Restrict Authorisation of "CLSD" Status
Hi,
I want to block the activity for the users for Creating & Revoking of "CLSD" status in Process Order. Please guide me for the authorisation object or any suggestion.
Thanks & Regards
Aniruddha
Dear
You can control through user status with authorization code.
Create user status in transaction BS02 assign the object types and transaction control. assign the authorization code to the user profile/role. Assign the user status to the order type in transaction OPJH.
Regards
Soundar
Similar Messages
-
Restrict Authorisation not to change a field in IO master
Hi,
I want to know how to restrict authorisation for few users not to change the 'Profit Center' field in the IO master eg user1 should have authorisation to change IO master other than 'Profit Center' field. .
The t-code is KO02 (change Internal Order) and in the assignment tab there is a field for 'Profit Center' and I want to restrict the user from changing this field but should be able to change other fields.
Please let me know how this can be achieved.
Thanks
V.SHi VS,
You can try this yourself, try giving full access of tcode KO02 to a test Id and put a trace on it. And now try to login with this test Id and change the "Profit Centre" field, now looking at the trace file you will get to know which is the authorization object being cheked during this whole process.
Now try restricting those objects and continue negative testing with the test Id till you acheive your objective. -
Restricting Authorisations for different controlling areas
Hi SAP Gurus,
I am facing a problem in restricting authorisations for CO Transactions in different controlling ares. We have a new controlling area started recently. But the CO user in this new controlling area is able to create master data in a differnt controlling area (i.e. the old existing controlling area). we have already maintained the new controlling area as org. unit for the relevant company code.
Giving below an example.
For t.code KAH1 & KAH2, we have maintained authorization object K_CCA for New Cont Area with Cost Center group X (Where X is standard hierarchy). Even after that user is able to make changes in KAH2 for another controlling area. We also tried to put value of profit centers instead of "*". This too is not helping.
Similarly the user is able to create master data in Tr. Codes KO01 / 02, KE51 / 52, KCH2 etc where this user in new controlling area is able to create / change master data from exising old controlling area.
Can anyone help me please ?
Thanks.Dear Prasad,
Create a new Role using T Code PFCG and assign the new controlling area and the other relevant
details and you can assign it to the users.
I think in your case that particular user is assigned many roles where he has got * value and its allowing
to make changes on some other controlling area.
Regards
Mangalraj.S -
Order with CLSD status selected
Hey All
I am not sure if this is question in CO but While calculating variances the orders with status as CLSD are also being selected. The system in the output shows the orders with CLSD status which is causing long runtime issues. I am sure that orders with status as CLSD are excluded from processing . Can anyone help me on this
Thanks
AnkurHi ,
You need to regulary set the deletion flag in the closed process orders . Please refer Note 397110 - Performance: Archiving manufacturing orders.
Also refer Note : 393686 on other performance related issues in Cost Object Controlling..
Regards
Sarada -
Proces Order TECO and CLSD status
Dear All,
I want to make user status TECO & then CLSD to my multiple process order.
By the t code COHV user status TECo can possible with single transaction.
But how can i make CLSD status to my multiple process order?Hi ,
Enter production orders in COHV and select tab "Mass processing"
in function field select "Complete" and execute.
I have mentioned the Pre requites for closing order.
Pre requites of settling order.
1. Order status should be TECO.
2. Order should have settlement rule.
Once you have settled the order and no open quality inspection lot or any open error is pending then you can close the production order through above mentioned step.
Regards,
Vishal -
SOLAR01 authorisations - restruct document status that are visible.
I have been trying to restrict the documents that my users can see. I have used the IMG node "Assign Status Values for Read Authorisation" which refers to composite role SAP_SOL_RE_COMP. I have selected only "RELEASED" as the value in this IMG node.
I have copied this role into the customer namespace as stated in the help documentaiton and completed it as best I can however I cannot get the restriction I want - I always get all documents shown.
It seems that the roles
SAP_STWB_2_READ
SAP_STWB_INFO_READ
Have the necessary restriction? I am guessing that S_IWB_ATTR is the correct object - is this wrong??
although the documentation referrs to S_IWB I cannot find anything within that object that would restrict by document status - please correct me if I am wrong.
I have assumed that Attribute of document (IWB_PRPNAM) is the correct attribute to change?? I have chosen IWB_STATE - is this correct?
I have then set the attribute value to RELEASED.
Clearly the assumptions I have made are completely incorrect since the authorisation seems to be being completely ignored.
How can I restrict the documents that my user see.
regards
MarinaHello Marina,
I am not a security person, but have you checked the SAP Solman Security Guide?
Also please have a quick look at this post as it might give a hint -
restrict access to upload/download documents to/from solman
Regards,
Paul -
How to restrict user to change status.
Dear All,
we want to restrict users to change the status from set to assign to released status.
is there any authorization object to restirct user to change status?
i was trying with object CPRO_DPO Create Project Definition with activity 43 release ,but unable to do so.
Please do need ful
Regards
RavindraHi Ravi,
probably you need to create user status profile.
Use TA BS02 to create status profile
here you have to add authorization key which needs to be defined in BS52
use b_user_stat auth object to give profiles in custom roles in PFCG
Thus you can block access to change status
Niranjan
Let me know if it helps
Points welcome
Thanks Mathias
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM -
I would like to know any Function Module to complete (Business) the PM order since the calling transaction approach is not preferred.
I tried the Function module STATUS_CHANGE_INTERN to set the system status to CLSD. The PM order changed the system status but the order can still be edited by the user.All it does is doing an update into the JEST table. The changes that are observed in transaction after manually doing an Business Complete ( for example, all the fields greying out) cannot be achieved in this function module.
I just came across a bapi BAPI_ALM_ORDER_MAINTAIN, but i guess its mainly dealing with changing user status please verify and let me know.
If i get any on changing internal status, will let u know. -
Hi,
I am from PP functional .
When I am settling a particular production order, I am getting the error as follows:
Debit from actual settlement not allowedu201D (Sys. Status CLSD. Object VBxxxxxxxxx30 )
Diagnose : It can't be performed because sys. status CLSD forbids it.
Procedure: To perform above, sys. Status CLSD of object VBxxxxxxx30 must be reset.
Pl. help me to how to reset this?
(I can see this object in Sales order line item status)
Also, let me know, when is the sales order getting the Status CLSD? Is it automatic or manual?
Regards,
MadhavaThanks
BS051
Madhava -
Colective Settlement and "CLSD"Status for Production and Maintenance Orders
Hi dear experts,
Is that possible to use transaction KO8G for collective settlement of Production Orders? Apparently it only works for Maintenance Orders.
The same applies for transaction CO99 for getting "Closed" status in Orders. Apparently it does not take the Production Orders, even if the selection "With CO Production Orders" is active. Is there any additional configuration we should do?!
We would like to do settlement (and mass set "Close" status after) for Production and Maintenance Orders at the same time.
Thanks in advance,
Lígia MoreiraHi,
You can use CO88 for settlement of production orders. Normally, CO99 should take production orders if the flag is switched. Do you receive any error when you do it?
Regards,
Eli -
Restrict authorisation in SQ02/SQ03 to access transport functions
We would like to give our users rights to SQ02 & SQ03, but in this transaction we also have a transport section to import query transport.
Is there a way to deactivate this button?
kr,
Stef
Edited by: Julius Bussche on Nov 20, 2009 7:15 PM
Please use meaningfull subject titles and don't cross-postRun trace ST01 and see if there is some authority check on S_CTS_ADMI or S_TRANSPRT and if yes see if you can restrict this via these auth objects.
-
System Status authorisation to be restricted
Hi
Anybody know how i can restrict the authorisation on system status. I know the way by creating the user status and assigning a authorisation key. But i want to know if any way to assign direct control on system status. The exact requirement is that authorisation has to be restricted from assigning system status TECO.
Regards
AshishHi,
In sap you can control system statuses by using of user statuses. Where you can control various business transaction.
SAP does not provide an authorization check for setting system statuses for this refer below link
http://help.sap.com/saphelp_erp60_sp/helpdata/en/ee/41f79346ee11d189470000e829fbbd/content.htm
Regards,
Sandeep
Edited by: Sandeep Theurkar on May 26, 2009 12:22 PM -
Why not all fields dimmed or show in display mode after system status TECO and CLSD for Project
Dear All,
When Sets the system status TECO or even CLSD all fields for WBS Elements are not goes to Display mode. User can still edit them or change then.
The fields are:
1. WBS Element Description, technical name: PRPS-POST1
2. Person responsible number, technical name: PRPS-VERNR
Other Progress and Customer enhancement tab pages for WBS Element all fields there also editable in TECO and CLSD system status.
The client do not want to set LOCK system status for master data option.
Is there any enhancement or standard way of doing that?
Regards
Saqib UsmanDear Saqib,
Its a standard behavior of the system. In CLSD status, transactional data like Procurement gets restricted along with WBSE no and its scheduling details. But it allows to you change like WBSE desc./Responsible person.
Also go thru the below link for clarification of WBSE system status:
http://help.sap.com/saphelp_470/helpdata/en/ee/41f82246ee11d189470000e829fbbd/content.htm
For locking all master data, as above experts suggest, you should use MDLK/LKD.
Regards
Shishir -
Authorisation Restrictions in PR05
Hi Experts,
We want to restrict Authorisatons in t-code PR05 userwise ie.,
The scenario is X user will created the Trvl Exp. in PR05
Head-HR ( Y user) will approve the Trip ( only display)
Pre-Audit(Z User) will Verify the Expense Voucher and Trip details do corrections if required, save & settle the Trip
Creater should not have Change
Approver should have only disply and approve
pre-audit only change and settle
Now how can I restrict Authorisation Userwise
Thanks in advance
ChaitraHi Chaitra
There is very good documentation for this so you should be achieve this via PFCG and the authorization objects P_TRAVL/F_TRAVL and for the values for the authorization fields BUKRS, KOSTL, PERSA, PERSG, - remember though that the object P_ORIGINCON (structural authorization) is not checked in travel.
Values of the individual authorization fields:
The authorization field AUTHC
In the components HR and Travel Management (FI-TV) the authorization
level is defined using the field AUTHC. The following authorization
level values are possible:
Value Authorization for
R Read (display travel plans)
W Maintain SAP data (create/change travel plans)
A Approve travel plans
B Book in connected reservation system
C Book approved trips in connected reservation system
Q Create trip templates
All operations
You can only specify the values 'W', 'A', 'B' and 'C' together with 'R'
and you must specify the value 'Q' together with 'R' and 'W'.
The authorization field AUTHP
In the field AUTHP the value for the personnel number check must be
defined.
Value Authorization for:
O Own personnel number only
E All personnel numbers except own
All personnel numbers
If the authorizations in the AUTHP field have the value 'O' or 'E', theassignment user name/personnel number must be defined in the HR Infotype 0105 (communication), subtype 0001 (system user name SAP system).
Note 574467 will also help as BAdi for other requirements and please have a look at also at the following User Roles in PFCG. You can see also the documentation in SAP Help->http://help.sap.com-> Financial Accounting->Travel Management->Roles in Travel Management.
SAP_FI_TV_ADMINISTRATOR Travel Management Administrator
SAP_FI_TV_ADVANCE_PAYER Trip Advance Payer
SAP_FI_TV_MANAGER_GENERIC Trip Approval Manager
SAP_FI_TV_TRAVEL_ASSISTANT Travel Assistant
SAP_FI_TV_TRAVELER Traveler
SAP_FI_TV_TRAVEL_MANAGER Travel Manager
So for this if you assign the role of Traveler for the end user (creator) given them O and W authorizations only for the object and assign this to the role in PFCG, second person Trip approval manager role with E and A auth and 3rd advance payer role with whatever authorization is required. -
Sales doc items with the status CLSD ARE being selected for month-end
We are working to improve month-end processing time for Sales Orders We use SAPKKA12 to set CLSD status on line items
SAP Help states: be sure that the status CLSD (closed) is set for all sales document items that you do not want to include in the period-end closing process. The sales document items with the status CLSD are then not selected for processing in the period-end closing process. Use report program SAPKKA12 to set the status.
This use to work (in 4.0). I have been on other projects and just brought back to this after several years (now in 5.0). Testing today shows that orders with CLSD status are being selected for month-end process.
Any ideas why this is so? System is selceting over 300,000 orders when well over half of them are set to CLSD. I do get a message that the order is not relevant to processing, but selecting the order and logging the message take time. and the logs are VERY long.
thanksDoes any one else have this issue that Sales documents with status CLSD are selected by RA (KKAK)?
In just one of our jobs, i get this Basic List
Perform actual results analysis 31273
Not relevant 103894
Error 2306
Objects Selected 137,473
75% of the orders are CLSD. and the system is still counting them. (we do not out put information messages)
I do understand that the orders are not analyzed, but all documentaion states that CLSD status is not selected, and in our 5.0 system, they are selected. In our 4.0 system, they were not selected.
Does this truely work for anyone in a 5.0 system?
Thanks
Althea
Maybe you are looking for
-
Removing unused data sources in Web Analysis
I created report with charts and spreadsheets and it created its associated data source object in Web Analysis. But the cube associated with data sources is renamed by my admin. so old data sources are corrupted. How do I remove those old data source
-
Why can I no longer transfer files to an external HD?
To make more space on my 2010 macbook air (OS 10.9.4) I purchased a Toshiba 1TB external hard drive (formatted Mac OS Extended (Journaled). To free space I placed a large folder onto it, and also set up Time Machine. When I plugged it in a few days l
-
Has Anyone Got Audacity To Work?
I just installed the updated Audacity package and I keep getting a "Can't Access Audio Layer" message at program startup. Anyone have a suggestion on how to fix this? Lee
-
HELP! I had iPhoto on my mac, for some reason it was not responding or damaged. down loaded a new version but can't find my photos. any ideas please. I thought once on the mac always on the mac.
-
How To find your iCloud Backup?!?!?!??!?!?!??!?!!!!??!!!!