Securing table group SS / transaction SCC1 and table CCCFLOW

Hello all,
I'm relatively new to this forum, please be kind.
Situation sketch:
In an SAP landscape, in Development environment, I have 3 clients, in which 500 is the ECC golden client, 510 is for sandboxing and 520 is for testing.
Problem:
Developers use tcode SCC1 to transport customizations to another client to be tested again and put on transports eventually.
For changes they make using SCC1 they require Change (02) authorization on table CCCFLOW (client-copy report logs).
However this CCCFLOW table is classed under the SS table group, in which all my other important security tables are as well
(AGR_* etc).
Question:
How have you guys secured the SS table group when you still want to provide developers the use of SCC1?
Regards,

How about this idea? Your thoughts and suggestions are appreciated.
1. Clone SCC1 to ZSCC1 (SE93)
2. For ZSCC1 Remove S_TABU_DIS Auth Check on ACTVT 02(SU24)
3. For ZSCC1 Insert S_TABU_NAM Auth Check on CCCFLOW ACTVT 02(SU24)
4. test with a role that allows S_TABU_NAM to CCCFLOW and does not allow S_TABU_DIS to auth grp SS
This should separate out CCCFLOW from the rest of the SS Auth Group tables.
Has anyone tried this approach?
Optionally, Do steps 2 and 3 directly on SCC1, depending on your SAP shop's policy for modifying auth checks on SAP-delivered tcodes.
BSnow

Similar Messages

How to display table data without using ALV and table element.

Hi,
        Its possible to display table data without using ALV and table element.
       Every time i am fetching data based on (customer,status) fields and displaying these data in my output using alv
       (every time i am fetching single row data ),
       But problem is alv occupying more space in the output , i want to display data part only i dont want field names,
       settings and header data etc..things.
      Give solution to display data part..
Regards,
Rakhi.

Hi,
Does you mean that you need ALV without default Function Toolbar...? If this is the case, the easy solution would have been to use Table Element rather. But, if you need to use ALV only without Function Toolbar, you can do away with that as well.
In that case, after calling GET_MODEL, you need to add few more lines of codes to achieve your goal. Those lines are --
DATA LV_VALUE TYPE REF TO CL_SALV_WD_CONFIG_TABLE.
    LV_VALUE = LO_INTERFACECONTROLLER->GET_MODEL(
* Standard Filter Function setting to FALSE
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_SORT_COMPLEX_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_FILTER_COMPLEX_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_FILTER_FILTERLINE_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_DISPLAY_SETTINGS_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_VIEW_LIST_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_SORT_HEADERCLICK_ALLOWED( ABAP_FALSE ).
    LV_VALUE->IF_SALV_WD_STD_FUNCTIONS~SET_HIERARCHY_ALLOWED( ABAP_FALSE ).
* Standard Filter Function setting to FALSE Ends
Here as you can easily notice that LV_VALUE is instantiated on CL_SALV_WD_CONFIG_TABLE. Now, using this LV_VALUE, you set standard functions as False to dis-allow their display.
Hope this answers your query.
Thanks.
Kumar Saurav.

FAGLFLEXT table not updating Transaction type and Trading Partner

Hi,
The document which i post is development system is posted to FAGLFLEXT table properly along with the transaction type and trading Partner; however in the quality and production the document is getting posted in the table FAGLFLEXT but the transaction type and Trading partner fields are not getting updated for these documents it is coming as blank.
Please give us answer ASAP.
Thanks,
Anil.B

Hi,
I got it. Just ask BASIS to Open the QAS system client and delete all scenarios which was assigned in DEV and transported in to QAS system and reassigned itand saved in QAS system and then its worked. all fields are getting populated.
Go to IMG Fin Acc (New) -> Fin Acc Global Setting (New) -> Ledgers -> Ledger -> Assign Scenario
Thanks,
Anil.B
Edited by: SAP FICO on Nov 12, 2009 5:09 PM

Table for Transaction code and Table associated

Hello Experts,
Please let me know if we have some table where it stores the information of Table Assoicated to a transaction .
( In detail : That is we give a table name in the View when we create a transaction for SM30)
Regards,
Ratna

Hello,
You have to go the table TSTCP (table for parameter transaction).
In the field PARAM, pass
*Z_TABLE*.
BR,
Suhas
Edited by: Suhas Saha on Jan 22, 2010 11:22 AM

To add a custom field in table control in transaction me21n and me22n

Hi Guru's,
I have a requirement to add a field in the table control at the time of creation of PO (ME21N). I enhansed the structure MEPO1211, but it is not appearing in the transaction. What should i do in order to bring that field in table control.
I implemented badis ME_GUI_PO_CUST and ME_PROCESS_PO_CUST by seeing some forum results.But i didnt get how to implement...
Please help me in this regard how to follow the steps and if possible please provide a sample code.
Thanks & Regards,
R.P.Sastry

hi,
Suppose in the there are three tabs BADI customer1, BADI customer2 and BADI customer3 at item level.
Say:
On BADI customer1 there are three fields FIELD1, FIELD2 and FIELD3.
On BADI customer2 there are two fields FIELD4 and FIELD5.
On BADI customer3 there are three fields FIELD6, FIELD7 and FIELD8.
Then the fields have to be added to EKPO (or requisite custom table as the need may be) and also fields are also to be added to custom structures.
Create a Structure ZSTRUCTURE1 which will contain the three fields FIELD1, FIELD2 and FIELD3.
Create another Structure ZSTRUCTURE2 which will contain the two fields FIELD4 and FIELD5.
Create another Structure ZSTRUCTURE2 which will contain the three fields FIELD6, FIELD7 and FIELD8.
The Structure STRUCTURE1 has to be passed for tab BADI customer1, the Structure STRUCTURE2 has to be passed for tab BADI customer2 and the Structure STRUCTURE3 has to be passed for tab BADI customer3.
Each custom tab/screen should have its own structure to handle the screen fields, but the screen field data has to be transfered to and from EKPO (or requisite custom table as the need may be) for database update/retrieve.
Hope this helps.
Regards,
Ritesh

Getting ORA-00903:invalid table name with both system and table owner

Hi All,
Oracle version 9.2
I'm trying to retrieve some information from a few tables and import them to Excel. I haven't got much idea about ORACLE, but I'm not able to do anything.
I open SQL PLus, and use CONNECT SYSTEM/[email protected] AS SYSDBA
The console shows connected.
I use select table_name,owner from dba_tables where owner='USER1';
I can see the tables I want to access in the output.
I do select * from USER1.TABLE1 and also tried with select * from TABLE1, both return ORA-00903:invalid table
I also tried to connect with "CONNECT USER1/[email protected]" also shows connected, but then same error ORA-00903:invalid table
Could anyone guide me so I can find out whats going on wrong??
Thanks.. Best regards!

Great! this worked! At least now I know I can read the data.
Now I would like to get the data from this table into Excel 2007, but I can't install Office in the ORACLE server, so I have setup my client computer (Windows 2003 server with Excel 2007).
I installed the ORACLE ODBC driver, and put the TNSName.ora file into the network admin folder.
I successfully create the ODBC connector, and try connection is successfull. However, when I try to get the data, Excel send an error saying that it cannot list the tables!
Anyway, any simple solution will do. If there is an easy way of making ORACLE create for example a CSV file with all the data from the table it will be good as well. What would be the easiest way?

How to make two matrix and table into same group in SSRS

Hi
i need to dispaly to dispaly data matrix and table . but matrix data on first page and table data on second page.
how to achive this . if i give pagebreak for every new instance for matrix, only matrix data is getting dispalyed in one page and on the second page seocond record date is getting displayed. after all matrix data is displayed ( in separate pages) , table
data is being dispalyed.
but i want to display matrix data on first page and table data on the second page for the first record. for second record also it should display matrix data on 3rd page and table data on 4th page etc..
i mean how to make matrix and table data as same group. so that i can set "page break for new instamce" etc..
how to achive this in SSRS2008

Hi Ramkanuganti,
From your description, you want to group both the matrix and table on the same field and add a page break between the two controls for each instance at run time.
To achieve your goal, we can display the matrix in a list and display the table in a nesting list. Please refer to the steps below:
Drag a “List” to the design surface. Drag the matrix into the top of the list (list1).
Drag a “”List” to the list1, under the matrix. Drag the table into the nesting list (list2).
Select “list1” and open the “Group Properties” from the “Row Groups” pane. Add the field on which you want to group the data. In the “Page Breaks” tab, select the “Between each instance of a group”.
Repeat step 3 to configure the “list2” using the same field. Additionally, please also select the “Also at the start of a group” option.
For more information about how to work with list, please refer to:
Adding a List
If you have any further questions, please feel free to ask.
Regards,
Mike Yin

Problem with maintain table views SM30 Transaction

Hello All,
i have a problem with the table maintenance view SM30, it doesn't permit me to modify the rows in the table.
we have added a field into the table and when i tried to change the table view from menu: Utilities ==> table maintenance generator==> change the system propose me a message that the screen 0001 will be deleted and recreated...but the system has deleted the screen and doesn't recreate it...in somewehere on internet we find that we should use the transaction SE55 menu:
Environment==> modification ==> Maintenance screen ==> button Layout which open the tool Screen Painter and from that we have created our screen with 4 fields of our table...our result that the screen is created and i can see it from the SM30 transaction but i can't insert rows in the table...when i try to go to maintain table: menu: Utilities ==> Table maintenance generator to try if i can modify something the system give me a message: "set the compare flag dialog ZIV_DP_PLCHAR_LA"
the ZIV_DP_PLCHAR_LA is the name of my table...
can you give me some advices please how should i do to fix this problem to insert rows in table throughout the transaction
SM30 "maintain table views: initial screen"
if i want to delete the screen from the SE55 transaction to recreate it newly what should i do to take care about some options
to have a new screen?
thanks for all
Bilal

Hi
First delete the old table maintainence generator.
Now Recreate the screen and your table is good to go..
These error messages come when we add new fields and different version of the table maintainence generator in database.

What i use to develop complex tree and table in my web application?

hi guys
simply most of my work in my web application will be depend on:
1-tree
2-table
i need this tree and table deal with database table (or even tables) must be able to do every thing like add node/row/column, delete, update, drag-n-drop, various object nodes/cells like check-box, list, images...etc
i used JTree and JTable then stoped because i faced problems in dealing with applet/database, and i really didnt see this is perfect way to do that even i agree that JTree and JTable are excellent objects. i also start using ajax tree but i didnt see it robust to have all this complicated work with database.
by the way i need also master-detail UI table, but its easy to get this if i have good and flexable table object.
my rest pages developed by jsp, servlet, javascript, html...etc
so any suggestion to how i build this tree and table? i also heared about JSF, is it serve me?
thanks

so if the only way to use JTree and JTable,There are other ways, but they're not Java and might be more complicated.
are there
any links you have discussing dealing database with
applet by keep applet away from direct connection to
my database?I'm not aware of links, but it's common sense. You don't want to expose the DB server to the internet, and instead contact a server for authentication that then forwards the request to the DB.

Create a Cockpit (Transaction) for Reports and Tables

Hi Gurus,
i am very new in ABAP. I want to create a Transaction/view in SAP BW where i can put my favourite Abap reports and tables and execute These directly from the created view/Transaction without se16/se11 or se38 Access and dont know if this is possible and how to do it.
the reason herefore is that we get deprived in differently time ranges our authorizations for the Standard Transactions.
I have a list of my tables and programms.
Thanks for your help.

we get deprived in differently time ranges our authorizations for the Standard Transactions.
So you try to bypass security checks put in place by the Basis team
or could you explain your requirement ?
Remember (or learn) that creating such transaction, you are able to bypass following authorization checks using SU24 (Identity Management, User and Role Administration of Application Server ABAP, AS ABAP Authorization Concept, From the Programmed Authorization Check to a Role, Editing Authorization Default Data (Development System) / Editing Authorization Default Data (Customer System). )
Regard,
Raymond

How to add a field and table control to BP transaction.

Hi,
I have a requirement to add a field and table control to the 'Control data' tab of the Transaction BP.
Can some on please help me if having a solution and with any relavant documents.
Thanks in advance.
Raj & Khader.

Also explore with EEWB tcode.
Refer this threads
Re: EEWB
Created New fields in Business Activity with EEWB
Cheers
Manohar

Autonomous Transactions and table locks

Does a commit statement in an Autonomous Transaction block in PL/SQL release locks aquired in the master transaction block?
e.g
CREATE OR REPLACE PACKAGE test_auto_trans AS
PROCEDURE mainproc;
PROCEDURE testproc;
END test_auto_trans;
CREATE OR REPLACE PACKAGE BODY test_auto_trans AS
/*****************Main Procedure*********************/
PROCEDURE mainproc AS
BEGIN
LOCK TABLE a,b,c IN EXCLUSIVE MODE nowait;
/*some processing involving tables a,b,c here. no commit done yet*/
testproc();
/* will the locks on a,b,c still be available here? */
EXCEPTION
WHEN others THEN
dbms_output.put_line('Error');
dbms_output.put_line(sqlcode);
dbms_output.put_line(sqlerrm);
RAISE;
END mainproc;
/*****************test Procedure*********************/
PROCEDURE testproc AS
PRAGMA AUTONOMOUS_TRANSACTION;
BEGIN
/*some processing using tables a,b,c here*/
commit;
EXCEPTION
WHEN others THEN
dbms_output.put_line('Error');
dbms_output.put_line(sqlcode);
dbms_output.put_line(sqlerrm);
RAISE;
END testproc;
END test_auto_trans;
/

No transaction will release the locks held by another transaction. When you declare a stored proc to be PRAGMA AUTONOMOUS_TRANSACTION, it is essentially the same as if you logged in as the same user but in a different session.
For example, if I have two sqlplus sessions running as user a, if I do an update in session1 and a delete and commit in session 2 I can still rollback in session 1.
However, your psuedo code as posted will not work at all since the call to test_proc will block until you commit in the main proc, and since test_proc will never return, the main proc will never get to commit. It is exactly analogous to the following:
session1> SELECT * FROM t;
        ID DESCR
         1 One
         2 Two
session1> LOCK TABLE t IN EXCLUSIVE MODE nowait;
Table(s) Locked.
session1> UPDATE t SET descr = 'Un'
2 WHERE id = 1;
1 row updated.so far, this is your main proc. Now, in another session (which is equivalent to your autonomous transaction procedure), I do:
session2> UPDATE t SET descr = 'Deux'
2 WHERE id = 2;which as I type is still waiting on the commit from session 1. Therefore, I cannot get to commit the autonomous transaction which would return control to session1
HTH
John
Message was edited by:
John Spencer
Sorry, I initially forgot to answer your actual question "what about DML statements like truncate". Since TRUNCATE is actually a DDL statement I will assume that is what you meant. My initial answer covers DML statements (except SELECT which will work).
All DDL statements in Oracle go
COMMIT
DDL statement
COMMIT
since the initial commit requires a very brief exclusive lock, you will get an error like:
ORA-00054: resource busy and acquire with NOWAIT specified
Exactly as if you did:
session1> LOCK TABLE t IN EXCLUSIVE MODE nowait;
Table(s) Locked.then tried to do it again the another session
session2> LOCK TABLE t IN EXCLUSIVE MODE nowait;
LOCK TABLE t IN EXCLUSIVE MODE nowait
ERROR at line 1:
ORA-00054: resource busy and acquire with NOWAIT specified

What is the exact purpose of Transaction NACE and NAST Table?

Hi All,
What is the exact purpose of Transaction NACE and NAST Table?
Pls help me
Akshitha.

Hi
When a Output type in an apllication doc is configured with a Medium, Partner, Lang and other communication paramters an entry is created in NAST table
so to trigger the output an entry in NAST is compulsory
Output is a link between the Driver Program and the Sapscript,
An output type summarizes messages of the same meaning. It contains parameters that are valid for all its assigned messages, for example appropriate partner functions.
Transmission medium is a medium which the layout will be come out, this may be printout, Fax or Mail
Check this link.
http://help.sap.com/saphelp_nw2004s/helpdata/en/c8/19884743b111d1896f0000e8322d00/content.htm
ex-how to config output type.
You will assign output types using Transaction NACE.
Do the follow steps to assign output type
1)Select Application Type V2 which will have description Shipping.
2)Click on Output types button.
3)Go to change mode by pressing Ctrl+F4.
4)Select one output type which already exists
5)Do Copy As(F6)
6)Give your output type against Output Type field.
7)Under General data Tab, Give Program and Form routine and Save the data.
i think it a work of functional guy but at senior level i think it is not a big deal for abaper.
Check the following documentation
In NACE t-codewe have the application for each one. based on the application output type can be defined, based on output type script and print progrma can be defined.
If suppose data can be read from EDI then we should go for condition records.
So whenever we execute the script first composer checks the output type and then execute the program. in program whenever opn form FM will be populate then script will open first. After that again program till another FM will populate if it then script will populate........like it is cycle proces. Composer does all these things and at last it will submit that output to spool.
Go to the Transaction NACE.
choose the related sub module.. like billing or shipping
doubel click on Output Types
Choose the Output Type for which whcih you wanted your script to trigger
Then select the Output Type and double click on Processing Routine
Then go to create new entries--> Select the Medium (1- print output), then enter your Script and Print Program detls --> Save and come out
Now go to the Transaction (for which you have created the output type)... Issue output--> Select the output type --> Print....
Device Types for SAP Output Devices (Detail Information)
Definition
The device type indicates the type of printer to be addressed. When you define an output device, choose the name of the device type that was defined in the SAP System for your printer model, such as Post2 for a PostScript printer. In the case of frontend printing under Microsoft Windows, you can also use the generic (device-independent) device type SWIN.
The system uses the information in the device type to convert a document from the internal SAP character representation (spool request in OTF or in text format) to a device-specific, print-ready data stream (output request). Since a device type specifies attributes that apply to all devices of a certain model, it can be shared among device definitions. For example, all devices in the SAP spool system that are compatible with Hewlett-Packard LaserJet IIID printers would use the HPLJIIID device type.
You should not confuse the device type with the printer driver. The device type is the total of all attributes of an output device that the SAP System must know to control the output device correctly, such as control commands for font selection, page size, character set selection, and so on. These attributes also include the printer driver that SAPscript/Smart Forms (the SAP form processor) should use for this printer. The SAPscript printer driver that is to be used for devices of this type for output formatting is therefore only an attribute that the device type specifies.
How do I choose the correct device type?
In most cases, the SAP System already provides the appropriate device type for the printer type for the printer model that you want to use.
These standard device types are completely defined and need no modification or extension before you use them in device definitions.
You can also download missing device types from the sapserv server. For a current list of the supported device types, see SAP Note 8928 in the SAP Service Marketplace.
Most printers can be controlled using a generic format, such as PostScript. They can be switched to a mode that is compatible with one of the standard printers for which an SAP device type is available. In this case, a supported model is emulated.
Almost all printers are delivered with Microsoft Windows printer drivers. The system can control these printers with the generic (device-independent) device type SWIN. The Microsoft Windows spool system then performs the processing of the print data.
If the specified device types are not available, and generic device types cannot be used, you must create your own device type or edit a copy of an existing device type. We recommend that only those with specialist knowledge of the SAP Spool System and printer driver code do this. For more information, see Defining a New Device Type .
Attributes of a Device Type
A device type is distinguished by the attributes listed below. If you change an existing device type or create a new device type, you must change at least some of these attributes.
Character set: A character set specifies the codes with which characters must be represented in the print-ready output stream (output request). This code replaces the generic SAP characters set that is used internally by the SAP spool system (spool request).
Printer driver: You can specify different printer drivers for printing SAPscript documents and ABAP lists.
Print controls: Print controls represent printer operations, such as boldface or changing the font size. These print control are replaced by printer-specific commands during the creation of the output request from a spool request.
Formats: Formats specify the format supported by the SAP system. The system differentiates between SAPScript formats (DINA4 and LETTER) and ABAP list formats (X_65_132 = 65 rows/132 columns).
Page format: A page format is the interface between a format and SAPscript. It specifies the paper dimensions with which SAPScript can calculate the row and column lengths.
Actions: Actions are output device-specific commands that are required for the implementation of a format. The action printer initialization, for example, can contain a printer command with which the number of rows on a page is defined. There is a set of actions for every format supported by a device type.
Reward points for useful Answers

Error : Transaction header and line tables cannot be empty

please can some one help me.
when i want to create an invoice without anuy line, i have the error : Transaction header and line tables cannot be empty .
can some one tell me how can i solve this
regards.

Hi,
I really don't know if it is possible to create an invoice in AR with no transaction lines. When I interface invoices from another system to AR (and there is no need to detail inventory items), I use a single line with a dummy inventory item or with no inventory item (inventory_item_id and warehouse_id set to null) in transaction lines, and I use the description field to describe the link to the other software in a user-friendly way.
Regards,
Ketter Ohnes
Message was edited by:
Ketter Ohnes

Group by and table Join

Hi Expert,
I am new for pl/sql I have some question ..
I have table like this
1. table productcost has column productcostID,costID,DeptID,REQUESTCOST,EXPENDITURECOST
2. table COST has column costID , costName,costmajorID,costtypeID
3. table Departments has DeptID,DeptName
4. table CostMajor has costmajorID , costmajorName
i want to query productcost Table where DeptID = somevalue call X and it must contain every productcost has DeptID = X and i want to select costname to show
and i want to group by it by costmajorID in table Cost .... How Can I do that ? Someone please help me ..
My Result Like this (a Table query from table productcost )
table 1
costmajorName1 EXPENDITURECOST REQUESTCOST
costName1 1000000 2000000
costName2 1000000 2000000
table 2
costmajorName2 EXPENDITURECOST REQUESTCOST
costName3 1000000 2000000
costName4 1000000 2000000
table 3
costmajorName3 EXPENDITURECOST REQUESTCOST
costName5 1000000 2000000
costName6 1000000 2000000
ps. I'm not good in english sorry if i made you not understand..

Query for a xml output then but take the below just as a template as I don't have a Database at hand and that's all I can come up with at the moment
You can get more help in the {forum:id=34} forum or wait till Marc shows up ;) or someone else provides a working example
select xmlelement("Table",
       xmlelement("Title",
       xmlelement("Col_1", costmajor_name),
       xmlelement("Col_2", 'expenditure_cost'),
       xmlelement("Col_3", 'request_cost')
          xmlagg (
       xmlelement("Costs",
       xmlelement("Col_1", cost_name),
       xmlelement("Col_2", expenditure_cost),
       xmlelement("Col_3", request_cost)
from (select cm.costmajor_name,c.cost_name,pc.expenditure_cost,pc.request_cost
          from productcost pc,
               cost c,
               costmajor cm
         where dept_id = :dept_chosen
           and pc.cost_id = c.cost_id
           and c.costmajor_id = cm.costmajor_id
group by costmajor_nameRegards
Etbin

Securing table group SS / transaction SCC1 and table CCCFLOW

Similar Messages

Maybe you are looking for