SM58 - How to restrict users from viewing all the idocs?

Howdy,
The users want to be able to use SM58 to view any idocs that have failed. Unfortunately they currently can access the IDOCS of all countries, in addition to their own country. Does anyone know how we could restrict them?
Or if there another transaction that we could ask them to use?
Many Thanks!

Hi,
You can restrict by the Transactional RFC Destination which should be different.
regards
Aveek

Similar Messages

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to restrict users in viewing CRM_DNO_MONITOR?

Hi
I want to restrict the users in the transaction code CRM_DNO_MONITOR. I tried it by creating a variant and then assignin that variant to the users via role. Also i tried using SE93 by creating another transaction code for the variant.
The problem is that when the user tries to run the transaction he is able to run it successfully but the output is BLANK or now rows returned even if I do not give any filtering criteria in the variant.
Am i missing anything?
It would be helpful if anyone can gimme exact steps for doing the same or any other method.
i want to restrict the users (message processors) for there respective module.
Please help me, this is very important as delivery time is near for the solution manager server.
Regards!

Hi,
You can restrict the users from viewing crm_dno_monitor by removeing the access to that T code from the role and giving only the t-codes S_SMC_47000002(up to S_SMC_47000008).
With that role they will be able to access only the tickets assigned to them.
Hope this is helpful.
Regards,
Avinash.

Restrict User to view all Ibase components in NOTIF_CREATE tcode

Hi,
When i execute the NOTIF_CREATE tcode, I am asked to select the Ibase component. When I press F4 for search help one can view all the Ibase of all companies. I want to restrict the display of F4 search help so that one can see only his companies component.
Regards,
Ketul

I don't think there is a way. There should be, but I've never seen it.

How to Restrict User to View but Not Print a Document

Dear All,
I'm actually wonder is there a way where SAP can restrict users for instance they are able to view the PO, but unable to print it out. Is there a function or a query for such restriction? Please advise.
Thanks,
serene

Hi Serene,
Check the link
Re: Document Printing Restriction
*Close the thread if issue solved.
Regards
Jambulingam.P

CE10 how to prevent user from view hostrical instance

hi,
We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came back with all the crystal reports on the server that started with employees, even the one the user doesn't have access to. My greatest concern about this is that users can view historical instance and it is sensitive data. Does anybody know whether or not this is a bug in CE10? Is there a patch/fix for this? Is there any configuration change that I can make to
prevent users from being able search all the reports on the server rather just their own reports? Any help is greatly appreciated.
Regards,
Susan

hi,
I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS. If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder? When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal. What am I missing?
Thanks for your help!
Regards,
Susan Johnson

Restrict user to view All folders in WebI

Hi,
I am using BO4.1, we have many report folders. We want to restrict users to have view access to only one specific folder.
Users dont have rights to view reports of other folder.
Please guide me steps to apply this restriction.
Warm regards,
Sonal

Hi Sonal,
I think the problem is with the Access level for that particular user.Just check whether the rights are not inherited from any group.
OR
You can try following steps:
1. Recreate the user.
2.Go to that particular folder which you want to grant View.
3.Right click and go to user_security -> Everyone -> select the user -> View security -> add principle -> available access level -> grant "view/full control" whatever grant you want to assign.
Now he can only view/modify that particular folder.
For more help check the topic in Admin Guide.
http://help.sap.com/businessobject/product_guides/boexir4/en/xi4_bip_admin_en.pdf
Hope it helps!
Regards,
Shardendu

How to restrict users from creation of varients in report transaction

Hi All,
I have a requirement where buisness wants to restrict users in creating varients in report transactions.because of create options users will be creating more screen varients which will be disturbing for the other users to select a particular standard varient.Kindly give ur input regarding this
With regards
Girish A

Hi,
First edit the role assigned to users using PFCG.
Then go to Authorization tab and click on "Change Authorization Data".
It will opened up the profile of the role. now find the authorization object "S_PROGRAM".
In that edit "User action ABAP/4 program" object.
Remove "VARIANT" check box if it was checked and save. Now press
Generate button or "Shift+F5".
That's it.
You can ask for this to your basis team. They can perform this task easily.

How to restrict users from saving a transaction in PCUI

Hi Experts,
I am working on a requirement where in I have to restrict the user from saving a followup up transaction if an order already exists for the same,in PCUI.I am able to display the error message in the PCUI screen but unable to restrict the user from saving the transaction.
I have implemented the CRM_COPY_BADI ,copy method to check the item copy and populating the message from there...The requirement is fulfilled in GUI by giving a abandon message which restricts the user from saving the transaction.but in PCUI the abandon message is not working..So is there any way to deactivate the save button for a particular transaction in PCUI and this is to be done from within the CRM_COPY_BADI..
I would sincerely appreciate any help provided on the issue..

We can do this by populating an error message in the Application log

How to restrict user from deleting record

Dear All,
Kindly share your experience...
Situation: My client have one SOB, used by several branches. Each branch has its own branch code in Chart of Account (accounting flexfield). Currently, to prevent branch accessing other branch's journal in General Ledger Module, we set account security (segment Branch) for each responsibility. In this way, batch header and journal header are still shared. Branch A still can see branch B's batch header and journal header, and even can delete the journals. This is very risky. Client urges to hide 'delete' icon from the toolbars and menu or disable 'delete' journal function for certain responsibility.
Questions: how to solve that problem without modifying the form?
Thanks,
KC

You may want to consider using the CUSTOM.pll. Basically its an "approved" way to do Form customization. You will need to understand basic Forms programming.
Metalink Note 73505.1 is fairly good.
There's also an OAUG white paper (2000) by Brad Goodwin
Ken

E72: How am i able to view all the groups in my co...

I have 6 contacts groups and i hope to be able to view all of them in one place instead of the groups being presented like the contacts themselves. I own a 6760 previously and there is a groups view where i can see all the groups in one place but i can't seem to find that option in E72, or does the E72 don't have that option? Many thanks for any advice...

No, not cut off on every button...just the ones with a lot of text. Example...one button is labeled..."The Smiths - Stop Me If You Heard This Before." The end of this button (on the right side) gets cut off. I am using the "Full Frame '05" theme.
An interesting note...I went back to look at my chapter titles in iMovie and they were cut off there too. So, maybe it is taking the titles as they appear in iMovie and that's where they are getting cut off and not in iDVD. Are chapter titles in iMovie limited to a certain amount of characters?

How to restrict users from uploading malicious files(exe, dll,etc) & limit file size in a webform

Hello, please i have a file atachment field in a form on my site. I want to restrict the size of the file that can be uploaded and the type. It's a vacancy page and I want candidates to only upload doc and pdf files. I want to also limit the file size to 50mb only. How can this be done within the BC system.
Thanks.

The file extension can't be trusted, like the mime-type it can be faked by a malicious user. Also this method can just be avoided altogether by anyone who has javacript turned off. Using javascript for this is not even remotely secure.
Isn't there a way to allow file uploading but specify a whitelist of filetypes (preferably checked using byte headers or some effective method) somewhere in admin?
Liam Dilley wrote:
Hey there,
You can do the file extension with jquery for example. The basic aspect of that is:
var ext = $('#my_file_field').val().split('.').pop().toLowerCase();
if($.inArray(ext, ['exe','dll','jpg','jpeg']) == -1) {
alert('invalid extension!');
So what is hapepning there is that it checks the value of the field when someone has added the file and checks the file extensiona and produces an alert but you can do as you need.
You could run this on hover of the submit button, on change of the actual file attachement field or on click of the submit button in the checks before it submits.
BC limits files to 100mb anyway so you should be ok on that front, they wont be able to be crazy uploading.

My 5 year old iMac's hard drive is at the point of failing. I'm trying to save al files on it, but it wont allow backup via Time Machine to an external hard drive. How can I keep from losing all the files and programs if the hard drive fails?

I'm concerned that my iMac, purchased 5 years ago, is about the crash and I can't back up my files and programs to an external hard drive via Time Machine because the computer freezes after only a couple hundred MB and gets nowhere near the required amount.
How can I save these files and programs if the computer hard drive fails or has to be replaced without the backup being able to be done? I need to do something quickly, but I'm not sure what I can or should be doing.

Get an external hard drive, some good ones that I like are the OWC, http://www.macsales.com Mercury Elite Pro drives...they are very good and reasonably priced.
Get the drive, connect via USB or FireWire, then use Disk Utility to format the new drive as Mac OS X Extended (Journaled), and then use Disk Utility to Restore the current drive to the new drive. Restore actually clones the drive so you will have a bootable backup on the external drive.
After you have formatted and named the external drive, click Restore in the main Disk Utility window, drag the name of the old hard drive to the Source box, and drag the name of the new external drive to the Destination box. DU will make an exact clone of the internal drive on the external drive.
That clone will be a complete backup of the operating system and all of your data.
You can test it by restarting the iMac and hold the Option key. That will give you a grey screen showing all bootable drives. Just click the external drive, then click the upward pointing arrow under it and the iMac will boot from that drive.

How to increase space to view all the attachments

How to view if there are 15 or more attachments without scroll down in the email

Hi,
There is no option to increase or decrease the space in which you can view the attachments in Outlook so far.
Regards,
Melon Chen
TechNet Community Support

Prevent user from view line item details in KSB1 report

Hi,
how to restricting user from view line item details by double-click on it or highlight an item click on Document?
Regards,
Kelvin

Hi,
This issue got resolved.
SAP suggested to execute the program "FAGL_CORR_0001" for company code wise.
In ECC 5.00 from support pack 10 onwards two new fields has been added to table FAGLFLEXA. (earlier we are on support pack 9, recently we applied the latest support pack)
If we can execute the above program FAGL_CORR_0001, the two new fields will filled with relevant data and then we can able to use drill down option.
This is for your information.
Message was edited by:
prasad naga

SM58 - How to restrict users from viewing all the idocs?

Similar Messages

Maybe you are looking for