Regarding ristricting access to perticular infotype.

Hi All,
I have a report in that i am using IT0000,But some users doesn't have access to this IT0000.
Even though they want to access this report,
So please tell me hoe can i solve this problem.
Regards.
Skanth.

Similar Messages

Query regarding database access segregation using os authentication in windows environment

Hi ,
I have a query regarding database access segragation using os authentication (like sqlplus "/ as sysdba") in windows environment.Let me briefly explain my requirement:-
Suppose you have two DBA`s viz DBA1 and DBA2 and 4 databases resideds in a windows server say A,B,C & D.Now I want to set up such a way if DBA1 logs into the server then he can login to database A and B only using OS authentication and DBA2 can login to database C and D only using OS authentication.
Please let me know how to do setup for this requirement.
Database version is 11.2.0.3

1494629, I am not a Windows person but if there is any way to do this I suspect some additional information is necessary:
Are the DBA users members of the Administrators Group ?
Do all 4 database share the same $ORACLE_HOME ?
I suspect if either answer above is yes then this is not possible, but like I said I am not a Windows person. I would just ask for two servers and the associated licensing to be acquired. The requirement to spend money to do something management wants usually elimanates the request in my world.
HTH -- Mark D Powell --

User in hr can able to create records in PA30.But will give read only access for all infotypes

Hi Team,
I have created one test role in HR. It will give Read access to all info types.
But user can able to create Info type records in PA30. Please find the P_ORGIN values below.
Authorization level            R
Infotype                       *
Personnel Area                 US
Employee Group                 1
Employee Subgroup              U*
Subtype                        *
Organizational Key             *
OOAC values.
AUTSW ADAYS       15
AUTSW APPRO 0
AUTSW DFCON 4
AUTSW INCON 0
AUTSW NNCON 0
AUTSW NNNNN 0
AUTSW ORGIN 1
AUTSW ORGPD 4
AUTSW ORGXX 0
AUTSW PERNR 1
AUTSW XXCON 0
Note : user does not have access to any structural profile.
I suspect is this bcz, if any user has proper 0105 and 0001 in HR master data can able to create records.Bcz user will be assigned to default sap structural profile "ALL" in OOSB ?
I can see user was not assigned to "ALL" profile in OOSB or in T77UA. and user cant able to write or change infotype data in pa30.
Please suggest how the user can able to create inftotype records in PA30.(Info :0002 for example)
Appreciate Quick response.
Regards,
Venu.

Sorry did not get the below comment.
"The maintain flag in the structural profile does not relate to any maintenance authorization in PA. It only affects the OM objects authorized by the structural profile. For example the user may be able to delimit a position. It will never grant any write authorization for any PA infotype "
Do you mean , suppose if we give Org unit and evaluation path like attached screen ,user will get access to only the ORG UNIT as its object type (can able to perform activities as mentioned in the role PLOG ) but cant perform any activity like address infotype change on the person (P) (as mentioned in P_ORGIN) who comes under the org unit mentioned in Structural profile ?
My understanding is that i believe user total auth is an intersection of general +structural authorization.lets take HR admin wanted to change 0002 data   for some imps in org.We need to give access to that particular org to which the emps belongs to (through structural auth) and SHOULD CHECK the maintenance box in strucural auth and will access change access via role.
And user cant able to edit his own data.
Please find the Screens as requested. Please let me know if my understanding is correct or not ?
Regards,
venu.

Issue regarding folder access from job server?

Hello,
We are using SAP BODS 4.0 sp2 setup. There is a requirement in our project. We are generating a text file as output and we are placing it in folder(particular path) on the job server. We have created user id and given access to the folder to end user.
Since the server is accessible through vpn. Is there any other way of sharing tat folder so that they can access in whatever network they are working.
The server is at Hyderabad and end users at Hyderabad can access through their LAN. But few users are some other places. How to provide access to them or enabling output file accessible to them.
Kindly let me know if any clarifications needed?
Regards,
karthik

Hi,
This is a network related question . You could do many things like creating a shared folder and shared across the network drive or write a .bat script to schedule to copy the file and put it in end user folder. Your network admin would be in a position to guide you better.
Arun

Regarding the access key for an object

HI all
Please clarify me the doubt that an access key will be different for each and every object or one for all the objects.
regs
karna

Hi karna,
1. It will be different for all objects.
2. In fact, access key will be different
    for each object,
   and that too, for each different installation number
   as well as each basis version number
<b>3. In short, access key is dependent upon the combination of
1. The object R3TR FUGR SFES
2. Sap Release (eg. 640)
3. Installation Number</b>
4. It means that the access key for one standard program
   (in our server),
   will not work in another server bcos the installation number will be different.
regards,
amit m.

Integration regarding cost center between OM, Infotype 0105 and the user

Hello,
we are just implementing OM, where the cost center for an organizational unit is maintained. Within a OU
exist positions to which persons are assigned.
In the HR Master data Infotype 0105 "Communication" the system user name for this person is maintained.
My request:
In SU01 on "Logon data" tab is a field "Cost center". What do I need to fill it with the value from the assigned position in OM?
Thanks in advance,
Thomas

The connection from user-id via IT 105 to pers nr and from there to OU and cost centre is clear.
What I want to know is wether the field cost center in TA SU01 can be automatically populated with the corresponding value from the OU for this user. I don't want to change the value via SU01 so it is sufficient when the field in SU01 is in status ReadOnly. But as the information is in the system I want it to be automatically displayed in the User-id-context.
Regards,
Thomas

Regarding MS Access Database details....

Hi,
I am working on RFC to JDBC interface. Currently my Database tables are not created, so planning to do testing on MS Access database. While creating JDBC communication channel, it is asking JDBC driver and Connection details. Could you please provide me the above said details.
Thanks in Advance.
Regards,
sai.

Hi,
For JDBC you first need to install the JDBC drivers on XI:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/3867a582-0401-0010-6cbf-9644e49f1a10
Search on SDN with JDBC adapter will give you the details of the parameter.
Refer the below web log:
/people/sap.user72/blog/2005/06/01/file-to-jdbc-adapter-using-sap-xi-30
Thnx
Chirag

Delete and Write Access for PA infotypes

Hi Gurus,
Our clients require managing Write and Delete access separately for PA infotypes. Example, an employee can have Write access (able to save values in infotypes) but s/he will not be able to Delete this infotype record one it has been Saved.
How do we implement this?
In the standard authorizatio object for HR master data, P_ORGIN you only have M, R and W. If an employee was given a W access, s/he'll also have Delete access.
Is there a way on how to do this?
<removed by moderator>.
Thanks.
Olekan Babatonde
Edited by: Suresh Datti on Dec 28, 2009 6:21 PM

Olekan,
First of all, if your managing PA Infotypes, you're also using the P_PERNR object authorization.
Next, you're right. For SAP, the Write and Delete permissions are the same authorization level (W).
To avoid build a "Z" solution, i suggest you use the "block" permission in one of these ways:
1) assign the S authorization level (Symmetric) for write access using the Symmetric Double Verification Principle; that is, user 1 do changes to an infotype and data is saved with "blocked" status, then user 2 save or delete data entered by user 1. Another day, user 2 do changes to an infotype, then data is saved with "blocked" status and only user 1 will be able to save or delete data entered by user 1.
2) assign the E and D authorization level for write access using the Asymmetrical Double Verification Principle; that is, if user 1 has E, and user 2 has D, then the user 1 ever maintain data with "blocked" status and never will be able to save or delete data. And user 2 ever will be able to "unblocked" data (for save or delete) and never will be able to maintain data without "blocked" status.
Check this links ([1|http://help.sap.com/saphelp_erp60_sp/helpdata/en/fd/4bba3b3bf00152e10000000a114084/content.htm] y [2|http://help.sap.com/saphelp_erp60_sp/helpdata/en/d3/4bba3b3bf00152e10000000a114084/content.htm]) to find out more information about these principles.
Kind regards

Batch program to restrict PERNRS for read access to an infotype

Hi,
Is there any standard program that can be used to restrict a list of PERNRS for read access to a particular infotype for a certain amount of time?
The requirement is to restrict IDs(except batch ID) to change/create any time data in IT 2001/2002 while doing infotype load as well as postload hour balancing activities.
We dont want to lock out the PERNR or USERID for mantaining any other infotype data at the same time.
Appreciate all your suggestions!
-Sujit

Hi ,
Actually it was nice Question , the answer was very straight .
1. please copy the profile role of the HR PERSONAL DATA which will have full authorise for all infotype's , in that give active only to 'Display' for infotype 2001/2002 . and you can tell to basis which ever infotype want to be the similar action . so that your problem will be solved.
2.SAP basis person knows how to give only 'Display' active , and make ( Create , Delete ) to inactive.
3.So ,finally the latest role should be assigned to group of PERNRS ,Even this is also basis work . he can group all the PERNRS or by personal area or by personnal sub area or by employee group or by employee sub group .
Girish

Regarding oss access key

hi experts
while am opening the se38. it can ask the oss access key.
i dont know where it is available? i searched in forum. but i cant grasp the forum clearly. pls rectify it....
regards
surender

Hi
Go through the link given below :
access key
With Regards
Nikunj Shah

Regarding SAP Access Key

Hi Gurus,
How can we find out the access key details of a particular SAP installation.
( the installation is registered one) . Please help me in this regard.
Thank You in Advance,
Vikram Krishna.

Dear Vikram Krishna,
If you are referring to Installation Number:
Follow the menu path in SAP GUI System -> Status, Installation number under SAP System Data.
Access Keys:
https://websmp202.sap-ag.de/support under Keys and Requests (You would need OSS username and password)
Regards,
Naveen.

Regarding database access in Struts

Hi All,
My problem-
I am inserting a value in database(MS ACCESS) using struts frame work.for the first time when i am executing the program the value is inserted but then again when i executed that program no insertion happens but it gives no error or exception. can u say what may be the problem for it?

Are you using validation framework in struts. I think your application properties file is missing

Need design issue help regarding database access..

I have an web application running on tomcat that will have access to a database connection pool. I have found a free java api that provides connection pooling. The code i will be using is:
ConnectionPool pool = new ConnectionPool("local",
     10,
     30,
     180000, // milliseconds
     url,
     "b_lightyear",
     "BeyondInfinity");
pool.getConnection();
I need to put the above code somewhere where all my beans and classes can access it easily. I thought i would create a static class called DBConnector and have a getConnection() method to return a connection from the pool. However i would want the DBConnector class to be initialised on tomcat startup so that all the database pool can be initialised then. I dont see how i can do this? I know i can make a servlet initialised on tomcat startup but if i put the above code in a servlet how will i access it in my beans and java classes. I wont have the request, response objects available.
Discuss.

You should not need to 'control' access to the pool via a static method. The pool itself is probably implemented as a Singleton anyway. BTW, what pool are you using? DBCP from Jakarta is popular, stable and free.
You use the Servlet's init() method for startup tasks and its destroy() method for clean-up tasks. Initialize your pool in the init() method of your Servlet. Simple. Just make sure you don't declare instance variables in your Servlet, can lead to thread-safety issues.
BTW, love the Toy Story allusion! :^)
- Saish

Regarding database access through jndi

Hi All,
Plz tell me the steps.
I want to access data from MS Access, and i want to do it using JNDI .
what should be added in struts-config.xml, web.xml .
if any one have example code that will be better to understand.

Nothing necessary added to struts-config.xml
What server are you using? The JNDI configuration for each server is slightly different.
The page for Tomcat is here: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/jndi-datasource-examples-howto.html
I would follow that apart from instead of editing server.xml, put the JNDI configuration in a "mycontext.xml" file as defined here:
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/host.html#Automatic%20Application%20Deployment
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/context.html
Cheers,
evnafets

Regarding database access performance

Hi,
I am pasting the code which i have used to access the database, i m displaying the report in alv format....when i checked it in se30 the results for database access are quite high...how can i optimize the performance.......
SELECT KUNNR
       NAME1
INTO TABLE IT_KNA1
FROM KNA1
WHERE KUNNR IN S_KUNNR.
SELECT VBELN
       KNUMV
       KUNNR
INTO TABLE IT_VBAK
FROM VBAK
FOR ALL ENTRIES IN IT_KNVV
WHERE SPART = IT_KNVV-SPART
AND KUNNR = IT_KNVV-KUNNR.
IF SY-DBCNT = 0.
MESSAGE E001(Z_MESG).
ENDIF.
SELECT KNUMV
       KSCHL
       KAWRT
INTO TABLE IT_KONV
FROM KONV
FOR ALL ENTRIES IN IT_VBAK
WHERE KNUMV = IT_VBAK-KNUMV.
SELECT VBELN
       MATNR
       ARKTX
       WERKS
       NETPR
INTO TABLE IT_VBAP
FROM VBAP
FOR ALL ENTRIES IN IT_VBAK
WHERE WERKS IN S_WERKS
AND   MATNR IN S_MATNR
AND   VBELN = IT_VBAK-VBELN.
IF SY-DBCNT = 0.
MESSAGE I002(Z_MESG) with s_werks s_matnr.
ENDIF.
SELECT VBELN
       FKIMG
       NETWR
       AUBEL
       PRCTR
INTO TABLE IT_VBRP
FROM VBRP
FOR ALL ENTRIES IN IT_VBAP
WHERE AUBEL = IT_VBAP-VBELN.
SELECT VBELN
       VGBEL
INTO TABLE IT_LIPS
FROM LIPS
FOR ALL ENTRIES IN IT_VBAP
WHERE VGBEL = IT_VBAP-VBELN.
SELECT DMBTR
       XBLNR
INTO TABLE IT_BSIS
FROM BSIS
FOR ALL ENTRIES IN IT_LIPS
WHERE ( HKONT = '0004111013' OR HKONT = '0004111008' OR HKONT = '0004111009' )
AND BUDAT IN S_BUDAT
AND XBLNR = IT_LIPS-VBELN.
IF SY-DBCNT = 0.
MESSAGE I003(Z_MESG) with S_BUDAT.
ENDIF.

1. Replace your FOR ALL ENTRIES by RANGES
2. If you would like to use FOR ALL ENTRIES, try to prepare the internal table with only one entry by key (ex the select on KONV, KNUMV is not the key of IT_VBAK, so you will access several times the same key in the database).
I think your reponse time problem is due to the FOR ALL ENTRIES. If you make an ST05 you will show that this command make several access instead of a simple RANGES.
Sometimes it's better to access all the table than select requiered entry (for ex. KNA1).
Fred

Regarding ristricting access to perticular infotype.

Similar Messages

Maybe you are looking for