To Place Manually Created Jspx Pages On Sub-Level

JHeadstarters,
Back on the JHS trail and could use some help.
I started using dynamic menus (see section 9.2 JHS Dev Guide) to setup a custom menu structure and found it could not be easier however I need to solve 2 issues;
1. How to get more than 2 levels deep on the menus (parent, child, grand-child, etc.)? In the menu structure setup I have created a menu that is 3-levels deep however when it runs you only get 2 levels. Perhaps a template needs to be changed.
2. How can I assign manually created jspx pages to sub-level menus?
Scenerio;
I have JHS generated pages *** AND *** manually created pages. Using dynamic menus to place the JHS genned pages works fine, the problem is how to do it with manually created pages.
Using Dynamic Menu's I created a top-level menu tab named "warp-core", below it on the next level I have two sub-menus, one named "search" and one named "form" for displaying the results of the search and modifying the rows (don't ask me why they are seperate).
The problem is how to assign the manually created jspx pages to those sub-menus? Or am I going abouth this the wrong way? Perhaps I could use JHS to generate seperate search and display pages.
Thanks!
BG...

Bill,
1. Yes, you need to decide yourself how and where you want to render this third level menu. You then create a region file similar to dynamicMenu2Tabs.jspx, just replace the references to level2MenuItems with level3MenuItems. Then create a custom template to call this menu 3 region file.
For example, you could create a bulleted vertical list for level 3 as illustrated in section 9.1.3 of the Developers Guide (that example is with static menu, but you can use similar technique for dynamic menu)
2. Instead of a group name, you can specify a JSF Navigation action in the menu administration application. So, you create a global navigation case to your custom page, and you enter this navigation case id in the menu admin app.
Note that if you want to generate separate search pages, you can do so by setting the advanced search property to "separatePage".
Steven Davelaar,
JHeadstart Team.

Creating Authorization groups for material types

Hi All,
I have a requirement to create Authorization groups for different material types we have in our company. Basically these are intended to restric the users from accessing the material master. Different material types needs to be assigned to differnt group of users.
So if we can create couple of Authorization groups, then I am thinking of assigning the material types to these groups.
I went to SPRO---Logistics general ---Material master -
Tools --- Maintain authorization and authorization profiles. TCODE : PFCG
Is this the right path?
Please advise
Shane

Hi All,
I don't think SPRO---Logistics general -Material master- Tools --- Maintain authorization and authorization profiles is the right path to create new authorization groups.
Can anyone explain how to create new authorization groups for different material types. The purpose is to create a role and assign this auth. group to this role and provide that security role to specific users.
Regards
Shane

Need FM which create authorization for a Role

Hi,
i neeed to create authorization for the roles. can anybody tell me , is there any FM to create authorization for a Role.
it is done through PFCG transaction.
i need a FM which creates authorization for a Role.
Thanks in advance

Hi Sami
Try this link.
Re: Programatically create Security Profiles via BAPI/FM in R/3?
Regards
Neha

Manually added Authorization object

All ,
What is the impact for manually added authorization objects in the roles after the system upgrade??

My 2 cents, since I don't see any replies.
I try to avoid manual auth objects on a role as much as possible. One problem with manually auth object is in PFCG, it will not give a reference to what transaction the auth object came from. Unless thoroughly documented this can be an audit issue.
In regards to upgrades, I don't this it will have any affect. It is usually the tcodes that are affected.

SaveForWeb file size difference of scripted versus manually created

I've got a VB script that uses Save For Web to make thumbnail images from a folder of larger images. Most perplexing is the file size difference of these thumbnails using the script versus making them one by one manually.
The thumbnails are 180x120 pixels. Using Save for Web from the file menu to manually create jpegs (50 quality, optimized, no profile, no progressive) the typical resultant file sizes are 9 to 14 KB. Using the script, the file sizes end up from 20KB to 30KB! Additionally, if the original file has any metadata (caption, contact info, copyright, etc) the manual process strips all the metadata out except the copyright notice, which is fine. Using the script however, all metadata remains intact!!
Can anyone explain why this is occurring? I'd sure like the smallest file size possible. Am I missing a parameter in the ExportSaveForWeb options?
Here's this save section of the code:
     Dim sfwOptions As New ExportOptionsSaveForWeb
     sfwOptions.Format = psJPEGSave
     sfwOptions.Quality = 50
     sfwOptions.Optimized = True
     sfwOptions.IncludeProfile = False
     SaveFile = OutputFolder & ImageNumber & ".jpg"
     docRef.Export SaveFile, PsExportType.psSaveForWeb, sfwOptions
Thanks in advance for any insights and guidance.
(BTW, I get a similar file size disparity with javascript too although they end up a tad smaller than the VB script, go figure...)
Tom
PS - The VB Scripting Guide has the wrong name for the Export Document method. It is not "ExportDocument" but rather, simply "Export". Hopefully this tip will save someone hours and hours of frustration and confusion ;-)

Eureka, I found the issue! Now pass the ********...
In the options in the Save for Web window (the two small gray arrows next to the Preset drop down list), on one of the panels there is a checkbox to Preserve Metadata. This was unchecked. Apparently, it was not seen as unchecked when running the script yet behaved accordingly when I did a manual save. Checking this box and clicking apply, run a manual save, then unchecking the box and clicking apply appeared to "reset" it to not save metadata (other than copyright info) either when saving manually or then using the script.
Case closed.

How to manually create a transport for table T604 update?

Hi Gurus,
I upated table T604 with transaction VEU4 - but at the time if saving it did NOT prompt for a transport request
Now, I have to move the data (updated table ) to quality box / prodcution
Instead of using again trx VEU4 in quality / prodcution boxes, I want o create an empty transport manually and then assign table T604 to that transport and move to next box.
Is that possible ? If so, can sombody explain the steps, please : how to manually create a transport and assign ojbects (table object) to it
Thanks,
SM

Not sure how you have updated T604 in VEU4, but if you go to SM30 transaction with T604 table and click Customization, then it will take you to the place in SPRO where the table is maintained. From there, use the menu Table View -> Transport and create a transport request. Then select the entries you need to transport (all, if necessary) and go to the menu Edit -> Transport -> Include in Request.

Is there a way to create a drop down menu with an automatic answer dependent on what is chosen?

Is there a way to create a drop down menu with an automatic answer dependent on what is chosen? An if-then statement perhaps? I am looking to add over 100 drop down options and would like to have a message automatically pop up depending one which option they chose. Thank you.

Hi,
You would use the skip logic to conditionally show form items based on the selection within the drop-down menu. Here's a link to a description of the feature in our help documentation:
http://help.adobe.com/en_US/formscentral/using/WSd789abd336388b1642c7fce012da94afe4f-8000. html#WS0faeceb8c23f5d60-774f03e3131ddc76d7d-8000
Regards,
Brian

Trying to create a drop down menu in numbers...please help

Hi
Can anyone indicate how to go about creating a drop-down menu.
Thanks in advance

Hi Meela,
Welcome to Apple Discussions and the Numbers 08 forum.
Check page 66 of the Numbers User Guide supplied with your copy of iWork. The guide refers to them as "pop-up" menus, so a search using "pop-up" will be more successful than one using "drop down".
Essentially the process is:
Click on the cell to select it.
Open the Inspector and choose Cell Format (icon is a cell containing 42)
Click the Cell Format menu and select Pop-up Menu from the bottom of the list.
Double click an item in the list to edit it. Click the + button to add an item, the - button to delete the selected item.
Done.
Regards,
Barry

PFCG manually created Authorizations synchronized to Menu

Similar Messages

Maybe you are looking for