Restrict SE16 for some tables

I wanted to give access to users to SE16, but i want them to access on the some Z*Tables and Standard tables (BSID,BSAD ...).
I tried to create a Group of Authorization with the tables in SE54 to insert in S_TABU_DIS, but I didn't get because some tables already had their defined groups.
What do I make?

Hi Francisco,
You can use the search function on this topic. SE16, S_TABU_DIS has been discussed many a times. Probably, you will find an answer in the search itself.
Just to start....
Access to SE16 is never recommended in a production system. Giving access to SE16 would give a lot behind the scenes.....
for. Example.... you may assign authorization groups to all the tables you want to restrict to. However, there might be a case that that authorization group is also assigned to many other tables ( like you are facing in this situation. Some tables are already assigned to auth groups. That auth group may be assigned to other tables as well)
In turn you are giving access to those tables as well. Also, S_TABU_DIS maybe present in another role assigned to the user, which may give them access to more additional auth groups/tables.
To ensure good security and a best practice in a production system, you can consider creating custom tcodes for display access for each of the tables. Then you dont have to worry about giving SE16. Although, you might still want to go ahead and secure the custom tables by assigning them auth groups as a good practice.
Hope this helps
Thank you
Abhishek

Similar Messages

Function modules for Transaction SE16 for any table whole data

Hi Experts,
i need to pass report or function module input as table name:LFA1.
I Need to get all the data with fileds for those table.
say : i/p
paramters: s_tabname like (tabname).
here s_tabname ='lfa1'.
output :all the fileds details with whole data like se16 or se11 transaction for table.
is there any function module.
Thanks
nag

Hi,
you can create this easily using runtime creation of objects and SALV for display.
Although I would never do something like this...
REPORT zzzz.
DATA:
gr_itab TYPE REF TO data,
gr_salv TYPE REF TO cl_salv_table.
PARAMETERS:
    p_table TYPE tabname.
FIELD-SYMBOLS:
    <tab> TYPE table.
START-OF-SELECTION.
create data gr_itab type table of (p_table).
ASSIGN gr_itab->* TO <tab>.
select *
    from (p_table)
    into table <tab>.
TRY.
      cl_salv_table=>factory(
        IMPORTING
          r_salv_table = gr_salv
        CHANGING
          t_table      = <tab> ).
    CATCH cx_salv_msg.                                  "#EC NO_HANDLER
ENDTRY.
DATA:
    lr_functions TYPE REF TO cl_salv_functions_list.
lr_functions = gr_salv->get_functions( ).
lr_functions->set_all( abap_true ).
gr_salv->display( ).
You won't find anything simpler.
Regards,
Clemens

Statistics missing for some tables in sys after scheduler job ran

In a 10g database, the scheduler automatically has the job set up to gather the statistics for the sys schema. I noticed the job was disabled for some reason so I enabled it yesterday and it ran last night. I didn't see any errors for last night's scan.
I have looked at sys.all_tab_statistics and noticed that there are many tables in sys that have a last_analyzed date of last night but there are also many tables that have a last_analyzed date that is a long time ago. For example, the argument$ table has stats from 8/21/06. Also, the scheduler window did not close before the job finished.
Some of the tables that weren't scanned report 'YES' in the 'STALE_STATS' column.
Why doesn't the GATHER_STATS_JOB gather stats for all of the tables in sys and only some of them?
Ideas?

Check whether statistics gathering is locked. You can use below query
SQL> select stattype_locked,table_name from dba_tab_statistics where table_name
like '%ARGUMENT%';
STATT TABLE_NAME
ARGUMENT$
SCHEDULER$_JOB_ARGUMENT
SCHEDULER$_PROGRAM_ARGUMENT
CWM$ARGUMENT
If you find stattype_locked column null, then i believe it is to do with monitoring stuff.
Regards,
Satheesh Babu.S

Multi Master Replication - Only works for some tables?

I have a multi master replication between a 9i and an 816 database.
All the tables are in the same tablespace and have the same owner. The replication user has full privs on all the tables.
When setting up the replication some tables create properly, but others fail with a "table not found" error.
Ideas anyone ?
Andrew

You said that you have a 9i replicated with a 816.
I try the same thing but with two 9i enterprise version databases, free downloaded from www.oracle.com.
when i ran
exec dbms_repcat.add_master_database(gname=>'groupname', master=>'replica_link')
this error appears
ERROR at line 1:
ORA-23375: feature is incompatible with database version at replica_link
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 86
ORA-06512: at "SYS.DBMS_REPCAT_MAS", line 2159
ORA-06512: at "SYS.DBMS_REPCAT", line 146
ORA-06512: at line 1
please help me if u have any idea.

Can we restrict help for some users

Hello Experts,
Can we restrict some users for Help.
Help Required,
Regards,

I don't understand your motive to block the user browsing help. However, it can be done through shared folder authorization to block those users. You don't need any functions from B1. Just need to set help files under shared folder.
Thanks,
Gordon

How to restrict access to views for some users in the app?

Hi SDN!
I have an WD application wich embedded in the portal. Appication has 2 iViews (and 2 pages respectively). These iViews consist several views connected with each other (e.g. one view provide list data, second view is add/edit form for this data). I need to restrict access for some users for view with add/edit form. I can't make separate page for this view.
What I've done:
1) create yet another UIContainer for this view in main window and embed view to this container. It was be done for create separate iView for form.
2) in the portal I create iView for this form but don't embedd in any page.
When I try to call my form from list data (that is one iView from another) I get exception:
<b>com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: duplicate usage of view .MyCarRentalAddCity</b>
Is there a way to get needed functional?
Thanks,
Lev

Hi,
do you need to remove the IView from the portal menu or do you just want to make a View container in your WD application invisible if the user doesn't have the rights to see it.
If so, you could create your own roles on the app server:
You need to create a new class that extends NamePermission like:
import com.sap.security.api.permissions.NamePermission;
public class ApplicationAccessPermission extends NamePermission {
           * @param name
          public ApplicationAccessPermission(String name) {
               super(name);
           * @param name
           * @param action
          public ApplicationAccessPermission(String name, String action) {
               super(name, action);
Also, you have to create an Action.XML file that looks like this:
<BUSINESSSERVICE
     NAME="com.vendor.administration">
     <DESCRIPTION
          LOCALE="en"
          VALUE="actions view usage"/>
     <ACTION
          NAME="View Permission">
          <DESCRIPTION
               LOCALE="en"
               VALUE="Show view"
               />
          <PERMISSION
               CLASS="com.vendor.utilities.ApplicationAccessPermission"
               NAME="ShowView"
               />
     </ACTION>
</BUSINESSSERVICE>
If you have created these to files in your packages, you can access this function like:
IUser user ;
try {
          user = WDClientUser.getCurrentUser().getSAPUser();
          if(user.hasPermission(new ApplicationAccessPermission("Show view"))){
               wdContext.currentV_UIElement().setViewVisibility(WDVisibility.VISIBLE);
          }else{
               wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
     }catch (WDUMException e1) {
          wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
                e1.printStacktrace();
You have to bind the ViewVisibility attribute of the context to the View Container you want to hide.
The applicationAccessPermission you defined in the XML File will be visible in the UME Manager of you J2EE engine. With this action you can create a new role and group that you can map to the users that should see you view.
But, the exception you get is because you have embedded one view twice, which is not possible.
Hope this helps.
Regards,
Dennis

Unable to edit table data, but not for all tables

I have multiple tables in a schema. For some tables, I am able make edits to table data directly, i.e., context menu Table | Open, and the Data tab. When I am able to edit, I do get a pencil icon inside the cell I am editing/typing (and am able to commit the changes). When I am not able to edit, it does nothing (no error messages, sound, or visual cue). I thought it had to do with who owns the table object, but I log in as the same owner of the affected table objects.
Any pointers would be greatly appreciated so I am equipped when asking the DBA.
Thanks,
OS: Windows XP Professional SP2
Java(TM) Platform: 1.6.0_11
Oracle IDE: 2.1.1.64.45
Versioning Support: 2.1.1.64.45
Edited by: New2OWB10gR2 on Jun 23, 2010 12:20 PM

Hello again,
Here you are the DDL of the offending table:
CREATE TABLE "DBADMEX"."T50SEC82"
"COD_EMPRESA" CHAR(4 BYTE) DEFAULT ' ' NOT NULL ENABLE,
"COD_EMPR_CONT" CHAR(4 BYTE) DEFAULT ' ' NOT NULL ENABLE,
"COD_SECT_CONT" CHAR(2 BYTE) DEFAULT ' ' NOT NULL ENABLE,
"NUM_CUEN_CONT" CHAR(18 BYTE) DEFAULT ' ' NOT NULL ENABLE,
"COD_PAIS" CHAR(4 BYTE) DEFAULT ' ' NOT NULL ENABLE,
"COD_SECTOR" CHAR(6 BYTE) DEFAULT ' ' NOT NULL ENABLE
PCTFREE 10 PCTUSED 40 INITRANS 50 MAXTRANS 255 NOCOMPRESS LOGGING STORAGE
INITIAL 65536 NEXT 1048576 MINEXTENTS 1 MAXEXTENTS 2147483645 PCTINCREASE 0 FREELISTS 1 FREELIST GROUPS 1 BUFFER_POOL DEFAULT
TABLESPACE "TS_50" ;
CREATE UNIQUE INDEX "DBADMEX"."I5000082" ON "DBADMEX"."T50SEC82"
"COD_EMPRESA", "COD_EMPR_CONT", "COD_SECT_CONT", "NUM_CUEN_CONT"
PCTFREE 10 INITRANS 50 MAXTRANS 255 COMPUTE STATISTICS STORAGE
INITIAL 65536 NEXT 1048576 MINEXTENTS 1 MAXEXTENTS 2147483645 PCTINCREASE 0 FREELISTS 1 FREELIST GROUPS 1 BUFFER_POOL DEFAULT
TABLESPACE "TS_50" ;
We are using the following versions:
Oracle database: 11.1.0.7.0
Oracle Client: 11.2.0.1.0
Windows (where the client runs): XP SP3 (version 5.1 Build 2600_spsp_sp3_gdr.080814-1236) in spanish.
SQL Developer: 2.1.1.64 (MAIN-64.45)
I think I haven't forgotten anything.
Thanks in advance for your help!

Archiving object for the tables

Hi,
I want to archive the tables.But some of the tables I did not find the archiving object.What should be done on this.Pls guide.
Tables w/o archiving object which i want to archive
APQD,ARFCSDATA,DYNPSOURCE,WBBP,REPOLOAD,REPOSRC,BDCP,BDCPS
Thanks

Hi Rajesh,
Not all tables can be archived. For some tables there may be option available for plainly deleting the contents without archiving. Please check the Data Management Guide available at the service marketplace for further information. You may also refer to SAP note 706478.
Word of caution: Not all tables are meant to be archived / deleted. Some tables maybe required for proper functioning of the SAP system (however big the table is). So please proceed with caution if you are trying to develop a custom program to delete contents from a standard SAP table, you may end up deleting some data which was required. Even when deleting using standard SAP programs, proper due diligence and testing is necessary
Hope this helps,
Naveen

S_TABU_LIN for multiple tables.

Hi all,
I've tried to switch on S_TABU_LIN authorizations for few tables. I've found for one
attribute you can define just one field from single table.
When I've tried to customize few attributes (all of them for the same field -> WERKS) and for each of attribute define different table it doesn't work. Does it exist andy method to customize few tables for chack against S_TABU_LIN?
Or maybe the only way is to define for each table different oranizational criteria?
Best regards:
Lukasz Tylutki

Hi,
As said,The flag is not set because I need it for just few tables.
Then you can restrict only for one table.
If you want to restrict for mutiple tables,then you have set the flag.
go thru these documents...
http://csc-studentweb.lr.edu/swp/Berg/Conferences/SAP_NW2008_and_Admin_2008/ADMIN/Track3/Track3_session4.pdf
http://www.cumulusiq.com/contents/search_detail/1409-line-oriented-security-in-sap-with-s_tabu_lin
Thanks,
Sri

Restrict the posting period opening and closing for some users

Dear SAP gurus,
I want to restrict some users to open the posting period and for some users close posting periods. I knew that these can be done through authorization group. Pls explain how to create authorization groups and how to use those? Anybody can help me out?
Regards,
Venkata Reddy

Dear Venkatareddy,
There are two sets of period in OB52. The first set of "From" and "To" is for the authorised group and second set is for the non authorised group. In the "Authorisation Group" (last column) give some 4 charecters name. Say "FICO".
Now ask the basis to attach the object "FICO" for the users who are authorised say user1, user 2 and user3.
Now in the first set of period you can maintain say 1 2008 to 16 2008 and in the second set 1 2008 to 1 2008.
So except user1,2 and 3, all the others can post only in 1 2008. Whereas users 1,2 and3 can post in all the periods of 2008.
Assign points if useful
regards
Venkatesh

VLD-1119: Unable to generate Multi-table Insert statement for some or all t

Hi All -
I have a map in OWB 10.2.0.4 which is ending with following error: -
VLD-1119: Unable to generate Multi-table Insert statement for some or all targets.*
Multi-table insert statement cannot be generated for some or all of the targets due to upstream graphs of those targets are not identical on "active operators" such as "join".*
The map is created with following logic in mind. Let me know if you need more info. Any directions are highly appreciated and many thanks for your inputs in advance: -
I have two source tables say T1 and T2. There are full outer joined in a joiner and output of this joined is passed to an expression to evaluate values of columns based on
business logic i.e. If T1 is available than take T1.C1 else take T2.C1 so on.
A flag is also evaluated in the expression because these intermediate results needs to be joined to third source table say T3 with different condition.
Based on value taken a flag is being set in the expression which is used in a splitter to get results in three intermediate tables based on flag value evaluated earlier.
These three intermediate tables are all truncate insert and these are unioned to fill a final target table.
Visually it is something like this: -
T1 -- T3 -- JOINER1
| -->Join1 (FULL OUTER) --> Expression -->SPLITTER -- JOINER2 UNION --> Target Table
| JOINER3
T2 --
Please suggest.

I verified that their is a limitation with the splitter operator which will not let you generate a multi split having more than 999 columns in all.
I had to use two separate splitters to achieve what I was trying to do.
So the situation is now: -
Siource -> Split -> Split 1 -> Insert into table -> Union1---------Final tableA
Siource -> Split -> Split 2 -> Insert into table -> Union1

I want to reset my ipod touch 4th gen but i have forgotten the restrictions passcode and for some reason its not working on my laptop on itunes and the restore thing wont work! any help?

I want to reset my ipod touch 4th gen but i have forgotten the restrictions passcode and for some reason its not working on my laptop on itunes and the restore thing wont work! any help?

Make sure you have the Current Version of iTunes Installed on your computer
iTunes free download from www.itunes.com/download
Then See Here > http://support.apple.com/kb/HT1808
You may need to try this More than Once... Be sure to Follow ALL the Steps...
Take your time... Pay particular attention to Steps 3 and 4.
After you have Recovered your Device...Re-Sync your Content
Note:
To remove a forgotten Restrictions passcode you will need to Restore the Device as New...
OR... From a Backup created Before the Restrictions Code was set....

How to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some users and allow the access for some users?

I have a requirement to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some of the users and allow the access for some of the users.
I have applied the below code on the web.config file but this modification impacting only on the web application level not on the site collection and sub site level.
<location path="_layouts/15/InPlaceRecordsSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
<location path="_layouts/15/InPlaceRecordsListSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
When I tried the access on
:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx">http://<servername>:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx page allowed the access for all users.
Please suggest the possible solution to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages on SharePoint2013.
Thanks
Ramasubbu

You can't do it from OOTB.
_layout folder is accessible to the users if they have read access in any of the site even subsite.
You can modify *.aspx file, add your custom control which will check user.
[custom.development]

How to Restrict printing the document using IRM for a Single Document?Allow printing for some documents and restrict the printing for particular documents in same document library?

Can we able to Configure the IRM in Document Level in SharePoint Document libraries?
The document library contains multiple document sets , Can we restrict the printing according to document sets? Allow printing for some documents and restrict the printing for particular documents in same document library
Is this possible?Please suggest.

Yes, that can be done. But note that all administrators will have the same right to print, so you need to make sure the users are not administrators. You can include a macro to disable printing, but if the users disable macro, they can print the documents.
Hence, there is no foolproof way to prevent printing documents. If you still need a foolproof security, PDF format provides password based security (viewing doesn't require a password) that can be implemented to prevent the document from printing,
which doesn't require any special scripts and is tough.
You can have a look at the following links:
http://msdn.microsoft.com/en-us/library/office/ms458245(v=office.14).aspx
http://msgroups.net/microsoft.public.word.docmanagement/prevent-printing-of-docum/91353
http://www.go4sharepoint.com/Forum/prevent-printing-saving-documents-10150.aspx
The following link explains about the security features in PDF. This is for information purpose only and not for promotion of any products:
http://www.pdflib.com/knowledge-base/pdf-security/
Balaji Kundalam

Initial Balances for some of the G/L Accounts in GLPCT table changed

Sub : G/L Account Balance( T code FAGLB03 ) and EC-PCA: Totals Table (Table GLPCT) initial balances are not same for some of the G/L accounts ( Initial Balances for some of the G/L Accounts and profit centers in GLPCT table changed )
Dear Friends
We are in SAP ECC 5.0. We are using New G/L Accounting
G/L Account Balance(Initial Balance)( T code FAGLB03 ) and EC-PCA: Totals Table (Table GLPCT) initial balances are not same for some of the G/L accounts ( Initial Balances for some of the G/L Accounts and Profit centers in GLPCT table changed )
G/L Account : 1110001 AR Trade - Recon
G/L Account Initial Balance( T code FAGLB03 )          36,789,209.26 USD
EC-PCA: Totals initial balance (GLPCT table)                14,178,848.14 USD
I found in GLPCT table initial balances for G/L 1110001 and some of the profit centers are changed. The initial balances are not supposed to change for the entire financial year
I have checked   none of documents for this G/L and these Profit centers of last financial year have been posted or reversed in current financial year.
Please try to help me what has caused to changed the initial balances and how to correct it
Please let me know if you guys need more details
Thanks in advance
Thanks
MVS

Hi Vinay,
If I understood correctly you are trying to balance Accumulated Depreciation accounts (from the AA module) with the Cost Depreciation Accounts.
If they don`t balance zero, it mostly likely means, that some user has posted manually deprecian in your GL, not using the depreciation program.
Hope this helps.
KR
Severina Koleva

Restrict SE16 for some tables

Similar Messages

Maybe you are looking for