Plant missing in Auth object

Dear All,
We have created a new plant and transported to Quality Client. Also we have tested the newly created plant in MM01 & other transactions.
When maintaining authoriazations in role,we have taken drop down (F4) in WERKS field of M_MATE_WRK auth obj., but the required, newly created plant is not showing in the same box.
Kindly advise.

Hi Soumen,
Thanks for the information.
I don't know what is happening to cause this. It sounds like the config is OK which is the main thing.
You do have a problem with your Basis person. They obviously do not have security skills or training as 1. They should not be maintaining the value against the authorisation object. 2. There is absolutely no requirement for a value to appear in the F4 list for it to be able to be maintained in that situation. This is the main issue as there is nothing technically stopping the access to this specific plant being granted.
Hopefully someone will be able to shed more light on why the value is not appearing in the F4 lookup.
Good luck
Regards

Similar Messages

Plant missing in Authorization object

Dear All,
We have created a new plant and transported to Quality Client. Also we have tested the newly created plant in MM01 & other transactions.
When maintaining authoriazations in role,we have taken drop down (F4) in WERKS field of M_MATE_WRK auth obj., but the required, newly created plant is not showing in the same box.
Kindly advise.

Soumen Das MM wrote:
> I have checked, address has been maintained
just double check.
go with SE16 into table T001w and see if you have a value in field ADRNR
is this plant listed in F4 help e.g. in MMBE, MB51 or MM03?
Edited by: Jürgen L. on Aug 13, 2010 10:24 AM

Help need in creation of auth object

Hi all,
can anyone assist me in creating an auth object to restrict users based on plant.
I would appreciate i anyone of you could send me screen shots of the procedure.
My email id is
<b><removed by moderator></b>
Thanks
Venki

Hi,
Basically you can use derived role and restric users based on plant...
Other than standard objects do you want to create auth objects.
For more information on you can follow link. info on objects
http://help.sap.com/saphelp_47x200/helpdata/en/ea/e9b0054c7211d189520000e829fbbd/frameset.htm
Cheers
Soma

BI Role with Analysis Auth Object

Hi
How can i use Authorisation Object created in RECADMIN with all the list of Infoproviders in S_RS_COMP and S_RS_COMP1
So that user can perform mentioned action on the data providers mentioned in analysis authorization object.
As i need one place to list all the data targets user can access insted of maintaining in S_RS_COMP and S_RS_COMP1 and in Analysis Authorization object
Thanks in advance

Thanks Everybody for giving suggestions; I really appreciate alll your efforts.
I followed step by step book of kamaljeet and findout that , I was missing to add related info objects of the inforprovider .added those info objects to auth analysis object.
Now query is working fine without errors;
problem is i am not able to restict the query since it showing all the data ; i am trying to put only few values in "0wbs_elemt " .
I added 0wbs_elemt in my analysis auth object;
Clicked on 0wbs_elemt and kept values in value authorizations and also kept wbsh in hierarchy name , selected type 1, HI 0.
still i am unable to restrict the data;
Functinal consultants build WBSE set up on a hierarchy. like
18ICT-07/2011
      18ICT-07/2011-1
            18ICT-07/2011-1-AUDTM
                  18ICT-07/2011-1-AUDTM-01
            18ICT-07/2011-1-CETX_
                  18ICT-07/2011-1-CETX_-01
they want to restrict like if we are giving 181ct-07 then they want to access every thing under it;
same way like 181ct-08 etc etc..
looks like they want to restrict the date very granuler level like restriction on " Attribute Navigation   "
Can anybody please do let me know how can we achieve Navigation Restriction.
Thanks.

How to missing the S_BDS_DS object

Hi All, In the Derived role i was already given the object S_BDS_DS for display the gate pass and print and user take the printout from long time, but yesterday he was not able to take the printout, when i am checking /nSU53, the object was missing. My question is how to missing the object.
Thanks & Regards,
Satish

Hi,
You have to provide the the auth object S_BDS_DS give proper fields authorizations. Then save it and generate it. I guess it should not be missing on its own. try it out once again and do let us know if you are still facing the issue.
Thanks,
Avneesh

BW Authorizations/Report. Auth Object/KF's vs. Calc. KF's

We implemented a custom/reporting auth. object to protect key figures (1KYFNM) and it works well. The issue is that our user community never ceases to come up with new and even more creative requirements.
Let me illustrate the latest requirement:
I have locked-down access to certain key figures (let's call them 'KF A' and 'KF B') and therefore subsequently secure all combinations involving either one of the two meaning calc. KF D (KF A plus KF C) is locked down as well. I also need to mention that users are supposed to be able to create their own ad-hoc queries, which eliminates the option of limiting them to a query or set of queries that accomplish the following requirement.
There are certain totals, which are calc. KF's that the users are allowed/required to see even though they are not supposed to see what makes up these numbers (they should see calc. KF K which is made up of KF A, KF B, and KF H, etc. but not KF A and KF B).
Without the option of providing the users with rather static queries, I see another option as calculating 'KF K' (from the previous example) at the time of the load and just making it another key figure in the cube which then can be excluded from the auth. check previously mentioned based on the naming convention. The problem with that is that this will make reporting rather inflexible, increase load times as this calculation is rather complicated, and it will also create redundant information in an environment that is already experiencing substantial growth and volume.
Does anyone see any other solution?
Thanks,
Joerg

Jeorg,
I'm afraid that there's no special authorization handling for calculated key figures. To my best knowledge, the approach to create another key figure at data load time via transfer rules or update rules would be the only one can work. While this approach may not be flexible, but the load time should not increase significantly if you just add two key figure values into a new one.
If you find this is approach is unacceptable or it is a common requirement among BW community, you might consider submit such requirement through ASUG BI Group or via OSS development request.
Thank you for your question and patience.
Regards,
Amelia Lo
SAP NetWeaver RIG, US
SAP Labs, LLC

I am missing the add objects section from the fly out menu in Photoshop CS6. 3d workspace

I am missing the "add objects" section from the fly out menu in Photoshop CS6. I am in the 3D workspace of Photoshop. "Scene" is highlighted and I have clicked on the little fly out menu in the upper right hand corner of that panel. The whole section that should contain, Add objects, delete objects, duplicate objects, all the way through reverse order is missing. The add lights section above and render section below it is there. I am not new to Photoshop, but I am new to the 3D section of Photoshops work space.
I do know about creating a new layer in the layers tab and merging the objects together trick. But I kind of would like for the program to work correctly as I am sure that doing it that way will cause some sort of problems later in the work process.
Below are the specs of my system.
Adobe Photoshop Version: 13.0.1 (13.0.1.3 20131024.r.34 2013/10/24:21:00:00) x64
Operating System: Windows NT
Version: 6.2
System architecture: Intel CPU Family:6, Model:12, Stepping:3 with MMX, SSE Integer, SSE FP, SSE2, SSE3, SSE4.1, SSE4.2, HyperThreading
Physical processor count: 4
Logical processor count: 8
Processor speed: 2394 MHz
Built-in memory: 32651 MB
Free memory: 28832 MB
Memory available to Photoshop: 29606 MB
Memory used by Photoshop: 89 %
Image tile size: 128K
Image cache levels: 4
OpenGL Drawing: Enabled.
OpenGL Drawing Mode: Basic
OpenGL Allow Normal Mode: True.
OpenGL Allow Advanced Mode: True.
OpenGL Allow Old GPUs: Not Detected.
Video Card Vendor: Intel
Video Card Renderer: Intel(R) HD Graphics 4600
Display: 3
I am actually running windows 8. So I am not sure why it is saying windows NT. Anyway...
Photoshop says that my software is up to date. I use Photoshop daily and everything else works just fine. I have looked through this forum and there is someone else who had the same issue as me but their question was not given a solution. So that is why I choose to post it again.
Any help will be great. Thank you!
Mark.

I've made tests with four different 3rd party tools: OpenGL Extension Viewer, GPU Caps Viewer, Compute4Cash OpenCL Diagnostic Tool and Mudlord's Glide3x wrapper tester. All those tools report no problems with my video card driver and OpenGL/CL.
I have contacted nVidia and based on reports from the tools and visual tests from GPU Caps Viewer nVidia support doesn't see a problem with my driver.
I found sniffer_gpu.exe which according to Adobe Help pages is a kind of diagnostic tool and determines whether Photoshop uses the graphic card OpenCL or not. Here is the output:
Device: 00000000002B1BE8 has video RAM(MB): 1023
Vendor string: NVIDIA Corporation
Renderer string: GeForce GTX 650/PCIe/SSE2
Version string: 3.0.0
OpenGL version as determined by Extensionator...
OpenGL Version 3.0
Has NPOT support: TRUE
Has Framebuffer Object Extension support: TRUE
OpenGL ok
OpenCL ok, version=1.1 CUDA 4.2.1
Return code: 3
From Adobe GPU Sniffer tool, it looks OK.
On the other hand, I have your word that there is no problem with Photoshop not recognizing OpenCL for my card and that nVidia driver has problems. Can you justify this somehow? Perhaps you could provide more details on technical level, or another utility to run and extract details, to at least identify the problem Photoshop has and hopefully solve it on either side.
P.S. During tests there were two things which I noticed, but they are probably not related to the issue:
1. One tool reports the lack of Windows registry key SOFTWARE/Microsoft/Windows (NT)/CurrentVersion/OpenGLDrivers. But according to your previous statement, Photoshop only uses OS calls, no registry and according to nVidia, this key is not used in Windows 7.
2. During some tests GPU Caps Viewer reports that "OpenCL CPU not supported on the selected platform". This is not complaining about GPU, only about CPU. But Photoshop is complaining about GPU, so it shouldn't be relevant.

How can I limit/control the addition of auth. objects to security roles?

Checking the authorization object S_USER_VAL it seemed that it grants the ability to limit the addition of authorization objects, but I tried using a test ID in sandbox along with a test role, removing the object, creating ranges in order to limit to a certaing type of auth. objects and didn't work. S_USER_AGR will give me access to limit which type of roles I can modify, but I'm looking to restrict the addition of specific security objects to security roles. If anyone knows the answer to this please share! Thanks in advance for your help!!!!
Edited by: Armando Salas on Nov 29, 2011 7:41 PM

Hi Armando,
Try with auth.obj. S_USER_AUT. A suggestion. Search this objects with tcode SU24, for instance, for tcode PFCG and it gives a list with objects.
I hope this helps you
Regards
Eduardo

Can we control Work center group links using auth object UIU_COMP

Hello All,
We are running into an issue while doing our PFCG role configuration.
I need to know if we can control Work center group links in a business role through auth object UIU_COMP.
We can control Workcenter's but not 'Work Center Group Links'.
Here is what we did:
- We have a business role Z_RA_DEFAULT.
- The Nav Bar Profile SRV-PRO for this business role has some work center group links that are checked in menu and visible.
- I'm trying to find the values in the auth object UIU_COMP to restrict Work center group links.
- Even though the values Work center group links are in menu and visible,
I want to remove these Work center group links from the screen using the auth object.
- If we remove the check from in menu and visible in the business role the Work center group links disapper from the screen.
Right now this is only way we are able to controle Work center group links.
Question:
- Can I use UIU_COMP to restrict Work center group links?
- any another auth object that controle Work center group links?
- any document/ website / info available which tells us what can we restrict with auth object UIU_COMP?
- or any other way of doing this... like code change, user exit, ....?
Really appreciate your help.
Thanks,
Nasir

I am not sure if I have understood the issue correctly, but still what stops you from actually creating a clone business role to your existing business role and deactivating the in menu visible work center group links. Use this new business role for users who need to be prevented from viewing the work center groups links in question.
If you are going to use authorization objects to control the visibility wont it impact all users (still defeating your original purpose?)
Again apologies in case I have got the question wrong.

Is there a listing of all Auth.Objects for SAP and the discription for them

I would like to know if there is a listing of all the Auth.Objects for SAP out there somewhere??
Thank you,
Robert

> Auth.Objects for SAP out there somewhere??
You want all the customer objects as well in all SAP systems?
(Or just those in your TOBJ?)
PS: Please try the F1 key on fields to find their tables (or structures) and give the search a try as well...
Cheers,
Julius

S_PROJECTS auth object

I am trying to create a role for IMG display access only
I made ACTVT in all the Auth objects "03" or "display"
but in S_PROJECTS auth object, in "activity" there is no "display" , how do I make ACTVT in S_PROJECTS object "display"
Thanks
Message was edited by:
Jackofalltrades

Hi,
First of all all activities dont apply to all auth objects.(for example generate activity might not be applicable for all auth objects)
So SAP proposed what activities might be relevant to a particular Auth Object.
This information is in TACTZ Tables.
So perhaps u can verfiy the table and u would find that the entries displayed in ur Activity for S_PROJECTS would be the same values as are in S_PROJECTS values in TACTZ table.
HoweverYou can maintain 03 for this object too.
Select the pencil button for the activity field.
It will take u to a dialog box which contains activity fields.
Now if u dont find the 03 field there. Then right click on the screen and select more values option.
It would display all the activities.
However if the 03 field is not mentioned as a proposed activity for that Object by SAP (u can see this info in TACTZ) then make sure that u actually need this object for doing any display activites.
Hope this helps
Manohar

Auth Objects in ABAP Programs

Dear All,
how could I find the auth object being validated in programs?
Using SU24 I am able to find transactions checking auth object...but I am not quit sure sure if there are some other programs using/checking those auth objects.
In general I want to check one specific auth object where is used/checked.
I will appreciate your help.
Regards
FedeX

Please use the standard report RSABAPSC to check the authority check statements used in the program for any TCode. Also you can look into ABAP codes in more details by using the program RSANAL00.
Regards,
Dipanjan

APO roles and auth objects

Hello all,
Can someone tell me the most common used Tcodes, roles and auth objects in SAP APO - DP and APO-SNP security
thanks

I was going to type them out but luckily for me found this link to the DP & SNP auth objects - the info there is as detailed as anything else I have seen
http://help.sap.com/saphelp_scm50/helpdata/en/21/f6253b90e48743e10000000a11402f/content.htm
There is a list of useful APO transactions here
http://help.sap.com/bp_scmv241/documentation/SCM_AIO_BP_Function_List.xls
I can't help with the standard roles as I build my own.

CC5.2: Auth objects database table for legacy systems

Hi,
Where are the auth objects for legacy systems stored?
I mean, for SAP systems the auth objects ar stored in the tables SAPOBJ and SYSSAPOBJ.
Can anybody help me?
Thanks in advance

correct formatting...I wish you could edit your posts instead of reposting!
Just a performance tip--> since it looks as though you are looping through and performing the same statement many times, you should consider using a prepared statement:
PreparedStatement ps = con.prepareStatement("insert into Table1 (Col1,COl2,Col3) " +
"values ( ? , ? , ? )");
for (int k=0; j<array1.length; k++) {
if (array1[k] !=null)
tt = array1[k].getArray2();
for (int j=0; j<50; j++) {
if (array2[k] !=null)
ps.setString(1, tt[j].getString1);
ps.setString(2, tt[j].getString2);
ps.setString(3, tt[j].getString3);
ps.executeUpdate();You will notice a significant performance gain if you are looping many times.
Advanced--> huge performance gain if you use batch statement in this loop!
PreparedStatement ps = con.prepareStatement("insert into Table1 (Col1,COl2,Col3) " +
"values ( ? , ? , ? )");
for (int k=0; j<array1.length; k++) {
if (array1[k] !=null)
tt = array1[k].getArray2();
for (int j=0; j<50; j++) {
if (array2[k] !=null)
ps.setString(1, tt[j].getString1);
ps.setString(2, tt[j].getString2);
ps.setString(3, tt[j].getString3);
ps.addBatch();
//when completed all looping
int[] insertCount = ps.executeBatch();Jamie

Deletion of auth objects Corresponding to tcodes

Q1.
If a transaction is deleted from the menu wthr the Corresponding authorization objects are deleted.
Q2.Eg
What if the tcode MM02 is deleted from the role which has MM01/MM02/MM60/MM03 transaction codes, In this case some of the auth objects of MM02 are same as the other tcode auth objects, then how does deletion of MM02 from role ensure that only the corresponding object--> values are removed.?
Rakesh

Q1.
If a transaction is deleted from the menu wthr the Corresponding authorization objects are deleted.
It depends..
If the auth object's status is 'standard' and it is coming from only one t-code which is being removed, then it gets removed. If the status is 'changed', then it doesn't get removed.
Q2.Eg
What if the tcode MM02 is deleted from the role which has MM01/MM02/MM60/MM03 transaction codes, In this case some of the auth objects of MM02 are same as the other tcode auth objects, then how does deletion of MM02 from role ensure that only the corresponding object--> values are removed.?
No, the auth object won't get removed as that is coming from su24 from other t-codes also.
If different t-codes are bringing different field combination values, then the instance which is coming from MM02(if it is being deleted) will get removed, again assuming that the instance is standard and not changed.

Plant missing in Auth object

Similar Messages

Maybe you are looking for