Services for object - authorization/customization

When you enter an employeenumber in eg. PA30, you get access to "Services for object" where you can add comments, files etc. to the employee object (PREL I guess). The problem is that these services are not object to any kind of authorization control. So even if our users are limited both via P_ORGIN and structural authorizations, they can enter any employee number (if they know it) and read all information about the employee they don't have access to (and enter comments, attachments etc.)
We don't want this option to be open, so we removed authorizations. But I have 2 questions:
1. Is there a standard way to hide services for objects. Customers never like to have access to a feature and be stopped by authorization.
2. Is there a way to ensure authorization so that if you do not have access to the employee-number, you cannot enter or read anything from services for object.
/kirsten

Hi,
This may help:
http://help.sap.com/erp2005_ehp_05/helpdata/EN/4f/993844446d11d189700000e8322d00/frameset.htm
SAP also has an Employee File Management solution in partnership with OpenText. A good white paper is this:
http://www.insidesap.com.au/Files/White%20paper%20-%20An%20Introduction%20to%20SAP%20Employee%20File%20Management.pdf
Source: help.sap.com
www.insidesap.com.au
Donnie

Similar Messages

Services for Object in VF02 & VF03

Hi All,
Attaching a document through "Attachment list" option by the "Services for Object" icon in VF02. however some options are grayed out. Please read through for the explanation of the problem.
1) Go to transaction VF02.
2) Input a billing document and press Enter.
3) Click on "Services for Object" button and a dropdown list opens which has the following options -:
a. Create
b. Attachment list
c. Private Note
d. Send
e. Relationships
f. Workflow
g. My Objects
h. Help for Object Services
However the option "b" and "e" (i.e. Attachment list and Relationships) are grayed out. Can anyone please help on how to activate the above mentioned options. Is it done by BASIS team. Please help.
PS: "Services for Object" icon is found exactly BELOW the "Enter" (green tick icon in the top left) button.
Thanks & Regards,
Himanshu Bhusan Sahoo.

Hello,
Please check the roles related to the below authorization object.
Authorization Object
S_WFAR_OBJ
Value
NV
Value
VBRK
Value
YP3INVOICE
Value
03
archiving Related role will give you access to View the billing document in PDF.
Thank you
Regards
Bala

Content server for Document attachment through "services for object" Icon.

Guys,
I have typical problem in installation of Content server for storing external documents.
We all know that we can attach the document in SAP using the icon SERVICES FOR OBJECT. By this we can attach the document to the specific object we want.
-Since my client wants only document attachment method not to completely implement SAP DMS, I proposed this method of attaching documents through services for object method.
-If documents are stored though services for object ,The attached document will directly get stored in sap database(correct me if I am wrong) while in DMS it ask you to select the storage location while u check in for any document
-By storing the doc thru "services for object " For long run when we store the documents in sap database our system will drastically get slow down.
-In this regard I have a plan to incorporate external storage server.
-Now I should know that how I should customize content server configuration so that the attachment through services for object will store into this content server I need to know how to define Client, Content Category, Content Repository, Document Area, Physical Machine, IP Address, Port. (OACT & OAC0)
I appreciate for immediate solution and Points will be rewarded for sure.
Regards,
Murali.S

Hi Murali,
Don't Worry, its possible,
All attachments can be stored in SAP Content Server also, but through archiving process.
Set up a database storage system.
Preparation
Make sure that the HTTP plugin is active.
Transaction SMICM, "Display Services" function key (shift F1)). The list of services must contain a port other than 0 for HTTP.If not, you must adjust the relevant profile parameter.
Typical entry:
icm/server_port_0 PROT=HTTP, PORT=1080, TIMEOUT=900
Make sure that the /sap/bc/contentserver service is active.
If no user is defined, then use transaction SU01 to create a new user. Use the "System" user type.Assign
the SAP_ALL and SAP_NEW profiles to the user. (Eg: HRUSER/PLMUSER/PPUSER etc)
Transaction SICF, select: default_host - sap - bc -contentserver. Select the function to display/change the service. Make sure that a user is defined.
Using the relevant data from the newly created user, maintain the anonymous logon data for the
/default_host/sap/bc/ service and save & activate the changes in transaction SICF. Double click on content server and give the user name which has been created (HRUSER/PLMUSER/PPUSER/MMUSER etc)
Check the system PSE.
Start transaction STRUST. Expand the system PSE. The system PSE must be "green" for each application
server.
Determine a suitable exchange directory.
The exchange directory must be accessible from each application server. If all application servers are running on the same platform (for example, Windows), one network directory that is accessible on all application server (for example,
server\share) is sufficient. You can generally use the global directory
(profile parameter DIR_GLOBAL).You can use the RSPARAM report to determine the profile parameters.
Setting up the storage
Create a table for storing the data. Using transaction SE11, create a copy of the SDOKCONT1
table. If you want to create the repository database, you can name the table ZCONT_DB, for example. Save the
table as a local object. Activate the table.
Create a repository.
Use transaction OAC0 to create a new repository.
Use the following parameters:
Repository Max. two characters, for example, Z1
DocArea: ARCHLINK
Storage type: R/3 database
Storage subtype: normal
Version no. : 0046
Contents table <table name> for example: ZCONT_DB
Exchange directory <directory name> for example:
server\share\
Make sure that the exchange list ends with a \ (or /on Unix).If you are using a variety of platforms, you must use transaction FILE to define a suitable logical file name and use this name. Save the settings.
1. Maintain view table TOAAR_C, via SM31
 Cross client table displayed as information, forget it
2. In field 'StSytm' you must entered 'Z1' as your system need, or anything that you need but you must configure HR Archive link too.
3. In field 'Arch.path' (direct above Spoolpath), entered path in your system, this real path in your operating system. May be you should confirm to your Basis consultant where exactly you could store picture files. So if you enter '/', your file exists at root directory at your UNIX system.
4. Choose 'File store' radio button
5. Save.
First
1. You have to create a number range for SAP ArchiveLink.
 IMG: Basis Components-> Basis Services -> SAP ArchiveLink -> Basic Settings-> Maintain number ranges
 (Trxn OANR). Create number range 01 from 0000000001 to 9999999999 without the external number flag.
2. Document type HRICOLFOTO must exist with document class JPG.
 IMG: Basis Components->Basis Services->SAP ArchiveLink->System Settings->Maintain document types
 (Table TOAVE, Trxn OAC2).
3. Document type HRICOLFOTO must be linked to object type PREL and Infotype PA0002.
 IMG: Personnel Management->Personnel Administration->Tools->Optical archiving->Set up Optical Archiving
 in HR. (View V_T585O, no Trxn). In the first two columns there are minuses, the third (Date) has
 a plus - don't put a flag in the check box.
4. Check which content repository (Archive) is linked to document type HRICOLFOTO and object type
 PREL. IMG: Basis Components->Basis Services->SAP ArchiveLink->Basic Settings->Maintain Links (Table
 TOAOM_C, Trxn).
Test
Test the repository.
Use transaction SE38 to start the RSCMSTH0 report. Specify your repository (i.e. Z1) and start the test.
The report must run without errors. If no problems occurred, you can use the new repository with Archive Link after you carry out the Archive Link Customizing. If problems do occur, check whether one of the related
notes helps.
For More Details :
http://service.sap.com/archivelink.

NOTE:- Screen Shots are missing, i was not able to paste here, One more thing is we did this for uploading a PHOTOS into Content Server, Similarly you have to create a REPOSITORY and Z-TABLE to bring all the Attachments from all the selected Objects and then route them to the CONTENT REPOSITORY.
Your Senior ABAP guy would help you in this, if not i may try to help you more by monday.
Regards
Rehman
Reward Your Points if Satisfied.

Services for object in sap

Hi,
When I am enclosing some document or file in services for object in sap in me23n, how can I know that some object is attached without seeing the attachement list. Secondly if anyone want to delete the attachement he can delete, we want that the person who has attached the attachment should delete the attachement not anyother person. How to achive this.
Regards
Ishu

Hi, There is no standard report or transaction to get this other than looking at the object through the transaction that creates those attachments, also you can go through SAP OSS note 530792
Refer below link for creating a report for your requirement
http://it.toolbox.com/wiki/index.php/GOS_Finding_Attachments_or_Links_to_an_Object_in_SAP/ABAP
For second requirement it can be handled by Authorization, discuss with your basis guys

Service For Objects functionality (SDV transaction)

Hello experts,
Some users are getting an authorization error while trying to display an image from t-code FBL1N (services for objects). After identifying the reason of this issue with NSU53, the simple fix is to provide access to the user to transaction SDV. Actually, we are proposing to the security team to provide the access in a Generic role, so all user can get the access.
Their concern is that if for any reason, any of the users runs the t-code directly (SDV), and not through the Services for Objects funtionality, they might be able to access other documents that they should not be allowed. To be honest, I haven't seen this as an issue before in my 13 years working with SAP.
The question for you guys is: what is the best approach to grant access to users from different modules to Services for Objects functionality without violating security policies?
Thanks,
Alfredo

own

SAP Document Attachment - Services for object

Hello Guys,
Find the below attachment about a PPT on " services for object"
<a href="http://verbellacmg.com/asug_2006_walls_404.ppt">Services for object icon - ppt</a>
Would be highly usefull.
Regards,
Murali.S
Reward if its Usefull.

Hi, There is no standard report or transaction to get this other than looking at the object through the transaction that creates those attachments, also you can go through SAP OSS note 530792
Refer below link for creating a report for your requirement
http://it.toolbox.com/wiki/index.php/GOS_Finding_Attachments_or_Links_to_an_Object_in_SAP/ABAP
For second requirement it can be handled by Authorization, discuss with your basis guys

Unhide "Services for object" tab (MM02, MIRO, ...)

Hi, everybody!
I'm in trouble with "Services for object" tab. I need it in transactions: MM02 and MIRO, but it is hidden.
I'm not sure about it, but I guess this could be solved with the right authorization. Just don't know which one.
Could anyone help me?
Thanks in advance.

Hi,
I guess BADI GOS_SRV_SELECT could solve the problem. You may disable the change button and other functions (perhaps using authorizations as a trigger).
*Structure IS_LPOR contains
*INSTID * Obkey := keyfields of Business Object
*TYPEID * i.e. BOR TYPE 'ZDGF_DG'
*CATID * i.e. 'BO' for BOR
Be carefull - It is used for all kind of objects - so add CASES for combinatons of CATID/TYPID and call an own function/method for each.
Kind regards,
Holger

How can I find services for object for PM Notification

Hi all
How can I find services for object(attached files ) for PM Notification ?
I can see then,for examle ,using transaction Iw22 :System---->Services for object
My requirement are : 1. open attached file of selected notification for display ( if exists one)
2. If user wants to attach file as service of object
what function exists for it ?
Please your help

Hi SD,
I have checked in SUIM and SU24 also. But I didn't find. Could you please tell me any other way to finding out the authorization objects.
Thanks,
bsv.

Difference between usage of "System -- Services for object" and GOS direct

Hey folks,
i was wondering if you know an answer for that problem:
1) Start ME23N (no SAP Gui classic design!) and go to System - Services for Objects in order to start the GOS Toolbox. Try to to store a business document. In my case i don't have the authorisation S_WFAR_OBJ so i get the Message no. 00398 "You do not have authorization for this function" Thats the behavior a want
2) Start ME23N and activate GOS Toolbox by clicking directly on the button on the top left corner. Try to a store a business document. But there is no message coming up?! Same user, same PO! It seems that the Toolbox is just beeing restartet and thats it.
Same behavior in IW53/IW33 too, no auth error message if GOS is started via "System --> Services for Objects".
Thats our system:
ERP ECC 6.04 with NW 7.01
SAP Gui 7.20 PL 3 (signature design)
Thanks for your help and best regards
Olli
Edited by: Oliver Grewenig on Jan 18, 2012 11:30 AM

Hi Oliver,
I have done a similar testing for Tcode FB03 since I have done Archivelink configuration for this FI object.
Case 1:
=======
Start FB03 (no SAP Gui classic design!) and go to System - Services for Objects in order to start the GOS Toolbox. Try to to store a business document. In my case i don't have the authorisation S_WFAR_OBJ so i get the Message no. 00398 "You do not have authorization for this function"
Case 2:
========
Start FB03 and activate GOS Toolbox by clicking directly on the button on the top left corner. Try to a store a business document. Still got the same error message "You do not have authorization for this function".
Later I added the required object in the authorization profile and it worked in both the cases mentioned above.
Since the same program is being executed behind both the cases, it will check the same authorization object as designed.
What I would suggest is that you perform this test again and ensure that no one modifies the authorization during your testing period.
Regards,
Deepak Kori

In Attachement List Services for Objects White Screen when I Display a Note

Hi Expert,
Need your assistance.
I am trying to view a note in Vendor Master data but no information provided and I can only see white screen. Below are the steps that I performed:
1. Go to FK03
2. Open a Vendor
3. Click the Services for Objects
4. Attachement List
5. Select a Note
4. Display it
5. Pop up window appreared and no information occurred. Only White screen
Is there's a missing configuration, plugin, or data in my SAP system/workstation?
I tried to login to other PC and it worked.
Just wondering what is missing on my computer.
Your response will be helpful.

Hey,
I have the exact same problem as you have described. I also used my ipod as a watch but starting from today, whenever I unlock it the screen turns white until a reset is done. Even a factory reset through itunes didn't fix it.
Have you found any solution?
Bah, this is annoying.
//Gubbar

Display GOS without click on 'Service for Object' button

Please try the following step to figure out.
1) VA03
2) At header of report (on the left hand side of 'Display S/O SysB SDI xxxxxxxxx:Overview' ) has a button called 'Services for Object' (GOS)
3) Click on that then it will popup icon menu set. <--- Want this to be displayed when access VA03 by no need to click the button in 2)
My requirement is I want this popup to be displayed suddenly after I access VA03 (no need to click on the Services for Object button anymore).

Could you please provide me any solution, function, example, similar case, etc. (based on 4.6c)?
Thank you all expert in advance.. I'll be here to provide you more information that need.

I found the solution yet. Let me drop a note to be a memorandum.
(1) Insert code into the last line of form USEREXIT_READ_DOCUMENT within report MV45AFZZ
PERFORM UNITEXIT_READ_DOCUMENT.
*{ INSERT
*[Display Attachment Service Automatically]
 DATA: lo_myobject TYPE REF TO cl_gos_manager,
 lo_container TYPE REF TO cl_gui_custom_container,
 ls_object TYPE borident. "BOR Identifier
 ls_object-objkey = vbak-vbeln.
 ls_object-objtype = 'BUS2032'.
 CREATE OBJECT lo_myobject.
 CALL METHOD lo_myobject->start_service_direct
 EXPORTING ip_service = 'VIEW_ATTA'
 is_object = ls_object
 io_container = lo_container
 EXCEPTIONS OTHERS = 2.
*[Display Toolbox]
 CALL METHOD lo_myobject->DISPLAY_TOOLBOX
 EXPORTING is_object = ls_object
 io_container = lo_container
 EXCEPTIONS OTHERS = 2.
*} INSERT
ENDFORM.
(2) Try open VA03 and insert attachment at Service for Object.
(3) Reopen VA03, attachment list displayed suddenly.
Reference Source# SAP Library, search 'Starting Only One Service Directly'.
NOTE: You can use another relevant object by SE24 -> CL_GOS_MANAGER

To hide Services for Object in Purchase Order screen

Dear Experts,
Is it possible for me to control Services for object to a group of user only in ECC 6.0 ? or How to hide the icon for unauthorized users ?
Thanks in advance.
Moktar

Hi,
Did you resolve this issue.
If so can you please let me kow how to Hide/Unhide services for objects ?
Thanks.

I am unable to use services for objects while creating a PO

Hi All,
I am unable to use services for objects while creating a PO ie in me21n / Me22n .
Our client wants to attach some doucument along with the PO, we want to use services for object for this. I use this services for objects in admin level , but unable to use this at user level.
System gives the following message
No service available
Message no. SGOS_MSG002
Regards
Gsg

Hi,
Refer the following OSS notes 552127, 598073
For getting Object for services icon in ME21N and ME51N refer OSS note 913251

Services for Object in creation mode

Hi colleagues,
I am facing one problem and I would appreciate your help and ideas. I want to enable user to use a functionality of "Services for object" in creation mode (in my case transaction IW31). In change or display mode this functionality is enabled, so creating new BOR object and such things are not necessary.
I understand that services for object are disabled by default in creation mode, because it is not meaningful to assign some documents to object which does not yet exist. But in theoretical way, it should be possible to implement some "tricky" solution. Probably some temporary object could be created at the start of IW31 and attachments could be assigned to this object. And in some user exit executed during processing of save statement (after all checks and such things), attachments could be re-assigned to a real (persistent) object. For unsaved orders it would be necessary to delete temporary object and also attached documents.
Have someone implemented something similar? Or any helpful ideas?
Thank you all in advance.
Regards,
Adrian

Hi,
We have implemented exactly the same in a Ztransaction. Not sure to what extent this will help you. Check below code
CREATE OBJECT w_gosman
EXPORTING
* io_container = io_container
* is_bc_object = is_bc_object
 is_object = wa_object "BOR object
* it_service_selection =
* io_callback = io_callback
* ip_start_direct = space
 ip_no_instance = l_inst "Pass SPACE in your case
 ip_no_commit = l_commit "Pass SPACE in your case
 ip_mode = c_e
EXCEPTIONS
 object_invalid = 1
 callback_invalid = 2
 OTHERS = 3
IF sy-subrc <> 0.
* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
* WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
"Here just we are creating a reference by publishing the object.
"During the transaction commit call below method.
wa_object-objkey = "Pass your object ID.
wa_object-objtyp = "Pass your business object
 CALL METHOD w_gosman->set_id_of_published_object
 EXPORTING
* is_bc_object = is_object
 is_object = wa_object
 EXCEPTIONS
 no_publication = 1
 OTHERS = 2
 COMMIT WORK.
Thanks,
Vinod.

Attachment list in Services for Object toolbar

Does anybody know if there is any user exit or BADI that I can use to filter certain file attachments in Attachment list of Services for Object toolbar.
For example, in transaction XK03 (Vendor display), Services for Object toolbar, you can see the Attachment list and it will display list of pc file attachments, however, we have a requirement to display only those that met certain criteria, is there any BADI or user exit for this?
Thanks in advance for your help.

you can use BADI
GOS_SRV_SELECT
for this.
Regards
Raja

Services for object - authorization/customization

Similar Messages

Maybe you are looking for