Reasign authorisation group at table maintenance generator

Hi All,
I have a table, assigned with authorisation group as &NC&. Now I need to change to authorisation group created newly.
If i change with newly created authorisation group in table maintenance generator level.
My Qus:1. Need to generate the table maintenance generator for this again.
2. Will it affect the users assigned to authorisation group.
3. Wht i need to do to change this, and wht are its effects if i change the authorisation group.

Hi,
If the user is not assigned for the role he has to be assigned for that role.
one role is assigned to authorization group.
basis consultants will add the role of that group to that particular user.
otherwise he cant change the entries of the table.
so consult basis consultant for security role assignment.
Thanks
Parvathi

Similar Messages

What is authorisation object in table maintanance generator

Hi,
what is authorisation object and authorisation group in table maintanance generator
can u pls let me know what are these?? and y do we need these?
Thanks in advance
Rama

hi,
Access to the transactions SM30 and SE16 is often regarded as a security risk on productive system. But with the right use of the authorization object S_TABU_DIS and the rarely used S_TABU_LIN, this isnt so.
With S_TABU_DIS you have the option to control access to groups of tables, and you have the option to distinguish between Update and Display access. If you dont want to give access to an entire table group, its quite easy in transaction SE54 to create a new authorization group and to reassign one or more tables/view to this group, thus achieving control of access to these specific tables.
If youre anxious about giving access to an entire table group, due to the fact that some tables have an open interface which allows table maintenance even in transaction SE16, the check this report developed and posted to the SAP Fans security forum by John A. Jarboe.
With the authorization object S_TABU_LIN you can even go a step further and control access to a table on record level, based on the key fields of the table. You can find an overall presentation of the object here.
The How-To guide below will demonstrate how to set up and use this authorization object.
The example is based on a small table ZMYTABLE. I have created a maintenance view and parameter transaction based on SM30 around this table.
Please notice that the parameter transaction is calling SM3o in update mode.
If the object is to be used with SE16 youll need to implement OSS note 763269.
S_TABU_LIN Customizing
We can find the customizing entries in the IMG under SAP NetWeaver à Application Server àSystem Administration àUsers and Administration à Line-oriented Authorizations.
First we need to define the organizational criterias.
In here create new criteria by pushing the New entries button.
In this example we will like to control access based on the key field Country, in order to do so create a criteria called Z_Country_Grp, with the name Country Grp. If we flag the table-ind flag the criteria will affect maintenance of all tables whose key fields are related to the domains specified in the attribute later.
In this example we only want to control the access to the specific table ZMYTABLE so we will leave it blank
Save the entry and assign it to a transport request.
Now mark the created line and switch to attributes
Create a new entry with the data shown below.
Save it and assign it to the transport request.
Notice that you can have up to 8 organizational criterion attributes.
Now we need to assign a table and a field to our attribute
In order to do so mark the attribute and switch to Table Fields
In here create a new entry and assign, in this example, the table ZMYTABLE, and the field name country to the attribute.
Please notice that only Key fields can be used !
Save and assign to transport request
Now we are ready for activating our organizational criteria this is the second bullet in the IMG
Just check the active flag and the check is activated.
Incorporate the authorization object in a role
We have now implemented the authorization check; next step is to implement it in the required roles.
In this example I have created a parameter transaction ZMYTRANSACTION - using SM30 around the table ZMYTABLE. I have create a small test role ICC_TEST, including only the transaction ZMYTRANSACTION, and a few support transactions.
In the authorization part I have inserted the object S_TABU_LIN manually (best practice is of course to assign it in SU24), but a manual insert will also do the trick J
Now when we change one the authorization fields by pushing the pencil the profile generator will ask us for the criteria.
Here we chose the Z_COUNTRY_GRP criteria that we have created.
Well now get the following popup, in this case we will grant change access, so we choose 02 Change for activity
In the list below well see the Organizational Attributes that we have created we have the option to use up to 8 attributes in the example we had only defined one attribute Country Grp - we assign the value DK thus only granting access to records with DK in the key field country.
To transfer the selection back to the profile generator press th transfer button or press F5.
Now we just need to generate the profile and assign it to a test user.
Now when this test user signs on to and executes the transaction only entries for Cty DK is displayed.
If the transaction is executed by a user with SAP_ALL all records are displayed,
Important Links For u:[http://www.sapsecurity.co.uk/sap-authorisation-objects.html]
Thanks And if helpful please reward points

Table Maintenance Generator - Function Group regeneration issue

I have table maintenance genertor in a function group that contains lot of tables . I by mistable regenerate the whole function group using table mainteance generator.
Now i want to check which of the programs changed during the regenerator. I am looking for some sap table that contains all the changed objects and their transport number.
Please rememebr i have still not released the transport,
I have checked E071, E071, VRSD . That contains the entry for function group and does not contains the programs inside the function group changed
Thanks
a®

Thomas,
Thanks for your reply. Currently I don't want to release the transport.
Is there any table i can check which are programs changed without releasing transport
a®s
Edited by: a®s on Jul 13, 2009 12:42 PM

Can we say that Table Maintenance Generator is Function Group?

Can we say that Table Maintenance Generator is Function Group?

Hi Naresh,
I think as you said it is a function group only..
When we generate a TMG, a function group with two function modules, two screens and some includes will get generated.
This function modules and screens get called dynamically through SM30.
Regards
Sreekanth

Reg. TABLE MAINTENANCE GENERATOR

hi ,
can anyone pls detail me on TMG.....
and also how to create a t.code for my table...
thanks,
CAPC

To create Table maintenance genetrator,
Go to Utilities->Table maintenance generator
Then Enter Authorisation group(For eg &NC&)
Function group ( You can create function group in SE37. Here in the menu GOTO->Function group-> Create group)
Then you can select either one step or two step. Assign Screen numbers (To assign Screen numbers click on the button 'Find Scr no' . It will propose screen no:s)
Then Create.Save
Table maintenance is created.
To create Tcode, Go to Se93
Enter A tcode name
Create
Select Transaction with parametrs
Enter some transaction text.
Transaction is SM30
Check Skip initial screen
Check Inherit GUI attribtes
gui SUPPORT - Select all check boxes
Under default values, enter
NAME OF SCREEN FIELD       VALUE
VIEWNAME                           ZTABLE NAME
UPDATE                                 X
save it
and try to use the TCode.

How to create table maintenance generator?

Dear Sir/Madam,
when i am creating table maintenance generator , it asks for function group
i give 0MB8 , it says u r going to change function group which does not belongs to u,
then i created a function group yfg9 and given , it then says yfg9 cannot be processed.
please telll me how to create the table maintenance generator for maintenance view yv_mmim_rep_cust.
Thanks in advance,
Dastagiri

Hi ,
Table Maintenance generator is used to maintain data in table , instead of giving access to se11 , we create a tcode for this table maintenance generator and we will give this tcode to end-user to maintain data
To generate table Maintenance generator :
click on UTILITIES in menu bar
-> table maintenance generator
-> enter Authorization Group as : &NC&
-> Enter Function Group : name of your table ( so it will create a function group , to check this function group go to tcode se80 : then select function and enter your Table name )
-> Then click on find screen numbers in Application tool bar.
-> Then click on create button in Application tool bar
if it is created successfully , then you will get a status message like table maintained generator is created successfully.

Purpose of table maintenance generator

wht is the purpose of table maintenance generator

Hi Pavan,
The purpose of table maintainence generator is to enable the table maintenance through SM30, and to implement and validation etc on table field inputs.
SE11->Utillities->table maintainence generator
You need to enter the values of following fields:
1. Table name
2. Authorization group , and authorization object (select the suitable one )
3. Function group and package
4. Maintainence type : single or double screen maintainence view depending on the option selected.
5. Maintain screen number : you may specify a value or let the system generate one for you.
The validation code for the table entry is written in the flow logic of this screen. Even some of the fields may be made display only , by adding suitable code in the logic or directly disabling the input in table control in the layout.
Table maintanance is for creating,adding datas to an existing table.
it is for adding muiltiple records at a time in the table
A table can be manipulated by a program or manually.
When creating table, you will find a check box 'Table maintenance allowed'. If we
check that option, we can manually enter entries using SE16 or table
maintenance generator screen.
SE16 is for data browser.
Go to SE11, give the table name and click on change. Then Go to utilities--> Table
maintenance generator.
In the table maintenance generator screen, we should give Authorization Group,
Function Group name (Function Group name can be same as table name),
Maintenance type can be one step or two step, usually we will create with one
step. we should give maintenance screen number. After clicking on create button,
a table maintenance generator will be created.
To check it go to SM30 . In SM30, we find display, Maintain options.
We can view the table contents by choosing Display and we can create table
entries by choosing Maintain.
In the production system, end-users will not be having access to transaction
codes like SE11 and SE16. Developers will not be having access to many
transaction codes including the above two.
To view the contents of the database table, we will use SE16n in Production
system. Please find out the difference between SE16 and SE16n.
All these authorizations will be maintained by BASIS team, by creating access
profiles.
So in order to edit or create the contents of a database table, we should go for
table maintenance generator. In real time, authorizations will be maintained in
production system. (even in development and Test systems to some extent).
There is an audit like Sarbanes-Oxley Act for American clients, where every thing
will be audited by government agency. To know more about SOX, use the links on
the right hand side of this page.
The second reason is, we can edit or create multiple entries at a time, using table
maintenance generator.
Apart from that we have options like 'Enter conditions' in table maintenance
screen SM30. Please try to find out the use of those, by creating an example.
Table Maintenance generator: Difference between one step and two steps.
While creating table maintenance generator, we find below options:
When we choose one step, we have to give the screen number in Overview Screen field.
When we choose two step, we have to give both overview screen number and single screen number.
You can give any number for screen. Dont give 1000 screen number. As this
number is reserved for selection screen.
When we choose two step, two screens will be created for table maintenance. For
single step only one screen will be created.
When we choose two step, table maintenance will work as follows
Go to SM30, give the table name for which you have created table maintenance-
Overview screen will be displayed. To create entries, when you click on new
entries. Another screen will be displayed, where you give input and save. You can
enter one record at a time.
Go to SM30; give table name for which you have created table maintenance-
Overview screen will be displayed; To create entries click on new entries, you can
enter the records on the same screen. You can enter multiple records at a time.
We use single step generally, as it is user friendly.
To completely understand the difference and above points please do exercise by
creating table maintenance generator in both ways (using single step and two
step).
Link: [http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm]
Link: [http://help.sap.com/saphelp_46c/helpdata/en/a7/5133ac407a11d1893b0000e8323c4f/frameset.htm]
Link: [/message/2831202#2831202 [original link is broken];
One step, two step in Table Maintenance Generator
Single step: Only overview screen is created i.e. the Table Maintenance Program will have only one screen where you can add, delete or edit records.
Two step: Two screens namely the overview screen and Single screen are created. The user can see the key fields in the first screen and can further go on to edit further details.

Table Maintenance Generator : Editable Entry after validation fails

Hi,
I have created a Z table and a table maintenance generator to maintain the data.
I have to carry out certain validations when user enters data on Key and Non- key fields.
This is working fine, but the issue is with the key fields.
If validation fails, the table maintenance screen is displayed the date-field is grayed out (non-editable) as it is the key field of the table.
Now the user cannot change the data unlike the non-key fields were the user can modify the non-valid data and save again.
How can make the date field (Key Field) editable after entry in case the validation fail, so that the user can make the changes.
Please suggest the approach to handle the above scenario in events.
Thanks,
Keyur

Thanks Kiran for your inputs.
I have done the same thing what you have explained.
I have used a Form Routine as CIP_SAVE with Event Number as 01, since on event SAVE i need to validate whether dates are
overlapping the inputs dates or not.
Fields are :
Group ID (Key)
Start Date (Key)
End Date (Key)
Value (Non -Key)
Initial value in Table:
Group ID = 12345
Start Date = 01/01/2011
End Date = 01/31/2011
Value = 11.11
Now if i try to enter value:
Group ID = 12345
Start Date = 01/02/2011
End Date = 01/25/2011
Value = 99.99
& SAVE it... validation will fails because Start & End dates overlaps.
Hence, on Table Maintainance Screen all key fields will be in non-editable display mode, whereas non-key field will be in editable mode.
My requirement is that Start Date & End Date key fields must be Editable field.
Thanks.

Disabling fields in table Maintenance generator

Hi Experts,
I would like to restrict some fields in table maintenance generator dynamically/ statically.
Here is the situation.
I have generated table maintenance for the table ZMARA and I have created three transactions for the above single table maintenance generator.
i.e .. Transaction      ---        Table
          ZT1                  ---         ZMARA
          ZT2                  ---          ZMARA
          ZT3                  ---          ZMARA
I am using above three transactions in my module pool program. Based on the certain conditions I am calling different transactions i.e ZT1, ZT2, etc
Here is my requirement:
Suppose if I call ZT1 transaction, I need to display only few fields. i.e ZMATNR, ZMTART, ZPRODH.
or remaining fields should disable. User should not allow to change the content, even if it is new entries/existing entries. only ZMATNR, ZMTART, ZPRODH.
Suppose if I call ZT2 transaction, I need to display only few fields. i.e ZMATNR, ZMTART, ZHTSCODE
How can we restrict dynamically when you call table maintenance generator table through transaction
or
How can we generate table maintenance for few fields?
Edited by: r badveli on Mar 16, 2009 4:27 PM
Edited by: r badveli on Mar 16, 2009 4:27 PM
Edited by: r badveli on Mar 16, 2009 4:28 PM

Hi ,
go to Se11->Table maintenace generation. Double click on screen to edit and assign the field you want to display/hide to groups. In PBO , after the following lines..
LOOP AT EXTRACT WITH CONTROL
TCTRL_ZMARA                         CURSOR NEXTLINE.
   MODULE LISTE_SHOW_LISTE.
ENDLOOP.
Write a new module in PBO and edit the SCREEN as per the Tcode, you are calling,,'
Hope this helps you
Rj

Help required on table maintenance generator

Hi all,
Would any one tell me what is the difference between one step and two step while creating a table maintenace generator for a table.
one more question is i would like to know which search the following code follows while it is executed.
select single vbeln
from vbak into l_vbeln
where vbeln in s_vbeln.
and
select vbeln
from vbak
into l_vbeln
up to 1 rows
where vbeln in s_vbeln.
please do reply soon for the questions.

Hi
table maintanance Generator is used to manually
input values using transaction sm30
follow below steps
1) go to se11 check table maintanance check box under
attributes tab
2) utilities-table maintanance Generator->
create function group and assign it under
function group input box.
also assign authorization group default &NC& .
3)
select standard recording routine radio in table
table mainitainence generator to move table
contents to quality and production by assigning
it to request.
4) select maintaience type as single step.
5) maintainence screen as system generated numbers
this dialog box appears when you click on create
button
6) save and activate table
http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
http://help.sap.com/saphelp_46c/helpdata/en/a7/5133ac407a11d1893b0000e8323c4f/frameset.htm
/message/2831202#2831202 [original link is broken]
One step, two step in Table Maintenance Generator
Single step: Only overview screen is created i.e. the Table Maintenance Program will have only one screen where you can add, delete or edit records.
Two step: Two screens namely the overview screen and Single screen are created. The user can see the key fields in the first screen and can further go on to edit further details.
Difference Between Select Single and Select UpTo One Rows
According to SAP Performance course the SELECT UP TO 1 ROWS is faster than SELECT SINGLE because you are not using all the primary key fields.
select single is a construct designed to read database records with primary key. In the absence of the primary key, it might end up doing a sequential search, whereas the select up to 1 rows may assume that there is no primary key supplied and will try to find most suitable index.
The best way to find out is through sql trace or runtime analysis.
Use "select up to 1 rows" only if you are sure that all the records returned will have the same value for the field(s) you are interested in. If not, you will be reading only the first record which matches the criteria, but may be the second or the third record has the value you are looking for.
The System test result showed that the variant Single * takes less time than Up to 1 rows as there is an additional level for COUNT STOP KEY for SELECT ENDSELECT UP TO 1 ROWS.
The 'SELECT SINGLE' statement selects the first row in the database that it finds that fulfils the 'WHERE' clause If this results in multiple records then only the first one will be returned and therefore may not be unique.
Mainly: to read data from
The 'SELECT .... UP TO 1 ROWS' statement is subtly different. The database selects all of the relevant records that are defined by the WHERE clause, applies any aggregate, ordering or grouping functions to them and then returns the first record of the result set.
Mainly: to check if entries exist.
Reward points for useful Answers
Regards
Anji

Error in flow logic of table maintenance generator

Hi,
While activating the flow logic of table maintenance generator I am getting this error 'Table control TCTRL_ZUPP2P_PIBAYCNT must have atleast 2 loop lines.' and in layout I am able to see only 2 rows.Can anyone tell me why am I getting this error.

hi,
Take the function group and goto SE80 and activate the function group to avoid the error...
Regards,
Santosh

About table maintenance generator

hi,
1. why we have to give a function group name while creating table maintenance generator for a ztable.
2. while creating tmg we have to check one of the radio button under recording routine. wht does recording routine means?

Hi,
Function Group - this will create a default main program where you can store the
events for the table maintainence.( where you can write the code for the table
maitainece)
standard recording - when the changes in the table maitainence automatically it will create request for the data to transport.
no recording - this will not create request(when you don't require the data in
Development server to transported to testing or Testing - to -Production.
atthat time you can select the radio button foe NO RECORDING.
Madhavi

Table maintenance generator with radiobuttons

Hello,
how can I automatically (via se11: table maintenance generator) generate from a DDIC-structure the radiobtton-fields on a dynpro?
If I use the domaine 'X' or 'XFELD', I only get checkboxes....
kind regards

Hi,
Table Maintenance Generator will create the Z Screens.
In order modify those Z screens go to SE80 and give the
Function group for that table maintenance generator.
Then to find the function group go to sm30, give the table name and click on display. It show a screen with table control. Click on System -> Status .
It gives you the Z screen information.
Give that Z screen in SE80 and do the changes accordingly.
I hope it helps you.
Regards,
Gopi

Table Maintenance Generator for the table "J_1ISTATECD"

Hi,
How to create Table Maintenance Generator for the table "J_1ISTATECD". Can anyone please explain the steps for this.
Thanks in advance....
Regards,
Sriram.

Hi Sriram,
-->Create view in SE11
-->Goto transcation SE11 ABAP Dictionary
-->Select View and type in the name of the view you want to create.
-->Press the Create button
-->In the dialog box that appears, choose Maintenance View
-->Select tables and fields for the view
-->Activate the view
or
-->Create view in SE11
-->Goto transcation SE11 ABAP Dictionary
-->enter table name
-->go to Utilities
-->select table maintainance Genarator
-->Enter single step
--> enter Function Group(all the code for Table mainaitenace is stored here)
-->eneter single step
-->enter Authorization gorup(we can restrict some user,s not tot update data)
Activate the view
function Group -->goto se37 -- > menu bar goto->create function group with five letters ..
add the same function group in table maintainenece generatoror enter the sane table name in Function group Place..
if you dont know the Authorization group ( not given by Function design) put &NA&
or if you want to know the maintainence View already exists go to table TSTCV
enter Table name you can get the view available for the table name..
Regards,
Prabhudas

Table Maintenance Generator giving Error in PRD.

Hello Experts,
I am receiving below error in PRD for a Table Maintenance generator for Z-Table. PFA Screen Shot.
My Query is that though the information icon narrates to goto T-code SE54 & Re-generate TMG for the specified Function group. Which Option should 1 select after i had selection the option for Edit Function group->Re-generate group specific program.
The info icon in the first pic says to do the following.
Choose 'Edit Function Group' in the transaction SE54, enter the function group name 'ZOTMTRDPROFITSEG' and choose 'Regenerate Group-Specific Programs'. Choose 'Refresh Structure-Spec. Data Declarations' in the next selection window.
Would like to add a point that this Function grp also contains TMG for other tables as well, will it impact other TMG's.
Best Regards
Priyesh Shah

regenerate the TM object via SE11 - Table maintenance.
normally should do the trick.
However, keep the func groups & tables 1:1 saves a lot of this kind of problem.
Don't mix them up i.e. more than 1 tab maint for a func group - never ending hassle you will get!!!
go into Expert mode and regen it again. Remove the maint from this func group and create new func group for the table.

Reasign authorisation group at table maintenance generator

Similar Messages

Maybe you are looking for