Plant Authorization Query

Hi All,
I am having a report in which I am displaying data about the materials, description their cost etc.
Now my requirement is to check the authorization for the person executing the report.
Here , there are two plant and i have to restrict the person from the other plant from executing the report for the plant to which he doesnt belong for example there is a person ABC in plant 123 and a person DEF in plant 456.
Now ABC should not be able to run the report for plant 456 and DEF should not be able to run the report for plant 456.
Please suggest what should be the approach for this??
Thanks

hi,
Go to su21 and check the authority check for the plant
this has to be done by the basis guy as per the recoommendatuions of the SAP Security guy on the client side. you use the authorization obejct for P_WERKS
and they will manage the same
Regards
Shiva

Similar Messages

Goods issue against STO (plant authorization)

Dear All
I have an authorization issue when doing goods issue from Plant 1, against an STO raised for Plant 2.
User has MIGO authorization for 351mvt with authorization object M_MSEG_BWA;
Also he has authorization for all storage locations of Plant 1 and 351mvt with object M_MSEG_LGO; And plant authorization of migo is given for Plant 1 with authorization object M_MSEG_WWA
To issue goods from plant 1 to Plant 2 against the STO raised at Plant 2, what authorization does he require? At the same time he should not able to do GR for POs of plant 2 etc.
Thanks in advance

Hi
I was also in same impression but the SU53 screenshot is showing authorization problem with object M_MSEG_WWA for Plant 2.
User has been given the same for plant 1 (own plant)

BW Authorizations - Query variable with processing mode as "customer exit"

Hi,
Iam new to BW authorizations and have not yet worked on customer exit before. I was going through the documentation at various sites but I could not get the end to end description on how the query process( when using a variable for an InfoObject) works in case of customer exit.
Let's assume that I am using a query variable with processing mode as "customer exit" and at the exit I write some code to extract user's authorizations from a z table. if this is the case, then when an end user runs a query,how will the the system know what value needs to be filled in the variable for the requesting user. Are the user details also sent to the code along with the query variable? If so how. If I mis-understood the process then forgive me and let me know the correct process.

Hi!
welcome to SDN!
customer exit variables need programing by user. so if you create a customer exit variable, you got to right a program which extracts values into this variable. we can do what ever we want in program, SAP will not deal anything ´with customer exits.
with regards
ashwin
PS n: Assigning point to the helpful answers is the way of saying thanks in SDN. you can assign points by clicking on the appropriate radio button displayed next to the answers for your question. yellow for 2, green for 6 points(2)and blue for 10 points and to close the question and marked as problem solved. closing the threads which has a solution will help the members to deal with open issues with out wasting time on problems which has a solution and also to the people who encounter the same porblem in future. This is just to give you information as you are a new user.

MF70-Plant authorization control object -reg

Hi,
While giving MF70 authorization to user we need to control based on Plant
Once i give MF70 t code authorization its authorizing the user all plants by default
is there any object to control plant (WERKS) in MF70 ?
regards,
madhu kiran

HI
Check the Profile attached to the used id and also whicle creating or changing the roles attached to the used in PFCg check for MF70 check for REM Backflush >plant > aganist it give the plant for which you want to assign
I hope it will work
Check and revert
Regards
Anupam Sharma

Plant Authorization

Hi,
I was trying to restrict the user to get data for spefic plant . Is their a std approach to do this. I would like to have this restriction to custom programs/reports only.
Awaiting a reply

Hi,
Yes, it is possible with the authority check object. Here the basis/ function people will creat the Object and assigns the valid plants to it. we need to add the following code in the custome program to restict the execution to the specific plant.
         Authority check for Plant
      AUTHORITY-CHECK OBJECT 'Z_WERKS'(Authority check object)
                   ID 'ACTVT' FIELD '03'
                   ID 'WERKS' FIELD P_WERKS(Selection parameter)
      IF sy-subrc NE 0.
        MESSAGE e000 WITH
                    'No authorization to Division:'(054)
                    i_spart.
      ENDIF.
Hope this will help you.
Regards,
Satya

User authorization query/report

Has anyone determined a method of printing a query or report of all authorizations for a user? From reading SOX requirements, this appears to be standard in almost every company yet there does not appear to be a way to do it in Business One.

Hi,
if you want to print all authorization for all users so I think that the only way is do it through tables and sql query. The base table is HEM5.
hope it helps
Petr

BEx Analyzer / authorizations / query search

Hello everyone
Today I have a problem with my authorizations for the the BEx Analyzer.
The technical name of my InfoArea is VCOPA.
I have a number of queries with the technical name VCOPA_MM001 / VCOPA_M01_X0001 / and so on.
When I open the BEx analyzer and search for queries (wildcard *) I get only my queries with the technical name VCOPA. So far so good... Unfortunately the Bex search results display additionally several query views (like 0D_DX_M01_Q0001_V05) and that is bad. So how can I stop this?
My authorization settings:
S_RS_COMP
ACTVT: 03, 16
RSINFOAREA: VCOPA*
RSINFOCUBE: VCOPA*
RSZCOMPID: VCOPA*
RSZCOMPTP: QVW, REP
S_RS_COMP1
ACTVT: 03, 16
RSZCOMPID: VCOPA*
RSZCOMPTP: QVW, REP
RSZOWNER: *
Thanks in advance..
Regards, Alex
Edited by: Alexander Stettler on Mar 5, 2010 2:50 PM

The roles are customized...
In addition to the listed authorization objekts (s_rs_comp / s_rs_comp1) I have the following objekts in use:
S_RFC
ACTVT : 16
RFC_NAME: *
RFC_TYPE:   FUGR
S_TCODE
TCD: RRMX
S_GUI
ACTVT: 60, 61
S_USER_AGR
ACTVT:     03
ACT_GROUP: *
S_RS_AUTH
BIAUTH: 0BI_ALL
S_RS_FOLD
SUP_FOLDER: X
S_RS_XCLS
ACTVT: 16
RSXCLSID: VCOPA*
RSZOWNER: *
Edited by: Alexander Stettler on Mar 10, 2010 11:25 AM

Plant authorization for Same Co. Code

D friends,
We’ve 2 plants in the same co code. Requirement is that user in Plant 1 should not have the authorization to enter Plant 2 in his Sales Order and vice-versa. We’re not able to control this through std. role matrix.
Hence pls suggest how this restriction should be implemented?
Thanks.

Hi R Sgr,
You talk to your basis guy to define the role for particular user
or
Program SAPMV45A , you can find the Include MV45AFZZ
Try in this user exit
Regards
Ramesh

Cross-Plant Authorization in VF03

Hi Experts,
One user has authorization to Plant - X which is not assigned to user in VF03 TCode.
When we checked VF03 TCode is not calling Plant Org. Level itself.
There is any way to restrict this?
How can a user have authorization to work on cross-plant which is not required by VF03 Tcode ?Whether it can be possible by any other Org. levels?
Note : User is having VF03 Tcode in Role 1.Plant - X is present in Role 2 which is assigned to him.So the user can able to post in Plant - X?
Kindly help me to solve the problem.
Regards,
Karthika

HI,
Please check whether VF03 is looking for Plant (WERKS) or Sales Org (VKORG). I think it should look for the latter i.e. VKORG. If its looks for VKORG then restrict using that. It is wont suffice if it is controlled via Plant or WERKS. Please check first via Trace what the transaction is looking for. It should be Sale Org and control with that.
Regards
Aveek.

Authorizations Query

Hi Experts,
I need to copy user authorizations from one database to the same user in another database.
Is theere maybe a query that I can run to do this?
Appreciae the help.
Thank you.

Use the copy express add on to copy authhorizations from one database to another database.
it is not recommended to use sql to copy authorizations and SAP has not given the right to get the auhtorization table,
so use copy express addon.
this will solve ur problem.

SAP Authorization Query

Hi,
Iam working in SAP Authorization team. Recently we had one issue, and it is long days back we have added one single role to many of the composite roles. But suddenly last week that single roles got deleted in some of the composite roles only from production system.
Could you tell me how it is happened?
Thanks!

> This is because one of your team member have transported the single role with the same role name frm development to production unknowingly thats reason it been overwritten in prd server
Then I think the changes should reflect even in DEV & TEST as well. But here the issue is only in PRD which is very surprising.
Regards,

Authorization Query

Hello, I have created a dashboard in Dashboard design but using old BW connection. I gave my user a link after executing it on my side. When she tried to click on the link, it gave an error message saying "User XXXX is not authorized to execute Dashboard XXXX". Do you know what type of authorization is required?
Thanks.

Hi
You need some pre-requisite authorizations to access SAP BW data.
To run the BO reports against SAP BW system, end uses required below minimal set of authorizations in the SAP BW system.
Please find the below link for more info.
http://scn.sap.com/community/semantic-layer/blog/2014/06/19/pre-requisite-authorizations-in-sap-bw-side-before-develop-the-universe

Cfolder authorization query

HI
Let's say I have created a collaboration folder for one of my shopping cart . By default, my user id will be assigned administrative role to the cfolder . However , I would like to remove my userid in the cfolder authorization and in place assign roles to the cfolder . Anyone has any idea to go abt it ?

Hi,
I've the same problems and I've done the activities you have written, but the results was bad.
With authomatic creation of collaborative area (by the bidder that create a response to a Bid Invitation), the only method triggered is COL_WORKAREA_CREATE_POST.
Moreover, the probles are in the authorizations gives to the single users: the system inherit the same from public area and it's impossible (for me) to remove single authorizations from private area.
CFX_ACO_API_ACTIVITIES_SET and CFX_ACO_API_ACTIVITIES_RESET work with ID of public area (top most level).
Could you please give me a solution ?
Regards
Leonardo

ACS authorization query

Hi,
I would like to know what are the configurations required in Cisco ACS for authorization.
I have done the foll configurations in the switch.
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
radius-server host 10.240.252.247
radius-server key greenland.123
Thanks.
Rgds.,
Sack

Hi Narayan,
Sorry, I pasted the wrong configurations in the forum.Actual configurations in the device are as follows:
aaa authorization config-commands
aaa authorization exec default group radius local
radius-server host 10.240.252.247
radius-server key xxx
I would like to know what are the configurations required in the ACS server with respect to authorization as we are using radius.Do we need to add anything else apart from adding the client in ACS..?
Thanks.
Rgds.,
Sachin

Hierarchy Authorization Node F4 help

Hi Gurus,
I have created an fixed hierarchy + variable hierarchy node combination and set the authorization for 0profitcenter. But the problem is when run the query in the RSECADMIN analysis, and click on F4, it just shows me the allocated nodes alone,which is perfect. But when i run the same query in portal,,,the F4 functionality shows the entire hierarchy ,but then the screen variable is defaulted with the hierarchy node value ( which is fine).But am confused as to why the F4 shows the entire hierarchy,,, because this would enable other the user to see other profit centers as well is not good.
Can someone help me out on this,,,,its on BW 7,,,
thanks in advance,,

List of vendors can be restricted through user exits,
For plant authorization object for purchase order is M_BEST_WRK &
For purchase organization object is M_BEST_EKO,
You can also personalize header & item level settings in purchase order,So that option for searching in
F4 Selection can be avoided.
Best is to create transaction variant for ME21N using SHD0 for respctive fields.
Edited by: Jeyakanthan A on Apr 9, 2010 10:09 AM

Plant Authorization Query

Similar Messages

Maybe you are looking for