Restrict Authorisation of "CLSD" Status

Hi,
I want to block the activity for the users for Creating & Revoking of "CLSD" status in Process Order. Please guide me for the authorisation object or any suggestion.
Thanks & Regards
Aniruddha

Dear
You can control through user status with authorization code.
Create user status in transaction BS02 assign the object types and transaction control. assign the authorization code to the user profile/role. Assign the user status to the order type in transaction OPJH.
Regards
Soundar

Similar Messages

  • Restrict Authorisation not to change a field in IO master

    Hi,
    I want to know how to restrict authorisation for few users not to change the 'Profit Center' field in the IO master eg user1 should have authorisation to change IO master other than 'Profit Center' field. .
    The t-code is KO02 (change Internal Order) and in the assignment tab there is a field for 'Profit Center' and I want to restrict the user from changing this field but should be able to change other fields.
    Please let me know how this can be achieved.
    Thanks
    V.S

    Hi VS,
    You can try this yourself, try giving full access of tcode KO02 to a test Id and put a trace on it. And now try to login with this test Id and change the "Profit Centre" field, now looking at the trace file you will get to know which is the authorization object being cheked during this whole process.
    Now try restricting those objects and continue negative testing with the test Id till you acheive your objective.

  • Restricting Authorisations for different controlling areas

    Hi SAP Gurus,
    I am facing a problem in restricting authorisations for CO Transactions in different controlling ares. We have a new controlling area started recently. But the CO user in this new controlling area is able to create master data in a differnt controlling area (i.e. the old existing controlling area). we have already maintained the new controlling area as org. unit for the relevant company code.
    Giving below an example.
    For t.code KAH1 & KAH2, we have maintained authorization object K_CCA for New Cont Area  with Cost Center group X (Where X is standard hierarchy). Even after that user is able to make changes in KAH2 for another controlling area. We also tried to put value of profit centers instead of "*". This too is not helping.
    Similarly the user is able to create master data in Tr. Codes KO01 / 02, KE51 / 52, KCH2 etc where this user in new controlling area is able to create / change master data from exising old controlling area.
    Can anyone help me please ?
    Thanks.

    Dear Prasad,
    Create a new Role using T Code PFCG and assign the new controlling area and the other relevant
    details and you can assign it to the users.
    I think in your case that particular user is assigned many roles where he has got * value and its allowing
    to make changes on some other controlling area.
    Regards
    Mangalraj.S

  • Order with CLSD status selected

    Hey All
    I am not sure if this is question in CO but While calculating variances the orders with status as CLSD are also being selected. The system in the output shows the orders with CLSD status which is causing long runtime issues. I am sure that orders with status as CLSD are excluded from processing . Can anyone help me on this
    Thanks
    Ankur

    Hi ,
    You need to regulary set the deletion flag in the closed process orders . Please refer Note 397110 - Performance: Archiving manufacturing orders.
    Also refer Note : 393686 on other performance related issues in Cost Object Controlling..
    Regards
    Sarada

  • Proces Order TECO and CLSD status

    Dear All,
    I want to make user status TECO & then CLSD to my multiple process order.
    By the t code COHV user status TECo can possible with single transaction.
    But how can i make CLSD status to my multiple process order?

    Hi ,
    Enter production orders in COHV and select tab "Mass processing"
    in function field select "Complete" and execute.
    I have mentioned the Pre requites for closing order.
    Pre requites of settling order.
    1. Order status should be TECO.
    2. Order should have settlement rule.
    Once you have settled the order and no open quality inspection lot or any open error is pending then you can close the production order through above mentioned step.
    Regards,
    Vishal

  • SOLAR01 authorisations - restruct document status that are visible.

    I have been trying to restrict the documents that my users can see.  I have used the IMG node "Assign Status Values for Read Authorisation" which refers to composite role SAP_SOL_RE_COMP.  I have selected only "RELEASED" as the value in this IMG node.
    I have copied this role into the customer namespace as stated in the help documentaiton and completed it as best I can however I cannot get the restriction I want - I always get all documents shown.
    It seems that the roles
    SAP_STWB_2_READ
    SAP_STWB_INFO_READ
    Have the necessary restriction?  I am guessing that S_IWB_ATTR is the correct object - is this wrong??
    although the documentation referrs to S_IWB I cannot find anything within that object that would restrict by document status - please correct me if I am wrong.
    I have assumed that Attribute of document (IWB_PRPNAM) is the correct attribute to change??  I have chosen IWB_STATE - is this correct?
    I have then set the attribute value to RELEASED.
    Clearly the assumptions I have made are completely incorrect since the authorisation seems to be being completely ignored.
    How can I restrict the documents that my user see.
    regards
    Marina

    Hello Marina,
    I am not a security person, but have you checked the SAP Solman Security Guide?
    Also please have a quick look at this post as it might give a hint -
    restrict access to upload/download documents to/from solman
    Regards,
    Paul

  • How to restrict user to change status.

    Dear All,
    we want to restrict users to change the status from set to assign to released status.
    is there any authorization object to restirct user to change status?
    i was trying with object CPRO_DPO Create Project Definition with activity 43 release ,but unable to do so.
    Please do need ful
    Regards
    Ravindra

    Hi Ravi,
    probably you need to create user status profile.
    Use TA BS02 to create status profile
    here you have to add authorization key which needs to be defined in BS52
    use b_user_stat auth object to give profiles in custom roles in PFCG
    Thus you can block access to change status
    Niranjan
    Let me know if it helps
    Points welcome
    Thanks Mathias
    Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM
    Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM

  • Plant Maintenance CLSD Status

    I would like to know any Function Module to complete (Business) the PM order since the calling transaction approach is not preferred.
    I tried the Function module STATUS_CHANGE_INTERN to set the system status to CLSD. The PM order changed the system status but the order can still be edited by the user.

    All it does is doing an update into the JEST table. The changes that are observed in transaction after manually doing an Business Complete ( for example, all the fields greying out) cannot be achieved in this function module.
    I just came across a bapi BAPI_ALM_ORDER_MAINTAIN, but i guess its mainly dealing with changing user status please verify and let me know.
    If i get any on changing internal status, will let u know.

  • Reversal of CLSD status

    Hi,
    I am from PP functional .
    When I am settling a particular production order, I am getting the error as follows:
    Debit from actual settlement not allowedu201D (Sys. Status CLSD. Object VBxxxxxxxxx30 ) 
    Diagnose : It can't be performed because sys. status CLSD forbids it.
    Procedure: To perform above, sys. Status CLSD of object VBxxxxxxx30 must be reset.
    Pl. help me to how to reset this?
    (I can see this object in Sales order line item status)
    Also, let me know, when is the sales order getting the Status CLSD? Is it automatic or manual?
    Regards,
    Madhava

    Thanks
    BS051
    Madhava

  • Colective Settlement and "CLSD"Status for Production and Maintenance Orders

    Hi dear experts,
    Is that possible to use transaction KO8G for collective settlement of Production Orders? Apparently it only works for Maintenance Orders.
    The same applies for transaction CO99 for getting "Closed" status in Orders. Apparently it does not take the Production Orders, even if the selection "With CO Production Orders" is active. Is there any additional configuration we should do?!
    We would like to do settlement (and mass set "Close" status after) for Production and Maintenance Orders at the same time.
    Thanks in advance,
    Lígia Moreira

    Hi,
    You can use CO88 for settlement of production orders. Normally, CO99 should take production orders if the flag is switched. Do you receive any error when you do it?
    Regards,
    Eli

  • Restrict authorisation in SQ02/SQ03 to access transport functions

    We would like to give our users rights to SQ02 & SQ03, but in this transaction we also have a transport section to import query transport.
    Is there a way to deactivate this button?
    kr,
    Stef
    Edited by: Julius Bussche on Nov 20, 2009 7:15 PM
    Please use meaningfull subject titles and don't cross-post

    Run trace ST01 and see if there is some authority check on S_CTS_ADMI or S_TRANSPRT and if yes see if you can restrict this via these auth objects.

  • System Status authorisation to be restricted

    Hi
    Anybody know how i can restrict the authorisation on system status. I know the way by creating the user status and assigning a authorisation key. But i want to know if any way to assign direct control on system status. The exact requirement is that authorisation has to be restricted from assigning system status TECO.
    Regards
    Ashish

    Hi,
    In sap you can control system statuses by using of user statuses. Where you can control various business transaction.
    SAP does not provide an authorization check for setting system statuses for this refer below link
    http://help.sap.com/saphelp_erp60_sp/helpdata/en/ee/41f79346ee11d189470000e829fbbd/content.htm
    Regards,
    Sandeep
    Edited by: Sandeep Theurkar on May 26, 2009 12:22 PM

  • Why not all fields dimmed or show in display mode after system status TECO and CLSD for Project

    Dear All,
    When Sets the system status TECO or even CLSD all fields for WBS Elements are not goes to Display mode. User can still edit them or change then.
    The fields are:
    1. WBS Element Description, technical name: PRPS-POST1
    2. Person responsible number, technical name: PRPS-VERNR
    Other Progress and Customer enhancement tab pages for WBS Element all fields there also editable in TECO and CLSD system status.
    The client do not want to set LOCK system status for master data option.
    Is there any enhancement or standard way of doing that?
    Regards
    Saqib Usman

    Dear Saqib,
    Its a standard behavior of the system. In CLSD status, transactional data like Procurement gets restricted along with WBSE no and its scheduling details. But it allows to you change like WBSE desc./Responsible person.
    Also go thru the below link for clarification of WBSE system status:
    http://help.sap.com/saphelp_470/helpdata/en/ee/41f82246ee11d189470000e829fbbd/content.htm
    For locking all master data, as above experts suggest, you should use MDLK/LKD.
    Regards
    Shishir

  • Authorisation Restrictions in PR05

    Hi Experts,
    We want to restrict Authorisatons in t-code PR05 userwise ie.,
    The scenario is  X user will created the Trvl Exp. in PR05 
    Head-HR ( Y user) will approve the Trip ( only display)
    Pre-Audit(Z User) will  Verify the Expense Voucher and Trip details do corrections if required, save & settle the Trip
    Creater should not have Change
    Approver should have only disply and approve
    pre-audit only change and settle
    Now how can I restrict Authorisation Userwise
    Thanks in advance
    Chaitra

    Hi Chaitra
    There is very good documentation for this so you should be achieve this via PFCG and the authorization objects P_TRAVL/F_TRAVL and  for the values for the authorization fields BUKRS, KOSTL, PERSA, PERSG, - remember though that the object P_ORIGINCON (structural authorization) is not checked in travel.
    Values of the individual authorization fields:
    The authorization field AUTHC
    In the components HR and Travel Management (FI-TV) the authorization
    level is defined using the field AUTHC. The following authorization
    level values are possible:
    Value  Authorization for
    R      Read (display travel plans)
    W     Maintain SAP data (create/change travel plans)
    A      Approve travel plans
    B      Book in connected reservation system
    C      Book approved trips in connected reservation system
    Q      Create trip templates
          All operations
    You can only specify the values 'W', 'A', 'B' and 'C' together with 'R'
    and you must specify the value 'Q' together with 'R' and 'W'.
    The authorization field AUTHP
    In the field AUTHP the value for the personnel number check must be
    defined.
    Value  Authorization for:
    O      Own personnel number only
    E       All personnel numbers except own
          All personnel numbers
    If the authorizations in the AUTHP field have the value 'O' or 'E', theassignment user name/personnel number must be defined in the HR Infotype   0105 (communication), subtype 0001 (system user name SAP system).
    Note 574467 will also help as BAdi for other requirements and please have a look at also at the following User Roles in PFCG.  You can see also the documentation in SAP Help->http://help.sap.com-> Financial Accounting->Travel Management->Roles in Travel Management.
       SAP_FI_TV_ADMINISTRATOR    Travel Management Administrator
       SAP_FI_TV_ADVANCE_PAYER    Trip Advance Payer
       SAP_FI_TV_MANAGER_GENERIC  Trip Approval Manager
       SAP_FI_TV_TRAVEL_ASSISTANT Travel Assistant
       SAP_FI_TV_TRAVELER         Traveler
       SAP_FI_TV_TRAVEL_MANAGER   Travel Manager
    So for this if you assign the role of Traveler for the end user (creator) given them O and W authorizations only for the object and assign this to the role in PFCG, second person Trip approval manager role with E and A auth and 3rd advance payer role with whatever authorization is required.

  • Sales doc items with the status CLSD ARE being selected for month-end

    We are working to improve month-end processing time for Sales Orders  We use SAPKKA12 to set CLSD status on line items
    SAP Help states: be sure that the status CLSD (closed) is set for all sales document items that you do not want to include in the period-end closing process. The sales document items with the status CLSD are then not selected for processing in the period-end closing process. Use report program SAPKKA12 to set the status.
    This use to work (in 4.0). I have been on other projects and just brought back to this after several years (now in 5.0).  Testing today shows that orders with CLSD status are being selected for month-end process.
    Any ideas why this is so?  System is selceting over 300,000 orders when well over half of them are set to CLSD.  I do get a message that the order is not relevant to processing, but selecting the order and logging the message take time. and the logs are VERY long.
    thanks

    Does any one else have this issue  that Sales documents with status CLSD are selected by RA (KKAK)?
    In just one of our jobs, i get this Basic List
    Perform actual results analysis      31273      
    Not relevant                                                 103894
    Error                                                        2306      
    Objects Selected                                    137,473
    75% of the orders are CLSD.  and the system is still counting them. (we do not out put information messages)
    I do understand that the orders are not analyzed,  but all documentaion states that CLSD status is not selected, and in our 5.0 system, they are selected.  In our 4.0 system, they were not selected.
    Does this truely work for anyone in a 5.0 system?
    Thanks
    Althea

Maybe you are looking for