Re: Setting Authorization Check in Report Writer

Hi,
In ABAP Query or ABAP customized program, it is possible to set authorization object checking.
In Report Writer, how can I do it?
<REMOVED BY MODERATOR - REQUEST OR OFFER POINTS ARE FORBIDDEN>
Thanks
Edited by: Alvaro Tejada Galindo on Dec 26, 2008 10:59 AM

Hi Colin,
I would like to suggest,
Creating an Authorization object & then using it in the report program is the preffered way.
I would like to suggest a couple of references, quite similar to your issue,
[SDN - Reference for using authorization checks at the report level|User authorisation check in ABAP-HR program;
[SAP HELP - Standard Reference for Programming Autorization checks|http://help.sap.com/saphelp_nw04/helpdata/en/52/6712ac439b11d1896f0000e8322d00/frameset.htm]
[SAP HELP - Standard Reference for Authorization checks|http://help.sap.com/saphelp_nw04s/helpdata/en/fc/eb3ba5358411d1829f0000e829fbfe/frameset.htm]
Hope that's usefull.
Good Luck & Regards.
Harsh Dave

Similar Messages

Query : Authorization check for reports in report writer

Hello,
I want to secure reports created form report writer.
How can I give separate Authorization to users, so that they are restricted only to display or for changing or for creating.
Thank you in advance.

Hi Naveen,
Here is wonderful thread which can solve your issue.
Authorization in my report
Regards,
Ganesh
****Reward points if Helpful*****

User authorization check in report

Hi All,
I want check user name in report while event (at user-command) trigger.
Have 2 buttons in report A.Process B. Display.
any user can press display button. but some of the user only can press Process button.
how can I do this using authorization objetcs.
I donot want to check by sy-uname, because I donot want to hardcode user names.
Thanks & Regards
Gupta......

Hi,
You need to ask to BASIS guy to create the authorization object.
Whenever user clicks the button PROCESS in PAI of that screen you need to write the authority check statement.
For example if i need to validate the country for the particular user :
MODULE user_command_9000 INPUT.
*Authority Check for Country*
AUTHORITY-CHECK OBJECT 'ZO9_CNTRY'
    ID 'COUNTRY' FIELD g_soldto_country.
if sy-subrc ne 0.
     clear g_ok_code.
     message E001(ZMESSAGE_AS) with g_soldto_country.
endif.
I hope this will be useful to you.
Plz reward if useful.
Thanks,
Dhanashri

How set authorizations for sales reports and other reports in SAPB1

Hi, I'm currently working in SAP Business One Version 8.82
The issue I'm facing is that I want to set it up so that certain users cannot see other users' sales information. I know that I can turn on or off the Sales Analysis Report for various users for instance, but what I really want specifically is this. Suppose we have 3 different teams: Team A consists of (Angie, Angela, and Anita the manager), Team B consists of (Bob, Barbara, and Ben the manager), Team C consists of (Cat, Charlie, and Courtney the manager). I would like to make it so that everyone can view the individual sales order documents of everyone else (in case a customer calls and needs information, but the salesperson who created that document isn't there); however, Angie should only see her own orders when she does a Sales Analysis while Anita, the manager of Team A, should see the the orders of Angie, Angela, and herself of course.
To summarize, I'd like to see the following
1. Each salesperson can lookup and view any sales order.
2. Each salesperson can run an sales report to view all his/her own open sales orders.
3. Each manager can run a sales report on his/her subordinates, but not on the other managers or their subordinates.
4. The boss or other people working in corporate are able to run a report on all open sales orders.
What's the best way to approach this? Is it best if I create my own report? I haven't created any reports from scratch yet, so I'm not sure exactly how that works. I'd like to be able to group the salespeople up by location if possible. The sales analysis report doesn't really do that, but it is useful. I just don't want everyone to be able to see the numbers on their peers.
Thank you I appreciate any help or advice.

Hi,
1. Each salesperson can lookup and view any sales order.
Answer:
Create own report by using query and save under query manager and the assign for all group. So that all sales person can run this query and can get sales order detail.
2. Each salesperson can run an sales report to view all his/her own open sales orders.
Answer:
Create individual query ( add condition in where clause slpname = 'XXX') for each sales person and save it under query manager and assign to particular user group
3. Each manager can run a sales report on his/her subordinates, but not on the other managers or their subordinates.
Answer:
Create query for only particular team ( condition is slpname = XXX OR YYY OR ZZZ) and save under query manager. Make schedule report on this and send it to only particular manger
Same way create for another manager and schedule report.
4. The boss or other people working in corporate are able to run a report on all open sales orders
Answer.
Create query for all sales person and schedule report to big boss.
Hope you can get an idea.
Let me know if you need sales report ( advice required field)
Thanks & Regards,
Nagarajan

How to do Role and Authorization check in report program

Hi Friends,
Please provide me your guidance on how to add or give coding to check role authorisation of a particular field, input from selection screen.
My requirement is,
If the Fund center filed in my select option parameter has been filled, then I have to check the role authoriszation(which was created already) in the At selection-screen event to check and give access to the user to run the process further.
Say my Fund center is "SH'
and my Role authorisation to be settled to all users 'ZMM_BXI'.
How to implement in report program, Please advise.
Thanks & Regards
Babu.

Sorry SDN,
Posted in a wrong Forum page.
Please excuse.

Report Writer Object Names

Can anyone tell me what these objects represent in Report Writer. They are in a transport that is causing problems in the receiving system:
RWRO
RWSO
RWJO
RWMO
Thank-You.

Hi
check this
Report Writer functions can be accessed from within the Report Painter.
The difference lies in the GUI of the report painter.
For Report Painter
http://help.sap.com/saphelp_47x200/helpdata/en/66/bc7d2543c211d182b30000e829fbfe/content.htm
For Report Writer
http://help.sap.com/saphelp_47x200/helpdata/en/66/bc7dc143c211d182b30000e829fbfe/content.htm
Refer the following links :
http://www.virtuosollc.com/PDF/Get_Reporter.pdf
http://sap.ittoolbox.com/groups/technical-functional/sap-r3-other/accessing-tables-using-report-painterwriter-98766
http://help.sap.com/saphelp_47x200/helpdata/en/da/6ada3889432f48e10000000a114084/frameset.htm
http://help.sap.com/saphelp_bw31/helpdata/en/66/bc7d2543c211d182b30000e829fbfe/frameset.htm
Regards
Anji

Report writer Authorization on selection screen

Hi All,
In transaction GR55 (to execute the report group), when the user enters the selection criteria for the report group, I want to validate the
'Profit Center group' and 'Profit center values' fields. The way it should be validated is, it should check the entry for the 'profit center group' or 'values' entered against the 'user name' in a Ztable for that user. If there is no entry in the Ztable matching that 'User name' and 'profit center group or values' , it should give an error message. I have seen that there is a user exit 'EXIT_SAPFGRWX_001' (Authorization check on initial screen).
But my problem is, in this functional module (code is shown below), the table 'I_T_SELSCREEN_PARAMS' has only one filed for both 'Profit center Group' and 'profit center values'.
1. when I enter 'Profit center group' 'ABC' in my selection criteria, I_T_SELSCREEN_PARAMS has following values.
I_T_SELSCREEN_PARAMS - selname = '%8A-PCHI'.
I_T_SELSCREEN_PARAMS-low = '01061000ABC'.
2. When I enter 'Profit Center Values' as some '3001000' to '3001020' inn the selection criteria, I_T_SELSCREEN_PARAMS has following fields,
I_T_SELSCREEN_PARAMS-selname = '%8A-PCHI'
I_T_SELSCREEN_PARAMS-low = '0002$ZSLP&8A-PCHI'.
here ZSLP is the report group name.
I don't understand how to get the values '3001000' to '30001020' into my user-exit in case 2.
Is there any other way of doing this? has anyone used this user-exit? Please help me.
Thanks,
Krishna
FUNCTION EXIT_SAPFGRWX_001.

Hi Krishnakumar Ramadoss,
For your requirement to have authorization, SAP provides facility in report writer/painter to give authorization groups.
Go to GR52.
Input your report group name.
Click on Header (Cap symbol) or F5.
At this header screen , you can see a field where you can provide Authorization group.
Try this. It may help you.
As a note:
Report writer / Report painter reports are reports which are created with zero percent coding.
The SAP generated program (E.g: GP3ICYT39FHJLOYBA2025DBAE1V213) cannot be changed or modified.
The only coding that you can do in a report writer are the formula's and logic that you can write in variables of the report writer / painter.
Regards,
Subin John

Constant Checking in Row Formula for Report Writer

Dear All,
Please advice what is the format to check a constant (string) in the row formula for Report Writer.
Let's say if I want to check the cost center group -->
If '&1KOSET' = 'ABC' then .... else......
So, what is the format for ABC? Because if i put 'ABC' it will be treated as cell. But if i do not put the ' ', then i get system error.
Thanks a million for your advice.
Best Regards,
CW

Hi John Lee,
The logic that you would want , can be implemented through a column set. That is, as per your logic written in the set, your column values differ.
First in your set, keep your account number in the first set line. ie. 5000000.
Then you enter the following formula in the second line of a set defined for a report column:
IF u2018001u2019 > 5000000 THEN u2018001u2019 ELSE 0
If the value in the first column (set line 001) is greater than 5000000, then this value displays in the second column; if the value in the first column is less than 1000, the value 0 displays in the second column.
Revert if you need any additional help.
Regards,
Subin John

How to create the Set ID for report writer

Hi
I am suppose to create the Set id . Please suggest me the t-code etc for creating set id.
Thanks
Shiv

transaction for creating the set ID GS01
further, the menu path in the application menu is
information system->Ad Hoc Reports ->Report Painter ->Report Writer ->Set
if helpful, plz assign point as way of thanks

Create authorization check for a report

Hi,
I need to create an authorization check for a report. It means that I need to restrict the usage of the report to couple of users ( 'USER1' and 'USER2' ). How can I do that? I did read through a lot of threads regarding this piece got a bit confused and stuck while creating the authorization object.
Say the report name is ZHR_TIMEABC.
Can anyone explain how to create an authorization object and how are they tied to the object and call them in the abap code?
Thanks in advance,
VG

Hi,
Thanks. Here is my understanding, S_C_FUNCT calls a system generated function module to make an authority check. So, if different users say USER1 and USER2 have different authroization levels, defined in their user profile, just adding this piece code will take care of authroization check for the program OR do I need to take care of something else?
If so, when do we need to create the authorization objects using SU20 and assign the group and follo this process? When do we use this approach ( lot of threads on authority check have mentioned this procedure)?
Your inputs will be helpful to understand this concept.
Thanks,
VG

New set for Report Writer

Hello,
I am new to the Report Writer. My understanding is that Report Writer makes use of pre-defined sets of financial objects. My user wants to create new report group in Report Writer and add some new data which are currently in Z-table. Is this possible? Do we create a new set based on Z-table and then incorporate it in the new report?
Please advise,
Thanks
Galina

Hi Galina,
No were SAP released document Z tables is support for report writer.
moreever SAP recomonded to create reports by using report writer / painter for specific Tables only not for all standared tables.
as i know not possible to use Z tables for report writer.
still your business want A table data report, you can able to develop through ABAPer help.
Refer: http://www.virtuosollc.com/PDF/Get_Reporter.pdf
Regards,
Viswa

SET ID in Report Writer

Hi Friends,
I don't have knowledge pertaining report writer. I need to find out what data source is in a particular SET ID. Also, how is the SET ID created and how do I view it. Please advise.
Thanks,
HN

SET PARAMETER
SET PARAMETER ID pid FIELD f.
In some cases, the syntax rules that apply to Unicode programs are different than those for non-Unicode programs. See ABAP Unicode - Other Changes

Effect
Writes the contents of the field f to the global user-specific SAP memory and the local transaction-specific SAP memory under the ID pid. Any existing values under the same ID are overwritten.
Parameter IDs can be up to 20 characters long. They cannot consist entirely of spaces. The SAP system description contains an overview of parameter IDs. You can also produce a list using the ABAP Workbench.
Notes
The global, user-specific SAP memory is available to a user for the duration of a single terminal session. Values written to it are retained even when the user exits a program.
Do not use SAP memory as a temporary storage area, since parallel sessions belonging to the same user all use the same memory area.
Only store data of the types C, N, D, and T, as well as structures that consist of these types, in the SAP Memory.
You can create new parameter IDs using the ABAP Workbench.
Parameter IDs may have a namespace prefix.
Example
DATA REPID like sy-repid VALUE 'RSPFPAR'.
SET PARAMETER ID 'RID' FIELD REPID.
Sets the program name so it can be passed to other programs.
GET PARAMETER
GET PARAMETER ID pid FIELD f.
In some cases, the syntax rules that apply to Unicode programs are different than those for non-Unicode programs. See ABAP Unicode - Other Changes

Effect
First, the value stored under the key pid is transferred from the local SAP memory into the field f. If this key is not available in the local SAP memory, the value stored under the same key pid is transferred from the global user-related SAP memory to the field f.
A parameter ID can have up to 20 characters. You can find an overview of the keys (parameters) used in the SAP system description or the appropriate function in the ABAP Workbench.
The Return Code is set as follows:
SY-SUBRC = 0: A value was read from SAP memory. SY-SUBRC = 4: No value was found in SAP memory under the specified key.
Notes
The global user-related SAP memory is available to each user for the entire duration of a terminal session. For this reason, set values are retained when you leave a program.
You should not use SAP memory for temporary storage because a user's parallel sessions use the same global memory.
Example
Read the program name from SAP memory:
DATA : REPID LIKE SY-REPID.
GET PARAMETER ID 'RID' FIELD REPID

Missing authorization check on the IM Reports

Hi,
We use RAIMINFO reports (S_ALR_87012805, S_ALR_87012806 u2026 ) to display
structure and values in Ferrero Spa investment program
On the initial screen, the value types which have to be output, are
determined by the authorization checks to be carried out .
For example in case that an user decides to display the plan or budget
references to program position, the user has to have the authorizations
on the Persons responsible (A_IMPR_VER). For us this is OK because we
define responsibilities through A_IMPR_VER. But if user decides to
display the appropriation request or measures and he doesnu2019t indicates
the program position it seems that anything on the A_IMPR_VER will be
performed. We need that the check on A_IMPR_VER will be performed always(for all objects: measures, appropriation request ).
We think this is a function missing in RAIMINFO and in all the IM
reports.
Could you help us to solve this problem?
Thanks and best regards,

Hi,
If you want use check box in crystal., then you can do this by writing piece of code.
please try for
If {Table.Field} = True Then
'Display the checkbox of your choice here
Formula = Chr(254).
thanks.
Bala

Report Writer - Using Formula in a set

Hi I am trying to learn Report Writer (GR31) and one of the things I want to do is put a formula in a set, but I am having hard time getting it to work.
I want to put a formula like this...
if account is 5000000 then put do one thing else put 1
IF '&ZACCT1' = 500000 THEN '001' * 'A' ELSE 1
but I am not getting any value back.
Anyone have any idea what I am doing wrong.
Thanks in advance for any help/suggestions.
John

Hi John Lee,
The logic that you would want , can be implemented through a column set. That is, as per your logic written in the set, your column values differ.
First in your set, keep your account number in the first set line. ie. 5000000.
Then you enter the following formula in the second line of a set defined for a report column:
IF u2018001u2019 > 5000000 THEN u2018001u2019 ELSE 0
If the value in the first column (set line 001) is greater than 5000000, then this value displays in the second column; if the value in the first column is less than 1000, the value 0 displays in the second column.
Revert if you need any additional help.
Regards,
Subin John

Authorization checked for infoObjects even though not relevant to report

Hello guys,
I am facing a problem in BI 7.0 authorization checks.
For a given report the BI team has placed a restriction in the query only for infoObject 0Comp_code (company code) and 0SOLD_TO (sold to party). Accordingly i have created authorization in RSECADMIN and assigned to role--> user.
But when the user runs the report, he gets as authorization error and during analysis in RSECADMIN i see that "list of Authorization relevant charecteristics(infoObjects) for info provider xxxx" contain other infoObjects as well.
Is it a case where infoObjects can be made authorization relevant for the whole info provider eg-ZSD_M42" (where this is a multi provider)apart from being checked for specific reports eg- ZSD_M42_Q0001?
How do i get around this problem?
Regards,
Prashant

Hi Prashanth,
What Zaheer said was exactly correct.Make sure all the Auth relevant Chaaracteristics of an Infoprovider are properly authorized through your Analysis Authorization.Suppose if you don't need security on other Characteristics of an InfoProvider give * in your AA which will byepass check on that particular Auth relevant Characteristics..
More over,See to that all the key figures are properly authorized as all the keyfigures are by default auth relevant in BI.
Cheers,,
Ramkumar C

Re: Setting Authorization Check in Report Writer

Similar Messages

Maybe you are looking for