Project based authorization

Hi all,
We have multiple projects in our SOLMAN, we have applied role-wise authentication as per user profile.
How do we authorize/ restrict a specific user to a specific project.
Somnath

Hi,
I hope this note should resove your problem
[Note 638781 - Project authorization via partner functions|https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=638781]
Other way like use the object S_PROJECT which on SAP_ALL profile and adjust accordingly.
Please check
Please close the duplicate thread.
Thanks
Jansi

Similar Messages

Person responsible based Authorization in Projects is not working for me

Hi,
Does 'Person responsible' based authorization for WBSE works for the WBS element only, or for the hierarchically sub-ordinate non-WBS objects (meaning Networks, Activities, Materials etc) as well?
Details:
(Authorization objects: C_PROJ_VNR and C_PRPS_VNR)
-- User1 is assigned with role TESTROLE1. This role has the Project manager based WBS & project authorization objects, with person number 101.
-- User2 is assigned with role TESTROLE2. This role has the Project manager based WBS & project authorization objects, with person number 102.
Following sample project is created by a super-user:
PROJ123 (Details: person responsible - 101)
WBS-1 (Details: person responsible - 101)
    WBS-1/1 (Details: person responsible - 101)
      NETWORK1
      ACTIVITY11
      MATERIAL111
      MATERIAL112
    WBS-1/2 (Details: person responsible - 102)
      NETWORK2
      ACTIVITY21
      MATERIAL211
      MATERIAL212
Now the requirement of super-user is that WBS-1/1 and its subordinate elements (Activities, Materials etc) should be editable only by User1. And similarly, WBS-1/2 and its subordinate elements should be editable by User2 only.
My issue:
Although WBS-1/1 is not accessible to User2, BUT User2 can edit the subordinate elements (NETWORK1, ACTIVITY11, MATERIAL111, MATERIAL112) of WBS-1/1. I do not want User2 to have edit access to subordinate elements of WBS-1/1.
Above issue is with User1 for WBS-1/2 as well.
Hope I am clear in explaining my issue. Can anyone please help me understand the standard authorization concept of Person responsible based roles. I suspect that I am going wrong somewhere but I am not able to identify the problem.
I want to allow access of a part of project to one user, and another part to some other user. And I do not want to go for an ABAP option if I can do above using basis authorizations.
(Above mentioned problem is not just with part of projects, but with a complete project as well.)
Hope to see some quick replies. Thanks in anticipation.

Thanks for the inputs Sreenivas.
Are you aware of any authorization objects which can restrict access to Networks, Activities, Material components and Milestones, using 'Person responsible' or any other suitable field? I hope you got what I am looking for.
Restricting WBSE based on 'Person responsible' without restricting sub-ordinate elements is not much useful according to me. It helps only with simple project structures (having only WBSE) and nothing much. Right?
Thanks again

Row-/instance-based authorization

Hi,
I'm looking for ways to implement row-/instance-based authorization using Toplink 9.0.4+ and Oracle DB 9.204. The domain objects are represented by standard Java objects (POJO's) not entity-beans.
My question: what are well-know working approaches to implement this? How did you do that in a project using Toplink and POJO's?
I guess Label security/Virtual Private Databases would be interesting to consider. But I wonder if it's possible to use that with Toplink. Issues that I see right now:
- how to propagate the credentials of the user to the database and still use connectionpooling?
- can Toplink generally make use of Label Security
Another approach would be to implement a JAAS extension following the lines of the article "Extending JAAS for class-instance authorization" http://www-106.ibm.com/developerworks/java/library/j-jaas/
I expect this can easily result in a separate query per object. Which probably results in atrocious performance.
Or this could be implemented by an aspect. But still this would probably necessitate n+1 queries for n objects. In other words: this would still let the appserver do the constraining of results while that is right task for the database of course.
Your comments and advice are highly appreciated,
Joost de Vries
the Netherlands

The main decision to make is whether to handle the instance level security in the application, or the database.
As you mentioned there are many ways to handle security in the application.
Oracle database supports VPD and OLS for row level security. The TopLink 10g 10.0.3 preview has added support for this refer to:
http://otn.oracle.com/products/ias/toplink/preview/index.html

Error while deploying the ADF task flow project based on a SOA human task

Hi,
I created a SOA project with a BPEL process containing Human task, deployed it and could able to test it successfully. I created ADF task flow project based on the Human task created in the earlier project and tried to deploy it. It is giving the following error. The idea is to display the task details in BPM worklist.
[04:10:53 PM] [Deployer:149034]An exception occurred for task [Deployer:149026]deploy application RevisionApprovalMgmtTaskFlow [Version=V2.0] on soa_server1.: null.
[04:10:53 PM] Weblogic Server Exception: weblogic.application.WrappedDeploymentException
[04:10:53 PM] See server logs or server console for more details.
[04:10:53 PM] weblogic.application.WrappedDeploymentException
[04:10:53 PM] #### Deployment incomplete. ####
[04:10:53 PM] Deployment Failed
The server log shows this detailed error.
java.lang.IllegalArgumentException
     at oracle.xml.xpath.JXPathExpression.evaluate(JXPathExpression.java:178)
     at oracle.xml.xpath.JXPath.evaluate(JXPath.java:288)
     at oracle.security.jps.internal.config.xml.XmlConfigurationFactory.initialize(XmlConfigurationFactory.java:425)
     at oracle.security.jps.internal.config.xml.XmlConfigurationFactory.getConfiguration(XmlConfigurationFactory.java:149)
     at oracle.security.jps.internal.config.deploy.CredentialStoreDeployer.getCredentialStore(CredentialStoreDeployer.java:56)
     at oracle.security.jps.wls.listeners.CredentialDeployment.migrate(CredentialDeployment.java:83)
     at oracle.security.jps.wls.listeners.JpsApplicationLifecycleListener.migrateAppCredential(JpsApplicationLifecycleListener.java:137)
     at oracle.security.jps.wls.listeners.JpsApplicationLifecycleListener.preStart(JpsApplicationLifecycleListener.java:78)
     at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.run(BaseLifecycleFlow.java:277)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListenerAction.invoke(BaseLifecycleFlow.java:194)
     at weblogic.application.internal.flow.BaseLifecycleFlow.preStart(BaseLifecycleFlow.java:57)
     at weblogic.application.internal.flow.HeadLifecycleFlow.prepare(HeadLifecycleFlow.java:279)
     at weblogic.application.internal.BaseDeployment$1.next(BaseDeployment.java:609)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:37)
     at weblogic.application.internal.BaseDeployment.prepare(BaseDeployment.java:185)
     at weblogic.application.internal.EarDeployment.prepare(EarDeployment.java:53)
     at weblogic.application.internal.DeploymentStateChecker.prepare(DeploymentStateChecker.java:154)
     at weblogic.deploy.internal.targetserver.AppContainerInvoker.prepare(AppContainerInvoker.java:60)
     at weblogic.deploy.internal.targetserver.operations.ActivateOperation.createAndPrepareContainer(ActivateOperation.java:197)
     at weblogic.deploy.internal.targetserver.operations.ActivateOperation.doPrepare(ActivateOperation.java:89)
     at weblogic.deploy.internal.targetserver.operations.AbstractOperation.prepare(AbstractOperation.java:217)
     at weblogic.deploy.internal.targetserver.DeploymentManager.handleDeploymentPrepare(DeploymentManager.java:747)
     at weblogic.deploy.internal.targetserver.DeploymentManager.prepareDeploymentList(DeploymentManager.java:1216)
     at weblogic.deploy.internal.targetserver.DeploymentManager.handlePrepare(DeploymentManager.java:250)
     at weblogic.deploy.internal.targetserver.DeploymentServiceDispatcher.prepare(DeploymentServiceDispatcher.java:159)
     at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.doPrepareCallback(DeploymentReceiverCallbackDeliverer.java:157)
     at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.access$000(DeploymentReceiverCallbackDeliverer.java:12)
     at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer$1.run(DeploymentReceiverCallbackDeliverer.java:45)
     at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:516)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Apart from these, I have Model and View Controller projects in the application. If I create the ADF task flow based on a Human task in another sample application, it works fine. Only in this application, it does not work. Not sure what this error is. Any ideas?
Thanks,
Manoj

What I suggest is go into EM and undeploy this composite and all versions. (Only if you don't want the existing ones). Then redeploy your process. This will avoid the version conflict and create a new version. 1.0. Then the next time you try and deploy you need to either specify a new version or check the box to say the version can be over written.
cheers
James

Budget error while issuing stock to the project based production order

Ours is project based Engineering company, we mfg euipments for the client which is part of the project.
We define separate WBS element for equipment to be manufacture & create reservation under this WBS element.
Secondly we follow production process through PP & define BOM for equipment which contains component rquired to mfg the equipment. To control cost(budget) component group wise we create separate sub WBS element for each component group(plates, motors etc) under above equipment WBS element
Kindly refer e.g.below
1. Equipment (Finished code) to be manufacture is attached on WBS MYC-210952-06-03
2. Production order(1003780) created with reference to above WBS element
3 Material procured under WBS MYC-210952-06-03-001
4. Stock available under WBS MYC-210952-06-03-001
We would like to issue material available under MYC-210952-06-03-001 to production order which is attached to WBS MYC-210952-06-03. (Tcode MB1A)
System allows to issue stock, but gives budget error.
Is it possible to transfer budget auto in the transaction MB1A itself from MYC-210952-06-03-001 to MYC-210952-06-03 or what is the best solution available for above situation.
Kindly confirm.
Thanks & regards
Sanjay Karnekar

Hi Sanjay,
You have consumed a budget at lower level WBS for material procurement. And at upper level you want to do stock transfer.
But while doing budget allocation you have distributed the budget from Upper level to lower level so there is no distributable value is avaialble at upper level for the amount of the materail stock you want to transfer.
In this either you have to keep your all budget values at upper level where your doing equipment aeembly and not distribute the budget further at lower level.
Now you alredy this so you cant do anything.
Now you have following option available with you. You have perform following activity by the given sequence.
Deactivate the Budget check by CJBW
Do your stock transfer
Do budget return by CJ38 from level WBS to upper level WBS
Now Activate the budget check by CJBV.
regards,
Pradeep

PS and Project Based Accounting

Is PS and Project Based Accounting one and the same? can you please explain more about the above in simple terms? thanks
Ganga

Hello,
We have a PS project soon in Incasol organization. By the way, the project leader who belongs to Incasol can help you. I am sure, because this person will earn
63400u20AC the first year (2008)
67000u20AC the second year (2009)
Best Regards.

Project Based MRP run issue

Hi Friends,
There is one issue reg. Project Based MRP Run as below :
We are running MRP through MD51 (Project based MRP run). For this we are assigning FG material code under respective WBS Element which generates Network reservation with movement type 281Q which is base of MRP run in MD51. After MRP run we get planned order generation and then convert it to Production order and execute Production Order to receive Project Stock after GR.
After receiving Project stock and then selling it through Post Goods Issue through SD cycle, project stock is consumed but network reservation is not getting closed which results in again generation of planned order if MRP is run again.
I need your valuable inputs if we are missing any configuration setting which can set Final issue indicator in reservation while Posting Goods Issue (PGI) in SD because FI indicator checking will only ensure reservation doesnu2019t take part in planning again.
Your earliest reply will be highly appreaciated.
Regards,
Tejas

Hi Vivek,
Thanks for your reply. Actually my issue has got resolved the way suggested by Mario Adler.
Hi Mario,
Thanks for your solution. PGI through Project is working fine for me.
Hi Krishna,
Follow the procedure as suggested by Mario which will resolve your issue.
Once again thank you all for spending your precious time to respond my query.
Regards,
Tejas

Capturing using a system-based setup vs. project-based setup

Trying to build a library of my 50 DV tapes on an external 4T hard drive and I am supposing that I need a system-based setup instead of a project-based setup during capture. Since my Adobe Premiere Pro SC6 Classroom in a Book tells me to check with my system administrator what should I do when I am the system administrator and don't know what to do?

1) Create a folder on your storage system.
2) Create a new Premiere Project, saved to that same folder. Make sure that scratch disc are set to "same as project"
3) Capture tapes.
You may re-organize tape's files after closing Premirere, or create a separate sub-folders and projects for each tape to begin with, depending on your needs.

User based authorization to create Purchase Orders out of Purchase Req.?

Hello,
I have the following requiment for my client:
User based authorization to create Purchase Orders out of Purchase Req.?
I am told the same can be achieved using same standard menu path in IMG/Customizing.
Please advise with the menu path and detials, Usefull answers will be rewarded.
Thanks

Using OMET Function Authorization, you can restrict users to create Purchase orders without Purchase Reqn.
Using OMET trxn code Create one Function Authorixation Called pr and in General Parameters tab Select the Field Selection and in Possible reference Objects Tab Mark the With ref to Prs check box and save.
Next, you've got to associate via SU01
Click Parameters, insert a new parameter id EFB to the authorization code.
Type in Parameters value you want e.g. XX
You have to assign the control for ALL the SAP buyers via thier SAP users id.
Logoff and login again. Then try to create a Purchase Order without a reference.
From Next time whenever you try to create with out referring PR it will not allow you to Save PO.
Regards,
Ashok

Project Specific Authorization

Hi Everyone,
My requirement is to implement Project specific Authorization means I want to restrict users to access other projects running in the same plant..Suppose there are four projects A, B, C and D..now there will be four project managers and four teams as well. Now our Client wants that the member of one project could not access the things of other projects...now SAP has given standards only for transaction authorization one can be restricted to access a particular transac but how to restricts at project level.....suppose project manager of project A having a access of CJ2B now he can open any of the project so we need to configure the users in such a way that he can only able to open his project..the moment he tries to open some other project to which he not assigned the system should give him error message like " you are not authorized to access this project."
hope I am able to clarify the requirement please give your feedback and solution for this...
thanks in advance

same as Restrict project's access on PS
cheers
thorsten

Material for Project Based Production

Dear All,
I have to work on project based production can any one refer me some links or even the code of manual if any so i can purchase it. or any book. plz i waiting for a reply soon

You need to ask a few questions first.
Are finished items, semi-finished items and purchased items to be assigned to different WBS/networks?
Are semi-finished items and purchased items going through stock or directly assigned to WBS/network/production order?
How do you wish to manage the finished items, semi-finished items and purchased stock for the project, i.e. unrestricted stock (typically moving average price for purchased and standard price for manufactured), project stock (i.e. against individual WBS/network or common WBS)
Where do your production and purchasing variances go? Purchasing variances are only an issue if you are using standard prices.
Considering how you wish to treat your stock is the most important issue for project manufacturing.

In search of Projects based on Lab view.

Hi,
Iam Chaitanya, pursuing M.tech.. Iam using Lab VIEW,it is a good platform to work in realistic so I interested to do Lab VIEW projects. Can you please suggest projects based on Real-time applications or electronics.

Hi Chaitanya,
In real time application you can go for the projects like dataloggers which having communications. Here all the operations on datalogger can be done using labview. You can plot the graphs, show the RTC, download and process flash & eeprom memory and so on.
Or you can go for TCP like projects where some equipments are sending data using TCP and you are reading that data using TCP tools in labview and write to database,excel and plot it later.
Its all depends on you what you want.
Thanks
Kudos are always welcome if you got solution to some extent.
I need my difficulties because they are necessary to enjoy my success.
--Ranjeet

Custom security JHeadstart 11gTP1 -Use Role-based Authorization is missing

In JHeadstart 11g TP1 the option Use Role-based Authorization is missing.
Will this option only be available in de production release of JHeadstart 11g? What is the reason why this is missing? Is it still possible to use CUSTOM authorization in JHeadstart 11g TP1?

It is not missing.
If you turn on custom authorization, you can specify your own roles against groups to access them, and use role names in the insert allowed/update allowed and delete allowed expressions.
Steven Davelaar,
JHeadstart Team.

How to set role based Authorization in JAAS

how to set role based Authorization in JAAS
i had user name , password and role in FileLogin
thanks
arun .v.

http://dev2dev.bea.com/pub/a/2003/04/Kemp_Helton.html?page=last

Resource Based Authorization sample program and application

Recently i have studied about the types of authorization and i also did some samples for role based authorization. Now i am looking for Resource based authorization, the sad thing is that i could not able to understand the concept.
So i am looking for the sample application and C# program.
I just want to know the concept of resource based authorization and also the sample application file and c# coding file.
Please provide me the sample.
Thanks in Advance.

Hi,
Technet forums are dedicated by technologies. Since you are more looking for concept, you should check for blogs on the Internet (try google...).
Otherwise please refer to TechNet forums homepage and look for your technology (C# for instance).
Hope this helps.
Guillaume Rouyre - MBA, MCP, MCTS

Project based authorization

Similar Messages

Maybe you are looking for