RSSM Authorization objects linking to InfoProvider disappeared

Dear all
We have observed a strange scenario. Some times the link of the authorization objects to the InfoProvide disappeared and after certain time, it comes back again. It seems no any batch job running related to this. Have someone met the same situation?
Thanks for the help, Jessica

I don't know if this is the answer to your question but I have a similar experience, but slightly different:
Sometimes, in the process of redesigning InfoProviders already present in the production system, they are deleted and recreated in development. When that happens, <i>all possible</i> authorization checks for reporting objects are checked again by default. Transporting these InfoPoviders back to Production means that users will experience a loss in authorizations until the irrelevant authorization checks for reporting objects are unchecked again.
This problem can only be solved by implementing a decent change management procedure and increasing authorization awareness for BW developers.
Good luck,
Kind regards,
Lodewijk

Similar Messages

RSSM: Checks Authorization Objects for Infoprovider are not activ

Hello,
we have BW 3.5 and we use RSSM Authorization Objects.
When we create a new cube with an Infoobject that is authorization relevant, in our development-system in rssm the flags for the checks are automatically activ.
When we transport the new cube to our production-system, the flags in RSSM for the authorization object are not activ.
Sometimes the new infoprovider is not in the list of the infoprovider in rssm, so we have to "update check status" with the appropriate icon.
My question:
It is possible, that when we import the new cube in our production-system, that all authorization objects are activ??

Hi,
Normally system would check all the authorization relevant objects whenever a new Info cube is imported and in case if you want to transport these changes to Production system manually then follow the below listed steps:
1) In Development system, check or un-check the authorization relevancy using the transaction RSSM on a given Info provider
2) These changes are stored in table RSSTOBJDIR
3) Create a manuall transport request and include these entries covering the required Authorization objects manually.
R3TR TABU RSSTOBJDIR
Ex: If Info object 'A' is authorization relevant in Development system but not in Production system and you want to transport this change to Production system then include object 'A' table entries manually.
Hope this helps.
Cheers
Bala Koppuravuri

Authorization Objects for pricing conditions in Sales Order

Hi All,
In transaction VA03, we should restrict some users not to see pricing conditions tab in header and item level and net value on overview screen.
Is there anyone who knows how to do it? I wii be very glad if you help me.
Best Regards.

Hi,
i have not done this exact limitation before, but I hope this method will help.You can look up the list of all authorization objects linked to the tcode in transaction SU22.
You can also get this by doing a user trace in ST01; and displaying the pricing condition.
once you have a rough idea, you can do a trial and error with the values inside these objects and see which one works.
Regards,
Soumya

BW 3.5 which authorization objects available rssm (checks for infoprovider)

Hi all,
How does SAP generates the list of authorization objects in RSSM when you enter a specific infoprovider (checks for infoprovider)? Are only the authorization object related to this infoprovider listed?
Is there any documentation about the purpose in RSSM for the button 'update check status (Authorization objects, infoprovider).
thanks for your help.

Based on which criteria?
Is there somwhere detailed documentation available about the RSSM part in BW authorizations? It seems hard to find any...
Thanks,

Use of RSSM to create authorization objects

I have a few questions on the way of using authorization objects via RSSM.
First, i would like to know if there is a limit in the number of values used as a filter in the authorisation object.
First, what is the quantity limit of values that we can use as filter? CC00000010, CC00000011, CC00000012, ..., n. In this case what would be the value of n. In our fonctionnal need, ranges of values would not be an option.
My second question is in relation with the use of an authorization object composed of two characteristics. Is there a way to build a case in witch the authorization check return a positive answer to a logical OR between the two characteristics?
Example 2, lets say that you want to perform an authority check on the cost center OR on the profit centre. Is there a way to build the authorization object to make sure that there is no error messages when the user has the authorization for the cost center CC00000010 OR the profit center PF00000011.
Best regards,
Stéphane Beaudoin

why would you use Pages when there are templates in iweb
as for the URL question, that is determined by the host, not iweb which just writes the page. but I would not use tinyurl since it has become a favorite of phishers and other web nasties. it might be worth getting a domain name if you can find a good deal.
i would search for some realtor sites to see the kinds of information they are giving and how they are laying it out. and make sure that all photos look really really good. nothing is more off putting on a house ad than crappy photos

CV02N Authorization only to Object Link - Material

Hi Gurus,
I want to give special authorizations to a group of users where they can assign materials only in CV02N.
When they enter Document Info Record there he should be accessing only Object Link - Material only, so that he can enter the relevant Materials.
I found the Auth Object: C_DRAD_OBJ, but this is not helping me.. Please let me know if there is any alternative.
Regards
Naveen

Hi,
Apart from Ravi suggestion, you can also create a new document type from DC10 and define only one Object link i.e. material for that doc type. And after that you can provide this doc type authorization (with object C_DRAW_TCD) to your concern users. Its just other way around solution.
Regards
Shishir

DMS Object link Material authorization

Hi Gurus,
I want to give authorization to users only linking Material, how can i achieve this as i tried with C_DRAD_OBJ - Create/Change/Display/Delete Object Link, but it is giving full access to all other objects, but i want to permit only for MATERIAL.
I appreciate for your response.
Regards
Naveen

Hi Naveen,
As Chandu said, you need to be specific while providing the authorisations in the authorisation object C_DRAD_OBJ. This object contains 4 authorisation field values
1) ACTVT(Activity) which allows creation/change/delete of object link from the DIR
2) DOKOB(Linked SAP Object) - In combination with activity you can assign specific objects like MARA,PRPS etc. to user
3) STATUS: In combination of above 2, you can also restrict using specific status i.e. only in 'CR-Created" status user can change/delete the object link.
4) DOKAR: The user is allowed to create/change...object links in which all document types.
If you have already specified all these above, then the user is getting other object links authorisations through some other role. Check with SUIM tcode for details.
Regards,
Ravi

Transporting authorization object (RSSM)

Hi,
I am having problem transporting my BW Custom authorization object over to the Quality system.
I have successfully transported the table contents RSSTOBJDIR to the Quality system. However, when I search for the authorization object in RSSM in Quality after the transport , it complained saying u201Cobject is not available. Create?u201D
How can I transport the authorization object?
Thanks for your time.
Regards,
Raja

Yes you can transport an authorization object.
It should give you an option to create a TR which creation of the auth obj in RSSM. If you have not done that then try to make a small change and see if it requests you to create a TR. If still you are not able to do it, then try adding the objec of typr R3TR - SUSO and give your authorization object name in SE03.
Regards,
Gaurav

Link authorization object to transaction code

Hi to all
how to link authorization object to transaction code?
i think we can do by using SU24, i am not getting how to do ?
can any one help me on this Immediately
Regards
raadha

In SU24
In the Application tab
Type of Application: 'Transaction'
Transaction Code: 'Tcode'
In the Authorization Object tab
Authorization Object: 'Authorisation object name'
Type of Application: 'Transaction'
Then Execute or Press F8...

How we can show authorization object at infoprovider level

hi all
how we can show authorization object at infoprovider level..
shalini

S_RS_ICUBE:
          Auth objects for working with Infocubes and their sub-objects. For example,
          protecting users who can define the Infocube, applying update rules, and
          looking at the data in the Infocube.
In order to execute any query, u must have access to R_RS_ICUBE and S_RS_COMP. S_RS_COMP is
a powerful object that enables u to make choices on how to secure.

Link users - positions - roles - authorization objects

Hi guys,
I want to write a report that would link USERS to POSITIONS to ROLES and finally to AUTHORIZATION OBJECTS. The user would enter the SAP username in the selection screen and the report should extract all the information listed above.
I am able to link the following:
+ Users to positions via function module RH_BRANCH_GET
+ Users to roles via table AGR_USERS
+ Roles to authorization objects via function module PRGN_1251_READ_FIELD_VALUES
Unfortunately, I dont know how to link positions to roles
Does anyone know how to do that?
Also, is there a more efficient way, than the approach highlighted above, to complete this requirement
Thanks for your time
-TR

Hi,
you can find a link between role and HR object in table HRP1001. The field SOBID contains name of the role. You need to find way how to convert object ID into position role. Be careful about additional fields from that table.
Cheers

Authorization Object for Webclient UI BI-Links

Hello,
i created my first two BI-Reports for CRM Service and added them over navigationbar-profile to my businessrole.
No i have the issue that i can see and process this new to BI-Links (authorization SAP_ALL and SAP_NEW).
But i have an testuser which has the same authorization as our service users. With this testuser i can´t see the links.
Does anybody know which authorization object i need to add to PFCG-role to see the links?
Thank you
Best regards
Manfred

Hello Robert,
it must have to do with authorization.
The buisnessrole is the same for both users "ZSRVHELPDESK".
Authorization in BW is done for both users.
But the user without CRM authorization SAP_ALL and SAP_NEW can´t see the two links to custom BW-Reports.
Another idea?
Thank you.
Best regards
Manfred

Infoproviders are not found to link to authorization object

Hello all,
The infoproviders for which the authorization object should be applied are not listed in the assignemtn checklist in RSSm and also in the table RSSTOBJDIR.
I made sure that the infoobjec tis included in all the applicable infoproviders but dont see the object listed.
What should I do.
Regards,
Harini

Hi All,
I found the solution to this issue.
You need to click on button called "Update Check Status (Authorization Objects, Infoproviders)", at the bottom of the screen in RSSM and try again.
Oss: 955146
Thanks,
Harini

Mb25 linked to authorization object

Can someone please tell me the t-code mb25 is linked to which authorization object?

Hi,
You can check authorization objects for any tcodes of sap from SU24.
Here are the authorization objects for MB25.
M_MRES_BWA-Reservations: Movement Type
M_MRES_WWA-Reservations: Plant
Thanking you,
Sandesh Sawant

Authorization Object (RSSM) restriction in PFCG

Hi experts,
When I execute a query in RSSMQ I get the message:
You do not have authorization to read object ZBICINFPR 'BI Cockpit' BRAIN 804
Does anyone know, what to do? How can I give the authorization for that authorization object in PFCG? What is the name of the authorization I need?
Thanks in advance
F.L.

Hi Florian.
Well, it's a custom made object (because of the prefixed Z), so check your documentation or look it up in tcode SUIM -> Authorization Objects -> By object name, text -> put ZBICINFPR in the name field -> hit F8 -> on the next screen hit F6 to get a where used list (go for authorisations)
This will give you a list of the authorisations where this object is used.
Regards
Jacob

RSSM Authorization objects linking to InfoProvider disappeared

Similar Messages

Maybe you are looking for