Restrict user to concurrent use

Hi all
I am a administrator and i create an user who only able to view the reports. Now can anyone help me how can I restrict that user not to log in from different PC at the same time.
Thank you for helping me.
Md. Nahiduzzaman

Hi,
May I know what is licence type of your enterprise.

Similar Messages

How to restrict users who can use a submit button.

I have a submit button which I would like to limit the names of the users who can use it. Is there any way I can limit who can use it.
Thanks

Hi
Use SUIM and find the users have this authorization.
Here the first tab user--list of users with critical authorization select that and u can find the users list.
Regards
Bhaskar
Edited by: bhaskar1818 on Jul 22, 2008 2:32 PM

DUN Bluetooth connection to PocketPC, Vista and restricted user rights

Hallo,
I've successfully established a DUN connection to my Pocket WM5-based QTEK 9100 smartphone via Bluetooth and the Toshiba Stack, latest version. My notebook is a X200-21D with Vista Home Premium.
Everything works well as far as I don't change the Vista user to an user with restricted rights, for the user with Administrator rights the Bluetooth Utility created a new DUN connection and a new modem with a virtual COM port. The user with the restricted rights isn't allowed to setup a new connection but this is necessary to connect to the smartphone with the Bluetooth Utility. On the administrative account the radio button to allow the connection to be dialed from other users is disabled and greyed out, so there is now way to open it for other users.
How can I setup an Bluetooth DUN connection for a user with restricted rights ?
Thank you in advance !

Should the Restricted user use the same DUN configuration like the Admin ?
If so, then you can use "Bluetooth Settings-> Custom Mode". This allows you to
select the "33600 Standard Modem" from the list which was configured before by
the Admin. So every DUN which was configured by the Admin can be used by the
Restricted user with this method. Restricted users can not install hardware, so
if the Admin has not installed a modem, then also the Restricted user can not use it.
The Admin can pre-install a modem with the Bluetooth stack installation.
This is useful if the restricted user should be able to configure a DUN connections
with advanced modem settings which are not used by the Admin.
This should be possible if the "as.ini" file has a line "MODEMINST = 1"

Restricting User from creating new records using when-validate-record

Hi,
I have a requirement for which I have to restrict he user from creating a record in the Supplier Master form if the suppliier type is 'Affiliate Supplier'.
I have done the following setups
Seq 10
Description Restricting user from creating Affiliate records
Level Function
Enabled Yes
Condition:
Trigger Event WHEN-VALIDATE-RECORD
Trigger object VNDR
Condition "${item.VNDR.VENDOR_TYPE_DISP_MIR.value} is NOT NULL
and
${item.VNDR.VENDOR_TYPE_DISP_MIR.value} LIKE 'Affiliate%'
Processing Mode BOTH
Context
Level User
Value User Name
Action Sequence 1
Type Message
Action Description Saving Affiliate record
Language ALL
Message Type Show
Message Text You Cannot Create Affiliate records Here
Action Sequence 2
Type Builtin
Action Description Stop Proceesing
Language ALL
Action Enabled Yes
Builtin Type RAISE FORM_TRIGGER_FAILURE;
This is working good on one instance but when I moved it to another instance
when I query the form and try to navigate to the bank accounts tab of the form which is based on a differnt block i.e VNDR_USES block, the when-validate-record trigger fires there also and stops the processing.
Any suggestions on this would be higly appriciated.
Thanks in Advance.

Hi Srini,
Yes, it does work...but in a Form Session if i Create more then one Item, in some cases it fires for the first records and not sleeps for the second.
Sometimes it doesn't give any response.
Appreciated if you divert to the link to check the Pacthes for 11.5.10 on Form Personalization.
Please share any ideas/example if yiou have to achieve the below requirement.
Requirement:
Once New record is created , a Custom Procedure should be invoked.
with out closing Form i am able to create n number of Items, so for every Item it should invoke Custom PLSQL Code on Save.
Let me know if i can achieve the same in Custom.pll .....as i can use either of Options.(Form Personalization/Custom.pll)
Thanks & regards,
Edited by: user632004 on Mar 16, 2010 7:50 PM
Edited by: user632004 on Mar 16, 2010 8:09 PM

Restrict users from using Manual series

Hi SAP,
Is there a way to restrict users from using the Manual series?
Thanks,
Janice

Hi Rahul,
Ok, i have seen already the authorization for document manual numbering and it is available only for 8.8 versions and not on 2007 version of SAP.
Anyway, when im doing the testing i found out that for banking transactions like incoming, user can still use the manual series even if he has no authorization for manual document numbering.
Another concern from our client was the use of manual series only, is it also possible in SAP? I tried to give user authorization in the manual document numbering and no authorization to series group no but user cannot already open the transaction window. Let us know if their inquiry is possible so i could inform them that only manual series can be restricted.
Thanks for your help.
Regards,
Janice

Restrict User Connections Using Logon Trigger

Hi all,
Now I am restricting user connections from selected terminals, using following logon trigger.
It allows users with DBA privileged user.
How to restrict DBA Privileged users users ?
Note:- As per my application needs DBA privilege.
CREATE OR REPLACE TRIGGER on_logon
AFTER LOGON
ON DATABASE
DECLARE
VPROGRAM VARCHAR2(30);
Vusername VARCHAR2(30);
VTERMINAL VARCHAR2(30);
CURSOR user_prog IS
SELECT UPPER(program),UPPER(username),NVL(TERMINAL,'X') FROM v$session
WHERE audsid=sys_context('USERENV','SESSIONID');
BEGIN
OPEN user_prog;
FETCH user_prog INTO Vprogram,Vusername,VTERMINAL;
IF VTERMINAL NOT IN ( 'APP1','APP2','APP3')+
and Vusername='ABUL'+
THEN
RAISE_APPLICATION_ERROR(-20001, 'You are not allowed to login');
END IF;
CLOSE user_prog;
END;
Thanks i Advance
Abk

Your application needs the DBA role? That is a terrible design-- it violates every principle of secure coding.
Login triggers don't fire for users with the DBA role, so you won't be able to use a login trigger here. You could ditch the login trigger and configure invited and excluded nodes in the listener's sqlnet.ora file, i.e.
tcp.validnode_checking = yes
tcp.excluded_nodes = (hostname1,hostname2,hostname3)You'll have to restart the listener after making that change.
Justin

HT201304 Can I enforce a time limit on user restrictions to prevent excess use?

Can I enforce a time limit on user restrictions to prevent excess use?

I havent tried this but you might be able to sync the preference for parental controls between the two computers via sync software such as Chronosync, dropbox or maybe even iCloud. I dont know of any quick way to do that and this method is getting into a more advanced configuration. Its interesting to see in mountain lion that you can copy and paste the settings by clicking on the gear icon in System Preferences:Parental Controls. What system are you using on each machine?

Retrieving ALL values from a single restricted user property

How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");

Well, the code you've got will retrieve the single value of the property
for the current user. You're getting the default value because the
current user doesn't have Locations property set, so the ProfileWrapper
returns the default value from the property set.
I assume you want to get the list of available values that you entered
into the .usr file in Workshop. If so, I've attached a
SetColorController.jpf, index.jsp, and GeneralInfo.usr (put in
META-INF/data/userprofiles) I wrote for an example that does just this.
It uses the PropertySetManagerControl to retrieve the restricted values
for a property, and the jsp uses data-binding to create a list from that
pageflow method.
For a just-jsps solution, you can also use the
<ps:getRestrictedPropertyValues/> tag. I've attached a setcolor-tags.jsp
that does the same thing.
Greg
Dirk wrote:
How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");
[att1.html]
package users.setcolor;
import com.bea.p13n.controls.exceptions.P13nControlException;
import com.bea.p13n.property.PropertyDefinition;
import com.bea.p13n.property.PropertySet;
import com.bea.p13n.usermgmt.profile.ProfileWrapper;
import com.bea.wlw.netui.pageflow.FormData;
import com.bea.wlw.netui.pageflow.Forward;
import com.bea.wlw.netui.pageflow.PageFlowController;
import java.util.Collection;
import java.util.Iterator;
* @jpf:controller
* @jpf:view-properties view-properties::
* 
* <view-properties>
* <pageflow-object id="pageflow:/users/setcolor/SetColorController.jpf"/>
* <pageflow-object id="action:begin.do">
* <property value="80" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="action:setColor.do#users.setcolor.SetColorController.ColorFormBean">
* <property value="240" name="x"/>
* <property value="220" name="y"/>
* </pageflow-object>
* <pageflow-object id="action-call:@page:index.jsp@#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="240,240,240,240" name="elbowsX"/>
* <property value="144,160,160,176" name="elbowsY"/>
* <property value="South_1" name="fromPort"/>
* <property value="North_1" name="toPort"/>
* </pageflow-object>
* <pageflow-object id="page:index.jsp">
* <property value="240" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#index.jsp#@action:begin.do@">
* <property value="116,160,160,204" name="elbowsX"/>
* <property value="92,92,92,92" name="elbowsY"/>
* <property value="East_1" name="fromPort"/>
* <property value="West_1" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#begin.do#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="204,160,160,116" name="elbowsX"/>
* <property value="201,201,103,103" name="elbowsY"/>
* <property value="West_0" name="fromPort"/>
* <property value="East_2" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.ejb.property.PropertySetManager#propSetMgr">
* <property value="31" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.profile.UserProfileControl#profileControl">
* <property value="37" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="formbeanprop:users.setcolor.SetColorController.ColorFormBean#color#java.lang.String"/>
* <pageflow-object id="formbean:users.setcolor.SetColorController.ColorFormBean"/>
* </view-properties>
public class SetColorController extends PageFlowController
* @common:control
private com.bea.p13n.controls.ejb.property.PropertySetManager propSetMgr;
* @common:control
private com.bea.p13n.controls.profile.UserProfileControl profileControl;
/** Cached possible colors from the User Profile Property Set definition.
private String[] possibleColors = null;
/** Get the possible colors, based upon the User Profile Property Set.
public String[] getPossibleColors()
if (possibleColors != null)
return possibleColors;
try
PropertySet ps = propSetMgr.getPropertySet("USER", "GeneralInfo");
PropertyDefinition pd = ps.getPropertyDefinition("FavoriteColor");
Collection l = pd.getRestrictedValues();
String[] s = new String[l.size()];
Iterator it = l.iterator();
for (int i = 0; it.hasNext(); i++)
s[i] = it.next().toString();
possibleColors = s;
catch (P13nControlException ex)
ex.printStackTrace();
possibleColors = new String[0];
return possibleColors;
/** Get the user's favorite color from their profile.
public String getUsersColor()
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
return profileControl.getProperty(profile, "GeneralInfo", "FavoriteColor").toString();
catch (P13nControlException ex)
ex.printStackTrace();
return null;
// Uncomment this declaration to access Global.app.
// protected global.Global globalApp;
// For an example of page flow exception handling see the example "catch" and "exception-handler"
// annotations in {project}/WEB-INF/src/global/Global.app
* This method represents the point of entry into the pageflow
* @jpf:action
* @jpf:forward name="success" path="index.jsp"
protected Forward begin()
return new Forward("success");
* @jpf:action
* @jpf:forward name="success" path="begin.do"
protected Forward setColor(ColorFormBean form)
// set the color in the user's profile
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
profileControl.setProperty(profile, "GeneralInfo", "FavoriteColor", form.getColor());
catch (P13nControlException ex)
ex.printStackTrace();
return new Forward("success");
* FormData get and set methods may be overwritten by the Form Bean editor.
public static class ColorFormBean extends FormData
private String color;
public void setColor(String color)
this.color = color;
public String getColor()
return this.color;
[GeneralInfo.usr]
[att1.html]

How to restrict users from creation of varients in report transaction

Hi All,
I have a requirement where buisness wants to restrict users in creating varients in report transactions.because of create options users will be creating more screen varients which will be disturbing for the other users to select a particular standard varient.Kindly give ur input regarding this
With regards
Girish A

Hi,
First edit the role assigned to users using PFCG.
Then go to Authorization tab and click on "Change Authorization Data".
It will opened up the profile of the role. now find the authorization object "S_PROGRAM".
In that edit "User action ABAP/4 program" object.
Remove "VARIANT" check box if it was checked and save. Now press
Generate button or "Shift+F5".
That's it.
You can ask for this to your basis team. They can perform this task easily.

We are sorry, but we are unable to complete your request.•The Office 2007 Product Key provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.

Over the years I have had many ISP and email addresses - but now we have finally gone almost fully virtual...
I have a live login and MS ID 4 my SkyDrive account but I only use my MS touch with 8.1, SkyDrive and office 365 for mobility.
And I still like to backup to my own server!!!
What would be good is if I can put all the software licenses and product keys of the software and keep a record of my mac addresses for hardware and even static IP's in a file or a secure location within the MS online store.
That's where MS wants me to get my computing needs from in future and I will always be able to retrieve it in future but what about the $$$$$ I have spent on software, hardware and applications prior to now???
I know u guys love 2 collect data 4 marketing analysis,
4 example I have an old PC that is still running a server from last century - if you knew about it a simple script would allow you to offer upgrades or at least relevant MS products - UNLIKE the rubbish adds I just turn off or tune out
now...
Why cant I add products previous online email purchases into the 1 MS live ID account where I can keep it together? If you make that available I don't have to have separate steam accounts, EA game accounts, ASUS and adobe accounts etc
etc.
What has brought me 2 this is I was looking for my office pro 2007 disks to rebuild a HOME USE ONLY windows 7 laptop (NO touch screen so 8.1 is no benefit at all)
I HAVE 4 Genuine PRODUCT KEYs for Office 2007 BUT EVERY TIME I WENT TO DOWNLOAD the software - regardless of the key I used - I got the error message: We are sorry, but we are unable to complete your request.•The Office 2007 Product Key
provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.
That's crap - This is a clean brand spanker install of Win7 and there was nothing b4 I put the oem drivers from Toshiba back on.
I looked at dozens of support pages and forum blogs and tried for hours to get a copy to download - including incognito and other logins but because my default PC name is also my MS Windows live ID the same error was repeated.
I keep away from the non MS sites for these things and with good reason - there were heaps of similar users with the same issue or very close to it that had downloaded from a supposed MS copy from eValue or digital river etc and the next
thing was total corruption of the OS.
EVENTUALLY I found a LIVE MS chat on a support site in the US and she gave me a link to a slightly older version which will need updating and some reg edit changes but so far, so good.
The point is - what a crock !
I should be able to just keep all my software, drivers, updates, service packs, and versions that I have upgraded in the MS store.
If Microsoft aren't going to support XP or Office 2003 and eventually 2007, vista & Windows7 not far behind??? then that's still no excuse for them to put these restrictions and limits when I OWN my copy of the software!!
Unlike office 365 and SkyDrive space which is described in the T&C (that we all read before ticking that radial button to agree of course) as ONLY under a leased licence.
IF Microsoft can support AND develop software that supports SQL2000 Servers, why is it so hard to archive and keep the same info for everyone???

Over the years I have had many ISP and email addresses - but now we have finally gone almost fully virtual...
I have a live login and MS ID 4 my SkyDrive account but I only use my MS touch with 8.1, SkyDrive and office 365 for mobility.
And I still like to backup to my own server!!!
What would be good is if I can put all the software licenses and product keys of the software and keep a record of my mac addresses for hardware and even static IP's in a file or a secure location within the MS online store.
That's where MS wants me to get my computing needs from in future and I will always be able to retrieve it in future but what about the $$$$$ I have spent on software, hardware and applications prior to now???
I know u guys love 2 collect data 4 marketing analysis,
4 example I have an old PC that is still running a server from last century - if you knew about it a simple script would allow you to offer upgrades or at least relevant MS products - UNLIKE the rubbish adds I just turn off or tune out
now...
Why cant I add products previous online email purchases into the 1 MS live ID account where I can keep it together? If you make that available I don't have to have separate steam accounts, EA game accounts, ASUS and adobe accounts etc
etc.
What has brought me 2 this is I was looking for my office pro 2007 disks to rebuild a HOME USE ONLY windows 7 laptop (NO touch screen so 8.1 is no benefit at all)
I HAVE 4 Genuine PRODUCT KEYs for Office 2007 BUT EVERY TIME I WENT TO DOWNLOAD the software - regardless of the key I used - I got the error message: We are sorry, but we are unable to complete your request.•The Office 2007 Product Key
provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.
That's crap - This is a clean brand spanker install of Win7 and there was nothing b4 I put the oem drivers from Toshiba back on.
I looked at dozens of support pages and forum blogs and tried for hours to get a copy to download - including incognito and other logins but because my default PC name is also my MS Windows live ID the same error was repeated.
I keep away from the non MS sites for these things and with good reason - there were heaps of similar users with the same issue or very close to it that had downloaded from a supposed MS copy from eValue or digital river etc and the next
thing was total corruption of the OS.
EVENTUALLY I found a LIVE MS chat on a support site in the US and she gave me a link to a slightly older version which will need updating and some reg edit changes but so far, so good.
The point is - what a crock !
I should be able to just keep all my software, drivers, updates, service packs, and versions that I have upgraded in the MS store.
If Microsoft aren't going to support XP or Office 2003 and eventually 2007, vista & Windows7 not far behind??? then that's still no excuse for them to put these restrictions and limits when I OWN my copy of the software!!
Unlike office 365 and SkyDrive space which is described in the T&C (that we all read before ticking that radial button to agree of course) as ONLY under a leased licence.
IF Microsoft can support AND develop software that supports SQL2000 Servers, why is it so hard to archive and keep the same info for everyone???

How can we restrict users from changing the data in HFM.

Hi All,
We have requirement from users where, They don't want the base data being loaded from SAP to HFM via FDM through ERPi to get changed in HFM at <Entity Currency>. They want data to be read only and no body should be able to change neither Grid nor Forms and neither Smart View. If we restrict by Shared services access then again they can't change ownership management value.
Regards,
Sushil

Hi Thanos, Thanks for your reply.
Yes i am aware of the security class, so your suggestion is to use security classes to restrict users? And how can i use the phased submission for the same? I am new to HFM so please bear with me.
I have one more question that my Application is HFM EPMA application. So is it necessary to have Application Administrator to change hierarchy and Deploy the Application from EPMA?
Thanks,
Sushil

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to Restrict users to change password

Hi All,
I would like to restrict user to change password only defined number of times in a day, Is it possible to do it through group policies.
Please note i am already aware of "Minimum Password age" feature, however i do not want to use it as the minimum value that i can set here is 1 day. I would like to restrict users based on password reset threshold e.g. User can reset his password
in a day only twice or thrice.
Thanx & Regards,
Wasim Parkar

If you want to limit the user to have his/her password changed for a specific number of time every day, I have to say
NO thats not possible. PSO's as other mentioned,can be used to have different password policies. Maybe you can set the msDS-MinimumPasswordAge
to 00:04:00:00 which is equal to 4 hours. It means every 4 hours a user will be able to change his/her password. So in each day a user can change the password 6 times, since a day is 24 hours.
Do not forget a day start from 00:00 AM up to 11:59 PM. So in a 9 to 5 job, a user may change the password 2-3 times.
Hope it helps.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer or to mark this post as
and helpfull to other poeple.

How to restrict user to change status.

Dear All,
we want to restrict users to change the status from set to assign to released status.
is there any authorization object to restirct user to change status?
i was trying with object CPRO_DPO Create Project Definition with activity 43 release ,but unable to do so.
Please do need ful
Regards
Ravindra

Hi Ravi,
probably you need to create user status profile.
Use TA BS02 to create status profile
here you have to add authorization key which needs to be defined in BS52
use b_user_stat auth object to give profiles in custom roles in PFCG
Thus you can block access to change status
Niranjan
Let me know if it helps
Points welcome
Thanks Mathias
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM

How to restrict user to change original file in word document.

Hi experts,
I am begineer in DMS. I am not able to understand how to restrict user to make any changes to a word document attached any DIR or any object link.
Ex: I have a created a DIR attaching a word doc to equipment master.
However, the user is still able to make changes to that word document usign CV03 tcode. I am sure most of you might have faced this problem. Please respond.
We are using SAP 3.1i version. It is very old version.
Thanks in advance,
Kiran

Kiran,
The task that you have mentioned could be accomplished by setting up a status network for your document type. While setting up the status network, SAP has defined statuses which could potentially lock objects and fields corresponding to that status type.
More information could be found at
http://help.sap.com/erp2005_ehp_03/helpdata/EN/9f/857f3a1c7b11d294d200a0c92f024a/frameset.htm
I am not aware of 3.0i but you can navigate to customisation --> Cross Application Components --> Document Management --> Control Data --> Define Document Types --> Click on a doc type and go to
define doc status.
Here if you define a document with status type S the object is essentially locked for editing.
Sojan

Restrict user to concurrent use

Similar Messages

Maybe you are looking for