Su01 - authority check for the object s_user_grp

Dear Basis Gurus,
requirement:
Decentralisation of user administration. Local site admins should only be able to administrate users belonging to special user groups.
What I have done:
Generated a new role via pfcg for transaction su01 and object s_user_grp. Activity for s_user_grp = 02. Up to this point this works without any problems.
But trying to limit the role to a certain user group (s_user_grp => class), this doesn't have any effect for the local site admins. They are still able to change all user data, nevertheless if the users are member of another group or not (group membership via sugr).
Please advice.
thanks and regards..,
sven

Hi Lakshmi,
thanks! That solved my problem.
regards..,
sven

Similar Messages

Authority Check for the User

Hi,
In how many ways can we set authorizations? I mean, in how many levels? My requirement is, to check the Authorization for a specific user to see if he is authorized to execute a Specific Z-Transaction (Report) for a specific Plant. How do I do that? I assume I need to code the AUTHORITY-CHECK OBJECT.... in my report. If yes, in which event? Please let me know.
Thanks and Regards,
Venkat.

Hi Venkat,
You can put in the AUTHORITY-CHECK at a number of points, after initialisation, during selection, prior to output - it depends on what the program is doing and how the rest of it is coded.
For example, doing a big select and then only outputting based on the authority check may not efficient with large volumes of data.

Error : Opening a rowset for "Sheet$" failed. Check that the object exists in the database.

Hi,
i am trying to load the data from excel sheet using For each loop container in ssis 2005.
But it gave me the below error:
Error: Opening a rowset for "Sheet1$" failed. Check that the object exists in the database.
[DTS.Pipeline] Error: "component "failed validation and returned validation status "VS_ISBROKEN".
Error: There were errors during task validation.
Could you please let me know the solution
Regards
Sqlstud

That message usually means validation has failed;
Have any of the underlying tables changed? Data types, lengths, maybe even column ordering, etc...?
try this..
Right-click on the Data Flow Task and select Properties. Then set DelayValidation =TRUE.
Let us TRY this |
My Blog :: http://quest4gen.blogspot.com/
Thanks ETL.
Everything is fine..(Datatypes,length,orderings etc)
Already i have set
DelayValidation =TRUE.
IS there any other problem?
Regards
Sqlstud

How to do the Unicode Check for Business Objects ?

Hi all,
How to do the Unicode Check for Business Objects ?
Note: All business Objects are stored in BOR (Business Objects Repositary)
Thanks in advance
Sri..

Hi..
i have used the UCCHECK transaction for some business Objects
For some business objects it is showing that No Unicode Errors found Ex: Z00MARA
and for Business Objects it showing the message like : There is no program corresponding to this selection.
Why system is showing like this ?
Thanks in advance
Sri..

Authority Check at the T.Code level for the user in particular User Group

Hi Friends,
I have created a ZREPORT and assigned this report to a ZTRANSACTION CODE.
Need to give Authority Check at the T.Code level for the user in particular User Group.
I have searched in SCN, but not get suitable pages.
How to solve this?
Regards,
Viji.

Hi Viji.
Saha way is actual way for authority tcode but user authority in TCODE:- SE38 he/she can run report(ZREPORT) wise program is run is no authority check.
Another way is you have also check authority in program level.
DATA: T_ROLE_USERS TYPE STR_AGRS OCCURS 0 WITH HEADER LINE.
   INITIALIZATION.
CALL FUNCTION 'ESS_USERS_OF_ROLE_GET'
    EXPORTING
      ROLE       = 'ZROLE'' " Role define
    TABLES
      ROLE_USERS = T_ROLE_USERS.
READ TABLE T_ROLE_USERS WITH KEY UNAME = SY-UNAME.
   IF SY-SUBRC NE 0.
   RETURN.
   ENDIF.
Thanks & Regards
Rahul

How to turn off the authorization checks for a object in infoproviders?

Hi - how can I turn off the authorization check for an object (ex: 0orgunit) in infoproviders?
I have 0orgunit as an authorization-relevant object and is used in one of the cubes. When reports are run for this cube, this is causing authorization issues. The object is present in other cubes also but I have to remove or turn off the authorization check of this cube alone. How to do this? Please help.
Thanks,
Raj.

Hi Raj,
Srinivas, is right , however in BI7 the correct transaction is RSECADMIN and not RSADMIN.
In BW3.5, use RSSM transaction to do thins.
OR
Go to transaction RSECAUTH ---> Choose the authorization object that has been created for org unit(and has been assigned to the user). Go to change mode. Remove the cube from the dimension 0TCAIPROV
If you are using old authorization concept in 3.5 or in 7.0
Go to RSSM. In the checks for infoprovider, enter your infoprovider name. Choose change.Here you will see a checkbox to switch off the authorization.
Hope this helps you,
Best regards,
Sunmit.

Excel Source - Opening a rowset for "EFT$" failed. Check that the object exists in the database.

Why oh why do I sometimes get this error when defining my Excel Source and then sometimes I do not?
Am I doing something wrong here???
The error is...
Exception from HRESULT: 0xC02020E8
Error at Data Flow Task [[Excel Source[27]]: SSIS Error Code DTS_E_OLEDBERROR. An OLE DB error has occurred. Error code: 0x80004005.
Error at Data Flow Task [Excel Source [27}}: Opening a rowset for "EFT$" failed. Check that the object exists in the database.
I know the Worksheet "EFT" exists because I defined this previously for the same Excel spreadsheet.
Thanks for your review and am hopeful for a reply.
PSULionRP

A reply from CozyRoc must be hitting the nail on the head
sheet name contains $
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/ce0fbff5-f5f1-4a4a-9c29-6adc32b0fd79/using-excel-file-as-source-in-data-flow-task-of-ssis-bi-2005-need-example-of-sheetnamecellrange?forum=sqlintegrationservices
Arthur My Blog

Example of generating excel dynamically in ssis? geting error [Excel Destination [190]] Error: Opening a rowset for "Excel_Destination$" failed. Check that the object exists in the database.

example of generating excel dynamically in ssis? geting error [Excel Destination [190]] Error: Opening a rowset for "Excel_Destination$" failed. Check that the object exists in the database.

Hi Vijay
Can you be little bit more specific, did you receive this error when you are designing this pacakge using BIDS
Becuase when you are designing this pacakge in BIDS, you need to manaually create a excel sheet manually for the first time you run,
are you creating excel sheet using execute sql task and excel connection with input from a variable?
Did you receive this error in validation phase or execution phase ?
Can you share your query to create table in excel ?
http://sqljunkieshare.com/2012/02/28/how-to-create-and-map-excel-destination-dynamically-in-ssis/
Use the above post

Regarding Authority check for V_VTTK_SHT in one exit

Hi Experts
1.For VT01N transaction , there is one customer exit : ZXV56U18.
2.In this we will get the shipment type value.
3.I have to check the authority check for this shipment type (SHTYP) field.
4.I have written the following statement :
   authority-check object 'V_VTTK_SHT'
                  ID 'SHTYP' field    I_XVTTK_TAB-SHTYP
                  ID 'ACTVT' field '07'.
5. For my user id , i have check the user profile in SU01.
6.For me this authorization object , field ACTVT does not contain 07 value.
7.In debugging , the SY-SUBRC giving the value 0.even the user profile does not contain the value '07' for ACTVT field
Can u tell y it is happening like that ?
Regards
Ramakrishna L.

Hi Experts
1.For VT01N transaction , there is one customer exit : ZXV56U18.
2.In this we will get the shipment type value.
3.I have to check the authority check for this shipment type (SHTYP) field.
4.I have written the following statement :
   authority-check object 'V_VTTK_SHT'
                  ID 'SHTYP' field    I_XVTTK_TAB-SHTYP
                  ID 'ACTVT' field '07'.
5. For my user id , i have check the user profile in SU01.
6.For me this authorization object , field ACTVT does not contain 07 value.
7.In debugging , the SY-SUBRC giving the value 0.even the user profile does not contain the value '07' for ACTVT field
Can u tell y it is happening like that ?
Regards
Ramakrishna L.

AUTHORITY-CHECK for KUNNR

Hi,
I am new in core abap. For my report i have to do AUTHORITY-CHECK for kunnr. I am not finding any suitable object to use. kIndly suggest.
Currently i am using the following code.
UNPACK p_kunnr TO ws_werks.
AUTHORITY-CHECK OBJECT 'M_MSEG_WWE'
ID 'ACTVT' FIELD '01'
ID 'WERKS' FIELD ws_werks.
But this is giving dump in case KUNNR contains some alphabets because of type mismatch. Kindly suggest how can i achieve the same.
Regards,
Pankaj Aggarwal

Don't use a WERKS authorization for KUNNR, did you foresee the problems that may will arise when you will manage the user authorisations and roles, this authorization is checked in many standard programs on WERKS fields.
- SU20 - Create an authorization field with data element KUNNR and check table KNA1 (or use template KNDNR, look via SE16 at table AUTHX look for authorization fields using KNA1 as a control table)
- SU21 - Create an authorization object in a Z-customer class which use this field and the ACTVT field (template W_AUFT_RMB)
- Use the new object in your program
- Give the object name to those who manage roles via PFCG
Perform some search on subject like [Creating a Customer-Specific Authorization Object|http://help.sap.com/saphelp_ish471/helpdata/EN/9e/74ba3bd14a6a6ae10000000a114084/frameset.htm]
Look also at some authorization objects like BRGRU which were intended to manage groups of customers.
Regards,
Raymond

AUTHORITY-CHECK for an defined USER

Hi,
i write a abap (protokol) which shell be started every hour. In this report i will use
an AUTHORITY-CHECK for an defined user, because i will send the protokol via email, but i have
to check if this user is allowed to see the data.
I will use this:
AUTHORITY-CHECK OBJECT 'F_LFA1_BEK'
ID 'BRGRU' FIELD '__________'
ID 'ACTVT' FIELD '__________'.
for an defined user.
Is this possible, or how can i check this in another way?
Thanks.
Regards, Dieter

Hi Eric,
i tried it like this:
UTHORITY-CHECK OBJECT 'F_LFA1_BEK'
         ID 'BRGRU' FIELD 'KRED'
         ID 'ACTVT' FIELD '03'.
BREAK-POINT.
CALL FUNCTION 'AUTHORITY_CHECK'
EXPORTING
NEW_BUFFERING             = 3
USER                      = SY-UNAME
    OBJECT                    = 'F_LFA1_BEK'
    FIELD1                    = 'BRGRU'
    VALUE1                    = 'KRED'
    FIELD2                    = 'ACTVT'
    VALUE2                    = '03'
EXCEPTIONS
   USER_DONT_EXIST           = 1
   USER_IS_AUTHORIZED        = 2
   USER_NOT_AUTHORIZED       = 3
   USER_IS_LOCKED            = 4
   OTHERS                    = 5.
BREAK-POINT.
at first breakt-point sy-subrc = 0 at second sy-subrc = 2. Can you tell why i get another sy-subrc?
is my FM-Call correct?
thanks.
Regards, Dieter

Authority-check for a particular company code

Hi,
   I need to check authorization for a particular company code.In my bdc call transaction program i'm fetching mass data from excel file and for every record i've to check the company code field.If the company code is not the required one then that record should not be processed.
So before filling the bdc data i wrote like
LOOP AT gt_inrec INTO gs_inrec.
     AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
               ID 'ACTVT' field '02'
               ID 'BUKRS' field '2800'.
    IF NOT sy-subrc = 0.
      MESSAGE e058(zz) WITH gs_inrec-bukrs.
      EXIT.
    ENDIF.
     PERFORM fill_bdc.
ENDLOOP.
but it is not exiting for different company codes and is allowing records with all company codes.
can anybody pls tell me how to rectify this?
thanks in advance,
poornima

I need to perform authority check on the field NAME1 present in the standard screen - customer master ( T.Code-XD02). Only certain users should be allowed to edit the field and others should be restricted.
I have created a field exit FIELD_EXIT_AD_NAME1 for the ADRC-NAME1 field.
Now inside this field exit i need to write the authority-check code.
I have created the authorisation object Z_KNA1_NAM for the field NAME1 using the SU20 and SU21.
For this scenario how do i write the authority-check code in my field exit?
Below is my field exit code,is that correct?
FUNCTION FIELD_EXIT_AD_NAME1.
""Local Interface:
*" IMPORTING
*" REFERENCE(INPUT)
*" EXPORTING
*" REFERENCE(OUTPUT)
AUTHORITY-CHECK OBJECT 'Z_KNA1_NAM'
ID 'NAME1' FIELD SY-UNAME
ID 'ACTVT' FIELD '03'.
IF SY-SUBRC = 0.
MESSAGE 'Not Allowed to Edit the Name 1 Field' TYPE 'E'.
ENDIF.
ENDFUNCTION.
In the above code i have given SY-UNAME in the code line 2 - ID 'NAME1' FIELD SY-UNAME ,is that correct? what should i give there?
Please help me on this issue.
Cheers,
P.S.Chitra

Function module for se16 with out authority check for se16

Hi ,
I am creating a tode YSE16 which has same functionality as SE16 but having its own authority check. I am calling a function module RS_TABLE_LIST_CREATE function module to get the functionality of SE16. But is there any way that i can get the function module which do not check for the authorization for se16 and execute my tcode.
Regards,
Sri.

Hi Sri,
If I am not wrong this is the question?
Guys , Sri is modifying the YSE16 as per this requirement. Do u have some other solution? Thanks.
Requirement is to create customized tcodes YSE16, YSM30 and YSE38 for se16, sm0 and se38. Lets start with YSE16.
Client want YSE16 tcode to restrict users based on some tables within a authorization group or even * value for auth group field.
SE16 restricted on:
S_TABU_DIS
Auth Group and Activity
As per Requirement YSE16 tcode sld be restricted on :
Y_TABU_DI2 (customized object)
Auth Group, Activity and Table name
We dont want to give SE16 to users in Production. So basically requirement is to restrict users on table name with YSE16 irrespective on authorization group. User sld only be able to access the table mentioned in Table name field.
so Srilu is trying to modify the Program. Can you please suggest some other way to modify it.
Thanks.
Regards,
Naveen Dalal

Authority-Check for Sales Document Type

Hi All...
I would like to incorporate Authority-Chack for the field Sales Document Type "TVAK-AURT"...
Can any one give me the sample code or exact code..?
I have written Authority-check for Sales Organization as follows...
authority-check object 'V_VBAK_VKO'
                 id 'VKORG' field i_sales-vkorg
                 id 'VTWEG' field '00'
                 id 'SPART' field '00'
                 id 'ACTVT' field '03'.
        if sy-subrc ne 0.
        delete i_sales.
BUT HOW TO WRITE FOR V_VBAK_AAT..??

Please check object: <b>V_VBAK_AAT</b> for the same.
EG:
authority-check object 'V_VBAK_AAT'
id 'AUART' field L_AUART
id 'ACTVT' field '03'.
Kind Regards
Eswar
Message was edited by: Eswar Rao Boddeti

Duplicate check for Connection Objects in CRM

Hi,
I want to implement a duplicate check for connection objects in CRM. The duplicate check shall use the address of the connection object and perhaps additonal attributes. I have found a duplicate check for business partners using the basis address service and TREX as index pool. However, I couldn't find a similar functionality for connection objects. Does somebody know:
1) How to implement a duplicate check for connection objects which is based on the address of the connection object?
2) Is there a way to use the TREX-based duplicate check which is integrated into the basis address service for connection objects?
Thanks in advance!
Best regards,
Frank

I also have a requirement to check for duplicate address at connection object level and we are using SAP data servies to validate the address. Can anyone share their experience.

Su01 - authority check for the object s_user_grp

Similar Messages

Maybe you are looking for