Restricting User-Defined Layout in CV04N

Question

Hi All
A user having cv04n authorization can change the layout and save as User-Specific Layout. We may be giving various information via CHARS / Values and users add those to layouts and see
Now a User who do not have Authorization to a Document type , say FIN (for Finance) , can get the details in the CHARS and Values of FIN Document Type using cv04n, by modifying the standard layout.
Any Authorization to control user not to change layouts in cv04n...?
I have found one Authorization S_ALV_LAYO which restricts to make Global layout, but it allows to make User Defined layouts..
Any solutions to restrict User not to modify default layout in cv04n?? Or in way can we restrict User not to add CHAR s into search layouts?
Regards
Aby

Answer 1

Hi Aby,
We can restrict the user from viewing the documents based on document type and authorization group. This can be achieved by implementing BADI  "DOCUMENT_SEARCH01" and interface "CHANGE_SEARCH_ORDER". Inside this we can do an authority check on each document (DOKAR), using standard authorization object for document type C_DRAW_TCD. And similarly authorization group (BEGRU) can be checked using auth obj C_DRAW_BGR can be checked.
The authority check can be done in following way,
LOOP AT EACH DOC.
    AUTHORITY-CHECK OBJECT 'C_DRAW_TCD'
         ID 'DOKAR' FIELD LV_DOKAR                              " LV_DOKAR is doc no.
         ID 'ACTVT' FIELD '03'.                                           " 03 is display mode
Similarly check for auth grp.
Hope this will help you. If you need any more inputs let me know.