Role for SMARTFORMS tcode in DEV system?

Hi all,
I gave access for an ABAP Developer in QA and MIRROR system with a Z_ARCHITECT_MIRROR[Super role with access to all transactions] role.
Whic is restricted in PROD system.
There is a SAP role which contains access for SMARTFORMS tcode in PROD.
As far as I know this is not possible in PROD system??
Would like to know if there is a solution for this?
Regards,
Bharath.
Edited by: SAP Learner on Apr 14, 2008 4:07 PM

as long as your PRD system is locked against changes (tx. SCC4) there should not be a problem when the abaper can view smartforms.
check the settings of your PRD-system (no changes allowed in SE06) and no customizing and repository changes allowed in client XXX in tx. SCC4 and you should be safe.

Similar Messages

Initial roles for sap consultants in Development system .

HI all,
I am new in security, now I have to create one fi ,sd, mm,pp, abap users in my development server (ecc 6.0 in sql server). I need standard roles for there users.
Please give me security matrix.
Regards,
swathi-k

in tcode PFCG you can drop down the list of available roles as per your requirement and assign them to the users. you have to give the appropriate authorizations. In case you can find the role as per your requirement, then you have to create your own roles and assign them to the users.
follow for more details : http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Cheers,
-Sunil

Hi I need help in creating role for DEVELOPERS and HCM GUYS in ERP DEV. sys

Hi Experts
I am working as a Support Security Consultant. Now I have assigned to another implemenation Project.
My client asks to create 2 roles in DEV. system the requirement is:
1) He asks to create a role for develpoers in dev system fro devepment activities ( report creation, screen creation..etc..) and these people don't modify the HR related tables
2) He asks to create role for HCM guys in development system to work on HCM Configuration and to work on HCM areas but these people should not involve into develpometn activites
My questions is what are the tcodes we have to maintain in the roles to reach his requirement.
I asked the same thing to my Client he doesn' t provide any information
Please anyone help me on this
Thanks
Naresh

Hi,
for the first query please check auth object -Authorization Object S_TABU_DIS (Table Maintenance)
http://help.sap.com/saphelp_nw04s/helpdata/en/1e/e867408cd59b0ae10000000a155106/content.htm
No Worries
KG

Changeable mode in quality for particular tcode without open client(scc4).

Dear Expert,
Tcodes like FTXP,OB08 and OB52 are in changeable mode in client production(900) whereas it is in display mode in client quality(400), we require this to be changeable mode in 400 too without client open (SCC4). Please let me know how to do it.
Sanjay

Hi Sanjay,
These are called current settings, which are perticularly changable when the client role is set to "Production" (in SCC4), even though the client is closed in SCC4.
Hence this can be achived by two means, one by keeping the client open for configuration (like in Dev system), or by changing the client role to production (like production system).
None of the above two settings is recomended in quality fsystem or permanent basis. Hence the best option is to change the setting on demand basis in quality systen.
Hope this helps.
Thanks,
Suman.

Custome Tcode is not working in QA system but working in DEV system

Hello,
We have copied QM11 tacode to ZQM11. We found this ZQM11 tcode is not working in QA system, but properly working in DEV system. When we are execute this tcode from QA system with all required input, it says
"No objects could be selected that met your selection criteria."
But when do it in DEV system it is working fine. I have done following steps to check error
1) All authorizations are good
2) I have compared E070 and E071 table to found transport done with proper way.
3) I have checked SE93, tcode condition is good.
4) SE97 -->found call transaction is QM11 for ZQM11
5) From program code level Authority check maintained properly.
AUTHORITY-CHECK OBJECT 'Q_QMEL'
             ID 'QMART'    FIELD I_QMART
             ID 'TCD'      FIELD I_TCODE
             ID 'WERKS'    DUMMY.
6) Performed authorization trace to found error agains object Q_QMEL (RC =4), but in the role Q_QMEL has define with it's proper value supplied by our functional team.
7) Shows all active object in SU24 against ZQM11 are good
8) When we call tcode it has thrown the error agains Q_QMEL only
I am not able to understand why does not work this tcode in QA system, although working in DEV is good.
Please help me to resolve this issue
Thanks
Pavel

Bieng declared $WERKS field as DUMMY, is not relevant, so no matter its value, it will pass..
There's a catch! If even DUMMY means literally that no matter user has any value, he is still authorized but in reality for such \fields authorization check is only successful when a value ' ' or * is found in user's authorization else it errors out.
Sorry confused with programs where AUTHORITY-CHECK has ' ' coded instead of DUMMY. You are right, DUMMY specified for as field would pass authorization check with any/no value in user's authorization. Please ignore my statement
Sandipan
Edited by: Sandipan Choudhury on Dec 29, 2010 2:11 AM

Master role-derive role concept and FICO role in dev system!!!

Hi all,
I have created a master role with t-codes
AWUW
BAPI
BD10
BD100
BD101
BD102
BD103
BD104
BD105
BD11
BD12
BD13
BD14
BD15
also included object PLOG where maintained org data
and created a derived role from that master role and generated from the master role.
After that I wanted to change the org level but the system is not allowing me to change, although I selected the values from the F4 screen.
Now I want to maintain seperate org value of each of the derived role...and when adjusted from the master role..these maitained value should not vanished.
How should I proceed???
I have another issue....I am now in Dev system....I need to create a role with FICO module with SPRO....
Should I go ahead and cread a role and assign FICO block and assign SPRO...will that be sufficient??
Thanks in Advance
Regards,
Souren

Yes, It seems that you have broken the org level by directly making changes in the org level field inside pfcg.
One way to correct this is to regenerate the role in expert mode by selecting the option 'Delete and recreate profile and authorizations' (in case you want to correct it for all the org level fields.).
If you want only for PLOG, then delete this object and add again. Then go to organization level tab at the top and give the required value. Do this in the master role and generate and push the changes to derived role. Now, goto derived role and make the org level change the same way you did for parent role..
For your second question, you will have to see what all auth objects are being checked by SPRO for a FICO module assosciate. You can create a test role with SPRO in it and then do authorization trace through ST01 to see what all objects are checked when they work.

How can eCATT used for testing of z program on DEV system &data on Quality?

Hello All,
Background - Custom object is (for e.g. any report program) which I want to test is present on DEV system and required data (e.g. data that will be passed to selection screen fields of program) on Quality system.
Question -How to do testing of program using eCATT without transporting my program to Quality box? Please anyone can give me any insights on this to fix the data availability issue.
My efforts - Created System data container specifying RFC connection for Quality system. Created Test Data Container with data available on Quality box. Here, I specified target system as 'Quality' for the data. Created Test script (for SE38 tcode ) and did the parameterization(giving program name as parameter , other selection screen fields) and set the Target system for each parameter to QUALITY. Created Test Configuration specifying with all required parameters .
When I ran the test script from Test Configuration, test script started to run on Quality system. But failed saying program/object does not exist on quality box.
Importance - This is required as no data available on DEV box, need to move program/object to Quality system. Hence, multiple transort requests are created.
Edited by: Tripti on Feb 26, 2012 9:29 AM

Thank you for your quick response, BalusC. I really appreciate your answer.
Yes, you are right. If I manually code the same amount of those components in the JSF pages instead of generating them dynamically, the server will still run out of memory. That is to say, JSF pages might not accommodate a great deal of concurrent visiting. If I upgrade the server to just allow 1,000 teachers making their own test papers at the same time, but when over 2,000 students take the same questionnaire simultaneously, the server will need another upgrading. So I have to do what you have told me, using JS+DOM instead of upgrading the server endlessly.
Best Regards, Ailsa

Regarding Client Role change in DEV system.

Hi All,
I had some requirement from SapHR they want to do some Holiday calender changes in Sap Level.
and we have only Test Role client in our Dev System. They want me to change the Client Role from Test to Customizing Client.
Kindly let me know if Client Role is changes from TEST to CUSTOMIZING. is there any inconsistany in TMS.
Thanks,
Abdul

Hi,
Run BDLS to change the source system assn. Then check to see if all your transfer structures are active and also your source system is now the correct one. Easiest way is to goto RSA7 on the src system and see where the system is pointing to.
Cheers,
Kedar

SMSY//Logical component definition - multiple roles for one system?

Dear all,
as our client has a divided system landscape (three-tier operational line as well as two-tier development line) some systems have more than one role to fill. The development system on development line is source system for all developments, as well as post-processing system for retrofit purpose from operational line. The maintenance system on operational line is target system for developments from development line, as well as source system for maintenance activities on operational line.
--> What are the consequences of assigning multiple roles to one system?
--> Is there anonther option than assigning multiple roles?
Best regards
Nick

We have Event Manger 7.0 installed into a stand-alone SCM 7.0 system. When trying to set this up in SMSY, the only options given for setting up the Logical System is to associate with with EHP3 or EHP4 for in ECC 6.0.
Obviously we have not installed EM into ECC. So where are the other appropriate entries in SMSY for recognizing that EM is installed in SCM?
1) This system must be maintained as SCM 7.0 in SMSY and not as SAP ERP 6.0 or EHPX for SAP ERP 6.0, this is the reason as you can see this system SCM 7.0 can be assigned just to SAP ERP 6.0 or EHPX for SAP ERP 6.0.
2) There's no Main Instance available to be selected when you have a SAP SCM 7.0. You must select one or more of the following main instances below.
BI Content
SCM Server
cFolders on SCM Server
GEOCODING
Portal Content
SAP LiveCache
SAP NW - Adobe Docu. Service
SCM Optimizer
SCM WCL
XI Content
These are the main instances available to SCM 7.0

Client strategy for DEV system in an implementation proj

Hi,
Can some one advise a good client strategy for an impl project? here's and example and questions i have. if you have a better strategy, pls advise. We want to follow this on ECC 6 DEV system -
10 - Sandbox (play around before doing config - no transports)
20 - Golden client (do real config here, and do development here - transports will start from here)
30 - Test client (for SCC1 testing)
I am assuming I should do DEVELOPMENT in the same golden client - does that make sense? Else, which should i have a new client? in that case, how will transports move?
Thanks for all your help

Hello Jerryp,
Our customer has similar setup:
100 - Sandpit
200 - Dev and Cust
300 - Testing
400 - Sandpit 2
Whenever we need to do any unit tests in client 300, we copy over customizing by using SCC1 transaction (client copy via transport request).
For example whatever development (code or customizing) we do in 200 is copied over to 300 by SCC1. This ensures the client dependent customizing is in sync with client 300 without destroying data.
Also, periodically we refresh client 100 and 400 and with data and customizing from 300. No development client independent changes are possible in the sandpit and testing clients.
Regards,
Siddhesh

Role for business system defined in SXMS_CONF_ITEMS'

hi
in RWB integration engine status is red in detail it is showing.
'No role for business system defined in SXMS_CONF_ITEMS'.
how can i fix this.
regards,
krushi

HI
Runtime Workbench - Integration Engine
Are the Roles in SXMS_CONF_ITEMS and the SLD Consistent?
//***The role of a business system is defined centrally in the SLD. However, you can overwrite this setting locally in the table SXMS_CONF_ITEMS.
This test checks whether the role descriptions are consistent. If not, the locally defined role is used at runtime.
extract taken from this thread
http://help.sap.com/saphelp_nw04s/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
Message was edited by:
Anusha Ramsiva

No role for business system defined in SXMS_CONF_ITEMS

Hi Experts.
I have the following problem. We were set up the XI in our company and now we are trying to configure and run it propertly. We had some problems so far and now there is the next one: I configured the simple scenario FILE-XI-FILE but it doesn't work :(. Every step from the scenario was completed successfully (after some problems) but when I have started runtime Workbench (RWB) in order to monitor the functionality of XI and I choosed Component Monitoring | Components | Integration Server | Integration Engine GPI I see that I have an error in Self-Test Status | Are roles in SXML_CONF_ITEMS and SLD consistent? In detail it's No role for business system defined in SXMS_CONF_ITEMS. My business and technical systems look to be well configured but now I'm hopeless because I can't find nothing more specific about SXMS_CONF_ITEMS table. I tried some notes and threads from the forum but nothing helped me after all. So please help if someone has an experience with something similar. Any help will be appreciated. Thanks
Ondrej

Hi,
The role of a business system is defined centrally in the SLD. However, you can overwrite this setting locally in the table SXMS_CONF_ITEMS.
This test checks whether the role descriptions are consistent. If not, the locally defined role is used at runtime.
Check in transaction SXMB_ADM -> integration engine configuration a parameter (Corresponding Integ. Server) if all parameters are correct n not lost.
refer : http://help.sap.com/saphelp_nw04/helpdata/en/a5/1b5342d8a7be30e10000000a155106/content.htm
Runtime Workbench - Integration Engine
http://help.sap.com/saphelp_nw04s/helpdata/en/70/58b43be7492354e10000000a114084/frameset.htm
Regards
Aashish Sinha
PS : reward points if helpful

Tcodes & Roles for SAP GRC AC 5.3 SPM in R/3

Hello,
After installing part of the SAP GRC AC 5.3 SPM in the Tcode SAINT (R/3).
I want to know what Tcodes do I need to use the Tcode /VIRSA/VFAT.
Or what type of roles do I need. Is there some.
I have read the PDF "SAP Governance, Risk & Compliance Access Control 5.3 - 02 Post-Installation - SPM.pdf", and I have seen some roles. Are this the standard roles for the SPM in R/3?
Best Regards.
Pablo Mortera.

Hi Pablo,
In 5.3 we can use the SPM by two different ways.
1. FFID based: In this you make a user as a FFID and then you use this FFID to perform all the actions.
User based roles are for the above.
3. Role based: In this you assign the roles(maintained in SPM) to the user.
Role based roles are for above.
The basic diffeence is in first one you use user (FFID) to perform the activities whereas in second you use role (which are maintained in SPM).
You can get more details of this in user guide and configuration guide.
Regards,
Shweta

Standard roles for entering master data in SAP system

Hi Experts!
We are deploying an SAP solution based on PS module, but supported by other modules like FI-CO-MM. We need some help on finding which standard SAP roles/profiles will allow us to create the following entities in the system:
- Controlling Area
- Company Code
- Business Area
- Plant
- Location
- Profit Center
- Controlling order
- Cost Element
- G/L Account
- Currency
- Materials
- Purchasing Organization
- Material Group
- Vendor
- Purchasing Group
- Outline agreement / position
- Storage Location
- Creating new characteristics in the clasification system (Tx CT04)
- Work Center
- Responsible names (for PS responsibles)
Thank you in advance.
Best regards,
Neil

Please go though this link. Which provides role for all PS txn . click on left side and choose roles based on your requirement.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/90/7c8838ba4bed0fe10000009b38f8cf/frameset.htm
Regards
Nitin

TDMS for refresh DEV system

Hi,
Does anybody have experience with refreshing a DEV system using TDMS?
Our DEV system consists of 2 clients, One used by programmers with no data in it, and a second client with some transactional data for performing the first tests before something is transported to QAS.
The repository of a DEV system will never be the same as on a production system (people are programming simultaneously), so the scenario I had in mind was to create the DEV system as a shell from the production system, create 2 clients and use a TIM for the second client.
But then all the program specific data which is stored in DEV gets lost (e.g. program versioning).
Does anyone know how to keep this data?
Kind regards,
Nicolas

Hello
Their are some main concerns before a TDMS TDTIM transfer can be done, these are -
1) The table whose data is to be transfered from sender system to receiver system should exist in both the system.
2) Key fields should be exactly identical.
3) Their may be some extra fields in the receiver, this will not pose any issue but if their is an extra field in sender then its data could not be transferred. So to solve this either mark this table as not use or change the table in receiver to add the missing field.
As a part of TDTIM both the system will be analyzed for consistent repository and any discrepancy will be notified to the user then user needs to decide whether he marks the inconsistent table for no transfer or corrects the inconsistency before proceeding further.
Best regards,

Role for SMARTFORMS tcode in DEV system?

Similar Messages

Maybe you are looking for