Structural Autharization check for Nonintegrated persons

Hi,
I came to know that when we  turn on  AUTSW ORGPD switch Initially, the four switch settings enable you to use the Organizational Unit field of Infotype 0001 for the authorization check. If we want to use the settings, we must enter all authorized organizational units separately into the structural profile  in this case  if any comany  has 800 Orgunits , in this case do we have to create Structural profile with all 800 orunits for this ?
Thanks
Bob

Hi,
In our company for Retirees we maintaining Default position (99999999) , when we enable ORGPD  and DFCON swiths we set to '1' which mean system always check Org assigninment filed before give access to this Personal record , we are using PD profile only for Managers  and Time admins  that to using Function Modules,
My question is if we enable these switched did all org units have to enter in Structral profile sepeartely to system to check Org assignmnet to Retriees for all orgunits in my comapny ?
ex:
Profile    NO P.Version Object Type Object.ID
NONINTE  1          01             O            500010
NONINTE  1          01             O            500011
NONINTE  1          01             O            500012

Similar Messages

  • Need to deactivate structural auth. check for a custom Report

    Hi all experts:
    I have a report that is based on PNPCE logical database and it displays work hours for a project, all non-sensitive information.  We would like a wide range of users to have access to this but since this is based on PNPCE logical database whenever a user runs it, the str. authorization check is performed.  I have tried deactivate this check with P_ABAP object and coers 2 but it only ignores infotype auth. check but still checks the structural.  We don't want to expand str. profile for users. 
    Do you know if there is a way to deactive this just for one report?
    Your help will be greatly appreciated.
    Regards,
    Net

    Thanks Kiran. I had tried that value but still got the same message.  I am having problem understanding exactly when this value 2 ignores structural authorization because it works on some reports and not others.  Anyway, we implemented BADI for this report to ignore structural auth. check and it is working fine.
    Thanks again,
    NT

  • Authorization check for Removing of Delivery block in Sales Order

    Hi,
    I want to have an authorization check for the person removing the delivery block in the Sales Order.
    By Default all Sales Orders will have a delivery block. I want to ensure that the user does not have the authorization to Remove the Delivery block.He should be able to choose any reason in the Delivery block if required.
    Only the user which has the authorization to remove the delivery block should be able to do so.
    I have checked that the Delivery block field does not have an Auth Object.
    I want to enable delivery block removal for some users and restrict the same for others.
    Please Advise

    Hi,
    In object V_VBAK_AAT you can find the activity 43 that is meant for authorisation, that should be removed for the users who are not supposed to release the sales order for any blocks.
    Try that it will work.
    Regards,
    Mann.

  • LSMW Vendor Create /Change (XK01/XK02) by IDOC CREAMS05 for CONTACT PERSON

    Hi Experts,
    Can you Please help me for CONTACT PERSON (create/ change) upload for vendor using the IDOC type CREMAS05.
    which structure is appropriate for CONTACT PERSON in CREMAS05
    Thanks in advance,
    Babumiya Mohammad

    okay, this screen is not active in my system. (are you doing retail?)
    if it is address data, then it is usually transmitted with the ADR3MAS idocs
    this is at least the case for customer contacts.
    Edited by: Jürgen L. on Feb 20, 2012 5:13 PM

  • What command would you use to check for allocation, structural, or logical integrity problems?

    What command would you use to check for allocation, structural, or logical integrity problems?

    Wondering if you are looking for DBCC CHECKDB command? For more information, on that command, try to look at this:
    http://technet.microsoft.com/en-us/library/ms176064.aspx

  • Compile class file, check for code structure quality

    now i am trying to develop a system for my college final year project..the main function is to help the lecturer to mark the student java assignment
    any way to compile the java file..just to check for the error? if got error then 0 mark..no error got mark..and then check for the code structure and so...base on that ..to decide the student mark..like if good structure 20 mark..bad? 5 mark and so.
    is it possible to do so?
    Junit?
    any sample?

    Checking for errors is easy, just write a script to check if javac completed successfully. You can use similar approaches (possibly needing to parse the output) for jlint/PMD/whatever to check code structure. If there's any custom checks you want to do, though, I suggest you grab a parser (possibly witgh semantic analysis; I've found the Eclipse one is rather easily extracted and is good for this stuff) and write manual checks. It might be easier to write PMD rules, but you won't have the flexibility.

  • Hi I am currently subscribed to PS CC but I don't think I have the latest version.  I beleive this because I don't get the new welcome screen and don't new feature like the structure and color setting in the content aware patch tool.  I have checked for u

    Hi I am currently have a subscription to PS CC but I don't think I have the latest version.  I believe this because I don't get the new welcome screen and don't have new features like the structure and color setting in the content aware patch tool.  I have checked for updates and it tells me I have the current version.  I check in PS I have version 14.2.1.  I also have CS6 installed on my PC, could this be somehow be doing something or am I doing something wrong.  Would anyone have any suggestions.

    It's under "Find New Apps".  You have to scroll down to see it.

  • TCode to check for enterprise structure inconsistency

    Hi
    Is there any Tcode to check for enterprise structure inconsistency? I think someone mentioned here but i cannot find it now.

    Hello Deep,
    Please use the T-code --> OVX8N for checking the consistency level of enterprise structure affiliated to SD.
    Here you will have the option to check the organisation unit like Sales orgnisation, Distribution channel, Division, Sales Group, Sales Office, Plant and Shipping Point.
    Regards,
    Sarthak

  • Structural authorization check in HR-ABAP

    Hello Friends,
    I am not able to get how to do the structural authorization check, my exact problem was : There is a report where it diplays all the qualifications of the employees and now I should restrict to only the employees who belongs to the organization unit depending upon the user who is running the report belongs to. It should check some more authorization profiles also.
    Regards,
    Yoganand.

    Hi Yoganand,
    if you use logical database PCH in your report, it should work by default.
    Manually search for RHSTRUAUTH in transaction SE37. There
    is a function modul which gives a list with the person the user has authorization.
    With this list you could compare the list with selected persons.
    hope this helps.
    Regards
    Bernd

  • Authorization check For T code

    Hi everyone,
    Can anybody guide to set a  authorization check  for a particular Tcode.
    I have ztable where users are assigned particular numbers.
    I want the users who are assigned some numbers should be able to use this particular t code
    Thanks in advance

    hi
    chk this out
    AUTHORITY-CHECK
    Basic form
    AUTHORITY-CHECK OBJECT object
        ID name1  FIELD f1
        ID name2  FIELD f2
        ID name10 FIELD f10.
    Effect
    Explanation of IDs:
    object
    Field which contains the name of the object for which the authorization is to be checked.
    name1 ...
    Fields which contain the names of the
    name10
    authorization fields defined in the object.
    f1 ...
    Fields which contain the values for which the
    f10
    authorization is to be checked.
    AUTHORITY-CHECK checks for one object whether the user has an authorization that contains all values of f (see SAP authorization concept).
    You must specify all authorizations for an object and a also a value for each ID (or DUMMY).
    The system checks the values for the IDs by AND-ing them together, i.e. all values must be part of an authorization assigned to the user.
    If a user has several authorizations for an object, the values are OR-ed together. This means that if the CHECK finds all the specified values in one authorization, the user can proceed. Only if none of the authorizations for a user contains all the required values is the user rejected.
    If the return code value in SY-SUBRC is 0, the user has the required authorization and may continue.
    The return code value changes according to the different error scenarios. The return code values have the following meaning:
    4
    User has no authorization in the SAP System for such an action. If necessary, change the user master record.
    8
    Too many parameters (fields, values). Maximum allowed is 10.
    12
    Specified object not maintained in the user master record.
    16
    No profile entered in the user master record.
    24
    The field names of the check call do not match those of an authorization. Either the authorization or the call is incorrect.
    28
    Incorrect structure for user master record.
    32
    Incorrect structure for user master record.
    36
    Incorrect structure for user master record.
    If the return code value is 8 or 24, inform the person responsible for the program. If the return code value is 4, 12, 16 or 24, consult your system administrator if you think you should have the relevant authorization. In the case of errors 28 to 36, contact SAP because authorizations have probably been destroyed.
    Individual authorizations are assigned to users in their respective user profiles, i.e. they are grouped together in profiles which are stored in the user master record.
    Note
    Instead of ID name FIELD f, you can also write ID name DUMMY. This means that no check is performed for the field concerned.
    The check can only be performed on CHAR fields. All other field types result in 'unauthorized'.
    Example
    Check whether the user is authorized for a particular plant. In this case, the following authorization object applies:
    Table OBJ: Definition of authorization object
    M_EINF_WRK
       ACTVT
       WERKS
    Here, M_EINF_WRK is the object name, whilst ACTVT and WERKS are authorization fields. For example, a user with the authorizations
    M_EINF_WRK_BERECH1
       ACTVT 01-03
       WERKS 0001-0003 .
    can display and change plants within the Purchasing and Materials Management areas.
    Such a user would thus pass the checks
    AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
        ID 'WERKS' FIELD '0002'
        ID 'ACTVT' FIELD '02'.
    AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
        ID 'WERKS' DUMMY
        ID 'ACTVT' FIELD '01':
    but would fail the check
    AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
        ID 'WERKS' FIELD '0005'
        ID 'ACTVT' FIELD '04'.
    To suppress unnecessary authorization checks or to carry out checks before the user has entered all the values, use DUMMY - as in this example. You can confirm the authorization later with another AUTHORITY-CHECK

  • 'No detailed information exists for this person'  while adding new reviewer

    Hi All,
    <b>This is an extremely urgent issue.</b>
    We are getting the following message in SRM while adding a new approver to the Shopping cart once the - 'No detailed information exists for this person'
    <b>We have implemented the following OSS Notes in the SRM 5.5 system, Release 700 after rasing a call with SAP.
    SAP Pilot OSS note - 1002957
    Other OSS Notes -
    999528 Adding Ad Hoc Approver fails due to comit erro...
    722357 Ad hoc: Commit control with ad hoc enhancement...
    990467 Commit Problem with AdHoc Agents...
    984582 Problems with Posting Container Data (ad Hoc
                            agent...
    947296 Inserted/changed approver is not transferred...
    910925 SRM Workflow: Ad-hoc agent not found...
    803628 BADI workflow: You cannot add an approver</b>
    Here are the details
                          <b>Cannot add additional approver</b>
                            We are now on SRM 5.5 and a document attached shows the
                            patch levels
                            from SPAM.
                            In shop transaction, it is possible to change the
                            default approvers,
                            but not possible to Add.
                            When we add, the system shows the list of available
                            approvers, allows
                            selection, but "transfer" button does not actually
                            transfer.
                            When the cart is saved, the added approval shows as "no
                            approval
                            available".
                            We are using the standard workflows for 2 step approval.
                            A document is attached to show what happens and the
                            results of checks
                            we have performed.
                            BUS2121 also shows as ok when checked.
    Any pointers what could be possible reasons.
    <b>Points for sure. !!</b>
    Regards
    - Atul

    Hi Atul,
    Here is the list.
          |-----     0000702787 EBP 4.0: Message "Enter a country"
          |-----     0000732828 E-mail messages for work items with incorrect line break
          |-----     0000735026 Memory problems at BBP_GETLIST_INDEX_FILL
          |-----     0000804317 SRM40/SUS/PO: PO inbound with error BBP_PD 147
          |-----     0000862851 PO not ordered due to different locations error
          |-----     0000902956 Changing Account assignment category BE Limit service PO
          |-----     0000911446 No reservation is created
          |-----     0000917869 SRM 5.0: PPOMV_BBP - Vendor address tab page
          |-----     0000919553 SRM 5.0: Termination of output preview for invalid partner
          |-----     0000920363 Shopping cart transfer: Sourcing indicator is not set
          |-----     0000924218 SRM 5.0: wrong error message for non existant auth. PurchOrg
          |-----     0000924811 SRM5.0: Javascript error on document screen
          |-----     0000926750 Shopping cart: Unit of measure is not restored
          |-----     0000926878 Link for expanding details in the shopping cart too small
          |-----     0000927142 SRM5.0: Browser hangs up during attachment upload
          |-----     0000938168 SRM50: Message "No default value from vendor master"
          |-----     0000938296 JavaScript runtime error in the bid invitation
          |-----     0000940805 BBPS_SC_APP_SOS cannot be enhanced
          |-----     0000941935 External requirements displayed as a reference
          |-----     0000942742 Update is cancelled if new source of supply is found
          |-----     0000944592 No location when vendor has changed
          |-----     0000944918 ECS: Find back end purchasing group as a responsible group
          |-----     0000945601 Termination when you display purchase order item detail
          |-----     0000948425 Shopping basket changeable although already approved
          |-----     0000953238 Shopping cart history in the sourcing cockpit
          |-----     0000954066 Follow-On Documents Tab does not get Highlighted
          |-----     0000954409 Error message during approval of a confirmation
          |-----     0000955377 Long runtimes for workflows with blocks
          |-----     0000956108 Empty worklist after clicking button 'Find'
          |-----     0000956723 BBPMAININT:Bus. partner display switches to maintenance mode
          |-----     0000956797 RUSRM50: Limit Purchase Order Functional Area Error Message
          |-----     0000957884 Category Management: Data disappears after program SAVE
          |-----     0000958045 BBPSC04: Delete icon not hidden despite screen variant
          |-----     0000958349 Final delivery with quantity 0
          |-----     0000959528 During PO creation wrong error message BBP_PD 428
          |-----     0000960169 Favorites not saved for 'Purchase for'
          |-----     0000961422 BBP_MON_SC: No search help for 'Created By'
          |-----     0000962093 BBP_VENDOR_CREATE: Refresh BP data
          |-----     0000962252 BBP_GETLIST_INDEX_FILL: Incorrect processing statistics
          |-----     0000962474 Error after changing partner data
          |-----     0000964132 Approval Preview for Rejected Items: Wrong User's Inbox
          |-----     0000964361 Cannot find employee of vendor
          |-----     0000964455 Country for the PO box is initial
          |-----     0000964911 Kopieren von Alertkategorien: Containerelemente verschwinden
          |-----     0000966072 Download of material fails - set type COMM_PR_UNIT
          |-----     0000966323 Service Item: Not able to create PO in ERP backend
          |-----     0000967429 Approval buttons not updated after release
          |-----     0000967615 Performance of BBP_PD_PO_GETDETAIL may be poor
          |-----     0000968110 Transfer canceled, account assignment acc. to value/quantity
          |-----     0000968251 BBPSC02:In source of supply preferred vendor not validated
          |-----     0000969091 SRM does not support passwords longer than 8 characters
          |-----     0000982293 Ext requirements: Purchasing group data not transferred
          |-----     0000982448 Impossibility to delete an item in PO
          |-----     0000982674 Change PO quantity does not update account assign quantity
          |-----     0000983130 Search for back-end purchase orders using the requester name
          |-----     0000984184 BADI BBP_ALERTING active but its implementation isn't called
          |-----     0000985179 Delete button active for backend service entry sheets
          |-----     0000990264 Multiple confirmations cannot be posted for service & limit
          |-----     0000996104 No catalog when confirming back-end blanket purchase orders
          |-----     0001003408 BBPCF: Cannot Add Catalog Item to Confirmation for Limit PO
         0001010791 Flag Confirmation based Invoice Verification set erroneous
    Kind regards,
    Yann

  • Campaign execution not send emails for contact persons

    Hi All!
    I'm facing a problem with Campaigns (communication medium - E-mail): Those are the steps i'm following:
    1.Start the campaign, and on the "campaign: Schedule job" screen, i choose  "immediately". If i look at the campaign details after scheduled the job, the status is now "job started".
    2. To check wich mails were sent, I also had a look at the business partner account that belongs to the target group used. On the "Interaction History" block, there is a line: "Outgoing Email" - on the details of this outgoing email I can see the "To" (Receivers). And here, I have emails from the business Partner contact persons and from the business partner itself (the email that is on the header level of the business partner account, on the "main address and communication data" area). So far so good. That's exactly what i need but,
    3. If i go to the tcode, i only have a send request for the business partner itself and none for his contact persons (although those emails are on the "To" line for the interaction history).
    I'm working on the Webclient UI, of the CRM 7.0
    Does someone knows why the emails are not being sent also for the contact persons?
    Thanks in advance.
    Inê

    I have achieved this by implementing the BADI : CRM_MKT_ADR_SEARCH
    In this BADI's method : CHANGE_SEARCH_RESULTS you can modify the data which is being sent back to system for campaign execution.
    NOTE: I am using Address Independent Communication Data of Business Partner
    Below is my sample code for contact person email :
      data: wa_bp_cp_channel type crmt_bp_cp_channel.
      field-symbols: <fs_bp_cp_channel> type crmt_bp_cp_channel.
      types: begin of ty_cp,
              partner type but000-partner,
              address type but000-addrcomm,
             end of ty_cp,
             begin of ty_bpcp,
               partner1 type but051-partner1,
               partner2 type but051-partner2,
             end of ty_bpcp.
      data: it_cp type table of ty_cp,
            wa_cp type ty_cp.
      data: it_bpcp type table of ty_bpcp,
            wa_bpcp type ty_bpcp.
      data: it_bp type table of ty_cp,
            wa_bp type ty_cp.
      read table ct_bp_cp_channel into wa_bp_cp_channel with key com_channel = '03'.
      if sy-subrc = 0.
        select partner addrcomm
          from but000
            into table it_cp
              for all entries in ct_bp_cp_channel
                where
                  partner = ct_bp_cp_channel-cp_number.
        select partner1 partner2
          from but051
            into table it_bpcp
              for all entries in ct_bp_cp_channel
                where
                  partner1 = ct_bp_cp_channel-bp_number.
        if it_bpcp[] is not initial.
          select partner addrcomm
            from but000
              into table it_bp
                for all entries in it_bpcp
                  where
                    partner = it_bpcp-partner2.
        endif.
        sort it_cp by partner.
        sort it_bp by partner.
        sort it_bpcp by partner1.
        loop at ct_bp_cp_channel assigning <fs_bp_cp_channel> where com_channel = '03'.
          read table it_cp into wa_cp with key partner = <fs_bp_cp_channel>-cp_number binary search.
          if sy-subrc = 0.
            <fs_bp_cp_channel>-addrnumber = wa_cp-address.
            clear <fs_bp_cp_channel>-bp_number.
            clear <fs_bp_cp_channel>-bp_guid.
          else.
            read table it_bpcp into wa_bpcp with key partner1 = <fs_bp_cp_channel>-bp_number binary search.
            if sy-subrc = 0.
              read table it_bp into wa_bp with key partner = wa_bpcp-partner2 binary search.
              if sy-subrc = 0.
                <fs_bp_cp_channel>-addrnumber = wa_bp-address.
                clear <fs_bp_cp_channel>-bp_number.
                clear <fs_bp_cp_channel>-bp_guid.
              endif.
            endif.
          endif.
        endloop.
      endif.

  • How can I get iTunes Store to properly function on my windows 7 laptop? I have tried numerous things such as the MDos Promt, checked for firewall, checked for applications allowing iTunes to not be affected by anything. "Can't connect to network"

    How can I get my iTunes to function properly. It stopped working a couple of days ago and I can't figure how to get back and running. I have tried numerous things such as rebooting, checking for the network connection, applying it to open without security measures. Error message "Your connection time out. Check your connection." Even though I can get into the internet, iTunes is still not responding! Technical support help isn't helping!

    Just to close out ... the 'supervisor' was clueless as it turns out.  Apple does NOT have a deal with UPS on handling the Mini, so the person who gave me the info was wrong.  Did he call back?  No ... he just let me go out and find out myself.
    So I called again, and this time eventually ended up with a manager, who told me that the UPS Store thing wouldn't work, but that a box would arrive and then there would be a 'forced replacement'.
    About 10 minutes later he called back and said he discovered that EVERYTHING the supervisor did was wrong ... he didn't actually properly flag for auto-replace, so I would have gone through an identical cycle again!  So he had to restart the whole process, meaning I would get TWO 'coffins', but that I would then get an auto-replacement and would see that indicated in my support email.
    I got the email, saw 'auto-replace'.  Got the box on the 28th and immediately turned it around.  Apple got the box on the 31st, and on the 1st I got emails that my Mini would arrive on the 2nd and it also had the new serial #.
    Yesterday I grab the box from FedEx and go home to check it out.  As expected, it IMMEDIATELY worked on my WiFi without issue ... and has worked perfectly since.
    So ...
    - it was NOT my home network.
    - it WAS a hardware issue with the Mini
    - Apple does NOT do proper testing on the Mini to detect what appears to be a fairly common issue.
    - non-retail customers ARE treated as second-class by support.
    This issue took FOUR WEEKS to resolve, involved FOUR shipments back & forth, and the ONLY reason it got resolved was that *I* did the troubleshooting that Apple either would not or could not do.
    For someone who has been an Apple customer for more than 30 years, this has been a sobering experience ... I quite frankly expected much better from them.

  • HT1752 how can I check for SpyBots and other invasion things on my computer

    I am beginning to have odd things happen to my computer.  Someone told me to check for SpyBots, but I don't know how.  I participate on Blog Talk Radio, and was informed they use these spybot things.  How do I find out if there are invasive things like this affecting my computer?
    In the last 2 days I've had two windows pop up saying I needed to restart the computer.  This has never happened before.  Any help anyone?

    Forget about the advise on the spybots. That person doesn't have the foggiest idea what is going on.
    You are having kernel panics. The most likely casue for kernel panics is hardware problems usually RAM that has gone bad.
    Go to http://thexlab.com/faqs/kernelpanics.html for a good procedure on how to find out what is causing the kernel panics.
    Allan

  • How can I check for a Virus?

    Hello, I tried to use my internet banking the other day on my MacBook Pro but for some reason my password wasn't working. I phoned my bank and they informed me that it had been blocked due to a security threat they'd picked up. They suspect there is some sort of Trojan on my computer and someone is trying to gain my details. They said they would unblock my banking access once I had done a virus check on my computer.
    Also- the other day I got an email saying that someone from the Ukraine had tried to access my emails. I'm not sure if this is related or not... but now i'm afraid there could be something on my computer! Is there a scan I can do? And also is there anyway I can check for a keystroke program as well? My bank mentioned this may have been used (although I am the only person with access to my laptop)
    Thanks for your help! PS - My mac is 10.6.8

    It is extremely unlikely that you have any kind of malware on your computer causing this problem. This is probably a canned reply from the bank, and it assumes you're using Windows.
    Most likely, someone had been trying to remotely hack into your bank account. This may have been the result of someone gaining access to your e-mail account, which would provide them with a rich source of information about all your other online accounts, including your bank account. You should immediately change your e-mail password. You should also change the password for any accounts that use the same password as your e-mail account, or any accounts that are associated with the e-mail account. Make sure you're not using the same password for more than one online account... use a password manager like 1Password to keep track of them all if necessary.
    In addition, you will need to closely examine any security questions associated with your various accounts. Your e-mail may provide a lot of information that could allow an attacker to guess the answers to those questions on your other accounts, thus bypassing the password. Change your security questions to nonsensical words or phrases, unrelated to the question, and keep a log of those answers in a secure place, such as in a secure note in your keychain (using the Keychain Access app) or in your password manager.

Maybe you are looking for