Restriction for PPOME transaction

Hi,
In PPOME transaction we can drag a person from one position to another position to change its position. What can be done that system will not allow user to do this, like error message that can be given through user exit or any other thing. I want user to chage any employee's position from PA40 only.
Please give me solution.
Thanks and regards,
Sameer Dhuke

Hi.
for example with following 2 authorizations of PLOG the user could only dislay the relationship (subtype) between a position and a person and the relationship(subtype) between position and orgunit.
Field
Values
Function Code
Infotype
1001
Object Type
P,S,O
Plan Version
01
Planning Status
Subtype
A001-A002,A004-A007,A009-A999, B001-B002,B004-B007,B009-B999
Function Code
DISP
Infotype
1001
Object Type
P,S,O
Plan Version
01
Planning Status
Subtype
A003,A008, B003,B008
I hope this gives you an idea of the solution.
Regards
Bernd

Similar Messages

Authorization restriction for BP transaction

Hi,
We need to restrict the BP transaction access to user in the below mentioned way in our SRM system.
1. Restricting BP access to all the users with display access.
2. Restricting BP access to security users with create, change and display access.
What is the main object for BP transaction for restricting access in the above mentioned scenarios?
Here, we have observed one more issue like....
Let say object-B_BUPR_BZT(not sure) is a main object for transaction-BP. If we restrict activity to 03 in that object, it will give display access when we are executing transaction-BP.
Some of other transactions(like PPOMA_BBP) are there in SRM, those are also maintaining same object with all activities(create,change,Display).
In this scenarios, how the above mentioned restriction is going to help the user.
Please check and advice in this.
Thanks & Regards,
KKRao.

> Let say object-B_BUPR_BZT(not sure) is a main object for transaction-BP.
It may be a "main object" for BP, but that doesn't tell you much at all about the security aspects or where in the logic of the transaction it is used. This object is for example not a part of the business logic of transaction SE80, or that I am sure.
If you have no clue, then start in SU21 and read the application help documentation on the transaction (to understand it's context) and the use-cases of the object - also to find the other transactions. Then you will become more sure.
You also need to understand that in the same way the transactions, reports and the "real checks" are layers in the security, objects themselves can also be selective and layered in a conceptually consistent way, or (to make it more interesting...) transaction dependently.
There are lots of shortcuts (even out-of-the-box roles which someone might try to sell you...) but ultimately if you use a SAP system to "build" your business processes, then you need a concept to secure your build. SAP owns the authority-checks in standard programs to enable the process to comply with legal requirements and some common sense.
=> So, you need to choose your transaction (or other entry point) carefully and understand the objects which they use.
Cheers,
Julius

User exit or BADI for PPOME transaction

Hi all,
I need to know is there any User exit or Badi or Enhancement spot is available while saving the PPOME transaction in HR.

Hi,
This is the BADI HROM_EXP_PATH
Thanks,
Shailaja Ainala.

Universal Worklist task restrictions for ECC transactions

All,
We are on NW04 and have recently implemented the Universal Worklist (UWL) and have limited our tasks displayed to just two tasks as specified below as mentioned in thread: UWL restrict list of tasks to display .
supportedItemTypes="uwl.task.webflow.TS21300098, uwl.task.webflow.TS90700186"
These are both Web Dynpro java tasks (and configuerd in the Visualization SWFVISU) and this works as expected. We would now like to add a new task which is not web dynpro. It is a dailog task to an ECC transaction. If I add the task to the string of supported item types, it does not appear. If I remove the restrictions and change the supporteditemtypes parameter back to "uwl.task", then the new task appears and executes correctly.
Can anyone assist with getting the transaction task to be a supported item type? Do I need to add visualization for this task? If so, what is the visualization type? The options in the drop down in SWFVISU do not seem to apply.
By the way, the approval task I'm adding is delivered task TS40007901 for approval of the CATS Timesheet.
Any help is appreciated. Thanks in advance.
-Jeff-

You can call also pages using the IViewLauncher.
        <Action name="launchWebDynPro" groupAction="" handler="IViewLauncher" returnToDetailViewAllowed="yes" launchInNewWindow="yes" launchNewWindowFeatures="resizable=yes,scrollbars=yes,status=yes,toolbar=no,menubar=no,location=no,directories=no">
          <Properties>
            <Property name="iview" value="ROLES://portal_content/Fresenius/kabi_nl/Iviews/ESS/Zeitmanagement/com.fresenius.Abwesenheitsmitteilung"/>
            <Property name="newWindowFeatures" value="resizable=yes,scrollbars=yes,status=yes,toolbar=no,menubar=no,location=no,directories=no"/>
            <Property name="DynamicParameter" value="wi_id=${item.externalId}"/>
            <Property name="openInNewWindow" value="yes"/>
            <Property name="display_order_priority" value="5"/>
          </Properties>
But why would you want to have the navigation too in a new window ?
That would confuse me as a user to have 2 navigations in 2 windows.
The problem with UWL in general (using a popup) is that after you are finished in the popup,
the task is still there. I get lots of complaints; waiting for EhP3 or 7.3. There should be a instant refresh UWL feature.....
Regards,
Kai

Restrict the badi for particular transaction code

hi, i have implemented BADI_FDCB_SUBBAS01 and in the subscreen area 10 i attatched my own module pool program and screen number. my requirement is for FB60 only. and it is working for FB60 fine. the problem is also working for FV60.
Is there any possibility to restrict for particular transaction code say for FB60.
Please reply me soon....

Hi Praveen,
Since this is a single use badi you have the option to create a new filetr of your own. You can create a filter of type sy-tcode and in your implementation assign it a value of your transaction. Thus if someone else also wants to use it for some other transaction can have a implementation of his own for some other transaction.
The other way which is though not the recommended way buy easy to use is to put a check before your code on SY_TCODE = your transaction.
revert for more clarifications if required.
<b>Always reward points to useful suggestions.</b>
regards,
Vikas
Message was edited by:
Vikas Taneja

How do I restrict PT60 Schema transaction to Personal Area?

I have tried to restrict it throgh personal area but no luck. Same with PPOME transaction even though the users have only restricted PA access but they are able to change Org structure.
I ran the trace and it shows that it checked P_ORGIN for specific Personal Area but then bypass that check and was able to update the change.
Please help!
Regards,
Zee

Hi,
(structural) authorizations for access to employees is correct, I assume
What you might do is add an addtional PCR to the time schema.
If the personnel area of the EE and time schema don't 'match' add an error so that further time evaluation fails.
Or am I missing your point?
Wilfred.

Cash payment restriction for more than Rs.20000 to vendor per day

Hi
I want to restrict cash payment transaction for more than Rs.20000 (as per income tac act) to one vendor in one day
How to bring this control
Edited by: Meenu_ND on Mar 8, 2010 3:43 PM

Hi
Instead of posting key 40 you can try with 50 in this thread Configuration to fix the amount in cash journal
Aravind Boddupalli

Cash payment restriction for more than Rs.20000

Hi
I want to restrict cash payment transaction for more than Rs.20000 (as per income tac act)
I gave amount limit as Rs.20000 for company code in01. Date i gave as 01.01.2000 and currency as INR
Inspite of this, i passed one payment for Rs.22000 and it allowed me to pass. How to restrict such excess payments ?

Hi
Are you trying to post Cash Journal (FBCJ) for posting payments. If so, you can use this configuration to restict your limits.
If you are posting through other T.codes, then this configuration will not control those.
For creating a validation rule, i have given a example below:
Say for example, if you are using doc type 'KZ' for payments, then
1. Identify or create a message class/message number, which you can use as an error message is the document amount reaches > 20000 This message class/messages can be created in T.code SE91
2. Go to GGB0 and create a valiation under FI -> Line item and under which create a step as follows:
Pre-requisire: if BKPF-BLART = 'KT'
Check : BSEG-DMBTR <= 20000
Message: Enter the identified message class/number
3. Attach the validation in OB28.
Regards
Prakash K

Authorization object for parameter transactions

Hi all,
I'm trying to restrict transaction VL10h for shipping point,this transaction is a parameter transaction and is not controlled by an authorization object directly.when I run a trace , transaction Vl10x shows up. The authorization object that is being checked is V_LIKP_VST.
Note : The requirement is when the user executes transaction VL10h he/she should be able to display only those shipping points they are authorized to.
Please advice.
Thanks,
Mohan.

Hi Mohan,
For transaction VL10H you can specify values for the following fields in authorization object V_LIKP_VST:
-Activity:
01     Create or generate
02     Change
03     Display
04     Print, edit messages
18     Deliveries from coll. proc.
24     Archive
25     Reload
85     Reverse
-Shipping point: Here you must set the restriction for each group of users that are allowed for the maintenance of the shipping points that are used for delivery processing.
You can restrict the access through these fields.
Regards,
Leandro

Validation of profit center for MIGO transaction

Hi!
For MIGO transaction I want to restrict users of one profit center to post for another profit center.
I have tried it with GGB0 , OB28 as well as OKC7 but i was unable to do it.
please help me out with details.
thanks
Amit

hi! Eli Klovski
Validation in GGB0 is set under financial accounting head and under line item.
In the prerequisite of GGB0 i have mentioned BSEG-KOSTL ='HO' where HO is the cost center.
under check subheader I have mentioned SYST-UNAME = 'UDAY' where UDAY is the user name which is set for cost center HO and the message is set as 'UDAY is set for HO'.
message type is 'E'.
thanks
Amit

BAdi for BBPCF02 Transaction

Hi,
I am working with SRM module, i have to display one button in the portal by using Transaction BBPCF02. but i have to restict this button to display only for particular user Profile created in 'PPOMA' Transaction.
I need one BAdi to write the code for this Requirement.
Please suggest one exact BAdi for this requirement.
Points will be awared for useful answers.
Regards,
Anil K .

Hi,
Iam not able to find the badi as you mentioned but there is a badi APPREQUEST_UPDATE availble for the same.
Implementing Business Add-Ins (BADI)
Steps:
1. Execute Business Add-In(BADI) transaction SE18
2. Enter BADI name i.e. APPREQUEST_UPDATE and press the display
button
3. Select menu option Implementation->Create
4. Give implementation a name such as ZAPPREQUEST_UPDATE
5. You can now make any changes you require to the BADI within this
implementation, for example choose the Interface tab
6. Double click on the method you want to change, you can now enter
any code you require.
7. Please note to find out what import and export parameters a
method has got return the original BADI definition
(i.e. APPREQUEST_UPDATE) and double click on the method name
for example within APPREQUEST_UPDATE BEFORE_UPDATE is a method
8. When changes have been made activate the implementation
See below link for more info:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0456c54-0901-0010-f0b3-cd765fb99702
Step by step proc
http://www.sapdevelopment.co.uk/enhance/enhance_badi.htm
YOu can go through these links...
http://esnips.com/doc/10016c34-55a7-4b13-8f5f-bf720422d265/BADIs.pdf
http://esnips.com/doc/e06e4171-29df-462f-b857-54fac19a9d8e/ppt-on-badis.ppt
http://esnips.com/doc/43a58f51-5d92-4213-913a-de05e9faac0d/Business-Addin.doc
http://esnips.com/doc/1e10392e-64d8-4181-b2a5-5f04d8f87839/badi.doc
http://esnips.com/doc/365d4c4d-9fcb-4189-85fd-866b7bf25257/customer-exits--badi.zip
http://esnips.com/doc/3b7bbc09-c095-45a0-9e89-91f2f86ee8e9/BADI-Introduction.ppt
Regards
Kiran Sure

Understanding on Oracle services for Microsoft Transaction Server frm dba point of view

Hi ALL,
i read : -> https://docs.oracle.com/database/121/NTMTS/recovery.htm#NTMTS003
Need help to further confirm my understanding on what i read.
I am coming from the DBA angle... .
the functionality of the Microsoft Transaction server is integrated within the operating system as a COM+ server and as a .NET server, "
can i say these is the application servers ?
and the Microsoft Transaction distributed co -ordinator components is part of it.
Question, i don't install the Oracle Recovery Services on the above system right?
Question 2, as a dba, my only concern is to make sure the Oracle Services for Microsoft Transaction Server is installed. Is this correct ?
plus making sure to create the OraMTS administrator to run the recovery job to check for in-doubt transaction.
Question 3:
is this Oracle services for Microsoft Transaction Server used only when an application useses multiple databases in an env?
Can i say that when there is no user MTSSYS in my database, Oracle services for MTS is not used?
The reason why i ask is i am upgrading/ migrating my database and this database don't work with more then 1 database or the application does not work with more then 1 databases.
I ask the apps team all they say is that they are also not too sure. Thus need help/ advice.

Daniel,
In pre-8.1.7.4.0 beta implementations, your application server e.g. IIS or MTX.EXE hosts MTS transactional components. When such components acquire OLEDB or ODBC connections to Oracle and external service setup for that database i.e. OracleMTSService<id> joins the MTS transaction on behalf of the Oracle database which quite often runs on a non-Windows platform e.g. Solaris. We restrict each database to have one and only such service. This brings in scalability and availability issues. In 8.1.7.4.0 we have embedded the transaction join and commit logic in the clientside dll. There is no OracleMTSService<id> for a given database. The only service needed is a recovery service one per Windows machine on which Oracle Svcs For MTS is installed. This service is automatically created on installation of the product and doesn't connect to the databases. Instead the involved databases connect to the service via HTTP to resolve any MTS-related transactions that are in-doubt.

Problem with Period selection in PPOME transaction!

Dear All,
I have a very strange problem while selecting the time period in the PPOME transaction.
While selecting the "date and forecast period" option from the "settings" option in the menu bar, the time period in the preview the PPOME transaction must show as 3 months by default. But for my user ID when i select the preview period, the month field is displayed as blank and the end date is always defaulted to current date.
Is this time period coming from any configuration? I would like to know is there any way to by which we can change and save the time period settings.
Thanks,
sridharan

Goto PE03->ABKRS in Change mode. You will be able to uncheck or check the fields.

SHD0 transaction-how to restrict the variant transaction to specified users

I have created a variant transaction for MM02 wherein am disabling a field .I want this field to be disabled only for certain users.The variant transaction which I created affects all users.So,for everyone the field is grayed out.How to restrict this for specified users???

Hello,
Try to look an exit for that transaction, either user exit or badi, then try to disable the field doing a LOOP AT SCREEN, but first you should have the restricted users in a Z table, or by cheking the profiles for each user..
Another way to do it is trying to do it the profiles customization, maybe you can do it that way.
Cheers!!
Dont forget to reward.
Gabriel P.

Spool and email BTE   00002040 for F110 transaction

Hello
i m working in the BTE   00002040 for F110 transaction    , can any one tell me if we can genarate 2 copie : one copie for spool and the other for email sending.
FUNCTION zfi_process_00002040.
""Interface locale :
*" IMPORTING
*"     VALUE(I_REGUH) LIKE REGUH STRUCTURE REGUH
*" TABLES
*"      T_FIMSG STRUCTURE FIMSG
*" CHANGING
*"     VALUE(C_FINAA) LIKE FINAA STRUCTURE FINAA
data declaration for address routines
TYPE-POOLS szadr.
DATA: l_addr1_complete TYPE szadr_addr1_complete,
        l_adsmtp_line    TYPE szadr_adsmtp_line,
       ls_smtp_addr     type adr6-smtp_addr,               "
        st_lfb1          TYPE lfb1.                         "
default: print payment advice
c_finaa-nacha = '1'. "spool
ENDFUNCTION.

Hi Experts,
Would 00002040 help in case this is to be restricted to a single vendor only i.e. only one vendor from the CC should receive the email notification and the rest should not.
Regards,
Preeti

Restriction for PPOME transaction

Similar Messages

Maybe you are looking for