Restrict HR tables

Hi
Could you pls tell me How to restrict HR tables in S_TABU_DIS and display all other
thanks in Advance

Hi Prasad,
As I said, identify all the authorisation groups placed on the HR tables and make sure that these are <i>not</i> included in S_TABU_DIS for the normal users.
Your HR team will tell you exactly which tables contain sensitive data. All the tables that don't have an authorisation group assigned to them (you can see this in table TDDAT) should have an authorisation group assigned against them. Not all HR tables are just in the H* and P* name spaces so you need to get the input from someone who properly understands the tables (you may be able to find a list somewhere here: SAP ERP Human Capital Management (SAP ERP HCM))
This way you can split table access between Non-HR (They don't have any HR relevant table auth groups in S_TABU_DIS field DICBERCLES) and HR (They have access to the restricted auth groups).
It's not a straightforward piece of work as access to tables via SE16 etc (I assume that's why you need to protect the data) is not designed for granular access without a considerable amount of additional work being involved.
I hope that answers your question

Similar Messages

Restricting certain tables from being viewed

Post Author: Adam00
CA Forum: Data Connectivity and SQL
Hello, I need assistance with restricting some tables within Crystal.I have an SQL database with multiple tables, some of which we do not want to be seen through Crystal reports as they contain sensitive information. Is there a way in which to exclude a table or two from the crystal database view???? Thanking you in advance.

Post Author: V361
CA Forum: Data Connectivity and SQL
Try this, file, options, database, in the data explorer there is a table name like, owner like box. Try excluding them there... I pulled this from the help section
Table name LIKE
This box allows you to enter the SQL LIKE function to specify the kinds of table names you want to appear in the Database Expert. You can use the underscore character (_) and the percent sign character (%) as wildcards with this function. The underscore character specifies any single character, and while the percent sign signifies any character string. For example, DAV_ matches DAVE only, while DAV% matches both DAVE and DAVID. Table name Like C% would display only those tables that have a table name beginning with the letter C.
Owner LIKE
This box works exactly like the Table name Like box except that the LIKE function here is used to select the Owner (or Creator or Alias) of the table, not the table name itself. For example, Owner Like C% would display only those tables that have an owner beginning with the letter C.

How to restrict a table with its set of data based on a column value in it?

Hi,
I have a scenario in which I have to show a set of data of a pivot table by restricting data based on a column value. I am creating BIP report whose source is from BIA ie.RPD. Based on a column value I want to restrict the data being displayed in the table. Since I also want the hidden data in the first table to be displayed in another table in the same report I cannot restrict the data at the query level i.e at RPD or at BIA. For this reason I used
<?xdofx:if saw3_ = 1?>
the pivot table
<?end if?>
But it does not restrict any data.
Also I tried using the if condition inside the table before the row level looping happens. But no good show even then.
How can I forgo this problem?
Regards,
The MM

Hi,
See : http://download.oracle.com/docs/cd/E12096_01/books/PubUser/T421739T481157.htm#4535373 regarding column and row.
Regards,
Colectionaru

Restrict HR Tables on APPS Schema

Hi All
I want to restrict some HR tables like per_assignments_f ,per_all_people_f not access on APPS schema through their terminals or machine only two users can access it on APPS schema.
it is honorable for me if some one will help.
Edited by: user9947371 on Oct 1, 2012 3:32 AM

Hello,
first of all some version information can help.
But take a look into the Virtual Private Database function or the database vault function.
http://www.oracle.com/webfolder/technetwork/de/community/dbadmin/tipps/vpd/index.html
http://www.oracle.com/us/products/database/options/database-vault/overview/index.html
regards
Peter

Restriction for table maintainence

Hello Gurus,
I am working on a SLO project, where i had merged 5 source systems to one system.
In few roles in source systems for table maintainence the authorization groups is maintained as '*' in production.
In source systems if they maintain * they would be able to display/change the data related to that system only.
But now in target system , if we maintain * in authorization group they are able to display/change the data related to all the 5 systems.
This need to restricted, Please provide some pointers on how this can be done.
This restriction should be in such a way that they should be able to change data related to the system they belong to .
Thanks,
Sanketh.

>
Sanketh Teegala wrote:
> Thanks for the reply prashanth.
>
> But , suppose consider users are maintaining table T001B. ( they are maintaining it through parameter transactions).
> as it is a standard table it has been assigned to same authorization group in both source and target systems.
> In source system , user is able to view data related only that system.
> But in target system user is able to view other system data also.
>
> How can i restrict this data ?
>
> Thanks,
> Sanketh.
Hi Sanketh,
I hope you are progressing with your SLO task. Once you have finished this project, most things will be simple in comparison
Unfortunately your requirement is not a simple one
You could use line item auths (nasty to set up IMO). Have a search for info on auth object S_TABU_LIN
Alternatively you could introduce auth checks on key auth fields (e.g. BUKRS, WERKS etc) into the method that you use to display table data. This would likely require new transactions with validation code that is performed before data is displayed or limits what can be updated. Another messy approach would be to use parameter transactions that pass in an org unit into the table selection criteria. You would need one for each org unit so will likely not be practicable.
What I would say is that focus on what is legally required. If none of it is required by law then focus on getting the rest of your consolidation done first and then address this in partnership with your project development team.

How to make restrictions in table maintenance

My requirement is to view the Z table through a transaction. Here we should have an option to delete a record but not to modify any field(s) of the record.
How to restrict the maintenance view only for deletion?.

Hi
I think you should update the program generated by Table Maintenance Generator.
You can update the dynpro: here you insert your module to control the attribute of input/output of your fields.
While you're in Table Maintenance Generator, go to Enviroment->Modification->Maintenance Screen
Max
Message was edited by: max bianchi

Restricting HR Tables fields via auth object?

Happy Holiday's everyone!
We have a custom tcode for Pricing Admin report which currenltly only has S_Tcode for an auth obj. It was combined in a role that we removed the HR authorization from and apparently these were interdependent but undocumented. Now the pricing transacation no longer functions.
Instead of just adding back the missing HR authorizations back into the custom Tcode I'm being asked if we can restrict PA00002 (the table being called in the program) to first name, last name and personnel number fields. Is there an authorization object that will let me restrict in this manner or do I need send this back to the developers to write in the code?
Or can I restict to these fields via authorization groups (something we are looking into implementing more next year).
Thanks
Kris Wise

That is a bad omen for the next year...
Try to change the code this year still to deliver only the fields you want from the infotype or go for an "existence check" which no authorization requirements as that is what you seem to be wanting.
Being custom code, you should post the problematic part to discuss a solution.
Cheers,
Julius

Restrict other Tables

Hi to all
i have two tables... employees and admin... In admin rows "users" if they enter the system they can enter all .. but when employees enter the system they can't enter reports.. The prob is ,it is possible to restrict employees , that coudn't enter in report when the employees rows "Users" enter the system.. anyone here know ..?

Yes in oracle fine grained access control is possible. You can restrict to user to see data only. Even you can allow to see only limited column data only by creating the view on few of the table columns and granting the permission on that view to other.
You can give update permission to other. you can give table alter permission.
This can be done through grant commands in oracle.
eg. user A and user B
user A contains table emp
desc emp
emp_nm varchar2(10),
emp_id number(4),
dept_no number(2),
add varchar2(50)
If you don't give any grant on this table emp to B user he will not be able to do any access this table.
By command "Grant select on emp to B' the user b will be able to see the emp table data only.
You can give update,alter table permission to B user as given bellow
Grant update on emp to B
Grant alter on emp to B
Even you can ristict B to see only few columns of emp table creating view
create view test_view as select emp_nm,emp_id from emp;
Then grant select on test_view to B;

Restricting the table maintanance

hi experts,
i have created a table and generated a table maintenance using "table maintanance generator" in utilities menu. in the authorization group i have put "w/o auth grp" and authorization object system has proposed S_TABU_DISP. i want to limit the access to this maintenance table only to certain users. i mean even the user has the SM30 access, certain people only should be able to enter or change the entries in the table. how do i achieve this
thanks

hi abaper,
thanks for the reply. i have gone through the link. so basically i have understood the funda of assigning authorisation group in the table maintenance generator screen and assigning to auth object. but i could not understand the second option , which is about tcode. lets say i have created a tcode for maintenance table , now how do i restrict that only certail users have access to that tcode. can u give me the detail steps required.
also what do u think is the best and safe option.
thanks

Restriction for table colum 'name'

Hi there,
I was trying to select from a table whose column name begins with a number.I get an error 'From keyword not found where expected'.
Oracle 10g version.
Table columns
1. annual_std_dev number
2. 24_hour_mean number
3. Year varchar2
select 24_hour_mean number from table1 where year = '2007'; Thanks

Becuase the number is at the beggining of the column name you have to use double quotes when using this column. And it had to be created using the double quotes
select "24_hour_mean" from table ...

Restrict specific tables from SE16/SE11

Dear Experts,
We have a requirement of lock from view of some specific tables in SE16/SE11. Please provide the solution.
Regards
Shishir

Create a new authorization group from SE54.
Go to SE54, then select Authorization group and click create / change.
Here create a new authorization object by clicking the new entries.
Then note the authorization group and assign the authorization group to table.
Go to SE11, enter the table name, click display. Then select Utilities - Assign Authorization Group.
Then click edit and enter the authorization group (which is created earlier)
Then in PFCG, for authorization object S_TABU_DIS enter the authorization group.
Now check the tables in SE16.

Applying a filter to restrict the tables displayed

using a new install of sql dev 2.1 (windows with jdk included in the download)
If i right click on the 'Tables' icon, then chose 'Apply Filter...' no matter what combination of the available options I chose I cannot get a reduced list of tables to be shown.
The applying of Filters to Views/packages/indexes/function/procedures etc works as expected.
'Tables/Apply Filter' worked ok on all the previous releases of sql dev I've ever used.
Anyone else experiencing this ?
Found the source of the problem.
By default a row with 'Exclude Rcycle bin' was always being shown, deleted this entire row and the filter works as in previous versions
Edited by: beneyr on 19-Feb-2010 11:59

You did install 2.1 in a new, clean directory, didn't you? If you overwrite a previous version, you'll get unexpected behaviour.
Regards,
K.

Restrict number of rows in table view

Can a table view has only as many rows as the actual rows in the underlying data structure. Actually, I have a table view with less than 5 rows, but the tableview shows like 15+ rows with the rest of the rows as blank(alternative colors for each empty rows). I know there is a style which can be applied to make the remaining empty rows show with white background. However, the height of the table view doesn't reduce to show only the actual number of rows. Is there a way we can restrict the height of the table view to the height of actual rows it has?
Thanks.

Hi. Add a listener to your data. Use prefheight to restrict the table height:
        table.setPrefHeight(data.size() * 25 + 25);
        data.addListener(new ListChangeListener<Person> () {
            public void onChanged(ListChangeListener.Change<? extends Person> c) {
               table.setPrefHeight(data.size() * 25 + 25);
        });It works only when data.size() * 25 + 25 < scene.height

Restrictions in Oracle Server (table size, record count ...)

Hello,
can somebody tell me if there are any restrictions of table size, record count, file size (apart from operation system restrictions) in Oracle 8.1.7 and 7.3.4?
Or where can i find information? I couldn4t find anything in the generic documentation.
Thank you in advance,
Hubert Gilch
SEP Logistik AG
Ziegelstra_e 2, D-83629 Weyarn
Tel. +49 8020 905-214, Fax +49 8020 905-100
EMail: [email protected]

Hello,
if you are executing a DBMS_AQ.DEQUEUE and then perform a rollback in your code the counter RETRY_COUNT will not go up by 1.
You are only reversing your own AQ action. This counter will be used only internally to log unsuccessful dequeue actions.
Kind regards,
WoG

How to update SIS Structure S503 table for Sales Order

Hi All,
I have a requirement where i want to restrict S503 table getting updated for an Item Category. Can somebody please help me in this.
Complete scenario:
I am splitting Sales Order line item into multiple Sub Line items based on batch determination. So for a line item 10 in Sales Order having ordered quantity 1000 i have 2 more sub line items 101 and 102 based on 2 available batches having 500 quantites each. When Sales Order is saved S503 have 1 entry for SO created but the ordered and confirmed quantity is doubled as it is picking it from main line item 10 as well as from 101 and 102.
Is there any way to restrict the main line item entry quantity from getting in to SIS structures.
Thanks,
Sudhir.

Hi,
There is a change in the requirement.
Scenario:
I have created a sales order with some 4 condition types, in that 2 condition types are of class A & B and the other two is of class C. Here I need to update the condition price of class A & B only and the remaining condition types should not get update even though there is an updated price is available.
For the above scenario, I need to write a standalone program. Do we have any function modules to update the price of the single condition in the sales order? Please tell me how we can update the sales order at item condition level.
Thanks.
Balaram

Restrict HR tables

Similar Messages

Maybe you are looking for