Search request failed! user is not allowed to perform search request

hello all,
i am trying to run initial loads on AS java database repository, the user i use in repository is and admin user for NW 7.3 and has full administrator rights.
still initial loads were not successful from the configuration guides i came to know Spml_Write_Action role is only for NW 7.0 and below for 7.3 is not using smpl connection i believe.
this is the only warning in the job log
Search request failed! <<user>> is not allowed to perform search request.
default trace log.
UME#sap.com/tc~sec~ume~wd~kit#C0000A17206800A800000002000021A8#23640950000000004#sap.com/tc~sec~ume~wd~umeadmin#com.sap.security.core.wd.maintainuser.MaintainUserComp.public void saveModifications( )#idm_admin#11##B1AC9AC0EC9211E3C1DF00000168BB76#b9612f91ec9511e38cec00000168bb76#b9612f91ec9511e38cec00000168bb76#0#Thread[HTTP Worker [@186066399],5,Dedicated_Application_Thread]#Plain##
Error adding roles
[EXCEPTION]
com.sap.security.core.wd.exception.UmeUiSecurityException: com.sap.engine.services.jmx.exception.JmxSecurityException: Caller idm_admin not authorized, required permission missing (javax.management.MBeanPermission -\#modifyEntityAssignments[:SAP_J2EECluster="",j2eeType=UmeJmxServer,name=IJmxServer] invoke)
at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.handleThrowable(UmeUiFactoryCompInterface.java:2977)
at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.modifyEntityMappings(UmeUiFactoryCompInterface.java:1272)
at com.sap.security.core.wd.umeuifactory.wdp.InternalUmeUiFactoryCompInterface.wdInvokeMethod(InternalUmeUiFactoryCompInterface.java:1034)
at com.sap.tc.webdynpro.progmodel.generation.ExternalControllerPI$ExternalInterfaceInvocationHandler.invoke(ExternalControllerPI.java:339)
at com.sun.proxy.$Proxy780.modifyEntityMappings(Unknown Source)
at com.sap.security.core.wd.maintainuser.MaintainUserComp.saveModifications(MaintainUserComp.java:1334)
at com.sap.security.core.wd.maintainuser.wdp.InternalMaintainUserComp.saveModifications(InternalMaintainUserComp.java:709)
at com.sap.security.core.wd.maintainuser.ModifyUserView.onActionSave(ModifyUserView.java:630)
at com.sap.security.core.wd.maintainuser.wdp.InternalModifyUserView.wdInvokeEventHandler(InternalModifyUserView.java:579)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:142)
at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:75)
at com.sap.tc.webdynpro.clientserver.phases.ProcessingEventPhase.doHandleActionEvent(ProcessingEventPhase.java:159)
at com.sap.tc.webdynpro.clientserver.phases.ProcessingEventPhase.execute(ProcessingEventPhase.java:94)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequestPartly(WindowPhaseModel.java:162)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doProcessRequest(WindowPhaseModel.java:110)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:97)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:515)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:58)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doExecute(ClientApplication.java:1671)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doProcessing(ClientApplication.java:1485)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessingEmbedded(ApplicationSession.java:919)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessing(ApplicationSession.java:878)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:357)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:325)
at com.sap.tc.webdynpro.serverimpl.core.sessionctx.AbstractExecutionContextDispatcher.delegateToRequestManager(AbstractExecutionContextDispatcher.java:62)
at com.sap.tc.webdynpro.serverimpl.wdc.sessionctx.DispatchHandlerForRequestManager.service(DispatchHandlerForRequestManager.java:39)
at com.sap.tc.webdynpro.serverimpl.wdc.sessionctx.DispatchHandlerForRequestManager.service(DispatchHandlerForRequestManager.java:46)
at com.sap.engine.services.servlets_jsp.server.deploy.impl.module.IRequestDispatcherImpl.dispatch(IRequestDispatcherImpl.java:270)
at com.sap.tc.webdynpro.serverimpl.wdc.sessionctx.ExecutionContextDispatcher.dispatchToAppContext(ExecutionContextDispatcher.java:68)
at com.sap.tc.webdynpro.serverimpl.core.sessionctx.AbstractExecutionContextDispatcher.dispatch(AbstractExecutionContextDispatcher.java:53)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:244)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy$Runner.callRequestManager(JavaApplicationProxy.java:1244)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy$Runner.callEmbeddedApplication(JavaApplicationProxy.java:1122)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy$SendDataAndProcessActionCommand.doExecute(JavaApplicationProxy.java:1605)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy$AbstractCommand.execute(JavaApplicationProxy.java:1488)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy$Runner.execute(JavaApplicationProxy.java:1028)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy.execute(JavaApplicationProxy.java:859)
at com.sap.tc.webdynpro.clientserver.embedding.JavaApplicationProxy.sendDataAndProcessAction(JavaApplicationProxy.java:468)
at com.sap.tc.webdynpro.portal.pb.impl.JavaApplicationProxyAdapter.sendDataAndProcessAction(JavaApplicationProxyAdapter.java:191)
at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1668)
at com.sap.portal.pb.PageBuilder.SendDataAndProcessAction(PageBuilder.java:366)
at com.sap.portal.pb.PageBuilder$PhaseListenerImpl.doPhase(PageBuilder.java:2094)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processPhaseListener(WindowPhaseModel.java:251)
at com.sap.tc.webdynpro.clientserver.phases.PortalDispatchPhase.execute(PortalDispatchPhase.java:50)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequestPartly(WindowPhaseModel.java:162)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doProcessRequest(WindowPhaseModel.java:110)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:97)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:515)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:58)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doExecute(ClientApplication.java:1671)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doProcessing(ClientApplication.java:1485)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessingStandalone(ApplicationSession.java:908)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessing(ApplicationSession.java:880)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:357)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:325)
at com.sap.tc.webdynpro.serverimpl.core.AbstractDispatcherServlet.doContent(AbstractDispatcherServlet.java:87)
at com.sap.tc.webdynpro.serverimpl.wdc.DispatcherServlet.doContent(DispatcherServlet.java:89)
at com.sap.tc.webdynpro.serverimpl.core.AbstractDispatcherServlet.doPost(AbstractDispatcherServlet.java:62)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:754)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:152)
at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:38)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:457)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:210)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:441)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:430)
at com.sap.engine.services.servlets_jsp.filters.DSRWebContainerFilter.process(DSRWebContainerFilter.java:38)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ServletSelector.process(ServletSelector.java:81)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ApplicationSelector.process(ApplicationSelector.java:276)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.WebContainerInvoker.process(WebContainerInvoker.java:81)
at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.ResponseLogWriter.process(ResponseLogWriter.java:60)
at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DefineHostFilter.process(DefineHostFilter.java:27)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MonitoringFilter.process(MonitoringFilter.java:29)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.SessionSizeFilter.process(SessionSizeFilter.java:26)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MemoryStatisticFilter.process(MemoryStatisticFilter.java:57)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DSRHttpFilter.process(DSRHttpFilter.java:43)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.server.Processor.chainedRequest(Processor.java:475)
at com.sap.engine.services.httpserver.server.Processor$FCAProcessorThread.process(Processor.java:269)
at com.sap.engine.services.httpserver.server.rcm.RequestProcessorThread.run(RequestProcessorThread.java:56)
at com.sap.engine.core.thread.execution.Executable.run(Executable.java:122)
at com.sap.engine.core.thread.execution.Executable.run(Executable.java:101)
at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)
Caused by: com.sap.engine.services.jmx.exception.JmxSecurityException: Caller idm_admin not authorized, required permission missing (javax.management.MBeanPermission -\#modifyEntityAssignments[:SAP_J2EECluster="",j2eeType=UmeJmxServer,name=IJmxServer] invoke)
at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:100)
at com.sap.engine.services.jmx.JmxServerFrame.checkMBeanPermission(JmxServerFrame.java:101)
at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.checkMBeanPermission(MBeanServerSecurityWrapper.java:438)
at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:288)
at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:813)
at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:367)
at com.sap.security.core.jmx._gen.IJmxServer$Impl.modifyEntityAssignments(IJmxServer.java:3050)
at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.modifyEntityMappings(JmxModelCompInterface.java:569)
at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.wdInvokeMethod(InternalJmxModelCompInterface.java:862)
at com.sap.tc.webdynpro.progmodel.generation.ExternalControllerPI$ExternalInterfaceInvocationHandler.invoke(ExternalControllerPI.java:339)
at com.sun.proxy.$Proxy779.modifyEntityMappings(Unknown Source)
at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.modifyEntityMappings(UmeUiFactoryCompInterface.java:1266)
... 97 more
Caused by: java.security.AccessControlException: access denied (javax.management.MBeanPermission -\#modifyEntityAssignments[:SAP_J2EECluster="",j2eeType=UmeJmxServer,name=IJmxServer] invoke)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:376)
at java.security.AccessController.checkPermission(AccessController.java:549)
at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:84)
... 108 more

Hello,
recheck that the user has the UME.Spml_Write_Action - SPML is still used in release 7.3. The log still indicates that there is an authorization error.
Thanks,
Chris

Similar Messages

User can't authenticate...auth-failed/windows workstation not allowed

Keep on running into an odd problem. I have some users logging in via soft vpn connection. Yesterday, they were able to log in without a problem. Today they are getting 01/31/2007 08:09:21
Authen failed
Windows workstation not allowed .. ..
Why can they authenticate 1 day and then be denied. This happened last week as well. The server adminstrator seemed to think it was a user setup issue and gave them another user account. Now as you can see above, the same thing has happened. I don't get it. Any help would be appreciated.

For ACS to perform Windows authentications we need to specifiy a workstation name.
In AD , the user should have access to all computers.
OR
A computer account named CISCO should exist.
All users that Windows will authenticate have permission to log in to the computer named CISCO.
ACS shows this error message only when the user tries to login from a work station he has no permission to log on.
If you are using ACS 4.1 this link will be useul.
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_installation_guide_chapter09186a008070a63c.html#wp1041202

Java daemon on boot: "This user is not allowed access to the window system right now."

The daemon is located in /Library/LaunchDaemons/ and launches successfully on most occasions. However, it sometimes fails to start with this error:
Nov 17 20:36:24 server.local java[28972]: This user is not allowed access to the window system right now.
Nov 17 20:36:24 server com.apple.launchd[1] (net.java.server): Throttling respawn: Will start in 10 seconds
I have the server command running as a background daemon using its "nogui" option (the developers claim to have written it to not display a gui). However, it seems that somewhere along the line, Java is trying to display something. As the daemon is running before users log in, it gives this error. Once a user is logged in to the system, it runs fine; however, logging in a user to run the server is not an option. It needs to run on boot.
Any ideas for how to solve this? I'm going to contact the developers to see if it may be something they can fix, but I want to be able to force the issue in case the problem ever occurs in the future.

Irrespective of any claims by the developer, this certainly appears to be a test case that shows that the tool is not working as expected, and that the application has a bug. This test case would be better if there was some evidence around why only some of the startups fail, but in general this will involve what's been suggested earlier: "Contact the application developer."
As some general background on what's involved, see daemons and agents and related; processes that are not allowed to connect to the GUI for reasons of security.
I'd also suggest testing your DNS, as seeing "server.local" can imply local DNS configuration errors. Launch Terminal.app from Applications > Utilities and issue the following harmless diagnostic command and see if it reports no changes, or if it detects network or DNS errors:
sudo changeip -checkhostname
If this is OS X Server and a NAT'd network, you do not want to reference any DNS servers located off of your NAT'd network.
Why DNS? Because DNS errors can cause only some operations to fail, particularly if there's more than one DNS server selected (and where some subset of the DNS servers are malfunctioning or misconfigured).

Security error - User is not allowed to execute Proces - Resolved

Enabled security on my domain by editing message-handlers.xml :
<inbound-flow>

<message-handler id="security" />
</inbound-flow>
commented out <property id="SecuredProcesses" > .. </property> to apply security to all processes.
Now when I initiate process through BPELConsole I tick the WS-Security and use bpeladmin/welcome1 as credentials (I'm logged into console as this), I get the following error. In fact I get the very same error if I make up a username/password.
<2007-10-24 08:17:41,343> <ERROR> <archi2.collaxa.cube> <BaseCubeSessionBean::lo
gError> Error while invoking bean "delivery": [com.collaxa.cube.engine.handlers.
HandlerInvocationException: Error while invoking inbound message handler.
An error has occurred while attempting to invoke the inbound message handler cla
ss "class com.collaxa.cube.security.Authenticator" for the message "". The exce
ption reported was: User is not allowed to execute Proces, User[true] process [f
alse]
ORABPEL-02175
In bpel.xml of the process itself I have this:
<?xml version = '1.0' encoding = 'UTF-8'?>
<BPELSuitcase>
<BPELProcess id="SQTest2" src="SQTest2.bpel">
<partnerLinkBindings> ....snip...
</partnerLinkBindings>
<preferences>
<property name="user" encryption="plaintext">bpeladmin</property>
<property name="pw" encryption="plaintext">welcome1</property>
</preferences>
</BPELProcess>
</BPELSuitcase>
If I don't supply username/password then I get "Could not apply security [No username provided, security expects user]" which sounds right enough.
I'm using the default authentication scheme system-jazn-data.xml and using 10.1.3.3 patchset on linux.

My own fault, putting user credentials in wrong place in bpel.xml:
<?xml version = '1.0' encoding = 'UTF-8'?>
<BPELSuitcase>
<BPELProcess id="SQTest2" src="SQTest2.bpel">
<partnerLinkBindings> ....
</partnerLinkBindings>
<configurations>
<property name="user" encryption="plaintext">bpeladmin</property>
<property name="pw" encryption="plaintext">welcome1</property>
</configurations>
</BPELProcess>
</BPELSuitcase>

Restrict the user should not allow to select No Excise entry tab in MIGO

Hi
how to restrict the user should not allow to select No Excise entry tab in MIGO
if the material Excisable user can bale to select the No Excise entry tab in MIGO . my requirement .... if the Pop come Please enter Excise Invoice number and Excise Invoice Date user should not change the No Excise how to restrict pls advise me
@sakhi

These are the options provided by SAP keeping in mind Indian Scenario. Sometimes, vendor forget to send excise invoice copy with the material, in such case, you can select 'Only Part I'.
Even if you have maintain vendor excise details & material excise details (By mistake) in J1ID, system will throw an error message, excise invoice value is zero. In such case, we can select option 'No excise entry'.
Your requirement can't be fulfilled in standard way. Even if you go for any Z- developement, you will lose the option.

In Sales Order Users are not allowed to change price for any material

Dear all,
Please give me the solution :
In Sales Order va02 Users are not allowed to change price for any material .

Hi Amit
If you want that in VA01 manual as well as other pricing condiion entry and cahnges to be allowed and only in va02 users should be restricted ,then you have following alternative.
Go to T.Code SHD0
Select Transaction VA02.
Create a new variant ,give suitable name.
select option change with processing.
So u can run a va02 transaction and for every screen u can create screen variant and control data entry whether required , dispaly or hide.
in this for LV69a pricing screen disable update button .
so system wont change anything updated or cahnged in pricing.
further you can create the variant transactions from this transaction variant and assign to different users as per control requirements.
I think this will help you
Regards
mandar

How to disable Refresh,Reload in browser and user should not allow to multiple browser sessions ?

Dear All,
How to disable Refresh,Reload in browser and end user should not allow to multiple browser sessions in portal.Where we need to configure the settings or any code in masthead or any other component. My server version is 7.4 - SP5 .Please help us.
Thanks for advance,
BR,
Durga Rao.

Dear all,
i am able to logoff the click refresh button on keyboard.I am using this code to log off the user into the portal.
document.onkeydown = function(e)
var key;
if (window.event) key = event.keyCode
else
var unicode = e.keyCode ? e.keyCode : e.charCode
key = unicode
switch (key)
{ //event.keyCode
case 116: //F5 button
LSAPI.sessionPlugin.logoff();
event.returnValue = false;
key = 0; //event.keyCode = 0;
return false;
case 82: //R button
if (event.ctrlKey)
LSAPI.sessionPlugin.logoff();
event.returnValue = false;
key = 0; //event.keyCode = 0;
return false;
case 91: // ctrl + R Button
LSAPI.sessionPlugin.logoff();
event.returnValue= false;
key=0;
return false;
Thanks.
But i am unable to control the multiple windows opening the browser.So any one can tell me the how to block the new window and new tab/duplicate tab option.
BR,
Durga Rao.

Error: Admin users are not allowed to have override security

In shared services, I provisioned the users FDM "Provision Manager" access. When I log on to FDM application, I see all those users have administrator privileges. When I tried to change the security level, it is throwing an error
Error: Admin users are not allowed to have override security
How can I create users who are not as admin in FDM? The user guide dont seem to help me much in this regards.

All you need to do is make sure there role is set to an Intermedate role 1-9 and not Administrator. I would suggest you do the following.
1) Log into FDM as the main admin user.
2) Go to user maintenance and delete all users who are not meant to have adminstarator access but can still access everything like admins.
3) Go into Shared Services and check that these users are provisioned for FDM with one of the Intermediate roles only.
4) Once confirmed re-add these users back in the FDM user maintenance screen by selecting them from the new user dropdown and give them the appropraite location access.
5) Log off FDM as the admin user.
6) Log in as the intermedaite user and tes tthe access

6288 message sending failed. Sending not allowed.

Hi,
I have a 6288, and just recently it has been coming up with the message 'Message sending failed. Sending not allowed' randomly when I try to send a txt. (A similar msg appears if I try to make a call as well). All other functions appear to work normally. The only way to get the phone to send/call is to switch off then on again. I can receive txt/calls when the phone is like this. This morning it also said that 'sim card registration failed'. Any help will be appreciated.

Have you tried updating your phone?
If not I would recommend you to do so.
Link here: http://europe.nokia.com/softwareupdate
Before the update be sure you meet the system requirements to perform the action and don't forget to backup your data first.

]The requirement is that users should not allow them to save if the indic

hi guys
when u are doing GR in the excise tab page if u find an icon (yellow one) called more data if u click that one u go to other screen where u will find a tab page named miscellaneous ther u can see MRP indicator check.
The requirement is that users should not allow them to save if the indicator is not ticked.
help me guys
kiran

You can either use Tcode NACE for output procedure pr follow following path in SPRO:
IMG - SD - Basic Functions - Output control - Output Determination - Maintain Output Determination for Billing Documents - Maintain Output Determination Procedure
There for your output procedure used for the desired output type maintain requirement routine as 62 : Billing doc released to acctng.
This requirement is met if the billing document is complete checking the header, pricing, and all items and has already been passed to financial accounting. The requirement also checks that the document is not relevant for an invoice list. This requirement can be assigned to billing document output condition types that should only be processed when the billing document is complete and forwarded to accounting. This requirement can only be used with billing documents.
Regards
JP

Child actions are not allowed to perform redirect actions. partial view

I'm using ASP .NET MVC 5
I'm trying to use Create view with the index view to show the created item in the same page. For that I'm using _CreateCategory as the partial view and I added following to the index view
{Html.RenderAction("Create", Model);}
My controller's get and post methods as follows for the Create
[HttpGet]
public ActionResult Create()
return PartialView("_CreateCategory",new Inventory.Models.Category());
[HttpPost]
[ValidateAntiForgeryToken]
public ActionResult Create([Bind(Include="Id,Description")] Category category)
if (ModelState.IsValid)
db.Categories.Add(category);
db.SaveChanges();
return RedirectToAction( "Index");
return PartialView(category);
}My index method as follows
public ActionResult Index()
return View(db.Categories.ToList());
I didn't do any changes to the partial view. I'm getting error "
child actions are not allowed to perform redirect action
. I tried many ways to overcome this. But no luck yet.

Please post ASP.NET questions in the ASP.NET forums:
http://forums.asp.net
The MVC forum is here: http://forums.asp.net/1146.aspx/1?MVC

User should not allow to exceed planned order qty

Hello Experts
In present case user can change the planned order qty when he converts it to a process order or purchase requisition.
Is there any way to restrict the user, where user can not exceed the planned order quantity?
Request to reply with a solution.
Regards
Pradipta Sahoo

Hi Sahoo,
I have two suggestion regarding the restriction of Changing the quantity while converting the Planned order into Process Order OR Pur Reqt. :
1. First one is through the authorisation for the user, the suggestion given by our friends.
2. You can use a User exit in the Planned Order Conversion transaction (CO40 / CO41/ MD04 etc). Where you can code to refer a Z- Table created with the User whom to be allowed.
You can create a Z table and mention the user id for whom system should allow the change of Quantity during converion of planned order. So wheh the user is trying to convert the planned order system will fire the User exit and check if the user is available in the Z-table then it will allow him/her to modify the qty otherwise it will through an Error as required.
Request you to take the help of the Abaper to invoke the userexit .
I can suggest the third option too, but not sure whther it will work, you can try out.
3. If you feel no user should be allowed to modify the quantity then I suggest you to create a Error message in the conversion tcode if the qty is being modified. You can try using a field exist.
Regards
radhak mk

LDAP Authentication Failed :user is not a member in any of the mapped group

Hi,
I tried to set up the LDAP Authentication but I failed.
LDAP Server Configuration Summary seems to be well filled.
I managed to add a Mapped LDAP member Group: This group appears correctly in the Group list.
But itu2019s impossible to create a User. Although this user is a member of the mapped group (checked with LDAP Brower) , an error message is displayed when I tried to create it (There was an error while writing data back to the server: Creation of the user User cannot complete because the user is not a member in any of the mapped groups)
LDAP Hosts: ldapserverip:389
LDAP Server Type: Custom
Base LDAP Distinguished Name: dc=vds,dc=enterprise
LDAP Server Administration Distinguished Name: CN=myAdminUser,OU=System Accounts,OU=ZZ Group Global,ou=domain1,dc=vds,dc=enterprise
LDAP Referral Distinguished Name:
Maximum Referral Hops: 0
SSL Type: Basic (no SSL)
Single Sign On Type: None
CMS Log :
trace message: LDAP: No such attribute: supportedControl, assuming no ranging support.
trace message: LDAP: LdapQueryForEntries: QUERY base: dc=vds, dc=enterprise, scope: 2, filter: (samaccountname=KR50162), attribute: dn objectclass
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 2453 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 1
trace message: GetParents from plugin for cn=huh\,chen, ou=accounts, ou=users, ou=domain1, dc=vds, dc=enterprise.
trace message: LDAP: De-activating query cache
trace message: LDAP: LdapQueryForEntries: QUERY base: , scope: 0, filter: (objectClass=*), attribute: supportedControl
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 0 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 0
trace message: LDAP: query for DSE root returned 89
trace message: LdapQueryForEntries: incr. retries to 1
trace message: LDAP: Updating the graph
trace message: LDAP: Starting Graph Update...
trace message: LDAP: LdapQueryForEntries: QUERY base: , scope: 0, filter: (objectClass=*), attribute: supportedControl
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 0 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 0
trace message: LDAP: query for DSE root returned 89
trace message: LdapQueryForEntries: incr. retries to 1
trace message: LDAP: LdapQueryForEntries: QUERY base: , scope: 0, filter: (objectClass=*), attribute: supportedControl
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 0 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 1
assert failure: (.\ldap_wrapper.cpp:3066). (pSetAttributes : no message).
trace message: LDAP: No such attribute: supportedControl, assuming no ranging support.
trace message: LDAP: LdapQueryForEntries: QUERY base: dc=enterprise, scope: 2, filter: (&(cn=gp-asia)(objectclass=group)(member=cn=huh
, chen, ou=accounts, ou=users, ou=domain1, dc=vds, dc=enterprise)), attribute: objectclass
trace message: LDAP: LdapQueryForEntries: QUERY base: , scope: 0, filter: (objectClass=*), attribute: supportedControl
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 0 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 1
assert failure: (.\ldap_wrapper.cpp:3066). (pSetAttributes : no message).
trace message: LDAP: No such attribute: supportedControl, assuming no ranging support.
trace message: LDAP: LdapQueryForEntries: QUERY base: dc=enterprise, scope: 2, filter: (cn=gp-asia), attribute: member objectclass samaccountname cn
trace message: LDAP: LdapQueryForEntries: QUERY result: 0 took 3109 ms
trace message: LDAP: LdapQueryForEntries() QUERY number of entries returned: 0
trace message: LDAP: query for DSE root returned 0
trace message: Failed to commit user 'KR50162'. Reason: user is not a member in any of the mapped groups.
trace message: [UID=0;USID=0;ID=79243] Update object in database failed
trace message: Commit failed.+
Can you please help?
Joffrey

Please do this after you verify all permission settings for all the groups the account is associated with. Also, make sure you check the NTFS folder permissions before doing this as well.
Since the same result happens on multiple computers, it is not the profile.
I am recommending you delete the AD account (or rename to backup the account).
It will not effect the users Exchange account, but you will need to link it back to the new AD user account.
You can also delete her profile just to remove it, for the "just in case" scenario.
Don't forget to mark the post that solved your issue as "Answered." By marking the Answer you are enabling users with similar issues to find what helped you. Lewis Renwick - IT Professional

Active Directory User which can Create a User but not Allowed to Enable Disabled Users

Hi Guys, we have a requirement to create a User Group in Active Directory which will grant its members permission to 'Create Users' but not be allowed to 'Enable' 'Disabled Users'.
We have tried delegating control and assigning permissions by going to 'Security Tab>Advanced'.
It seems like when a group is granted permission to create users, it will also be allowed to enable, disabled users.
Kindly advise if it is possible to create a user group with permissions to 'Create Users' but not be allowed to 'Enable', 'Disabled Users'.

Hi,
According to my experience, you can assign permission with create/delete user objects. If you want to disable/enbale
a user, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority.
In general, if you just give a user group the permission to create user objects, it cannot disable or enable user accounts. Please make sure that the permission you assigned is correct and the
user group are not the member of Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory.
Best regards,
Susie

Stock with Special Stock indicator E, not allowing to perform 261 Movement Type

Hi Team,
Please provide your expert opinion.
Unintentionally, a component was set with value Blank in Individual/Coll. field in MRP 4 view. The component is WM managed, when order was released, Transfer Request was generated & the part list was updated with Account Assignment M for that component. It was showing reference of sales order created for the header material.
After TR was converted to TO, TO was also processed. Now the stock is lying in WM under Special Indicator E, due to which we are not able to perform 261 movement for this component, it throws error
Sales order stock XXXXXX 000010 does not exist
This Sales order is already processed & completed.
We are in deadlock, since process order cannot be closed.
Please suggest how to consume this component against the order or bring back the stock to normal
Regards
ND

Your order for which you want do a 261 movement has information that this material is in sales order xxxxxxx item 000010
now it is essential to know in the very detail what was done in sequence.
As you usually need to clear the situation in the reverse sequence.
Not just movements, as well master data changes.
If we understand the full situation, then it might even be possible to do a short cut.
But it is currently not really known if you have an inconsistency between IM and WM, or just missed some postings in WM (which has not really something to do with the error you have)
We do not know how the to be situation should be
And for the as-is we have only knowledge about the error message, but no details to previous movements which lead to this situation.
And we have no info about the current book stocks to make a clear suggestion.
Some situation require detailed analysis, a proposal made just out of the blue can cause an even more difficult situation and a longer way to clean it up.

Search request failed! user is not allowed to perform search request

Similar Messages

Maybe you are looking for