Special access right for PA20 and PA30

Hello Experts!
I have a problem and was wondering how it would be configured in SAP, any help would be greatly appreciated.
How to config the security access right, if the logon user is the member of specify role, he/she is not allow to access the detail of all HR staff by using PA20 and PA30 but he/she can access the details or other staff.
Thanks in advance!!
Antony

Hello Antony,
Yes. it is possible. But for that you will have to uniquely indicate the HR staff group to restrict their data access by a Security definition attribute.
I suggest, you can maintain a seperate, Unique Org.Key - VDSK1 field in PA0001 (Organisational Assignment) infotype specific to HR staff. This can be used in Role Component "HR: Master Data" in the relevant role assigned to exclude the org.key specific to HR staff.
Hope this information helps. Please let me know if you still have any questions.
Best regards
G Raj

Similar Messages

Does putting an app in Applications give it an special access rights?

Hi,
I am very concerned about security. I use no Flash or Java (no Java browser plug-in). I won't install anything that wants to be in the system Applications directory.
OpenOffice/VLC, for example, I just put in a user directory. I was going to install World of Warcraft and did not because it wants to install system components. I use Steam because I can install it in the user's directory.
The question is this: Does copying an app, like OpenOffice or VLC, to the system's Applications directory give it any special access rights when it is run by a user? For example, does user A running OpenOffice from the system Applications directory give it access to anything that user A does not have access to?
Regards, Patrick

Applications folder is like any other folder, and the truth is that you can put your apps wherever you want. The difference is that Applications folder is a folder where all users can access to, so if you put an app in another folder, you will probably be able to access to the app only with one user. Apart from that, there isn't any difference.
Note that some apps are installed directly into Applications folder, like Microsoft Office. In those cases, I don't recommend you to move them to another folder because it doesn't make sense and because you may damage it

Specifying access rights for page tabs

Hello
I have trouble with specifying access rights for tabs that are inside another tab.
I have a group named "Customers" and a group for each of our customer companies. The company-groups are all members of the Customers group.
Then i created a tab called "Customers" which i specified access rights to the Customers group.
Under the customers tab, i created one tab for each customer and i've specified access rights to each tab.
I want to accomplish that customers who log into the portal only are able to see theyr own tab, but this doesn't seem to work properly.
Have anyone had this problem before?
Regards
Per-Jarle Sfther

Per-Jarle,
Are you sure that the users are not part of a group that is included in the group you gave access to on the tab?
Rich

Took away the access rights for harddrive - mac os x cant boot! pleasehelp!

i took away the access rights for harddrive - mac os x cant boot! pleasehelp!
thank you for any help

wow! thank u a lot!!! it worked great!
i did this:
A1. If the disk in question is your Mac OS X startup disk and your computer stops starting up at the blue screen, restart with the Command and S keys held down, and enter the following commands:
mount -uw /
chown root /
chmod 1775 /
exit

Special G/L for customer and vendor

hi,
sir how can we configure special gl for customer and vendor. pls know me in details.
thanks you in advance

Hi,
Go to FBKP. Click on Special GL. You may define the special GL transactions for Customers and Vendors.
For Example:
For Account type K. Enter the Special GL Indiactor, Reconciliation Account and Special GL Account.
Regards,
Jigar

Problems Managing User Access Rights for Web Gallery

Has anyone else had issues changing the user access rights for a web gallery? It seems like the access is everyone or no one. Are the user rights handled per event in the gallery? I had issues adding events to the user's view/download rights in the publish settings.
Also, can these settings only be set when an event is first published? Attempting to change the user access rights after the event is published seems to require a re-upload of the images.
Any thoughts?

Problem solved.
I had to put the following lines in the specified "0000_any_80.my.website.conf" file:
        <Directory "/Library/WebServer/subdomain.domain">
                Options All +MultiViews -ExecCGI -Indexes -Includes
                AllowOverride None
                # For Password protection
                AuthType Digest
                AuthName "Password Protection"
                require valid-user
                <IfModule mod_dav.c>
                        DAV Off
                </IfModule>
        </Directory>

[svn:fx-trunk] 12827: Removed the accessibility implementation for WindowAccImpl and WindowedApplicationAccImpl as they are likely not needed .

Revision: 12827
Revision: 12827
Author:   [email protected]
Date:     2009-12-10 19:03:29 -0800 (Thu, 10 Dec 2009)
Log Message:
Removed the accessibility implementation for WindowAccImpl and WindowedApplicationAccImpl as they are likely not needed. In their current form they were preventing the accessibility of child components from being exposed.
QE notes: none
Doc notes: none
Bugs: n/a
Reviewer: Gordon
Tests run: checkintests
Is noteworthy for integration: no
Removed Paths:
    flex/sdk/trunk/frameworks/projects/airspark/src/spark/accessibility/WindowAccImpl.as
    flex/sdk/trunk/frameworks/projects/airspark/src/spark/accessibility/WindowedApplicationAc cImpl.as

Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them. This may or may not be unique to Arch Arm, so you might try asking on their forums as well.

PA20 and PA30 tcode execution is very slow

Dear All,
while executing PA20 and PA30 it si taking huge time,request you to please tell me how we can improve the response
time of these Tcodes.
Thanks,
Jyoti

Hallo Jyoti,
Is it happening in production system? Generally it takes long time while executing PA20/PA30 if huge employees are there in the system.
So while executing PA20/PA30, system is trying to bring all employees in the selection area (left corner).
To avoid this, hide object manager via settings > hide object manager.
Same thing was happening to us. So it might help you.
Regards,
Purnima

ASR 5000 access list for ssh and telnet

Dears,
how can we apply an access list for telnet and ssh on asr 5k ?
please advise if this is feasible.
thx.

Hello Joseph,
Sorry for the delay in response.
To control access to ASR5000 via telnet, other than configuring an ACL, there is a way to disable telnetd by configuring local context.
For example:
config
context local
no server telnetd
#exit
System Administration Guide of the relevant version will give you detailed information in this regard.
Here is the latest system admin guide (for SW version 17): http://www.cisco.com/c/dam/en/us/td/docs/wireless/asr_5000/17-0/PDF/17-ASR5000-Sys-Admin.pdf
You can find other guides here: http://www.cisco.com/c/en/us/support/wireless/asr-5000-series/products-installation-and-configuration-guides-list.html
Hope this helps..
Regards
Aneesh

Disable the account delegation rights for EA and DA accounts.

I need assistance with setting group policy to disable delegation rights for enterprise and domain admins accounts.

Hello,
that account groups are the highest admins in the complete forest(enterprise admins), means ALL domain in that forest and the domain admins are highest accounts in the domain.
So whatever restriction you set. A member from that groups can revert every setting you make.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Required BADI for Overiew screen of PA20 and PA30

Dear All,
I need BADI for Overiew screen of PA20 screen as i have to restrict end user not to see the data.
As of know i am able to see the BADI for display but not able to find the BADI for overview.
Thanks
Rav Jordan

Hi,
For pa20 screen Check with this badi HRPAD00AUTH_CHECK.
I hope it is useful to u.

How do i change the access rights for every file in every sub-folder?

I have an external drive that was shared between my PC and my iMac (running Snow Leopard 10.6.5).
Some of the files created by my PC have the following access rights (privileges):
Me: Custom
staff: Custom
everyone: Custom
I want every file to have the following access rights (privileges):
Me: Read & Write
staff: Read & Write
everyone: Read & Write
I presume that I need to go into the terminal and run some command line program, but I have no idea what program or what options (or even where to look for such a program). Can someone tell me how to do this, so that every file in every sub-folder has the same access rights?

Well, that's different. Most people do not install anything on their PC to read an HFS+ disk, so I assumed it was formatted for the PC. [See my above post|http://discussions.apple.com/thread.jspa?messageID=12843313#12843313].
Note that it is the same as what you asked about, except with numbers instead of the letter equivalents.
Posix permissions are for User;Group;Other (ugo) and each one can have read/write/execute permissions. Read = 4, Write = 2, and Execute = 1. So, for rwx you set 421=7.
I try to make it safe by not typing in the file path. If you do what you posted, you will change the startup volume's permissions. The path to your external is /Volumes/ext hd mount point. If you start typing the path and accidentally hit return before finishing the full path, you could fubar something you didn't want to. So, I type the command, leave a space, and then drag the target to the Terminal window.
You might also consider the GUI based permission changing program, [BatChmod|http://www.macchampion.com/arbysoft/BatchMod/Welcome.html].
Message was edited by: Barney-15E

How to retrieve access rights for an user/usergroup ?

Hello everybody.
I'm working on BO XI 3.1. And I have to develop with the .NET SDK package an application that retrieves the following data :
- the access rights to WEBI application and properties for each user/user group.
- the access rights to each folder and properties for each user/user group.
etc
The idea is to retrieve for an user/usergroup the access right on each property of WEBI application and softwares. and same thing for folders....
I'm looking at the .NET SDK package contents but it takes me a lot of time, even too compared to my deadlines. So I'm looking for help.
Does anyone have an idea about class of objects, properties and methods to use ?
Thank you in advance for your help.

Thanks for these samples.
The list of user and usergroups is very interesting to audit CMC but my need is different : for example, I'm looking a method to retrieve the level access (full control, no access, ...) of an usergoup on each webi's property. The reason ? To know for example which usergroups have fullcontrol access on the right name "edit SQL" ?
I think it's hard to retrieve but very interesting to audit CMC...

Local Administration rights for Xcelcius and Crystal Reports

Hello Customercare,
I am currently compiling a list of software that does and does not require local administrator rights to install and run.
I was wondering if you would be able to assist me, we currently use Crystal Reports version 8.5 and Crystal Xcelsius 4.5. I need to find out if these programs require local administrator rights on the computer they are to be used on to a) Install properly and B) run from that computer by a user without local administrative rights for that machine.
Please let me know or point me in the right direction of a resource who would be able to help me with the above information.
Many thanks for your time,
Phil Booth
GroupM
Technical Support Engineer

Hi Joseph,
Download [Product guide/end userdocument|https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000713358&_SCENARIO=01100035870000000202&] select your product.
For Business objects Integration kit for SAP click [here|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f]
Regards,
Shweta

Access Right for Minimum stock level

Hi all,
I would like to know if there is a way to set access right to enalbe or disable user from modify the minimum stock level in the item master data.
Thank you.
Regards

I would like to know if there is a way to set access right to enalbe or disable user from modify the minimum stock level in the item master data.
as I have said, you can use SP_TN to disable some certain users to modify the minimum inventory level value. here is an example:
IF @transaction_type IN ('A', 'U') AND
@Object_type = '4'
begin
if exists (SELECT distinct t0.docentry FROM oitm T0 INNER JOIN oUSR T1 ON T1.internal_k
= t0.usersign
WHERE isnull(t0.minlevel,'') <> '0' and t1.user_code = 'manager')
begin
select @Error = 10, @error_message = 'Min level can not be updated by user manager'
end
end
but I also said that you can use SDK code i.e. SAP B1 addon to disable the users to modify the minimum inventory level field. It is more complicated because you need to use programming language e.g. VB.Net to do that. The programming language will use the B1 DI API as project reference.
You must have SDK development license to develop such addon.
JimM

Special access right for PA20 and PA30

Similar Messages

Maybe you are looking for